Kubernetes the hard way revisited 〜ゼロダウンタイムクラスタ移行から学ぶクラスタ構築の仕組み〜

Slide 1

Slide 1 text

-:$PSQPSBUJPO -*/&Ϡϑʔגࣜձࣾ ޒ൓ాਖ਼ଠ࿠ ,VCFSOFUFTUIFIBSEXBZSFWJTJUFE ʙθϩμ΢ϯλΠϜΫϥελҠߦ͔ΒֶͿΫϥελߏஙͷ࢓૊Έʙ

Slide 2

Slide 2 text

-:$PSQPSBUJPO • ޒ൓ా ਖ਼ଠ࿠ ˏTHPUBOE • -*/&Ϡϑʔגࣜձࣾ ιϑτ΢ΣΞΤϯδχΞ • ϓϥΠϕʔτΫϥ΢υ7FSEBͷ,BB4։ൃʹैࣄ • ೥-*/&גࣜձࣾ ౰࣌ ʹೖࣾɺҎདྷݱ৬ • ,VCFDPO /"Ͱొஃ • “Leveraging Cluster-API for Production-Ready Multi-Regional Infrastructures” ࣗݾ঺հ

Slide 3

Slide 3 text

-:$PSQPSBUJPO ,VCFSOFUFTUIFIBSEXBZSFWJTJUFEʙθϩμ΢ϯλΠϜΫϥελҠߦ͔ΒֶͿΫϥελߏஙͷ࢓૊Έʙ ຊϓϨθϯ͔Βֶ΂Δ͜ͱ • ,VCFSOFUFTΫϥελͷجຊߏ଄ͱٕज़ཁૉ • ΫϥελΛແఀࢭͰҠߦ͢ΔͨΊͷέʔεελσΟ

Slide 4

Slide 4 text

-:$PSQPSBUJPO ࣭໰ ,VCFSOFUFTΫϥελʔ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ

Slide 5

Slide 5 text

-:$PSQPSBUJPO • ύϒϦοΫΫϥ΢υ&,4 (,& ",4 • اۀ޲͚੡඼3FE)BU 0QFOTIJGU 7.XBSF5BO[V • ΦϯϓϨϛε,VCFBEN ,VCFTQSBZ LPQT LJOE .JOJLVCF • ͦͷଞ,VCFSFOFUFT UIF )BSE 8BZ ,VCFSOFUFTσΟετϦϏϡʔγϣϯ

Slide 6

Slide 6 text

-:$PSQPSBUJPO • 7FSEB0QFOTUBDL ϕʔεͷࣾ಺Ϋϥ΢υ • 7FSEB ,VCFSOFUFT4FSWJDF 7,4 • ॳظ͸3BODIFSΛGPMLͯ͠։ൃ • ݱࡏ $MVTUFS"1* ,VCFBEN ΁ͱҠߦத 7FSEBͰͷ,VCFSOFUFTσΟετϦϏϡʔγϣϯ ˞ຊεϥΠυͰ3BODIFSͱݴٴ͢Δࡍ͸ɺ'PSLͨ͠΋ͷΛࢦ͠·͢ɻΞοϓετϦʔϜͱҰகੑ͸อূ͠·ͤΜ

Slide 7

Slide 7 text

-:$PSQPSBUJPO • ӡ༻ऀࢹ఺ • ෳ਺ͷσΟετϦϏϡʔγϣϯΛ؅ཧ͢Δͷ͸ਏ͍ • ΫϥελͷҠߦΛਐΊ͍ͨ • ར༻ऀࢹ఺ • طଘͷΫϥελΛ࢖͍ଓ͚͍ͨ • ΫϥελΛ࡞Γ௚ͨ͘͠ͳ͍ • ໨ඪطଘͷΫϥελΛಈ͔ͨ͠··Ҡߦ͢Δ 3BODIFS͔Β$MVTUFS"1*,VCFBEN΁ͷҠߦ

