werf — наш инструмент для CI-CD в Kubernetes

by flant

Slide 1

Slide 1 text

Slide 2

Slide 2 text

No content

Slide 3

Slide 3 text

лет Linux в production 11

Slide 4

Slide 4 text

лет Linux в production 11 лет с контейнерами в Linux 10

Slide 5

Slide 5 text

лет Linux в production 11 лет с контейнерами в Linux 10 лет Docker в production 5

Slide 6

Slide 6 text

лет Linux в production 11 лет с контейнерами в Linux 10 лет Docker в production 5 года Kubernetes в production 3

Slide 7

Slide 7 text

лет Linux в production 11 лет с контейнерами в Linux 10 лет Docker в production 5 года Kubernetes в production 3 кластеров Kubernetes 100+ приложений 1000+ серверов 2000+

Slide 8

Slide 8 text

Slide 9

Slide 9 text

Slide 10

Slide 10 text

Kubernetes для enterprise Архитектура Внедрение On-premise Обучение использованию Поддержка 24/7 SLA Консалтинг и экспертиза подробности На стенде Фланта запрос услуги K8S@ﬂant.ru

Slide 11

Slide 11 text

No content

Slide 12

Slide 12 text

github.com/flant/werf

Slide 13

Slide 13 text

Дмитрий Столяров Тимофей Кириллов Алексей Игрычев Иван Михейкин

Slide 14

Slide 14 text

werf – наш инструмент для CI/CD в Kubernetes

Slide 15

Slide 15 text

werf – наш инструмент для CI/CD в Kubernetes

Slide 16

Slide 16 text

Soft Production

Slide 17

Slide 17 text

Soft Production

Slide 18

Slide 18 text

Soft Production

Slide 19

Slide 19 text

Soft Production

Slide 20

Slide 20 text

Soft Production

Slide 21

Slide 21 text

Soft Production

Slide 22

Slide 22 text

Soft Production Практики Continuous Delivery с Docker youtu.be/mT5U862_ydU май 2016 Наш опыт с Kubernetes в небольших проектах youtu.be/CgCLPYJRxbU июнь 2017

Slide 23

Slide 23 text

Код git

Slide 24

Slide 24 text

Код IaC build git

Slide 25

Slide 25 text

Docker-image build Код IaC build git

Slide 26

Slide 26 text

Docker-image Docker Registry build publish Код IaC build git

Slide 27

Slide 27 text

IaC run Docker-image Docker Registry build publish Код IaC build git

Slide 28

Slide 28 text

IaC run Docker-image Docker Registry Kubernetes production build publish Код IaC build git deploy

Slide 29

Slide 29 text

IaC run Docker-image Docker Registry Kubernetes production build publish Код IaC build git image pull deploy

Slide 30

Slide 30 text

IaC run Docker-image Docker Registry Kubernetes production build publish Код IaC build git image pull deploy Tests

Slide 31

Slide 31 text

IaC run Docker-image Docker Registry Kubernetes production build publish Код IaC build git image pull deploy Tests unit test

Slide 32

Slide 32 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests unit test

Slide 33

Slide 33 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests unit test test

Slide 34

Slide 34 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests build publish deploy deploy unit test test CI

Slide 35

Slide 35 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests build publish deploy deploy unit test test CI

Slide 36

Slide 36 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests CI build publish deploy deploy unit test test

Slide 37

Slide 37 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests unit test test

Slide 38

Slide 38 text

Собираем Docker-образы быстро и удобно с dapp youtu.be/8R5UDg29Vic ноябрь 2016 Важная деталь #1

Slide 39

Slide 39 text

Docker-image Docker Registry Kubernetes test Kubernetes production build publish git image pull image pull deploy deploy unit test test Код IaC build IaC run Tests Важная деталь #2

Slide 40

Slide 40 text

Собираем Docker-образы быстро и удобно с dapp youtu.be/8R5UDg29Vic ноябрь 2016 Важная деталь #2

Slide 41

Slide 41 text

git build test release Важная деталь #3 Что такое delivery?

Slide 42

Slide 42 text

git build test release run Важная деталь #3 Что такое delivery?

Slide 43

Slide 43 text

git build test release run Важная деталь #3 Что такое delivery?

Slide 44

Slide 44 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests unit test test

Slide 45

Slide 45 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests unit test test Вырожденный случай #1 – “Чужой” софт

Slide 46

Slide 46 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull Tests unit test test Вырожденный случай #2 – “Java” deploy deploy

Slide 47

Slide 47 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull deploy deploy Tests Вырожденный случай #3 – Мне повезёт! image pull

Slide 48

Slide 48 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests unit test test

Slide 49

Slide 49 text

GitOps

Slide 50

Slide 50 text

IaC run Docker-image Docker Registry Kubernetes test Kubernetes production build publish Код IaC build git image pull image pull deploy deploy Tests unit test test

Slide 51

Slide 51 text

IaC run Docker Registry Kubernetes test Kubernetes production publish git image pull image pull deploy deploy Tests unit test test Docker-image Код IaC build build

Slide 52

Slide 52 text

Нюансы сборки Вес образа

Slide 53

Slide 53 text

FROM ubuntu:18.04 Нюансы сборки Вес образа 76MB

Slide 54

Slide 54 text

FROM ubuntu:18.04 RUN apt update && apt install -y golang-go git Нюансы сборки Вес образа 76MB +553MB

Slide 55

Slide 55 text

FROM ubuntu:18.04 RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app Нюансы сборки Вес образа 76MB +553MB +1MB

Slide 56

Slide 56 text

FROM ubuntu:18.04 RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d Нюансы сборки Вес образа 76MB +553MB +1MB +3MB

Slide 57

Slide 57 text

FROM ubuntu:18.04 RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB

Slide 58

Slide 58 text

FROM ubuntu:18.04 RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . CMD ["/app/main"] Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB

Slide 59

Slide 59 text

Slide 60

Slide 60 text

Slide 61

Slide 61 text

Slide 62

Slide 62 text

FROM ubuntu:18.04 RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . CMD ["/app/main"] FROM alpine:3.9 Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB = 644MB 6MB

Slide 63

Slide 63 text

FROM ubuntu:18.04 as build RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . CMD ["/app/main"] FROM alpine:3.9 Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB = 644MB 6MB

