Rancher update v2.5 preview

このセッションでは10月にリリースを予定しているRancher v2.5の新しい機能を中心に、Rancher Labsの最新情報をプレゼンテーションとデモでご紹介します.
・Fleet
・RKE2
・EKS Management Enhancement
・Other Features

Transcript

1. © Copyright 2020 Rancher Labs. All Rights Reserved. 1
   © Copyright 2020 Rancher Labs. All Rights Reserved. 1
   Rancher Ξοϓσʔτ৘ใ
   3BODIFS W QSFWJFX
   2020/08/27
   Cheng
   Field Engineer
   

   View Slide

2. About me
   Jianqiang Cheng（νΣϯ）
   Field Engineer at Rancher Labs.
   cheng@rancher.com
   cheng@slack.rancher.jp
   ■Favorite technologies:
   Rancher, Kubernetes, AWS, Jenkins.
   ■Certifications:
   

   View Slide

3. © Copyright 2020 Rancher Labs. All Rights Reserved. 3
   Fleet
   RKE2
   EKS Management Enhancement
   Other Features
   Agenda
   

   View Slide

4. © Copyright 2020 Rancher Labs. All Rights Reserved. 4
   ΞδΣϯμ
   Մ؍ଌੑ޲্ͳͲͷػ
   ೳ
   ৽͍͠όʔδϣϯͷ؂ࢹ
   ͱϩΪϯάͷػೳͷఏڙ
   ʹΑΓɺӡ༻؂ࢹ͕վળ
   ͞ΕɺϘτϧωοΫͷಛ
   ఆɺ໰୊ͷਝ଎ͳղܾʹ
   ໾ཱͭ
   Amazon EKSΫϥελ
   ʔͷϥΠϑαΠΫϧΛ
   ϑϧϚωδϝϯτ
   ͢΂ͯͷEKSΫϥελʔ
   Λ୯ҰͷΠϯλϑΣʔε
   ͔ΒΠϯϙʔτɺϓϩϏ
   δϣχϯάɺΞοϓά
   Ϩʔυɺӡ༻؂ࢹɺࣗಈ
   εέʔϦϯά
   େྔͳΫϥελʔΛࣗ
   ಈӡ༻؅ཧ
   Fleet͸ɺΤοδ͔ΒΫϥ
   ΢υ·ͰɺΞϓϦέʔ
   γϣϯͷҰ؏ͨ͠ӡ༻؅
   ཧΛఏڙ
   100ສͷΫϥελʔͷΞϓ
   ϦέʔγϣϯͷϥΠϑα
   ΠΫϧΛ؅ཧ
   FIPSରԠͷ৽͍͠K8s
   σΟετϦϏϡʔγϣ
   ϯ
   RKE Federal(RKE2)͸ɺ
   ถࠃ੓෎ػؔͳͲͷݫ͠
   ͍ηΩϡϦςΟཁ݅Ͱ΋
   ରԠͰ͖ΔK8sج൫Λఏڙ
   

   View Slide

5. © Copyright 2020 Rancher Labs. All Rights Reserved. 5
   Dev teams can
   leverage K3s to develop
   their applications
   The Rancher Management Server manages all
   downstream Kubernetes nodes
   K3s Nodes are the downstream
   Kubernetes compute nodes at the edge
   Rancher + Fleet
   Single node design assumes acceptable downtime when required w/all benefits of Kubernetes at the edge
   Rancher Management
   Server in HA – Prod/UAT
   Node
   Node Node
   All-in-one nodes
   (cp/etcd/worker)
   Node
   Backup
   Node
   Node
   Backup
   Node
   Node
   Backup
   Node
   Node
   Backup
   Node
   Node
   Backup
   Node
   Node
   Backup
   Node
   

   View Slide

6. © Copyright 2020 Rancher Labs. All Rights Reserved. 6
   • Fleet
   • v2.4͸2KͷΫϥελʔ·ͰରԠɺ'MFFUΛ
   ౷߹ͨ͠v2.5͕100MͷΫϥελʔΛରԠ
   • FleetͰɺK8sͷYamlͰ؅ཧ͞ΕΔΞϓϦέ
   ʔγϣϯΛେྔͳΫϥελʔʹ༰қʹల։
   • 'MFFUͷ؅ཧԼͷΫϥελʔͷن໛֦ு͸
   ༰қʹͰ͖Δ
   Fleet-powered Continuous Deployment
   

   View Slide

7. © Copyright 2020 Rancher Labs. All Rights Reserved. 7
   ΞʔΩςΫνϟ
   • Concepts
   • Bundles
   K8sϦιʔε(YAML, Helm, Kustomize)
   • Cluster Groups
   ΫϥελʔΛάϧʔϓͰ؅ཧ
   • Fleet controller
   • ηϯτϥϧͷΫϥελʔ্ʹಈ͘
   • Fleet Agents
   • 1 Agents /1Ϋϥελ
   • #VOEMFTதʹఆ͍ٛͯ͠ΔϦιʔεΛσϓϩΠ
   • 'MFFUDPOUSPMMFSʹσϓϩΠͷεςʔλεΛใࠂ
   

   View Slide

8. © Copyright 2020 Rancher Labs. All Rights Reserved. 8
   Demo
   Fleet
   

   View Slide

9. © Copyright 2020 Rancher Labs. All Rights Reserved. 9
   3BODIFS*OUFHSBUJPO
   ˞·ͩ։ൃதͷը໘6*ͷҝɺWͷ("࣌ͷը໘ͱҟͳΔՄೳੑ͕͋Γ·͢ɻ
   