Slide 8

Slide 8 text

-:$PSQPSBUJPO ,VCFSOFUFT UIF )BSE 8BZ

Slide 9

Slide 9 text

-:$PSQPSBUJPO • ֶश༻σΟετϦϏϡʔγϣϯ • ֤ίϯϙʔωϯτΛखಈͰઃఆɾߏங • FUDE • LVCFBQJTFSWFS • LVCFDPOUSPMMFSNBOBHFS • LVCFTDIFEVMFS • LVCFMFU • LVCFQSPYZ ,VCFSOFUFTUIFIBSEXBZͱ͸ https://github.com/kelseyhightower/kubernetes-the-hard-way

Slide 10

Slide 10 text

-:$PSQPSBUJPO • Ϋϥ΢υϦιʔε࡞੒ • $POUSPM1MBOF༻7. • ,VCFSOFUFT"1*༻ *1ΞυϨε • 8PSLFS༻7. • ʜ • ຊՈ͸($1͕ͩɺ೿ੜ൛΋͋Δ • "84 • MJCWJSULWN • ʜ ,5)8෮शɿϦιʔεͷ࡞੒ IP address for apiserver VM VM worker-* (VM) https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/03-compute-resources.md VM VM controller-* (VM)

Slide 11

Slide 11 text

-:$PSQPSBUJPO • 5-4ɺΩʔϖΞͷੜ੒ • $"ূ໌ॻɾൿີݤ • αʔόʔূ໌ॻɾൿີݤ • ΫϥΠΞϯτূ໌ॻɾൿີݤ • 4FSWJDF"DDPVOU༻ΩʔϖΞ • ֤ϊʔυʹ഑෍ ,5)8෮शɿূ໌ॻΩʔϖΞͷੜ੒ɾ഑෍ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/04-certificate-authority.md controller-* (VM) worker-* (VM)

Slide 12

Slide 12 text

-:$PSQPSBUJPO • ,VCFDPOGJHͷੜ੒ • ҎԼΛؚΉ • $"ূ໌ॻ • ΫϥΠΞϯτূ໌ॻɾൿີݤ • "1*4FSWFSͷΤϯυϙΠϯτ ,5)8෮शɿ,VCFDPOGJHͷੜ੒ɾ഑෍ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/05-kubernetes-configuration-files.md

Slide 13

Slide 13 text

-:$PSQPSBUJPO • &UDE όΠφϦͷ഑ஔ • ઃఆϑΝΠϧʢTZTUFNEʣͷੜ੒ • $" 5-4ূ໌ॻ • ॳظͷϝϯόͷΞυϨε • ҉߸Խ • ʜ • &UDEαʔϏεͷىಈ ,5)8෮शɿ&UDE Ϋϥελͷߏங controller-1 (VM) controller-2 (VM) controller-0 (VM) https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/07-bootstrapping-etcd.md

Slide 14

Slide 14 text

-:$PSQPSBUJPO • όΠφϦͷ഑ஔ • LVCFBQJTFSWFS • LVCFDPOUSPMMFSNBOBHFS • LVCFTDIFEVMFS • ઃఆϑΝΠϧʢTZTUFNEʣͷੜ੒ • $" 5-4ূ໌ॻɾൿີݤ • 1&. • LVCFDPOGJH • ΤϯυϙΠϯτ • FUDEˡˠFUDE • LVCFBQJTFSWFSˠFUDE • LVCFTDIFEVMFSˠLVCFBQJTFSWFS • LVCFDPOUSPMMFSNBOBHFSˠLVCFBQJTFSWFS • ֤αʔϏεͷىಈ ,5)8෮शɿ$POUSPM1MBOFͷىಈ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md controller-* (VM)

Slide 15

Slide 15 text

-:$PSQPSBUJPO • ্ཱ͕ͪͬͨLVCFBQJTFSWFSʹରͯ͠ -PBE#BMBODFSΛ઀ଓ • ࣄલ֬อͨ͠ *1ΞυϨεΛ෇༩ • ,VCFDPOGJHʹࢦఆͨ͠΋ͷ ,5)8෮शɿ-#ͷ઀ଓ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md ce2(VM) ce3(VM) ce1(VM) LoadBalancer

Slide 16

Slide 16 text

-:$PSQPSBUJPO • ϗετͷઃఆ • TXBQPGG • ίϯϙʔωϯτͷΠϯετʔϧ • DPOUBJOFSE $/*QMVHJO ,VCFMFU LVCFQSPYZ • ઃఆϑΝΠϧੜ੒ • 4ZTUFNE 6OJUͷىಈ ϫʔΧʔϊʔυͷߏஙɾ௥Ճ Worker1 (VM) Worker2 (VM) Worker3 (VM) hSps://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/09-bootstrapping-kubernetes-workers.md