Slide 64

Slide 64 text

FROM ubuntu:18.04 as build RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . CMD ["/app/main"] FROM alpine:3.9 COPY --from=build /app/main . Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB = 644MB 6MB +9MB

Slide 65

Slide 65 text

Slide 66

Slide 66 text

FROM ubuntu:18.04 as build RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . CMD ["/app/main"] FROM alpine:3.9 COPY --from=build /app/main . CMD ["/app/main"] Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB = 644MB 6MB +9MB

Slide 67

Slide 67 text

FROM ubuntu:18.04 as build RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . CMD ["/app/main"] FROM alpine:3.9 COPY --from=build /app/main . CMD ["/app/main"] Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB = 644MB 6MB +9MB = 15MB

Slide 68

Slide 68 text

FROM ubuntu:18.04 as build RUN apt update && apt install -y golang-go git ADD . /app/ WORKDIR /app RUN go get -d RUN go build -o main . CMD ["/app/main"] FROM alpine:3.9 COPY --from=build /app/main . CMD ["/app/main"] Нюансы сборки Вес образа 76MB +553MB +1MB +3MB +9MB = 644MB 6MB +9MB = 15MB 42 раза!

Slide 69

Slide 69 text

Нюансы сборки Вес образа Количество слоёв

Slide 70

Slide 70 text

FROM ubuntu:xenial RUN addgroup --system nginx RUN adduser --system --ingroup nginx nginx RUN apt-get update RUN apt-get install -y curl patch git build-essential libexpat-dev libgd-dev RUN curl -fSL http://nginx.org/download/nginx-$V.tar.gz -o nginx.tar.gz RUN tar -zx -f nginx.tar.gz RUN rm nginx.tar.gz RUN git clone https://github.com/haosdent/nginx-limit-upstream.git RUN patch -p1 < nginx-limit-upstream/nginx-1.12.1.patch RUN ./configure $C --with-debug RUN make -j$(getconf _NPROCESSORS_ONLN) RUN mv objs/nginx objs/nginx-debug RUN mv objs/ngx_http_xslt_filter_module.so objs/ngx_http_xslt_filter_module-debug.so RUN mv objs/ngx_http_image_filter_module.so bjs/ngx_http_image_filter_module-debug.so RUN mv objs/ngx_http_geoip_module.so objs/ngx_http_geoip_module-debug.so RUN mv objs/ngx_stream_geoip_module.so objs/ngx_stream_geoip_module-debug.so RUN ./configure $CONFIG RUN make -j$(getconf _NPROCESSORS_ONLN) RUN make install RUN rm -rf /etc/nginx/html/ RUN mkdir /etc/nginx/conf.d/ RUN mkdir -p /usr/share/nginx/html/ RUN install -m644 html/index.html /usr/share/nginx/html/ ... Нюансы сборки Вес образа Количество слоёв

Slide 71

Slide 71 text

FROM ubuntu:xenial RUN addgroup --system nginx && \ adduser --system --ingroup nginx nginx && \ apt-get update && \ apt-get install -y curl patch git build-essential libexpat-dev libgd-dev curl -fSL http://nginx.org/download/nginx-$V.tar.gz -o nginx.tar.gz tar -zx -f nginx.tar.gz && \ rm nginx.tar.gz RUN git clone https://github.com/haosdent/nginx-limit-upstream.git && \ patch -p1 < nginx-limit-upstream/nginx-1.12.1.patch && \ ./configure $C --with-debug && \ make -j$(getconf _NPROCESSORS_ONLN) && \ mv objs/nginx objs/nginx-debug && \ mv objs/ngx_http_xslt_filter_module.so objs/ngx_http_xslt_filter_module-debug.so mv objs/ngx_http_image_filter_module.so bjs/ngx_http_image_filter_module-debug.so mv objs/ngx_http_geoip_module.so objs/ngx_http_geoip_module-debug.so mv objs/ngx_stream_geoip_module.so objs/ngx_stream_geoip_module-debug.so ./configure $C && \ make -j$(getconf _NPROCESSORS_ONLN) && \ make install && \ rm -rf /etc/nginx/html/ && \ mkdir /etc/nginx/conf.d/ && \ mkdir -p /usr/share/nginx/html/ && \ install -m644 html/index.html /usr/share/nginx/html/ && \ ... Нюансы сборки Вес образа Количество слоёв

Slide 72

Slide 72 text

Slide 73

Slide 73 text

Slide 74

Slide 74 text

Slide 75

Slide 75 text

Slide 76

Slide 76 text

FROM ubuntu:xenial RUN addgroup --system nginx && \ adduser --system --ingroup nginx nginx && \ apt-get update && \ apt-get install -y curl patch git build-essential libexpat-dev libgd-dev curl -fSL http://nginx.org/download/nginx-$V.tar.gz -o nginx.tar.gz tar -zx -f nginx.tar.gz && \ rm nginx.tar.gz RUN git clone https://github.com/haosdent/nginx-limit-upstream.git && \ patch -p1 < nginx-limit-upstream/nginx-1.12.1.patch && \ ./configure $C --with-debug && \ make -j$(getconf _NPROCESSORS_ONLN) && \ mv objs/nginx objs/nginx-debug && \ mv objs/ngx_http_xslt_filter_module.so objs/ngx_http_xslt_filter_module-debug.so mv objs/ngx_http_image_filter_module.so bjs/ngx_http_image_filter_module-debug.so mv objs/ngx_http_geoip_module.so objs/ngx_http_geoip_module-debug.so mv objs/ngx_stream_geoip_module.so objs/ngx_stream_geoip_module-debug.so ./configure $C && \ make -j$(getconf _NPROCESSORS_ONLN) && \ make install && \ rm -rf /etc/nginx/html/ && \ mkdir /etc/nginx/conf.d/ && \ mkdir -p /usr/share/nginx/html/ && \ install -m644 html/index.html /usr/share/nginx/html/ && \ ... ? Нюансы сборки Вес образа Количество слоёв Дебаг

Slide 77

Slide 77 text

Step 1/3 : FROM ubuntu:18.04 ---> 7698f282e524 Step 2/3 : RUN addgroup --system nginx && adduser --system --ingrou ---> Running in 1ea00c8fa53d ... Removing intermediate container 1ea00c8fa53d ---> f39a30da45b1 Step 3/3 : RUN git clone https://github.com/haosdent/nginx-limit- ---> Running in 473357642c3f ... The command 'git clone ...' returned a non-zero code: 1 Нюансы сборки Вес образа Количество слоёв Дебаг

