Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Deploying Rock Solid Applications with Kubernetes

Deploying Rock Solid Applications with Kubernetes

Kubernetes has made it easy to deploy applications to the cloud. It’s even made it easy to deploy the same application across several instances. This, however, does not mean that your application will be highly available by default. To achieve high availability for your applications, there's a lot more involved.

In this talk we'll look at:
- creating secure Docker images and enforcing this at the cluster level with Pod Security Policies;
- configuring Health Checks and possible caveats like Circular Dependencies;
- limiting traffic between services with Network Policies;
- tolerating node failure by implementing correct Anti-Affinity rules;
- rescheduling pods onto new available nodes after node failure with Disruption Budgets;
- setting up correct deployment strategies;
- how to automate this with Custom Resource Definitions;

Jelmer Snoeck

December 12, 2018
Tweet

More Decks by Jelmer Snoeck

Other Decks in Programming

Transcript

  1. Resources - https://hackernoon.com/deploying-rock-solid-applications-with-kubernetes-2 30fd9bb61f4 - https://thenewstack.io/myth-cloud-native-portability - https://kubernetes.io/docs/concepts/policy/pod-security-policy/ - https://kubernetes.io/docs/reference/access-authn-authz/rbac/

    - https://kubernetes.io/docs/concepts/services-networking/network-policies/ - https://kubernetes.io/docs/concepts/workloads/controllers/deployment/ - https://container-solutions.com/kubernetes-deployment-strategies/ - https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinit y-and-anti-affinity - https://kubernetes.io/docs/concepts/workloads/pods/disruptions/ - https://kubernetes.io/docs/tasks/configure-pod-container/configure-livenes s-readiness-probes/ - https://banzaicloud.com/blog/k8s-admission-webhooks/ - https://github.com/jelmersnoeck/barbossa - https://github.com/Azure/kubernetes-policy-controller @jelmersnoeck