Tweet
Tweet

Slide 1

Slide 1 text

Kubernetes in Context Matt Heath, Monzo

Slide 2

Slide 2 text

Hi, I’m Matt @mattheath

Slide 3

Slide 3 text

No content

Slide 4

Slide 4 text

No content

Slide 5

Slide 5 text

No content

Slide 6

Slide 6 text

No content

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

No content

Slide 9

Slide 9 text

No content

Slide 10

Slide 10 text

No content

Slide 11

Slide 11 text

No content

Slide 12

Slide 12 text

No content

Slide 13

Slide 13 text

No content

Slide 14

Slide 14 text

No content

Slide 15

Slide 15 text

A UK banking licence is authorised by the PRA and regulated by the PRA and FCA1, allowing deposit- taking and balance sheet lending. Once granted, it allows firms to passport across Europe, accessing This is followed by a “mobilisation” phase during which final capital is raised and IT systems are completed, before launching to the public. We received a UK banking licence in August 2016! FEB 2015 JAN 2016 JAN 2017 MAR FEB FEB APR MAR MAR APR MAY JUN JUL MAY APR JUN MAY JUL JUN AUG JUL SEP AUG NOV SEP DEC NOV DEC PRE APPLICATION APPLICATION MOBILISATION LAUNCH LICENCE WITH RESTRICTIONS 50K MAX DEPOSIT WE ARE HERE A UK banking licence is authorised by the PRA and regulated by the PRA and FCA1, allowing deposit- taking and balance sheet lending. Once granted, it allows firms to passport across Europe, accessing This is followed by a “mobilisation” phase during which final capital is raised and IT systems are completed, before launching to the public. We received a UK banking licence in August 2016! JAN 2016 JAN 2017 MAR FEB FEB APR MAR MAR APR MAY JUN JUL MAY APR JUN MAY JUL JUN AUG JUL SEP AUG NOV SEP DEC NOV DEC E APPLICATION APPLICATION MOBILISATION LAUNCH LICENCE WITH RESTRICTIONS WE ARE HERE AUG
 2017 JAN
 2016 Feb
 2015 APR
 2017 A UK banking licence is authorised by the PRA and regulated by the PRA and FCA1, allowing deposit- taking and balance sheet lending. Once granted, it allows firms to passport across Europe, accessing This is followed by a “mobilisation” phase during which final capital is raised and IT systems are completed, before launching to the public. We received a UK banking licence in August 2016! FEB 2015 JAN 2016 JAN 2017 MAR FEB FEB APR MAR MAR APR MAY APR JUN MAY JUL JUN AUG JUL SEP AUG NOV SEP DEC NOV DEC PRE APPLICATION APPLICATION MOBILISATION LICENCE WITH RESTRICTIONS WE ARE HERE

Slide 16

Slide 16 text

A UK banking licence is authorised by the PRA and regulated by the PRA and FCA1, allowing deposit- taking and balance sheet lending. Once granted, it allows firms to passport across Europe, accessing This is followed by a “mobilisation” phase during which final capital is raised and IT systems are completed, before launching to the public. We received a UK banking licence in August 2016! FEB 2015 JAN 2016 JAN 2017 MAR FEB FEB APR MAR MAR APR MAY JUN JUL MAY APR JUN MAY JUL JUN AUG JUL SEP AUG NOV SEP DEC NOV DEC PRE APPLICATION APPLICATION MOBILISATION LAUNCH LICENCE WITH RESTRICTIONS 50K MAX DEPOSIT WE ARE HERE A UK banking licence is authorised by the PRA and regulated by the PRA and FCA1, allowing deposit- taking and balance sheet lending. Once granted, it allows firms to passport across Europe, accessing This is followed by a “mobilisation” phase during which final capital is raised and IT systems are completed, before launching to the public. We received a UK banking licence in August 2016! JAN 2016 JAN 2017 MAR FEB FEB APR MAR MAR APR MAY JUN JUL MAY APR JUN MAY JUL JUN AUG JUL SEP AUG NOV SEP DEC NOV DEC E APPLICATION APPLICATION MOBILISATION LAUNCH LICENCE WITH RESTRICTIONS WE ARE HERE AUG
 2017 JAN
 2016 Feb
 2015 APR
 2017 A UK banking licence is authorised by the PRA and regulated by the PRA and FCA1, allowing deposit- taking and balance sheet lending. Once granted, it allows firms to passport across Europe, accessing This is followed by a “mobilisation” phase during which final capital is raised and IT systems are completed, before launching to the public. We received a UK banking licence in August 2016! FEB 2015 JAN 2016 JAN 2017 MAR FEB FEB APR MAR MAR APR MAY APR JUN MAY JUL JUN AUG JUL SEP AUG NOV SEP DEC NOV DEC PRE APPLICATION APPLICATION MOBILISATION LICENCE WITH RESTRICTIONS WE ARE HERE PREPAID
 LAUNCH

Slide 17

Slide 17 text

Nov 2015 Nov 2017 CUSTOMER
 GROWTH

Slide 18

Slide 18 text

monoliths traditional dev

Slide 19

Slide 19 text

No content

Slide 20

Slide 20 text

?