Slide 78

Slide 78 text

Slide 79

Slide 79 text

Step 1/3 : FROM ubuntu:18.04 ---> 7698f282e524 Step 2/3 : RUN addgroup --system nginx && adduser --system --ingrou ---> Running in 1ea00c8fa53d ... Removing intermediate container 1ea00c8fa53d ---> f39a30da45b1 Step 3/3 : RUN git clone https://github.com/haosdent/nginx-limit- ---> Running in 473357642c3f ... The command 'git clone ...' returned a non-zero code: 1 $ docker run -ti f39a30da45b1 /bin/bash ... Нюансы сборки Вес образа Количество слоёв Дебаг

Slide 80

Slide 80 text

Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 81

Slide 81 text

FROM python:3.4 ADD . /app WORKDIR /app RUN pip install -r requirements.txt Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 82

Slide 82 text

FROM python:3.4 ADD . /app WORKDIR /app RUN pip install -r requirements.txt Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 83

Slide 83 text

FROM python:3.4 ADD . /app WORKDIR /app RUN pip install -r requirements.txt Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 84

Slide 84 text

FROM python:3.4 RUN mkdir /app WORKDIR /app Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 85

Slide 85 text

FROM python:3.4 RUN mkdir /app WORKDIR /app ADD requirements.txt /app/ RUN pip install -r requirements.txt Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 86

Slide 86 text

FROM python:3.4 RUN mkdir /app WORKDIR /app ADD requirements.txt /app/ RUN pip install -r requirements.txt ADD . /app Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 87

Slide 87 text

Slide 88

Slide 88 text

Slide 89

Slide 89 text

Slide 90

Slide 90 text

FROM python:3.4 RUN mkdir /app WORKDIR /app ADD requirements-basic.txt /app/ RUN pip install -r requirements-basic.txt ADD requirements.txt /app/ RUN pip install -r requirements.txt ADD . /app Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки

Slide 91

Slide 91 text

Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 92

Slide 92 text

FROM php:7.3-fpm ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app FROM nginx:latest ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app Dockerfile-backend Dockerfile-frontend Dockerfile-consumer Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 93

Slide 93 text

FROM php:7.3-fpm ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app Dockerfile-backend FROM nginx:latest ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app Dockerfile-frontend Dockerfile-consumer #!/bin/bash docker build -f Dockerfile.frontend . -t frontend:latest docker build -f Dockerfile.backend . -t backend:latest docker build -f Dockerfile.consumer . -t consumer:latest Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 94

Slide 94 text

FROM nginx:latest ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app Dockerfile-frontend Dockerfile-consumer FROM php:7.3-fpm ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app Dockerfile-backend Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 95

Slide 95 text

FROM nginx:latest ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app FROM php:7.3-fpm ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 96

Slide 96 text

FROM nginx:latest ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app FROM php:7.3-fpm ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app Dockerﬁle Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 97

Slide 97 text

FROM nginx:latest as frontend ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 as consumer RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app FROM php:7.3-fpm as backend ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app Dockerﬁle Нюансы сборки Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 98

Slide 98 text

FROM nginx:latest as frontend ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 as consumer RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app Нюансы сборки Вес образа Количество слоёв FROM php:7.3-fpm as backend ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app Dockerﬁle #!/bin/bash docker build --target frontend . -t frontend:latest docker build --target backend . -t backend:latest docker build --target consumer . -t consumer:latest Дебаг Скорость сборки Много образов

Slide 99

Slide 99 text

FROM nginx:latest as frontend ADD sys/nginx.conf /etc/nginx/nginx.conf ADD static/ /usr/share/nginx/html/ FROM php:7.3 as consumer RUN mkdir -p /app/consumer COPY consumer /app/consumer WORKDIR /app Нюансы сборки Вес образа Количество слоёв FROM php:7.3-fpm as backend ADD sys/php-fpm.conf /etc/php/7.1/fpm/php-fpm.conf RUN mkdir -p /app/lib COPY index.php /app COPY lib /app/lib WORKDIR /app Dockerﬁle #!/bin/bash docker build --target frontend . -t frontend:latest docker build --target backend . -t backend:latest docker build --target consumer . -t consumer:latest Дебаг Скорость сборки Много образов

Slide 100

Slide 100 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов

Slide 101

Slide 101 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount

Slide 102

Slide 102 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible

Slide 103

Slide 103 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker

Slide 104

Slide 104 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker Параллельная сборка

Slide 105

Slide 105 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker Параллельная сборка Распределенная сборка

Slide 106

Slide 106 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker Параллельная сборка Распределенная сборка Автомагия

Slide 107

Slide 107 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker Параллельная сборка Распределенная сборка moby/buildkit Автомагия

Slide 108

Slide 108 text

Slide 109

Slide 109 text

Slide 110

Slide 110 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker Параллельная сборка Распределенная сборка moby/buildkit genuinetools/img Автомагия

Slide 111

Slide 111 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker Параллельная сборка Распределенная сборка ? Автомагия

Slide 112

Slide 112 text

Вес образа Количество слоёв Дебаг Скорость сборки Много образов Mount Ansible Сборка без Docker Параллельная сборка Распределенная сборка ? Параллельная сборка Автомагия

Slide 113

Slide 113 text

Slide 114

Slide 114 text

IaC run Docker Registry Kubernetes test Kubernetes production publish git image pull image pull deploy deploy Tests unit test test Docker-image Код IaC build build

Slide 115

Slide 115 text

IaC run Kubernetes test Kubernetes production build Код IaC build git image pull image pull deploy deploy Tests unit test test Docker-image Docker Registry publish

Slide 116

Slide 116 text

IaC run Kubernetes test Kubernetes production build Код IaC build git image pull image pull deploy deploy Tests unit test test Docker-image Docker Registry publish №1: Как тегировать образ?

Slide 117

Slide 117 text

Почему это важно?

Slide 118

Slide 118 text

Почему это важно?

Slide 119

Slide 119 text

Почему это важно?