Slide 17

Slide 17 text

-:$PSQPSBUJPO ,VCFSOFUFTUIFIBSEXBZ͕ڭ͑ͯ͘Εͨ͜ͱ ,VCFSOFUFTUIFIBSEXBZSFWJTJUFE ֤ίϯϙʔωϯτ͸खಈͰ΋ઃఆͰ͖Δ ֤σΟετϦϏϡʔγϣϯ͸ࣗಈԽͯ͠Δ͚ͩ ˣ ઃఆΛௐ੔͢Ε͹ΠϯετʔϥΛҠߦͰ͖ΔͷͰ͸ʁ

Slide 18

Slide 18 text

-:$PSQPSBUJPO 3BODIFS͔Β$MVTUFS"1*,VCFBEN ΁ͷΫϥελҠߦ

Slide 19

Slide 19 text

-:$PSQPSBUJPO • ҟͳΔόʔδϣϯͷίϯϙʔωϯτ΁ߋ৽ • ྫWˠW • ϊʔυΛ̍ͭͣͭೖΕସ͑ • ࠷ऴతʹશͯͷϊʔυɾίϯϙʔωϯτΛߋ৽ ࢀߟࣄྫΫϥελΞοϓάϨʔυ v1.27 v1.27 v1.27 v1.28 v1.27 v1.27 v1.28 v1.28 v1.27 v1.28 v1.28 v1.28

Slide 20

Slide 20 text

-:$PSQPSBUJPO • ҟͳΔઃఆͷίϯϙʔωϯτ΁ߋ৽ • 3BODIFS SLF ˠ,VCFBEN • ϊʔυΛ̍ͭͣͭೖΕସ͑ • ࠷ऴతʹશͯͷϊʔυɾίϯϙʔωϯτΛߋ৽ ઓུɿϊʔυΛͭͣͭೖΕସ͑Δ

Slide 21

Slide 21 text

-:$PSQPSBUJPO ݹ͍Ϋϥελ 3BODIFS3,& ʹ,VCFBENͰ/PEFΛ+PJOͤ͞Δ ͸͡ΊͷҰาɿ8PSLFS/PEFΛ௥Ճ͢Δ Join

Slide 22

Slide 22 text

-:$PSQPSBUJPO ,VCFBEN +PJO LVCFBEN KPJODPOGJHSVOLVCFBENLVCFBENKPJODPOGJHZBNM

Slide 23

Slide 23 text

-:$PSQPSBUJPO ,VCFBEN +PJO LVCFBEN KPJODPOGJHSVOLVCFBENLVCFBENKPJODPOGJHZBNM

Slide 24

Slide 24 text

-:$PSQPSBUJPO • ,VCF "1*4FSWFSͷΤϯυϙΠϯτ • $"ͷϋογϡ஋ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ ,VCFBEN +PJOͷͨΊʹ

Slide 25

Slide 25 text

-:$PSQPSBUJPO ,VCFMFU͔Β"1*4FSWFS΁ͷ઀ଓ LB چߏ੒ʢ3BODIFSʣ ৽ߏ੒ʢ,VCFBENʣ worker worker mycluster.example.com

Slide 26

Slide 26 text

-:$PSQPSBUJPO • "1*4FSWFSʹରͯ͠-#Λ࡞੒ • ,VCFSOFUFT UIF IBSEXBZͱಉ͡ʂ • ৽ߏ੒ʹ߹ΘͤͯυϝΠϯ໊Λ෇༩ • NZDMVTUFSFYBNQMFDPN • ˠ઀ଓΤϥʔ -#Λ࡞Ε͹ղܾʁ LB worker چߏ੒ʢ3BODIFSʣվ mycluster.example.com

Slide 27

Slide 27 text

-:$PSQPSBUJPO 5-4ূ໌ॻͷ4"/ͷमਖ਼ • 5-4Ͱ͸4"/ʹ͋ΔυϝΠϯ໊ͷΈ௨৴Մ • 4"/4VCKFDU"MUFSOBUJWF/BNF • ͦ͏Ͱͳ͍ͱݕূΤϥʔͱͳΔ ˣ • ৽ߏ੒ʹԊͬͨυϝΠϯ໊Λ4"/΁௥Ճ • 5-4ূ໌ॻͷߋ৽͸طଘػೳͰ࣮ݱ

