【第2回】はじめてのRancherシリーズ「Hosted Rancher編」

一般提供が開始されたHosted Rancherにフォーカスを当ててご紹介します。
Hosted Rancherとは、AWS上にホストされたマネージド型Rancher Management Serverです。利用者はManagement Serverの管理工数を削減することが可能となり、Kubernetesの導入と運用に大きなメリットを享受できます。
Hosted Rancherは有償のサービスとなります。詳細はhttps://www.rancher.co.jp/contact/までお問い合わせください。

Transcript

1. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 1
   © Copyright 2020 Rancher Labs. All Rights Reserved. 1
   Hosted Rancher
   2020/06/05
   CHENG
   Field Engineer
   

   View Slide

2. About me
   Jianqiang Cheng（ͪΜ）
   Field Engineer at Rancher Labs.
   cheng@rancher.com
   slack.rancher.jp
   ■Favorite technologies:
   Rancher, Kubernetes, AWS, Jenkins.
   ■Certifications:
   

   View Slide

3. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 3 3
   Agenda
   • Why Rancher?
   • Why Hosted Rancher?
   • Demo
   

   View Slide

4. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 4
   Rancher –
   Kubernetes Management Platform
   

   View Slide

5. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 5
   Container Image
   Application Code Application Dependencies
   Container Image
   

   View Slide

6. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 6
   Container Image
   Container Image
   Container
   Container
   Container
   

   View Slide

7. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 7
   Containers are great……..but
   Managing a couple – no problem
   

   View Slide

8. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 8
   Containers are great……..but
   How about managing many? How do we address:
   Networking, Security, Scheduling, Automation, etc?
   

   View Slide

9. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 9
   DEV DATA
   CENTER
   CLOUD
   BRANCH EDGE
   ü Common API & Packaging
   ü Health Checks/HA
   ü Load Balancing
   ü Overlay Networking
   ü Network Security Policies
   ü Backup and Recovery
   ü Autoscaling
   ü Service Discovery
   ü Networking
   ü RBAC & Access Control
   © Copyright 2020 Rancher Labs. All Rights Reserved. 9
   Kubernetes
   

   View Slide

10. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 10
    Kubernetesを正しく管理出来なければ、
    オーバーヘッドとリスクを発生させる可能性
    集中的な管理と
    可視化が出来ない
    一貫した
    セキュリティポリシーが
    適用出来ていない
    管理がサイロ化
    されていることがある
    よくあるKubernetesクラスタの実情は、
    © Copyright 2020 Rancher Labs. All Rights Reserved. 10
    

    View Slide

11. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 11
    Rancherは幅広いプラットフォームに対応
    Hybrid Cloud、Multi Cloud一元管理を実現
    Infrastructure
    ITOps
    DevOps - Provisioning
    - Auth/RBAC
    - Policy
    - Security
    - Capacity
    © Copyright 2020 Rancher Labs. All Rights Reserved. 11
    - User Interface
    - Service Catalog
    - CI/CD
    - Monitoring
    - Logging
    - Alerting
    クラスタ一元管理
    セルフサービス
    クラスタ環境の利用
    Amazon
    EKS
    Azure
    AKS
    Google
    GKE
    Cloud
    Datacenter Dev Branch Edge
    Windows Linux
    

    View Slide

12. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 12
    Kubernetes
    KubernetesΤίγεςϜ͕ɺ๲େͳ΋ͷͰ͢ - https://landscape.cncf.io
    (These are just the
    Storage projects)
    

    View Slide

13. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 13
    RancherがKubernetesにもたらすもの
    13
    Network & Storage
    Registry
    App Catalog
    Monitoring
    Kubernetes
    Container Runtime
    CI/CD
    Service Mesh
    Logging
    Security RBAC & PSP
    Authentication
    What Rancher takes an SLA on
    Manage all this? … or this?
    Rancher Certified Integrations
    Cloud
    Datacenter
    Dev Branch Edge
    Google
    GKE
    Azure
    AKS
    Amazon
    EKS
    

    View Slide

14. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 14
    UseCase – Alpaca Japan
    

    View Slide

15. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 15
    Alpaca Japanのインフラ
    引用：https://speakerdeck.com/taishin/rancherday2019-alpacajapan
    

    View Slide

16. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 16
    Rancherによる課題解決
    引用：https://speakerdeck.com/taishin/rancherday2019-alpacajapan
    

    View Slide

17. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 17
    Rancherによる課題解決
    引用：https://speakerdeck.com/taishin/rancherday2019-alpacajapan
    

    View Slide

18. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 18
    Rancherによる課題解決
    引用：https://speakerdeck.com/taishin/rancherday2019-alpacajapan
    