Slide 120

Slide 120 text

Почему это важно? Следовать Gitﬂow #1

Slide 121

Slide 121 text

Почему это важно? Следовать Gitﬂow Гарантировать воспроизводимость #1 #2

Slide 122

Slide 122 text

Почему это важно? Следовать Gitﬂow Гарантировать воспроизводимость #1 #2 Определять происхождение #3

Slide 123

Slide 123 text

Docker Registry myimage: v1.0 1.0 Стратегии тегирования git tag

Slide 124

Slide 124 text

myimage: v1.0 Stage Docker Registry myimage: v1.0 1.0 Стратегии тегирования git tag

Slide 125

Slide 125 text

myimage: v1.0 Stage Docker Registry myimage: v1.0 1.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 126

Slide 126 text

myimage: v1.0 Stage myimage: v1.0 Docker Registry 1.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 127

Slide 127 text

myimage: v1.0 Stage myimage: v1.0 Docker Registry master 1.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 128

Slide 128 text

myimage: v1.0 Stage master myimage: v1.0 Docker Registry 1.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 129

Slide 129 text

myimage: v1.0 Stage master myimage: v1.0 Docker Registry 1.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 130

Slide 130 text

myimage: v1.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 git tag myimage: v1.0 Production Стратегии тегирования git tag

Slide 131

Slide 131 text

IaC run Code IaC build git myimage: v1.0 Production myimage: v1.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 git tag Стратегии тегирования git tag

Slide 132

Slide 132 text

myimage: v1.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 build myimage: v1.0 Production Стратегии тегирования git tag

Slide 133

Slide 133 text

myimage: v1.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 myimage: v2.0 2.0 publish myimage: v1.0 Production Стратегии тегирования git tag

Slide 134

Slide 134 text

myimage: v1.0 Stage master myimage: v1.0 Docker Registry 1.0 myimage: v2.0 publish myimage: v1.0 Production 2.0 myimage: v2.0 2.0 Стратегии тегирования git tag

Slide 135

Slide 135 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 136

Slide 136 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 deploy myimage: v2.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 137

Slide 137 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 myimage: v1.0 Production Стратегии тегирования git tag

Slide 138

Slide 138 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 deploy myimage: v2.0 Production myimage: v2.0 Стратегии тегирования git tag

Slide 139

Slide 139 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 myimage: v2.0 Production Стратегии тегирования git tag

Slide 140

Slide 140 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 myimage: v2.0 Production 1. Поставить тег Стратегии тегирования git tag

Slide 141

Slide 141 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 myimage: v2.0 Production 1. Поставить тег 2. Протестировать Стратегии тегирования git tag

Slide 142

Slide 142 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 myimage: v2.0 Production 1. Поставить тег 2. Протестировать 3. Выкатить на прод Стратегии тегирования git tag

Slide 143

Slide 143 text

myimage: v2.0 Stage master myimage: v1.0 Docker Registry 1.0 2.0 myimage: v2.0 2.0 myimage: v2.0 Production Воспроизводимо, но жутко неудобно 1. Поставить тег 2. Протестировать 3. Выкатить на прод Стратегии тегирования git tag

Slide 144

Slide 144 text

master 1.0 Стратегии тегирования git tag git commit + tag

Slide 145

Slide 145 text

Docker Registry myimage 1.0 master 1.0 Стратегии тегирования git tag git commit + tag

Slide 146

Slide 146 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Стратегии тегирования git tag git commit + tag

Slide 147

Slide 147 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview Стратегии тегирования git tag git commit + tag

Slide 148

Slide 148 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop Стратегии тегирования git tag git commit + tag

Slide 149

Slide 149 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 Стратегии тегирования git tag git commit + tag

Slide 150

Slide 150 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage: #c1 myimage #c1 publish build Стратегии тегирования git tag git commit + tag

Slide 151

Slide 151 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop myimage: #c1 myimage publish build #c1 #c1 Стратегии тегирования git tag git commit + tag

Slide 152

Slide 152 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop myimage #c1 #c1 Стратегии тегирования git tag git commit + tag

Slide 153

Slide 153 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c1 deploy myimage: #c1 Стратегии тегирования git tag git commit + tag

Slide 154

Slide 154 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c1 Стратегии тегирования git tag git commit + tag

Slide 155

Slide 155 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c1 #c2 Стратегии тегирования git tag git commit + tag

Slide 156

Slide 156 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c2 #c2 myimage #c2 Стратегии тегирования git tag git commit + tag

Slide 157

Slide 157 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 Стратегии тегирования git tag git commit + tag

Slide 158

Slide 158 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 Стратегии тегирования git tag git commit + tag

Slide 159

Slide 159 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c3 Стратегии тегирования git tag git commit + tag

Slide 160

Slide 160 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 release_1.1 myimage #c3 #c3 Стратегии тегирования git tag git commit + tag

Slide 161

Slide 161 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c3 Staging myimage: #c3 deploy myimage: #c3 Стратегии тегирования git tag git commit + tag

Slide 162

Slide 162 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c3 Staging myimage: #c3 Стратегии тегирования git tag git commit + tag

Slide 163

Slide 163 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 Staging myimage: #c3 #c3 Стратегии тегирования git tag git commit + tag

Slide 164

Slide 164 text

Slide 165

Slide 165 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 Staging myimage: #c3 Стратегии тегирования git tag git commit + tag

Slide 166

Slide 166 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c4 publish build Staging myimage: #c3 Стратегии тегирования git tag git commit + tag

Slide 167

Slide 167 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c3 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 deploy myimage: #c4 myimage: #c4 Стратегии тегирования git tag git commit + tag

Slide 168

Slide 168 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c4 Стратегии тегирования git tag git commit + tag

Slide 169

Slide 169 text

... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c4 Стратегии тегирования git tag git commit + tag

Slide 170

Slide 170 text

Slide 171

Slide 171 text

Slide 172

Slide 172 text

Slide 173

Slide 173 text

Slide 174

Slide 174 text

... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c4 #c25 Стратегии тегирования git tag git commit + tag

Slide 175

Slide 175 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c24 #c25 myimage: #c25 publish build myimage #c25 ... Стратегии тегирования git tag git commit + tag

Slide 176

Slide 176 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 deploy myimage: #c25 Стратегии тегирования git tag git commit + tag

Slide 177

Slide 177 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 myimage #c25 ... Стратегии тегирования git tag git commit + tag

Slide 178

Slide 178 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 #c25 myimage #c25 ... Стратегии тегирования git tag git commit + tag

Slide 179

Slide 179 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 myimage #c25 ... Стратегии тегирования git tag git commit + tag

Slide 180

Slide 180 text

... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 myimage #c25 #c25 Стратегии тегирования git tag git commit + tag