Slide 28

Slide 28 text

-:$PSQPSBUJPO • ,VCF "1*4FSWFSͷΤϯυϙΠϯτˡ-#ɾυϝΠϯ࡞੒ˍ4"/ͷमਖ਼ • $"ͷϋογϡ஋ˡ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ ,VCFBEN +PJOͷͨΊʹ

Slide 29

Slide 29 text

-:$PSQPSBUJPO • ,VCFSOFUFTͰ͸௨৴ͷ҉߸ԽͷͨΊʹ5-4௨৴Λ׆༻ • ݪଇɺڞ௨ͷ$"Λ༻͍ͯαʔόʔΫϥΠΞϯτূ໌ॻΛੜ੒ • ࣄલʹ഑෍͞Εͨ$"ূ໌ॻΛ༻͍ͯ௨৴Λݕূ • ֤OBNFTQBDFʹLVCFSPPUDBDSU $POGJH.BQͱͯ͠഑෍͞Ε͍ͯΔ • ˢ͜ΕΛ༻͍ͯLVCFBEN༻ʹ$"ͷϋογϡ஋Λੜ੒ ,VCFSOFUFTͱ$"ূ໌ॻ

Slide 30

Slide 30 text

-:$PSQPSBUJPO • ,VCF "1*4FSWFSͷΤϯυϙΠϯτˡ-#ɾυϝΠϯ࡞੒ˍ4"/ͷमਖ਼ • $"ͷϋογϡ஋ ˡLVCFSPPUDBDSU$POGJH.BQ͔Βੜ੒ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ ˡ ,VCFBEN +PJOͷͨΊʹ

Slide 31

Slide 31 text

-:$PSQPSBUJPO • Ϋϥελͷ࡞੒΍ϊʔυͷ௥Ճ༻ʹ༻ҙ͞Ε͍ͯΔೝূํࣜͷͨΊͷτʔΫϯ • BCDEFGBCDEFGͷΑ͏ͳܗࣜ • CPPUTUSBQLVCFSOFUFTJPUPLFO ܕͷ4FDSFUͱͯ͠؅ཧ • ҎԼͷϑϥάΛઃఆͯ͠༗ޮԽ • LVCFBQJTFSWFSFOBCMFCPPUTUSBQUPLFOBVUI • LVCFDPOUSPMMFSNBOBHFS DPOUSPMMFST UPLFODMFBOFS CPPUTUSBQTJHOFS #PPUTUSBQτʔΫϯͱ͸ https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/

Slide 32

Slide 32 text

-:$PSQPSBUJPO • LVCFBEN UPLFODSFBUFίϚϯυͰ࡞੒Մ • ಺෦తʹ͸4FDSFUΛ࡞੒͍ͯ͠Δ͚ͩ • ˠLVCFBENҎ֎Ͱ΋൚༻తʹར༻Ͱ͖Δ #PPUTUSBQτʔΫϯͷੜ੒ https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/

Slide 33

Slide 33 text

-:$PSQPSBUJPO • ,VCF "1*4FSWFSͷΤϯυϙΠϯτˡ-#ɾυϝΠϯ࡞੒ˍ4"/ͷमਖ਼ • $"ͷϋογϡ஋ ˡLVCFSPPUDBDSU$POGJH.BQ͔Βੜ੒ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ ˡ༗ޮԽˍLVCFBEN UPLFODSFBUF ,VCFBEN +PJOͷͨΊʹ

Slide 34

Slide 34 text

-:$PSQPSBUJPO ,VCFBEN +PJO LVCFBEN KPJODPOpHSVOLVCFBENLVCFBENKPJODPOpHZBNM

Slide 35

Slide 35 text

-:$PSQPSBUJPO ,VCFBEN +PJO ࣦഊʜ

Slide 36

Slide 36 text

-:$PSQPSBUJPO • 3#"$ͷઃఆ࿙Ε • 5-4#PPUTUSBQQJOH • ֤छઃఆ༻ͷ$POGJH.BQ • ʜ ࢒Δ໰୊

Slide 37

Slide 37 text

-:$PSQPSBUJPO • #PPUTUSBQ τʔΫϯͰೝূͰ͖Δ͚ͩͰ͸ಈ͔ͳ͍ • ೝՄઃఆ΋ඞཁ • /PEFҰཡͷऔಘ • $43ؔ࿈ 3#"$ͷઃఆ