   View Slide

10. © Copyright 2020 Rancher Labs. All Rights Reserved. 10
    • RKE2 –ηΩϡϦςΟཁ͕݅ݫ͍͠੓෎ͳͲͷ
    ެڞػؔ޲͚ͷK8sσΟετϦϏϡʔγϣϯ
    • FIPS-enabled
    • SELinux Support
    • CIS Benchmark Certification
    • Container-dΛσϑΥϧτͷϥϯλΠϜͱͯ͠
    ࢖༻
    • ΦϑϥΠϯ(AirGap)ͷΠϯετʔϧΛαϙʔτ
    RKE2
    2
    

    View Slide

11. © Copyright 2020 Rancher Labs. All Rights Reserved. 11
    --- Dockerfile (master)
    +++ Dockerfile (boringcrypto)
    # Start with an official image
    -FROM golang:1.13.4
    +FROM goboring/golang:1.13.4b4
    RKE2 FIPS-enabled
    • ΞϝϦΧࠃཱඪ४ٕज़ݚڀॴʢNISTʣ͸ɺถࠃ࿈๜੓෎ػؔ޲͚ͷ҉߸Ϟδϡʔϧͷཁ
    ݅Λنఆ͢ΔηΩϡϦςΟඪ४ͱͯ͠ɺ࿈๜৘ใॲཧඪ४ʢFIPSʣύϒϦέʔγϣϯ
    140-2 Λ࡞੒
    • ੓෎ػؔ΍ۚ༥ػؔ͸ɺ͜ΕΒͷن֨Λج४ʹ͢Δ͜ͱͰɺ໌ه͞ΕͨηΩϡϦςΟʔཁ
    ݅ʹ੡඼͕४ڌ͍ͯ͠Δ͜ͱΛ֬ೝ͍ͯ͠·͢ɻ
    • RKE2͸ɺ FIPS140-2ͷج४Λຬͨ͢Α͏ʹɺK8sͷίϯϙʔωϯτΛGoboring libraryͰɺ
    ίϯύΠϧͨ͠σΟετϦϏϡʔγϣϯ
    

    View Slide

12. © Copyright 2020 Rancher Labs. All Rights Reserved. 12
    Demo
    RKE2
    

    View Slide

13. © Copyright 2020 Rancher Labs. All Rights Reserved. 13
    3BODIFS*OUFHSBUJPO
    ˞·ͩ։ൃதͷը໘6*ͷҝɺWͷ("࣌ͷը໘ͱҟͳΔՄೳੑ͕͋Γ·͢ɻ
    

    View Slide

14. © Copyright 2020 Rancher Labs. All Rights Reserved. 14
    Infrastructure
    ITOps
    DevOps - Provisioning
    - Auth/RBAC
    - Policy
    - Security
    - Capacity
    © Copyright 2020 Rancher Labs. All Rights Reserved. 14
    - User Interface
    - Service Catalog
    - CI/CD
    - Monitoring
    - Logging
    - Alerting
    クラスタ一元管理
    セルフサービス
    クラスタ環境の利用
    Amazon
    EKS
    Azure
    AKS
    Google
    GKE
    Cloud
    Datacenter Dev Branch Edge
    Windows Linux
    EKSΫϥελʔ؅ཧػೳ૿ڧ
    

    View Slide

15. © Copyright 2020 Rancher Labs. All Rights Reserved. 15
    How Rancher 2.5 enhances native EKS clusters compared to Rancher 2.4
    EKSΫϥελʔͷϥΠϑαΠΫϧΛϑϧϚωδϝϯτ
    ライフサイクル管理 機能 EKS with Rancher 2.5 EKS with Rancher 2.4
    プロビジョニング Kubernetes Management EKSクラスターのインポート機能 標準のインポート機能のみ
    運用管理
    Infrastructure Management クラスター設定項目を追加 設定項目が限られている
    Visualize Kubernetes Resources 新しいDashboard UIに全てのK8sリソースを参照可能 参照可能な項目が限られている
    セキュリティ Centralized Tooling and Visibility
    CIS Scanning
    OPA Gatekeeper
    N/A
    

    View Slide

16. © Copyright 2020 Rancher Labs. All Rights Reserved. 16
    &,4XJUI3BODIFS
    ˞·ͩ։ൃதͷը໘6*ͷҝɺWͷ("࣌ͷը໘ͱҟͳΔՄೳੑ͕͋Γ·͢ɻ
    

    View Slide

17. © Copyright 2020 Rancher Labs. All Rights Reserved. 17
    &,4XJUI3BODIFS
    ˞·ͩ։ൃதͷը໘6*ͷҝɺWͷ("࣌ͷը໘ͱҟͳΔՄೳੑ͕͋Γ·͢ɻ
    

    View Slide

18. © Copyright 2020 Rancher Labs. All Rights Reserved. 18
    &,4XJUI3BODIFS
    ˞·ͩ։ൃதͷը໘6*ͷҝɺWͷ("࣌ͷը໘ͱҟͳΔՄೳੑ͕͋Γ·͢ɻ
    

    View Slide

19. © Copyright 2020 Rancher Labs. All Rights Reserved. 19
    • Monitoring v2
    • Logging v2
    • OPA GA
    • CIS Scan Enhancement
    • Istio 1.16 or 1.17?
    • K8s 1.19
    • Rancherd - New rancher installation tool?
    …etc
    Other Features
    

    View Slide

20. © Copyright 2020 Rancher Labs. All Rights Reserved. 20
    Summary
    v2.5のpreviewバージョンはGAリリース前に出される為、興味
    がある方はお試しください
    まだv2.5が開発中の為、GA時に、一部の機能仕様が変更される
    可能性があります
    本セッションには、対象機能を詳細レベルで紹介していない且つ、全ての
    v2.5の機能を紹介していないだが、GA後のMeetupで対象機能を網羅的
    に紹介させていただきます
    

    View Slide