Slide 181

Slide 181 text

... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 myimage #c25 #c25 1.1 Стратегии тегирования git tag git commit + tag

Slide 182

Slide 182 text

... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 myimage #c25 #c25 1.1 1.1 Стратегии тегирования git tag git commit + tag

Slide 183

Slide 183 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 1.1 1.1 Стратегии тегирования git tag git commit + tag

Slide 184

Slide 184 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.1 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 1.1 deploy myimage: v1.1 1.1 Стратегии тегирования git tag git commit + tag

Slide 185

Slide 185 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 #c25 1.1 1.1 Production myimage: v1.1 Staging myimage: #c25 Стратегии тегирования git tag git commit + tag

Slide 186

Slide 186 text

Slide 187

Slide 187 text

Slide 188

Slide 188 text

... Docker Registry myimage 1.0 master 1.0 Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 #c25 1.1 Production myimage: v1.1 Staging myimage: #c25 myimage #c25 1.1 Стратегии тегирования git tag git commit + tag

Slide 189

Slide 189 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.1 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 1.1 1.1 Стратегии тегирования git tag git commit + tag

Slide 190

Slide 190 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.1 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 1.1 1.1 Стратегии тегирования git tag git commit + tag

Slide 191

Slide 191 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.1 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 1.1 1.1 И воспроизводимо, и удобно! Стратегии тегирования git tag git commit + tag

Slide 192

Slide 192 text

myimage #c25 ... Docker Registry myimage 1.0 master 1.0 Production myimage: v1.1 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 1.1 1.1 И воспроизводимо, и удобно! Но, только fast forward! Стратегии тегирования git tag git commit + tag

Slide 193

Slide 193 text

Slide 194

Slide 194 text

Slide 195

Slide 195 text

Slide 196

Slide 196 text

Slide 197

Slide 197 text

FROM ruby:2.3 as assets RUN mkdir -p /app WORKDIR /app COPY . ./ RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb FROM nginx:alpine COPY --from=assets /app/public /usr/share/nginx/www/public 8c62b065252f2bc1c6a859acd18df1bb2aba260c47a593d6a7de9b34239727e5 ab738dd6e9a8fdf3808928b349ec93a2ed2eab03ebffb53cdcedc54f5419024a RUN mkdir -p /app WORKDIR /app RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb Стратегии тегирования git tag git commit + tag Content addressable

Slide 198

Slide 198 text

FROM ruby:2.3 as assets RUN mkdir -p /app WORKDIR /app COPY . ./ RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb FROM nginx:alpine COPY --from=assets /app/public /usr/share/nginx/www/public 8c62b065252f2bc1c6a859acd18df1bb2aba260c47a593d6a7de9b34239727e5 ab738dd6e9a8fdf3808928b349ec93a2ed2eab03ebffb53cdcedc54f5419024a RUN mkdir -p /app WORKDIR /app RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb COPY --from=assets /app/public/usr/share/ nginx/www/public Стратегии тегирования git tag git commit + tag Content addressable

Slide 199

Slide 199 text

FROM ruby:2.3 as assets RUN mkdir -p /app WORKDIR /app COPY . ./ RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb FROM nginx:alpine COPY --from=assets /app/public /usr/share/nginx/www/public 8c62b065252f2bc1c6a859acd18df1bb2aba260c47a593d6a7de9b34239727e5 ab738dd6e9a8fdf3808928b349ec93a2ed2eab03ebffb53cdcedc54f5419024a RUN mkdir -p /app WORKDIR /app RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb COPY --from=assets /app/public/usr/share/ nginx/www/public 261d2204dfe93eb7e59ca7182c7e07d34f97336804679da 90a07e2c8a2ed6c24 SHA256 Стратегии тегирования git tag git commit + tag Content addressable

Slide 200

Slide 200 text

FROM ruby:2.3 as assets RUN mkdir -p /app WORKDIR /app COPY . ./ RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb FROM nginx:alpine COPY --from=assets /app/public /usr/share/nginx/www/public 8c62b065252f2bc1c6a859acd18df1bb2aba260c47a593d6a7de9b34239727e5 ab738dd6e9a8fdf3808928b349ec93a2ed2eab03ebffb53cdcedc54f5419024a RUN mkdir -p /app WORKDIR /app RUN gem install bundler && bundle install RUN bundle exec rake assets:precompile CMD bundle exec puma -C config/puma.rb COPY --from=assets /app/public/usr/share/ nginx/www/public 261d2204dfe93eb7e59ca7182c7e07d34f97336804679da 90a07e2c8a2ed6c24 f0dac297477bfe0c3d0bf1d2bfed61101e4a72910fba90b01ae0c3c29807f252 SHA256 Стратегии тегирования git tag git commit + tag Content addressable

Slide 201

Slide 201 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 myimage #c25 ... Стратегии тегирования git tag git commit + tag Content addressable

Slide 202

Slide 202 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage #c1 myimage: #c18 #c2 myimage #c2 #c3 myimage #c3 release_1.1 #c4 myimage #c4 myimage: #c25 #c25 myimage #c25 ... #sig1 #sig2 #sig3 #sig4 #sig25 Стратегии тегирования git tag git commit + tag Content addressable

Slide 203

Slide 203 text

#c1 #c2 #c3 #c4 #c25 Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop myimage myimage: #sig18 myimage myimage release_1.1 myimage myimage: #sig25 myimage ... #sig1 #sig2 #sig3 #sig4 #sig25 #sig1 #sig2 #sig3 #sig4 #sig25 Стратегии тегирования git tag git commit + tag Content addressable

Slide 204

Slide 204 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage myimage: #sig18 #c2 myimage #c3 myimage release_1.1 #c4 myimage myimage: #sig25 myimage ... #sig1 #sig2 #sig3 #sig4 #sig25 #sig1 #sig2 #sig3 #sig4 #c25 #sig25 #c26 #sig25 Стратегии тегирования git tag git commit + tag Content addressable

Slide 205

Slide 205 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage myimage: #sig18 #c2 myimage #c3 myimage release_1.1 #c4 myimage myimage: #sig25 ... #sig1 #sig2 #sig3 #sig4 #sig1 #sig2 #sig3 #sig4 #c25 #sig25 #c26 #sig25 myimage #sig25 Стратегии тегирования git tag git commit + tag Content addressable