Slide 38

Slide 38 text

-:$PSQPSBUJPO ,VCFBENͷ3#"$ੜ੒ίʔυ IUUQTHJUIVCDPNLVCFSOFUFTLVCFSOFUFTCMPCNBTUFSDNE LVCFBENBQQDNEQIBTFTJOJUCPPUTUSBQUPLFOHP

Slide 39

Slide 39 text

-:$PSQPSBUJPO • 3#"$ͷઃఆ࿙Εˡ,VCFBENΛࢀߟʹ3PMFCJOEJOH౳࡞੒ • 5-4#PPUTUSBQQJOH • ֤छઃఆ༻ͷ$POGJH.BQʜ ࢒Δ໰୊

Slide 40

Slide 40 text

-:$PSQPSBUJPO • ,VCFMFU͸ΫϥΠΞϯτূ໌ॻΛ༻͍ͯ"1*4FSWFSͱN5-4Ͱ௨৴ • #PPUTUSBQUPLFO͸ىಈ࣌ͷΈ࢖༻ • ΫϥΠΞϯτূ໌ॻ͸$43"1*Λ༻͍ͯLVCFMFUࣗ਎Ͱੜ੒Մೳ • $43 $FSUJGJDBUF 4JHOJOH 3FRVFTU • ,5)8Ͱ͸खಈͰੜ੒ • ैདྷΫϥελͰ͸༗ޮʹͳ͍ͬͯͳ͔ͬͨ • ,VCFBEN޲͚ʹ༗ޮԽ • LVCFDPOUSPMMFSNBOBHFSDMVTUFSTJHOJOHLFZGJMF DMVTUFSTJHOJOHDFSUGJMF $43ͱ,VCFMFUͷ5-4#PPUTUSBQQJOH https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/

Slide 41

Slide 41 text

-:$PSQPSBUJPO • 3#"$ͷઃఆ࿙Εˡ,VCFBENΛࢀߟʹ3PMFCJOEJOH౳࡞੒ • 5-4#PPUTUSBQQJOHˡ$43ͷ༗ޮԽ • ֤छઃఆ༻ͷ$POGJH.BQ • ʜ ࢒Δ໰୊

Slide 42

Slide 42 text

-:$PSQPSBUJPO ,VCFBENͷઃఆ؅ཧ • ઃఆϑΝΠϧΛ$POGJH.BQͱͯ͠؅ཧ • LVCFBENDPOGJH • LVCFMFUDPOGJH • LVCFQSPYZ • طଘΫϥελͷઃఆΛݩʹੜ੒ ,VCFBENʹ͓͚Δઃఆ؅ཧ

Slide 43

Slide 43 text

-:$PSQPSBUJPO • 3#"$ͷઃఆ࿙Εˡ,VCFBENΛࢀߟʹ3PMFCJOEJOH౳࡞੒ • 5-4#PPUTUSBQQJOHˡ$43ͷ༗ޮԽ • ֤छઃఆ༻ͷ$POGJH.BQˡطଘΫϥελͷઃఆΛݩʹੜ੒ • ʜ ࢒Δ໰୊

Slide 44

Slide 44 text

-:$PSQPSBUJPO • ,VCFBEN KPJO༻ͷઃఆϑΝΠϧ४උ • apiserver endpoint • CA ハッシュ • Bootstrapトークン • ͦͷଞඞཁͳௐ੔ • RBAC • Certificate Signing Request API • 設定⽤ConfigMap • … ·ͱΊɿ8PSLFS/PEF௥Ճʹඞཁͳमਖ਼

Slide 45

Slide 45 text

-:$PSQPSBUJPO • ҟͳΔઃఆͷίϯϙʔωϯτ΁ߋ৽ • 3BODIFS SLF ˠ,VCFBEN • ϊʔυΛ̍ͭͣͭೖΕସ͑ • ࠷ऴతʹશͯͷϊʔυɾίϯϙʔωϯτΛߋ৽ ઓུɿϊʔυΛͭͣͭೖΕସ͑Δ ࠶ܝ

