Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Continouos Delivery in Kubernetesland
Search
Sponsored
·
Your Podcast. Everywhere. Effortlessly.
Share. Educate. Inspire. Entertain. You do you. We'll handle the rest.
→
Nicolas Byl
February 23, 2018
Technology
1
67
Continouos Delivery in Kubernetesland
Nicolas Byl
February 23, 2018
Tweet
Share
More Decks by Nicolas Byl
See All by Nicolas Byl
Platform Engineering ❤️ Developer Experience
nbyl
0
29
Die Flucht aus der Prototypen-Hölle
nbyl
0
48
Lean Prototyping for Industrial-IoT Projects
nbyl
0
67
DevSecOps - Vom Unikum zur gut geölten Maschine
nbyl
0
110
Securing your software supply chain
nbyl
0
380
Keeping-Up-WithUpstream.pdf
nbyl
0
170
Dr. Kube und der Helm - Anatomie einer CD-Pipeline
nbyl
0
140
Securing the "other" supply chain
nbyl
0
290
Kubernetes - Auf die Cluster, Fertig, Los!
nbyl
0
200
Other Decks in Technology
See All in Technology
15 years with Rails and DDD (AI Edition)
andrzejkrzywda
0
200
SREが向き合う大規模リアーキテクチャ 〜信頼性とアジリティの両立〜
zepprix
0
470
Ruby版 JSXのRuxが気になる
sansantech
PRO
0
160
AIと新時代を切り拓く。これからのSREとメルカリIBISの挑戦
0gm
2
3k
仕様書駆動AI開発の実践: Issue→Skill→PRテンプレで 再現性を作る
knishioka
2
680
小さく始めるBCP ― 多プロダクト環境で始める最初の一歩
kekke_n
1
470
SREのプラクティスを用いた3領域同時 マネジメントへの挑戦 〜SRE・情シス・セキュリティを統合した チーム運営術〜
coconala_engineer
2
700
ランサムウェア対策としてのpnpm導入のススメ
ishikawa_satoru
0
210
Introduction to Sansan, inc / Sansan Global Development Center, Inc.
sansan33
PRO
0
3k
私たち準委任PdEは2つのプロダクトに挑戦する ~ソフトウェア、開発支援という”二重”のプロダクトエンジニアリングの実践~ / 20260212 Naoki Takahashi
shift_evolve
PRO
1
100
Bill One急成長の舞台裏 開発組織が直面した失敗と教訓
sansantech
PRO
2
380
What happened to RubyGems and what can we learn?
mikemcquaid
0
310
Featured
See All Featured
Understanding Cognitive Biases in Performance Measurement
bluesmoon
32
2.8k
Agile that works and the tools we love
rasmusluckow
331
21k
Optimising Largest Contentful Paint
csswizardry
37
3.6k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
irinanazarova
9
1.2k
Why You Should Never Use an ORM
jnunemaker
PRO
61
9.7k
Highjacked: Video Game Concept Design
rkendrick25
PRO
1
290
Sharpening the Axe: The Primacy of Toolmaking
bcantrill
46
2.7k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
122
21k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
231
22k
Leading Effective Engineering Teams in the AI Era
addyosmani
9
1.6k
How to Ace a Technical Interview
jacobian
281
24k
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
inesmontani
PRO
0
220
Transcript
1 CONTINUOUS DELIVERY IN KUBERNETESLAND Entwicklertag Frankfurt 2018 Nicolas Byl,
codecentric AG
2 . 1 GETTING STARTED
2 . 2 Mission Statement You can follow the pipeline
on your device. Install prequisites
2 . 3 Prequisites https://github.com/nbyl/cd-workshop-demo
2 . 4 Organisational Stuff Ask questions anytime! Breaks? Slack
None
2 . 5 3 . 1 CONTINUOUS DELIVERY
3 . 2 Key Concepts The software is releasable at
at any time The whole process from source to production is automated Decouple technical rollout from feature rollout
3 . 3 Continuous Delivery vs. Continuous Deployment Continuous Delivery:
Software is releasable at any time Continuous Deployment: Software is released on every change
4 . 1 DOCKER
None
4 . 2
4 . 3
4 . 4
4 . 5
4 . 6 4 . 7 Dockerfile FROM java:8 MAINTAINER
Marcel Birkner <
[email protected]
> ADD target/edmp-sample-app*.jar app.jar RUN bash -c 'touch /app.jar' ENTRYPOINT ["java","-jar","/app.jar"]}
None
4 . 8 5 . 1 KUBERNETES
"Kubernetes is an open-source platform for automating deployment, scaling, and
operations of application containers across clusters of hosts, providing container- centric infrastructure."