Slide 206

Slide 206 text

Docker Registry myimage 1.0 master 1.0 Production myimage: v1.0 Staging Preview develop #c1 myimage myimage: #sig18 #c2 myimage #c3 myimage release_1.1 #c4 myimage myimage: #sig25 ... #sig1 #sig2 #sig3 #sig4 #sig1 #sig2 #sig3 #sig4 #c25 #sig25 #c26 #sig25 myimage #sig25 deploy myimage: #sig25 Стратегии тегирования git tag git commit + tag Content addressable

Slide 207

Slide 207 text

Docker Registry myimage 1.0 master 1.0 Production myimage: #sig25 Staging Preview develop #c1 myimage myimage: #sig18 #c2 myimage #c3 myimage release_1.1 #c4 myimage myimage: #sig25 ... #sig1 #sig2 #sig3 #sig4 #sig1 #sig2 #sig3 #sig4 #c25 #sig25 #c26 #sig25 myimage #sig25 Стратегии тегирования git tag git commit + tag Content addressable

Slide 208

Slide 208 text

Slide 209

Slide 209 text

Docker Registry myimage 1.0 master 1.0 Production myimage: #sig25 Staging Preview develop #c1 myimage myimage: #sig18 #c2 myimage #c3 myimage release_1.1 #c4 myimage myimage: #sig25 ... #sig1 #sig2 #sig3 #sig4 #sig1 #sig2 #sig3 #sig4 myimage #sig25 #c25 #sig25 #c26 #sig25 Стратегии тегирования git tag git commit + tag Content addressable

Slide 210

Slide 210 text

Docker Registry myimage 1.0 master 1.0 Production myimage: #sig25 Staging Preview develop #c1 myimage myimage: #sig18 #c2 myimage #c3 myimage release_1.1 #c4 myimage myimage: #sig25 ... #sig1 #sig2 #sig3 #sig4 #sig1 #sig2 #sig3 #sig4 myimage #sig25 #c25 #sig25 #c26 #sig25 SHA256 ??? Стратегии тегирования git tag git commit + tag Content addressable

Slide 211

Slide 211 text

? Стратегии тегирования git tag git commit + tag Content addressable

Slide 212

Slide 212 text

stage image Стратегии тегирования git tag git commit + tag Content addressable

Slide 213

Slide 213 text

master Code git IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 214

Slide 214 text

master Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 215

Slide 215 text

master beforeInstall Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 216

Slide 216 text

master beforeInstall Code git install beforeSetup setup IaC build #sig1 from beforeInstall Стратегии тегирования git tag git commit + tag Content addressable

Slide 217

Slide 217 text

master beforeInstall Code git install beforeSetup setup IaC build from beforeInstall #sig1 id образа SHA256 Стратегии тегирования git tag git commit + tag Content addressable

Slide 218

Slide 218 text

master beforeInstall #sig1 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 219

Slide 219 text

master beforeInstall #sig1 git archive Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 220

Slide 220 text

master beforeInstall #sig1 git archive Code from git beforeInstall install beforeSetup setup IaC build #sig2 Стратегии тегирования git tag git commit + tag Content addressable

Slide 221

Slide 221 text

master beforeInstall git archive from git beforeInstall install beforeSetup setup IaC build #sig1 Code #sig2 SHA256 Стратегии тегирования git tag git commit + tag Content addressable

Slide 222

Slide 222 text

master beforeInstall #sig1 git archive #sig2 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 223

Slide 223 text

master beforeInstall #sig1 git archive #sig2 install #sig3 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 224

Slide 224 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 225

Slide 225 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup setup #sig5 #sig4 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 226

Slide 226 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup setup #sig5 #sig4 Code from git beforeInstall install beforeSetup setup IaC build image Стратегии тегирования git tag git commit + tag Content addressable

Slide 227

Slide 227 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup setup #sig5 #sig4 Code from git beforeInstall install beforeSetup setup IaC build image tag Стратегии тегирования git tag git commit + tag Content addressable

Slide 228

Slide 228 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup setup #sig5 #sig4 image tag Стратегии тегирования git tag git commit + tag Content addressable

Slide 229

Slide 229 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 setup #sig5 image tag Стратегии тегирования git tag git commit + tag Content addressable

Slide 230

Slide 230 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 setup #sig5 image tag Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 231

Slide 231 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 setup #sig5 git patch #sig6 image tag Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 232

Slide 232 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 setup #sig5 git patch #sig6 image tag Code from git beforeInstall install beforeSetup setup IaC build diﬀ Стратегии тегирования git tag git commit + tag Content addressable

Slide 233

Slide 233 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 setup git patch image tag from git beforeInstall install beforeSetup setup IaC build SHA256 (diﬀ) #sig5 #sig6 Code Стратегии тегирования git tag git commit + tag Content addressable

Slide 234

Slide 234 text

Slide 235

Slide 235 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 setup #sig5 git patch #sig6 image tag image tag Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 236

Slide 236 text

master beforeInstall #sig1 git archive #sig2 install #sig3 beforeSetup #sig4 setup #sig5 git patch #sig6 image tag image tag Стратегии тегирования git tag git commit + tag Content addressable

Slide 237

Slide 237 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag Стратегии тегирования git tag git commit + tag Content addressable

Slide 238

Slide 238 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 239

Slide 239 text

Slide 240

Slide 240 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 241

Slide 241 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 Code from git beforeInstall install beforeSetup setup IaC build diﬀ Стратегии тегирования git tag git commit + tag Content addressable

Slide 242

Slide 242 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 beforeSetup #sig8 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 243

Slide 243 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 beforeSetup #sig8 setup #sig9 Code from git beforeInstall install beforeSetup setup IaC build Стратегии тегирования git tag git commit + tag Content addressable

Slide 244

Slide 244 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 beforeSetup #sig8 setup #sig9 Code from git beforeInstall install beforeSetup setup IaC build image tag Стратегии тегирования git tag git commit + tag Content addressable

Slide 245

Slide 245 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 beforeSetup #sig8 setup #sig9 image tag Стратегии тегирования git tag git commit + tag Content addressable

Slide 246

Slide 246 text

beforeSetup #sig4 master setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 beforeSetup #sig8 setup #sig9 image tag Docker Registry Stages Storage Стратегии тегирования git tag git commit + tag Content addressable

Slide 247

Slide 247 text

master image tag image tag image tag Docker Registry beforeSetup #sig4 setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage Стратегии тегирования git tag git commit + tag Content addressable