Slide 46

Slide 46 text

-:$PSQPSBUJPO $POUSPM1MBOFϊʔυΛೖΕସ͑Δʹ͸ʁ Control Plane Worker Control Plane Control Plane Worker Worker

Slide 47

Slide 47 text

-:$PSQPSBUJPO • ൿີݤɾূ໌ॻͷෳ੡ • FUDEͷϝϯόʔ؅ཧ • ʜ $POUSPM1MBOFϊʔυ௥Ճͷ՝୊

Slide 48

Slide 48 text

-:$PSQPSBUJPO • σϑΥϧτಈ࡞Ͱ͸ ,VCFBENࣗ਎͕ূ໌ॻɾൿີݤΛੜ੒ • ࢦఆύεʹ഑ஔ͢Δ͜ͱͰ$"ূ໌ॻ౳Λ౉͢͜ͱ͕Ͱ͖Δ • طଘΫϥελ޲͚ͷূ໌ॻɾൿີݤΛίϐʔ • σΟετϦϏϡʔγϣϯຖʹ؅ཧํ๏͕ҟͳΔ • $MVTUFS"1*Ͱ͸.BOBHFNFOU$MVTUFSʹ໋໊نଇʹԊͬͯ4FDSFUΛ࡞Ε͹0, ,VCFBENͱূ໌ॻɾൿີݤ

Slide 49

Slide 49 text

-:$PSQPSBUJPO • ൿີݤɾূ໌ॻͷෳ੡ˡطଘΫϥελ͔Βίϐʔ • FUDEͷϝϯόʔ؅ཧ • ʜ $POUSPM1MBOFϊʔυ௥Ճͷ՝୊

Slide 50

Slide 50 text

-:$PSQPSBUJPO • $POUSPM1MBOF /PEFͷ௥Ճɺ࡟আ࣌ʹFUDEΫϥελΛૢ࡞͢Δඞཁ͕͋Δ • ৽نϝϯόʔͷ௥Ճ࣌FUDEͷىಈ࣌ʹطଘϝϯόʔͷΤϯυϙΠϯτࢦఆ • طଘϝϯόʔͷ࡟আ࣌ର৅ϝϯόʔΛΫϥελ͔Β࡟আ • FUDEͷΤϯυϙΠϯτ͕Θ͔Βͳ͚Ε͹ૢ࡞Ͱ͖ͳ͍ • ˠͲ͏΍ͬͯϝϯόʔͷΤϯυϙΠϯτΛ؅ཧ͢Δʁ &UDEϝϯόʔ؅ཧͷඞཁੑ

Slide 51

Slide 51 text

-:$PSQPSBUJPO • FUDE͸LVCFMFU TUBUJDQPEͱ࣮ͯ͠ߦ • )PTU/FUXPSLϞʔυ • ,VCFSOFUFT"1*ܦ༝Ͱ৘ใऔಘ • -BCFMͰFUDE 1PETΛࣝผ • DPNQPOFOUFUDE • UJFSDPOUSPMQMBOF • ΤϯυϙΠϯτ͸1PEͷ"OOPUBUJPOʹ֨ೲ • kubeadm.kubernetes.io/etcd.advertise-client-urls ैདྷͷ&UDEϝϯόʔ؅ཧ control-1 (IP: 10.0.0.1) containerd kubelet 通常Pod etcd Pod listen at 10.0.0.1:2379

Slide 52

Slide 52 text

-:$PSQPSBUJPO • ैདྷʢ3BODIFSʣ͸%PDLFSίϯςφͱͯ͠ FUDEΛ࣮ߦ • )PTUOFUXPSLϞʔυ • FUDE%PDLFSίϯςφ͸3BODIFS͕؅ཧ • ,VCFSOFUFT "1*͔Β͸FUDEίϯςφ͸ ૢ࡞औಘͰ͖ͳ͍ ैདྷͷ&UDEϝϯόʔ؅ཧ ؅ཧ control-1 (IP: 10.0.0.1) containerd kubelet 通常Pod Etcd コンテナ Docker listen at 10.0.0.1:2379

