一起玩 Helm 3

Transcript

1. Ұى؝ Helm 3 John Lin (@johnlinvc)

2. ᮫ԙզ • John Lin • Twitter: @johnlinvc • Senior Solution

   Architect, DevOps
 @ West Pharmaceutical

3. ࣾ܈׆ಈ • iplayground.io 2020 Keynote ߨऀ • Coscup, RubyConf TW,

   RubyKaigi, PyCon TW ߨऀ • ओ㭎 Swift Taipei Meetup

4. ॄኄੋ Helm ? • > Helm is the best way

   to find, share, and use software built for Kubernetes. • > Helm helps you manage Kubernetes applications — Helm Charts help you define, install, and upgrade even the most complex Kubernetes application.

5. Helm ೳ၏ॄኄʁ • ҆᧋ Chart • ઃఆ Chart • Rollback

   Chart • ؐ༗ߋଟ

6. • ؆ᄸိ㘸बੋऔ୅ • kubectl create -f • kubectl edit Helm

   ೳ၏ॄኄʁ

7. ҆᧋ • HomeBrew: brew install helm • Linuxɿcurl https://raw.githubusercontent.com/helm/helm/master/scripts/ get-helm-3

   | bash • APT: ༗ᴍຑ൥ɼՄҎ؃׭໢ɻ

8. Helm ໊ࢺղᬶ • Chart • Repo • Config • Release

9. Chart • Helm త౟݅ᄸҐ • 㚎ؚ k8s resource template, default

   values • ՄҎ༗ dependency • ૾ੋ rpm, deb తײ᧷

10. Repo • ଘ์ Chart త server • ओཁ༗ၷݸޭೳɿྻग़ Charts ࿨Լࡌ

    Chart • ౳ಉԙ apt/yum repo

11. Config • ์ਐ k8s resource template ཫతᆴɻ • Chart ။༗༬ઃᆴɻ

    • ՄҎࡏ㑌ݸ release ཫڅෆಉతᆴɻ

12. Release • Ұݸӡߦதత Chartɼ૾ੋ Process తײ᧷ɻ • धཁڅଞҰݸ໊ࣈɻ • ՄҎ༗኷ଟݸಉ࣌ӡߦʢ

    Chart ሜಘ޷త࿩ʣ

13. ࢖༻ Helmɼ Ҏ Prometheus ҝྫ • Prometheus ੋҰ౟؂߇ܥ౷ɻk8s ཫେྔ࢖༻ɻ •

    https://github.com/prometheus-community/helm-charts/tree/main/charts/ prometheus •

14. Ճೖ Repo • ೺ repo Ճೖ local helm ɻṜᒬ࠽ೳፙ౸ chartɻ

    • helm repo add prometheus-community https://prometheus- community.github.io/helm-charts • helm repo add stable https://charts.helm.sh/stable

15. ҆᧋ Chart • ༻ prometheus chart ҆᧋Ұݸ release ໊ҝ demo-promɻ

    • helm install demo-prom prometheus-community/prometheus

16. NOTES.txt • 䋯׬ install/upgrade ޙ။ग़ݱత㘸໌ɻ • ҰᒬՄҎ༻ templateɻॴҎ௨ৗՄҎ௚઀ෳ੡ష্ɻཫ໘త namespace ྨ

    తҰൠိ㘸౎။ੋሣతɻ • export POD_NAME=$(kubectl get pods --namespace default -l "app=prometheus,component=server" -o jsonpath="{.items[0].metadata.name}") • kubectl --namespace default port-forward $POD_NAME 9090

17. Side Topic:HSTS • HTTP Strict Transport Security • Ұୠ༻ https

    ࿈աత໢Ҭɼब࠶໵ෆೳ༻ http ྃ... • localhost ༗࣌ީҰෆখ৺बෆೳ༻ http ྃ • ՄҎ༻ *.vcap.me ႔ཧɻ *.vcap.me Ӭԕ౎။ࢦ޲ 127.0.0.1

