Desmitificando el Networking en Kubernetes

Transcript

1. ( Desmitificando ) Networking en Kubernetes Pablo Fredrikson - Lead SRE @ Invision @pablokbs
2. @pablokbs NO SOY VENEZOLANO ni chileno • Pablo Fredrikson • Argentino (Mendoza) • Lead SRE @ Invision • Mil años con Linux • 2 Años con Kubernetes en Producción
3. @pablokbs STORY TIME
4. @pablokbs Kubernetes en 3 minutos - Conceptos • Contenedor • Pod • Nodo / Worker • Replicas • Daemonset
5. @pablokbs Kubernetes en 3 minutos MASTER API server Kube Scheduler Controller Manager Cloud Controller Manager API Kubernetes Cluster Services API Kubernetes Cluster Services API etcd deployment pod1: - container1 - container2 replicas: 3 pod2: - container3 replicas: 2 Kubelet Kubelet Kubelet P1R3 P1R1 P2R1 P1R2 P2R2
6. @pablokbs Kubernetes en 3 minutos Kubelet P2R1 Kubelet P1R2 Kubelet Kubernetes Cluster Services API deployment pod1: - container1 - container2 replicas: 3 pod2: - container3 replicas: 2 P1R3 P1R1 P2R2 P1R3 P1R1
7. @pablokbs Expertos en Kubernetes @pablokbs
8. Qs? @pablokbs @InvisionApp
9. @pablokbs Pod Networking Kubernetes Cluster Services API Manager Workers Kubelet pod c c calico 10.0.10.34 Kubelet pod c c calico 10.0.10.37 ip route ip route • Cada pod tiene su propio IP • IP routing etcd
10. @pablokbs Kubernetes Services: Kube-proxy Kubelet Kubernetes Cluster Services API pod c c calico 10.0.10.34 ip routing kube-proxy Kubelet pod c c calico 10.0.10.37 ip routing kube-proxy Manager Workers • Cluster IP • Node Port • Load Balancer
11. @pablokbs Kubelet Kubernetes Services: Ingress Kubernetes Cluster Services API Manager Workers myservice.example.com K C K C svc pod c c calico 10.0.10.34 Kubelet pod c c calico 10.0.10.37
12. @pablokbs Network Policies Kubernetes Cluster Services API Manager Workers Kubelet front c c calico 10.0.10.34 ip route + iptables Kubelet client c c calico 10.0.10.37 ip route + iptables Kubelet back c c calico 10.0.10.38 ip route + iptables
13. @pablokbs Conceptos de conectividad de Kubernetes • Pod networking (CNI) • Services (kube-proxy) • Ingress • Network Policy
14. @pablokbs Demo
15. Qs? @pablokbs @InvisionApp