Slide 248

Slide 248 text

Slide 249

Slide 249 text

master beforeSetup #sig4 setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage image tag image tag image tag Docker Registry Стратегии тегирования git tag git commit + tag Content addressable

Slide 250

Slide 250 text

Slide 251

Slide 251 text

Slide 252

Slide 252 text

IaC run Kubernetes test Kubernetes production build Код IaC build git image pull image pull deploy deploy Tests unit test test Docker-image Docker Registry publish

Slide 253

Slide 253 text

IaC run Kubernetes test Kubernetes production build Код IaC build git image pull image pull deploy deploy Tests unit test test Docker-image Docker Registry publish

Slide 254

Slide 254 text

test build Код IaC build git image pull image pull Tests unit test IaC run Docker-image Docker Registry Kubernetes test Kubernetes production deploy deploy rgstr.exm.pl/some/image/name: + annotations! publish

Slide 255

Slide 255 text

IaC run Kubernetes test Kubernetes production build Код IaC build git image pull image pull deploy deploy Tests unit test test Docker-image Docker Registry publish

Slide 256

Slide 256 text

IaC run Kubernetes test Kubernetes production build Код IaC build git image pull image pull deploy deploy Tests unit test test Docker-image Docker Registry publish №2: Очистка

Slide 257

Slide 257 text

Docker Registry Repo

Slide 258

Slide 258 text

Docker Registry Repo latest layer layer layer

Slide 259

Slide 259 text

Docker Registry Repo latest layer layer layer latest layer

Slide 260

Slide 260 text

Docker Registry Repo latest layer layer layer latest layer

Slide 261

Slide 261 text

Docker Registry Repo layer layer latest layer layer

Slide 262

Slide 262 text

Docker Registry Repo layer layer layer latest layer

Slide 263

Slide 263 text

Docker Registry Repo layer layer layer latest layer Garbage Collection

Slide 264

Slide 264 text

Docker Registry Repo v1.0 v1.1 v1.2 v2.0 v2.1 v3.1 layer layer layer layer layer layer layer layer layer layer layer layer layer layer layer layer

Slide 265

Slide 265 text

Docker Registry Repo v1.0 v1.1 v1.2 v2.0 v2.1 v3.1 layer layer layer layer layer layer layer layer layer layer layer layer layer layer layer layer

Slide 266

Slide 266 text

Docker Registry Repo v1.0 v1.1 v1.2 v2.0 v2.1 v3.1 layer layer layer layer layer layer layer layer layer layer layer layer layer layer layer layer Удаление старых тегов

Slide 267

Slide 267 text

Стратегии очистки Не чистить

Slide 268

Slide 268 text

Стратегии очистки Не чистить Полный сброс

Slide 269

Slide 269 text

Стратегии очистки Не чистить Полный сброс Blue-green

Slide 270

Slide 270 text

Стратегии очистки Не чистить Полный сброс Blue-green По времени

Slide 271

Slide 271 text

Стратегии очистки Не чистить Полный сброс Blue-green По времени Вручную

Slide 272

Slide 272 text

Стратегии очистки Полный сброс Blue-green По времени Вручную Не чистить

Slide 273

Slide 273 text

Стратегии очистки Полный сброс Blue-green По времени Вручную Не чистить

Slide 274

Slide 274 text

Slide 275

Slide 275 text

No content

Slide 276

Slide 276 text

#1 Git head

Slide 277

Slide 277 text

#1 Git head теги: 0.1, 0.2, 1.0

Slide 278

Slide 278 text

#1 Git head теги: 0.1, 0.2, 1.0 бранчи: master develop release-1.0 hotﬁx-xxx feature-yyy

Slide 279

Slide 279 text

#1 Git head теги: 0.1, 0.2, 1.0 бранчи: master develop release-1.0 hotﬁx-xxx feature-yyy

Slide 280

Slide 280 text

#1 Git head теги: 0.1, 0.2, 1.0 бранчи: master develop release-1.0 hotﬁx-xxx feature-yyy Production myimage: v1.0 Staging Preview myimage: #c18 myimage: #c25

Slide 281

Slide 281 text

Slide 282

Slide 282 text

Production myimage: v1.0 Staging Preview myimage: #c18 myimage: #c25 #1 Git head теги: 0.1, 0.2, 1.0 бранчи: master develop release-1.0 hotﬁx-xxx feature-yyy #2 Выкачено сейчас #3 “Было” выкачено старые ReplicaSet’ы (deploy) helm-релизы pod

Slide 283

Slide 283 text

#1 Git head теги: 0.1, 0.2, 1.0 бранчи: master develop release-1.0 hotﬁx-xxx feature-yyy #2 Выкачено сейчас #3 “Было” выкачено старые ReplicaSet’ы (deploy) helm-релизы pod whitelist

Slide 284

Slide 284 text

beforeSetup #sig4 setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 image tag image tag git patch #sig7 beforeSetup #sig8 setup #sig9 image tag Docker Registry Stages Storage

Slide 285

Slide 285 text

beforeSetup #sig4 setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage image tag image tag image tag Docker Registry

Slide 286

Slide 286 text

Slide 287

Slide 287 text

Slide 288

Slide 288 text

beforeSetup #sig4 setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage image tag Docker Registry

Slide 289

Slide 289 text

beforeSetup #sig4 setup #sig5 git patch #sig6 beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage image tag Docker Registry

Slide 290

Slide 290 text

beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage image tag Docker Registry beforeSetup #sig4 setup #sig5 git patch #sig6 сироты

Slide 291

Slide 291 text

beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage image tag Docker Registry beforeSetup #sig4 setup #sig5 git patch #sig6 сироты

Slide 292

Slide 292 text

beforeInstall #sig1 git archive #sig2 install #sig3 git patch #sig7 beforeSetup #sig8 setup #sig9 Stages Storage image tag Docker Registry

Slide 293

Slide 293 text

No content

Slide 294

Slide 294 text

IaC run Kubernetes test Kubernetes production build Код IaC build git image pull image pull deploy deploy Tests unit test test Docker-image Docker Registry publish

Slide 295

Slide 295 text

test IaC run Docker-image Docker Registry build publish Код IaC build git image pull image pull Tests unit test deploy deploy Kubernetes production Kubernetes test