18. List release • ྻग़ݱࡏ context Լతॴ༗ release • Helm list

19. ઃఆ Chart • ༗ၷछํࣜ • --set key1=val1 (ෆਪનɼ๨ه೭લଧաॄኄबࢮఆྃʣ • --values

    values.yaml ( ՄҎ commit ਐ git )

20. ઃఆ Chart • values.yaml server: statefulSet: enabled: true •

21. ߋ৽ Chart • helm upgrade demo-prom prometheus-community/prometheus -f values.yaml

22. List Release History • ྻग़ release త㑖࢙ل㑚ɻ • helm history

    demo-prom

23. Rollback Release • Rollback release ౸೭લత൛ຊɼแؚ config, chart ൛ຊɻ •

    helm rollback demo-prom 1 • helm history demo-prom

24. ႟আ release • helm uninstall demo-prom

25. ৗݟత޵ • ߋ৽ޙࣗಈੜ੒తີᛰᏓྃɿՄҎࡏ release secret ཫፙ౸ᢜతᆴɼઃఆਐ ჩᏐཫ೭ޙबෆ။Ꮣྃɻ • ৽తઃఆᔒ༗ੜᏈɿChart ᔒ༗ਖ਼֬ઃఆ

    Deployment/Statefulset/ DaemonSet తߋ৽ᑍ݅ɻधཁखಈࣥߦ kubectl rollout restartɻ

26. Helm 2 vs Helm 3 • ᔒ༗ Tiller ɼෆधཁࡏ K8S

    Cluster ཫ᧋౦੢ྃɻ • औফ౷Ұ Repoɼվҝ෼ࢄࣜɻՄҎ༻ https://artifacthub.io ፙ Chartɻ • ࢦྩ໊᜝᜗ඍվᏓɻ fetch -> pullɻ౳౳ɻ • ࢧԉ࢖༻ OCI registry ိଘ์ Chart

27. Helm 2 end of support • Tiller image Մೳᬋ࣌။׵஍ํଘ์ɻ •

    Helm 2 client Մೳ໵။׵஍ํɼෆա get.helm.sh ။ಈɻ • Stable chart repo https://github.com/helm/charts 
 ࡏ Nov 13, 2020 ਖ਼ࣜऴࢭࢧԉྃɻ

28. Helm vs Others • Kustomize • Operator

29. Helm vs Kustomize • Template vs Overlay(Patching) • Rollback •

    Helm ՄҎࡏ post rendering hook ཫ໘ݺڣ Kustomize • https://github.com/thomastaylor312/advanced-helm-demos/tree/master/ post-render

30. Helm vs Operator • Day 1 (Helm) vs Day 2(Operator)

    • ޓิɼhelm ෛ੹҆᧋ ɼ Operator ෛ੹ӡ࡞ɻ • ՄҎ༻ helm chart ိ෦ॺ Operator • https://sdk.operatorframework.io/docs/building-operators/helm/ quickstart/

31. መ຿ • ෆཁ௚઀༻ chart ɼఆٛࣗݾత chart ɼ࠶೺֎෦త chart ఆٛҝ dependencyɻᙛ࢖༻

    configmap/secret ိ၏ઃఆ࣌࠽ํศɻ • ࢖༻ helmfile + helm secrets plugin ိ၏ GitOpsɼ೺Ұ੾౎ଘ์ࡏ Git ཫɻ • ળ༻ helm త plugin ܥ౷ɼՄҎఏڙڐଟֹ֎తޭೳɻ

32. ະ׬଴᠃ • ։ᚙࣗݾత Helm Chart • ࢖༻ helmfile • ։ᚙࣗݾత

    Helm Plugin

33. Q&A • Twitter: @johnlinvc • ౤Өยࡏ 
 https://bit.ly/39pcPiM • We're

    hiring DevOps @ West Pharma, 
 Deploying to hybrid cloud with K8Sɻ