Slide 21

Slide 21 text

Application

Slide 22

Slide 22 text

Application Database

Slide 23

Slide 23 text

Application Database

Slide 24

Slide 24 text

Application Databases

Slide 25

Slide 25 text

Application Databases Search

Slide 26

Slide 26 text

Application Databases Search Caching

Slide 27

Slide 27 text

Application Databases Search Caching CAT GIFS

Slide 28

Slide 28 text

Application

Slide 29

Slide 29 text

APPLICATION Application

Slide 30

Slide 30 text

No content

Slide 31

Slide 31 text

No content

Slide 32

Slide 32 text

No content

Slide 33

Slide 33 text

Feb 2015 services Oct 2017 300

Slide 34

Slide 34 text

No content

Slide 35

Slide 35 text

pod

Slide 36

Slide 36 text

pod container container container

Slide 37

Slide 37 text

pod transaction service

Slide 38

Slide 38 text

pod web server config volume

Slide 39

Slide 39 text

pod volume

Slide 40

Slide 40 text

pod

Slide 41

Slide 41 text

pod

Slide 42

Slide 42 text

pods replica set

Slide 43

Slide 43 text

replica set pods deployment

Slide 44

Slide 44 text

pods replica set deployment

Slide 45

Slide 45 text

pods replica set deployment change

Slide 46

Slide 46 text

deployment change old pods old replica set

Slide 47

Slide 47 text

deployment change old pods old replica set new replica set

Slide 48

Slide 48 text

deployment change old pods old replica set new replica set new pod

Slide 49

Slide 49 text

deployment change old pods old replica set new replica set new pod

Slide 50

Slide 50 text

deployment change old replica set new pods new replica set

Slide 51

Slide 51 text

deployment change new replica set new pods

Slide 52

Slide 52 text

deployment replica set pods

Slide 53

Slide 53 text

pods

Slide 54

Slide 54 text

pods service

Slide 55

Slide 55 text

pods service kubedns

Slide 56

Slide 56 text

pods service routing - static cluster IP managed replicas resource allocations rollout strategies liveness checks anti-affinity, etc kubedns

Slide 57

Slide 57 text

?

Slide 58

Slide 58 text

server

Slide 59

Slide 59 text

server server

Slide 60

Slide 60 text

server server server server server server

Slide 61

Slide 61 text

server server server server server server Kubernetes

Slide 62

Slide 62 text

server server server server server kubelet

Slide 63

Slide 63 text

kubelet kubelet kubelet kubelet kubelet kubelet

Slide 64

Slide 64 text

kubelet kubelet kubelet kubelet kubelet kubelet Kubernetes Master

Slide 65

Slide 65 text

kubelet kubelet kubelet kubelet kubelet kubelet Kubernetes Master etcd

Slide 66

Slide 66 text

kubernetes

Slide 67

Slide 67 text

No content

Slide 68

Slide 68 text

+ = ❤

Slide 69

Slide 69 text

kubernetes service service service service service service service service service service

Slide 70

Slide 70 text

Service Service

Slide 71

Slide 71 text

Service Service Service Service

Slide 72

Slide 72 text

Service Service Service Service Kubernetes
 Service

Slide 73

Slide 73 text

Service Discovery Load Balancing Timeouts and Expirations Retries Rate Limiting Connection Pooling Circuit Breaking Failure Detection Metrics and Tracing Interrupts Context Propagation

Slide 74

Slide 74 text

Service Discovery Load Balancing Timeouts and Expirations Retries Rate Limiting Connection Pooling Circuit Breaking Failure Detection Metrics and Tracing Interrupts Context Propagation

Slide 75

Slide 75 text

Service Service Service Service ?