Slide 296

Slide 296 text

master IaC run git

Slide 297

Slide 297 text

master IaC run git

Slide 298

Slide 298 text

Slide 299

Slide 299 text

apiVersion: apps/v1 kind: Deployment metadata: name: nginx-deployment spec: selector: matchLabels: app: nginx minReadySeconds: 5 template: metadata: labels: app: nginx spec: containers: - name: nginx image: nginx:1.7.9 ports: - containerPort: 80 apiVersion: apps/v1 kind: Deployment metadata: creationTimestamp: 2019-05-25T14:54:22Z generation: 1 name: nginx-deployment namespace: default resourceVersion: "248221274" selfLink: /apis/extensions/v1beta1/namespaces/default/deployments/nginx-deployment uid: fb75f366-7efc-11e9-ac27-52540035a73b spec: minReadySeconds: 5 progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 10 selector: matchLabels: app: nginx strategy: rollingUpdate: maxSurge: 25% maxUnavailable: 25% type: RollingUpdate template: metadata: creationTimestamp: null labels: app: nginx spec: containers: - image: nginx:1.7.9 imagePullPolicy: IfNotPresent name: nginx ports: - containerPort: 80 protocol: TCP resources: {} terminationMessagePath: /dev/termination-log dnsPolicy: ClusterFirst restartPolicy: Always securityContext: {} terminationGracePeriodSeconds: 30 status: conditions: [ ... ] observedGeneration: 1 readyReplicas: 1 replicas: 1 unavailableReplicas: 1 updatedReplicas: 1

Slide 300

Slide 300 text

Slide 301

Slide 301 text

Slide 302

Slide 302 text

Slide 303

Slide 303 text

Slide 304

Slide 304 text

Slide 305

Slide 305 text

Slide 306

Slide 306 text

master IaC run git

Slide 307

Slide 307 text

master IaC run git live

Slide 308

Slide 308 text

master IaC run git live

Slide 309

Slide 309 text

master IaC run git IaC run git live

Slide 310

Slide 310 text

master IaC run git IaC run git new live

Slide 311

Slide 311 text

master IaC run git IaC run git last-applied new live

Slide 312

Slide 312 text

last-applied new live

Slide 313

Slide 313 text

last-applied new live 1. Diﬀ

Slide 314

Slide 314 text

last-applied new live 1. Diﬀ 2. Patch

Slide 315

Slide 315 text

last-applied new live 1. Diﬀ 2. Patch 2-way merge

Slide 316

Slide 316 text

last-applied new live 1. Diﬀ 2. Patch 2-way merge

Slide 317

Slide 317 text

last-applied new live last-applied new live 1. Diﬀ 2. Patch 2-way merge 3-way merge

Slide 318

Slide 318 text

last-applied new live 1. Что удалено? last-applied new live 1. Diﬀ 2. Patch 2-way merge 3-way merge

Slide 319

Slide 319 text

last-applied new live 2. Что добавлено или изменено? 1. Что удалено? last-applied new live 1. Diﬀ 2. Patch 2-way merge 3-way merge

Slide 320

Slide 320 text

last-applied new live 2. Что добавлено или изменено? 1. Что удалено? 3. Patch last-applied new live 1. Diﬀ 2. Patch 2-way merge 3-way merge

Slide 321

Slide 321 text

last-applied new live 2. Что добавлено или изменено? 1. Что удалено? 3. Patch last-applied new live 1. Diﬀ 2. Patch 2-way merge 3-way merge

Slide 322

Slide 322 text

2-way merge 3-way merge

Slide 323

Slide 323 text

2-way merge 3-way merge Декларативный подход не так прост!

Slide 324

Slide 324 text

2-way merge 3-way merge Декларативный подход не так прост! Но без него всё сильно хуже.

Slide 325

Slide 325 text

CI ...

Slide 326

Slide 326 text

CI event

Slide 327

Slide 327 text

CI event start job deploy

Slide 328

Slide 328 text

CI event YAML or JSON templates start job deploy

Slide 329

Slide 329 text

CI event YAML or JSON templates start job deploy Template Engine

Slide 330

Slide 330 text

CI event YAML or JSON templates start job deploy Template Engine Jsonnet ... > sed > envsubst Helm

Slide 331

Slide 331 text

CI event YAML or JSON templates start job deploy Template Engine

Slide 332

Slide 332 text

CI event YAML or JSON templates start job deploy Template Engine images info

Slide 333

Slide 333 text

CI event YAML or JSON templates start job deploy Template Engine Rendered Conﬁguration

Slide 334

Slide 334 text

CI event YAML or JSON templates start job deploy Template Engine Rendered Conﬁguration apply Kubernetes API

Slide 335

Slide 335 text

CI event YAML or JSON templates start job deploy Template Engine Rendered Conﬁguration apply > kubectl apply > helm Kubernetes API ...

Slide 336

Slide 336 text

CI event YAML or JSON templates start job deploy Template Engine Rendered Conﬁguration apply Kubernetes API N-way merge magic

Slide 337

Slide 337 text

CI event YAML or JSON templates start job deploy Template Engine Rendered Conﬁguration apply Kubernetes API okay N-way merge magic

Slide 338

Slide 338 text

CI event YAML or JSON templates start job deploy Template Engine Rendered Conﬁguration apply Kubernetes API okay okay N-way merge magic

Slide 339

Slide 339 text

CI event YAML or JSON templates start job deploy Template Engine Rendered Conﬁguration apply Kubernetes API okay okay okay N-way merge magic

Slide 340

Slide 340 text

CI event YAML or JSON templates start job deploy Template Engine images info Rendered Conﬁguration apply Kubernetes API okay okay okay N-way merge magic Применено != Выкачено

Slide 341

Slide 341 text

Rendered Conﬁguration apply Frontend Backend MongoDB :v0.8.14 :v0.8.14

Slide 342

Slide 342 text

Rendered Conﬁguration apply Frontend Backend MongoDB N-way merge magic :v0.8.14 :v0.8.14

Slide 343

Slide 343 text

Rendered Conﬁguration apply Frontend Backend MongoDB N-way merge magic :v0.8.14 -> 0.8.15 :v0.8.14 -> 0.8.15

Slide 344

Slide 344 text

Rendered Conﬁguration apply Frontend Backend MongoDB N-way merge magic :v0.8.14 -> 0.8.15 :v0.8.14 -> 0.8.15 okay

Slide 345

Slide 345 text

Rendered Conﬁguration apply okay okay Frontend Backend MongoDB N-way merge magic :v0.8.14 -> 0.8.15 :v0.8.14 -> 0.8.15