    View Slide

19. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 19
    Rancherによる課題解決
    引用：https://speakerdeck.com/taishin/rancherday2019-alpacajapan
    

    View Slide

20. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 20
    Hosted Rancher
    

    View Slide

21. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 21
    nRancherの構築と運用の手間を省きたい
    n運用管理メンバーが足りない
    n環境関連の問合せを減らしたい
    Customer Pain Points
    nRancherの構築運用のベストプラクティスが知らない
    nRancherバージョンアップの作業に不安を感じる
    nノンコア業務のRancher運用を他社に任せたい
    

    View Slide

22. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 22
    Typical Rancher Deployment
    Rancher HA
    Deployment
    etcd etcd etcd
    Endpoint URL
    On-premises infrastructure Cloud infrastructure
    Imported
    Clusters
    EKS AKS GKE
    Vanity URL Endpoint
    Hosted Rancher HA
    Deployment
    

    View Slide

23. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 23
    Rancher recommended set up model
    Rancher Management
    Server Cluster - prod
    All-in-one nodes
    (cp/etcd/worker)
    Node
    Node Node
    Node Node
    Node Node Node
    Node Node Node
    Managed Kubernetes
    Cluster 1 – prod
    Node Node
    Node Node Node
    Node Node Node
    Node
    Managed Kubernetes
    Cluster 2 – prod
    Node
    Control Plane
    etcd
    Worker
    Worker
    Node Node
    Node Node Node
    Node Node
    Cluster 3- Hosted K8S - prod
    Control Plane
    etcd
    Node
    Worker
    Cloud Hosted
    (GKE, EKS, AKS)
    Environment
    The Rancher Management Server cluster
    manages all downstream k8s. The k8s
    required to run Rancher are not counted in
    the down stream Rancher host count.
    No cost.
    Rancher hosts are the downstream
    Kubernetes compute nodes managed by the
    Rancher Management Server cluster.
    Control Plane
    etcd
    Worker
    

    View Slide

24. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 24
    How Hosted Rancher works
    RDS ALB
    ASG
    VPC
    Downstream cluster
    (on-prem datacenter)
    Downstream clusters
    (cloud-hosted)
    Customer on-prem
    datacenter
    RKE Etcd
    Nodes
    RKE Control
    Plane Nodes
    Control
    Plane
    MS AD or
    LDAP
    Route 53
    DNS
    API/UI over
    HTTPS/TLS
    (443)
    Customer
    RKE Worker
    Nodes
    RKE Worker
    Nodes
    RKE Worker
    Nodes
    Worker
    Nodes
    RKE Worker
    Nodes
    vSphere
    Nodes
    VPC Peering or VPN
    Splunk
    Elasticsearch
    etc
    Websocket
    over
    HTTPS/TLS
    (443)
    

    View Slide

25. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 25
    Hosted RancherͷϝϦοτ
    Add-on to Platinum
    subscription
    ‘White glove’
    DevOps service with
    99.9% SLA
    Remote monitoring and
    log management by
    Rancher’s experts
    Hosted Rancher
    control plane,
    available 24/7/365
    Stress-free
    upgrades, security
    patches & backups
    Maintain full visibility
    & control of
    downstream clusters
    24/7/365の稼働 99.9%の可用性 Rancher管理者権限の付与
    Rancher定期メンテナンス不要 Rancher運用監視不要 サポートの追加オプションとして提供
    

    View Slide

26. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 26
    • Amazon Web Services (AWS)
    • Packer & Terraform
    • Ubuntu Server 18.04.3 LTS
    • K8s -> K3s
    • Docker -> Containerd
    • etcd -> MySQL using RDS
    • Prometheus Monitoring & Alerting (via Rancher)
    • Longhorn (for metrics persistent storage)
    • Latest stable Rancher
    Tech Stack
    

    View Slide

27. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 27
    Demo
    

    View Slide

28. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 28
    RancherがKubernetesにもたらすもの
    28
    Network & Storage
    Registry
    App Catalog
    Monitoring
    Kubernetes
    Container Runtime
    CI/CD
    Service Mesh
    Logging
    Security RBAC & PSP
    Authentication
    What Rancher takes an SLA on
    Manage all this? … or this?
    Rancher Certified Integrations
    Cloud
    Datacenter
    Dev Branch Edge
    Google
    GKE
    Azure
    AKS
    Amazon
    EKS
    

    View Slide

29. © Copyright 2020 Rancher Labs. All Rights Reserved. Confidential 31
    5IBOLT
    ͋Γ͕ͱ͏͍͟͝·͢ɻ
    

    View Slide