Slide 53

Slide 53 text

-:$PSQPSBUJPO μϛʔ1PEʹΑΔFUDEϝϯόʔ৘ใͷ޿ࠂ &UDEϝϯόʔ؅ཧ໰୊ͷղܾࡦ ؅ཧ control-1 (IP: 10.0.0.1) containerd kubelet ダミー etcd Pod Etcd コンテナ Docker listen at 10.0.0.1:2379

Slide 54

Slide 54 text

-:$PSQPSBUJPO • ൿີݤɾূ໌ॻͷෳ੡ˡطଘΫϥελ͔Βίϐʔ • FUDEͷϝϯόʔ؅ཧˡμϛʔ1PEΛ഑ஔ • ʜ ·ͱΊ$POUSPM1MBOFϊʔυ௥Ճͷ՝୊

Slide 55

Slide 55 text

-:$PSQPSBUJPO Ҡߦ׬ྃ Control Plane Worker Control Plane Control Plane Worker Worker

Slide 56

Slide 56 text

-:$PSQPSBUJPO l ΦϖϨʔγϣϯͷࣗಈԽɾίϯτϩʔϥʔԽɾ"1*Խ l 3BODIFS$MVTUFS"1*ίϯτϩʔϥͱͷڠௐಈ࡞ l Ҡߦதͷ๦֐ૢ࡞ͷ๷ࢭ l ,VCFBENઃఆϑΝΠϧͷੜ੒౳ l ࡉ͔͍ΧελϜػೳͷରԠ l ؂ࢹγεςϜͷҠߦ l ʜ ͦͷଞͷ໰୊

Slide 57

Slide 57 text

-:$PSQPSBUJPO • σΟετϦϏϡʔγϣϯʹґΒͣLVCFSOFUFTͷجຊίϯϙʔωϯτ͸ڞ௨ • LVCFBQJTFSWFS LVCFMFU FUD • खಈͰઃఆ͢Ε͹ҟͳΔσΟετϦϏϡʔγϣϯΛҠߦ͢Δ͜ͱ΋Մೳ • l,VCFSOFUFTUIF )BSE8BZz͠·͠ΐ͏ ·ͱΊ

Slide 58

Slide 58 text

-:$PSQPSBUJPO ‒ IUUQTHJUIVCDPNLFMTFZIJHIUPXFSLVCFSOFUFTUIFIBSEXBZ ‒ IUUQTLVCFSOFUFTJPEPDTSFGFSFODFTFUVQUPPMTLVCFBENJNQMFNFOUBUJPOEFUBJMT ‒ IUUQTLVCFSOFUFTJPEPDTSFGFSFODFBDDFTTBVUIOBVUI[ • "VUIFOUJDBUJOHXJUI#PPUTUSBQ5PLFOT • $FSUJGJDBUF4JHOJOH3FRVFTUT • 5-4CPPUTUSBQQJOH ࢀߟϦϯΫ

Slide 59

Slide 59 text

-:$PSQPSBUJPO 5IBOLZPV

Slide 60

Slide 60 text

-:$PSQPSBUJPO ෇࿥ɿσΟετϦϏϡʔγϣϯຖͷҧ͍ ,VCFBEN ,5)8 3BODIFS3,& ,VCFMFU࣮ߦ؀ڥ 4ZTUFNE 6OJU౳ QBDLBHF౳ 4ZTUFNE 6OJU TFMGCJOBSZ %PDLFSίϯςφ BQJTFSWFS౳࣮ߦ؀ڥ LVCFMFU TUBUJD QPE 4ZTUFNE 6OJU TFMGCJOBSZ %PDLFSίϯςφ LVCF QSPYZ࣮ߦ؀ڥ %BFNPOTFU %BFNPOTFU %PDLFSίϯςφ BQJTFSWFSˠFUDE௨৴ MPDBMIPTUͷΈ શϝϯόʔྻڍ MPDBMIPTUͷΈ ,VCFMFUˠBQJTFSWFS௨৴ -#౳ܦ༝ -# *1 "EESFTT ܦ༝ ௚઀ ,VCFMFU༻ূ໌ॻੜ੒ खಈੜ੒ ίϯτϩʔϥͰੜ੒