Slide 76

Slide 76 text

Service Service Service Service linkerd

Slide 77

Slide 77 text

Service linkerd

Slide 78

Slide 78 text

Service linkerd service
 discovery

Slide 79

Slide 79 text

Service Service Service Service linkerd service
 discovery

Slide 80

Slide 80 text

Service Service Service Service linkerd

Slide 81

Slide 81 text

Service Service Service Service linkerd

Slide 82

Slide 82 text

Service Service Service Service linkerd

Slide 83

Slide 83 text

Service Service Service Service linkerd

Slide 84

Slide 84 text

Service Service Service Service Service host A Service

Slide 85

Slide 85 text

Service Service Service Service Service linkerd host A Service

Slide 86

Slide 86 text

Service Service Service Service linkerd host B Service Service Service Service Service Service Service linkerd host A Service Service Service Service Service Service linkerd host C Service

Slide 87

Slide 87 text

Service Service Service Service linkerd host B Service Service Service Service Service Service Service linkerd host A Service Service Service Service Service Service linkerd host C Service

Slide 88

Slide 88 text

Service Service Service Service linkerd host B Service Service Service Service Service Service Service linkerd host A Service Service Service Service Service Service linkerd host C Service

Slide 89

Slide 89 text

Service Service Service Service linkerd host B Service Service Service Service Service Service Service linkerd host A Service Service Service Service Service Service linkerd host C Service

Slide 90

Slide 90 text

Service Service Service Service linkerd host B Service Service Service Service Service Service Service linkerd host A Service Service Service Service Service Service linkerd host C Service

Slide 91

Slide 91 text

Load Balancer

Slide 92

Slide 92 text

Load Balancer HTTP API & Routing Layer

Slide 93

Slide 93 text

Load Balancer HTTP API & Routing Layer API
 Service

Slide 94

Slide 94 text

No content

Slide 95

Slide 95 text

/webhooks —-> Webhook API

Slide 96

Slide 96 text

Load Balancer HTTP API & Routing Layer Webhook
 API

Slide 97

Slide 97 text

Auth
 Service Webhook
 Service Load Balancer HTTP API & Routing Layer Webhook
 API

Slide 98

Slide 98 text

Auth
 Service Webhook
 Service Load Balancer HTTP API & Routing Layer Webhook
 API Database

Slide 99

Slide 99 text

Database Auth
 Service Webhook
 Service Load Balancer HTTP API & Routing Layer Webhook
 API Database

Slide 100

Slide 100 text

External Provider Database Auth
 Service Webhook
 Service Load Balancer HTTP API & Routing Layer Webhook
 API Database

Slide 101

Slide 101 text

Service A Service B Load Balancer HTTP API & Routing Layer API Service

Slide 102

Slide 102 text

API Service Service A Service B Load Balancer HTTP API & Routing Layer

Slide 103

Slide 103 text

API Service Service A Service B Load Balancer HTTP API & Routing Layer

Slide 104

Slide 104 text

API Service Service A Service B Load Balancer HTTP API & Routing Layer Service C Service D Service E

Slide 105

Slide 105 text

No content

Slide 106

Slide 106 text

Amazon 
 eu-west-1

Slide 107

Slide 107 text

Amazon 
 eu-west-1

Slide 108

Slide 108 text

No content

Slide 109

Slide 109 text

Amazon 
 eu-west-1 colocation
 dc 1 colocation
 dc 2

Slide 110

Slide 110 text

Amazon 
 eu-west-1 colocation
 dc 1 colocation
 dc 2

Slide 111

Slide 111 text

Amazon 
 eu-west-1 colocation
 dc 1 colocation
 dc 2

Slide 112

Slide 112 text

Amazon 
 eu-west-1 colocation
 dc 1 colocation
 dc 2 BGP BGP BGP BGP

Slide 113

Slide 113 text

Amazon 
 eu-west-1 colocation
 dc 1 colocation
 dc 2 BGP BGP

Slide 114

Slide 114 text

Amazon 
 eu-west-1 colocation
 dc 1 colocation
 dc 2

Slide 115

Slide 115 text

third parties colocation “connectivity” pod services HA VPN
 Appliance VPN client Kubernetes

Slide 116

Slide 116 text

third parties colocation “connectivity” pod service HA VPN
 Appliance Kubernetes Wireguard
 network
 interface service pod GUE 
 forwarder routing table
 routes specific
 IP range to local
 gue0 interface GUE 
 listener routing table
 routes packets
 to local wg0
 interface *lots of stuff omitted for brevity, this is a lot more complicated than the diagram implies

Slide 117

Slide 117 text

Amazon 
 eu-west-1 Yay abstraction!

Slide 118

Slide 118 text

API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns

Slide 119

Slide 119 text

API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns

Slide 120

Slide 120 text

API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns

Slide 121

Slide 121 text

API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns

Slide 122

Slide 122 text

API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns

Slide 123

Slide 123 text

No content

Slide 124

Slide 124 text

API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns API card-api card-processing cards transactions balance transaction-enrichment merchant feed-generator feed apns

Slide 125

Slide 125 text

No content

Slide 126

Slide 126 text

No content

Slide 127

Slide 127 text

No content