5 . 2 portable: public, private, hybrid, multi-cloud extensible: modular,
pluggable, hookable, composable self-healing: auto-placement, auto-restart, auto- replication, auto-scaling
5 . 3
5 . 4 5 . 5 Pods & Co.
5 . 6 Pods
5 . 7 Replication Controller P P P
5 . 8 Deployment combination of pod & replication controller
edited as a unit
apiVersion: extensions/v1beta1 kind: Deployment metadata: name: frontend spec: replicas: 3
template: metadata: labels: app: guestbook tier: frontend spec: containers: - name: php-redis image: gcr.io/google-samples/gb-frontend:v4 resources: t
5 . 9 5 . 10 Services
5 . 11 endpoint for a set of pods an
external endpoint can be resolved using DNS environment variables
None
5 . 12 6 . 1 SHOWCASE PROJECT
6 . 2 confy microservice to manage conference talks and
speakers technology: REST-API UI using Gradle Spring Boot (Web, JPA) ng-admin https://github.com/nbyl/confy
6 . 3 Target Platform kubernetes PostgreSQL
6 . 4 Testing Requirements automatic testing using the target
database user acceptance test before exposing new versions
6 . 5 Build Pipeline build publish docker container integration
test user acceptance test production
6 . 6 Assumptions any manual interaction will be done
in reasonable period our cluster will (for now) contain of only one host
7 . 1 LAB 1: SETUP
7 . 2 Recently on this Program... Have you installed
the prerequisites?
7 . 3 Create a cluster minikube start --memory 4096
kubectl apply -f minikube/storageclass.yml
7 . 4 Install Helm helm init
7 . 5 Install Jenkins helm install stable/jenkins --set Agent.Memory=1024Mi
--name=cd minikube service cd-jenkins
8 . 1 LAB 2: CONTINUOUS INTEGRATION
8 . 2 Objectives build an artefact of the software
run all unit tests and in-tree integration tests
8 . 3 Jenkins Kubernetes Plugin creates a new pod
for every job use the pod as a temporary build slave
8 . 4 Let's Go create a new pipeline job
use as SCM source for your Jenkinsfile https://github.com/nbyl/cd-workshop-demo.git
8 . 5 caveat build cache is gone after every
build
None
8 . 6 8 . 7 persistent volumes create manually
use storageclass with auto-provisioner
kind: StorageClass apiVersion: storage.k8s.io/v1beta1 metadata: name: generic provisioner: kubernetes.io/host-path
8 . 8 kind: PersistentVolumeClaim apiVersion: v1 metadata: name: gradle-cache
annotations: volume.beta.kubernetes.io/storage-class: "generic" spec: accessModes: - ReadWriteOnce resources: requests: t 8Gi
8 . 9 9 . 1 LAB 3: BUILDING A
DOCKER CONTAINER
9 . 2 Objectives build a docker container containing the
application make the container available for deployment
9 . 3 Build Pod Revisited using build pods is
scalable and reproducible the host docker daemon is not reachable
9 . 4 Docker-in-Docker Builds mount the docker sockets inside
the container /run/docker.sock /var/run/docker.sock image will be built in host docker Warning: possible security problem
10 . 1 LAB 4: INTEGRATION TESTING
10 . 2 Objectives create a deployment description for the
application deployment the application in a configuration analog to production run an integration test verifying the basic functionality
10 . 3 Helm Chart helm create helm/confy [edit] helm
upgrade --install dev-confy helm-confy
10 . 4 Configure the Application env: - name: SPRING_DATASOURCE_URL
value: {{ .Values.database.url }} - name: SPRING_DATASOURCE_DRIVER value: {{ .Values.database.driver }} - name: SPRING_DATASOURCE_USERNAME value: {{ .Values.database.username }} - name: SPRING_DATASOURCE_PASSWORD value: {{ .Values.database.password }}
10 . 5 Simulate roduction use the same database server
as in production treat system as blackbox
11 . 1 LAB 5: USER ACCEPTANCE TESTING
11 . 2 Objectives deploy the application accessible for users
allow manual testing continue to production after manual confirmation
11 . 3 Ingress
11 . 4 Ingress Controller Read Ingress state route accordingly
Implementations: NGINX traefik F5 ...
12 . 1 LAB 5: PRODUCTION DEPLOYMENT
12 . 2 Objectives make application available for end users
(nothing new to learn)
13 . 1 WRAP UP
13 . 2 Links https://kubernetes.io https://www.cncf.io/ https://www.openshift.com/promotions/kubernetes.html https://fabric8.io https://github.com/ramitsurana/awesome-kubernetes
13 . 3 The End @NicolasByl Copyright 2017