BeerCityCode Containers and Orchestration

Transcript

1. Containers and Orchestration with Docker and Kubernetes Thomas Wodarek
3. Outline • Who am I? • Who are you? • Docker • Lunch • Kubernetes Slides: https://go.wodarek.com/bcc-slides Repo: https://go.wodarek.com/bcc-repo
4. Who am I? Thomas Wodarek /kc8zpq /ThomasWo Site Reliability Engineer Wodarek Productions -> CloudKite.io
5. Who are you? SWE? Ops? DevOps? SysAdmin? Manager? Other? FTE? Contractor? Consultant? Freelance? Windows? Linux? Mac? Comfortable with the command-line? Ever used Docker before? Kubernetes? Containers at all? Ever in anger? Ever at least heard of Docker or Kubernetes before?
6. Did you do your homework? <There’s still a little time>
7. Docker
8. SimpleSoft Small startup that grew too fast MANY services and servers So many dependency conflicts
9. The problem Heterogeneous environment Many services Many servers Complex configuration management
10. What is Docker? The most popular of the container technologies Large ecosystem Large user base
11. Ok, what’s a container? A hermetically sealed way of shipping a machine/set up Acts kinda like a VM, but not really For the Linux folks: it’s a chroot with magic around it
12. What’s a container?
13. What’s an image? A packed up container ubuntu:latest thomaswo/hellopy:v2 gcr.io/twodarek-talks/
14. Docker terms
15. Working with containers
16. So what?
17. Dockerfiles! Allow you to declaratively build images Each command becomes its own layer in the Docker image
18. Directives https://docs.docker.com/engine/reference/builder/
19. Container Registries Places to store your images
20. Docker Compose
21. Containers should be immutable & ephemeral Minimize the number of layers / Consolidate instructions Avoid installing unnecessary packages Sort multi-line arguments Docker best practices Build cache Build every time Dockerfile for Development Environment
22. Tip: Cleanup alias dockerRmAllContainers='docker rm $(docker ps -a -q)' alias dockerRmAllImages='docker rmi $(docker images -q)' alias dockerRmUnusedImages='docker rmi $(docker images -q -f dangling=true)' alias goAwayDocker='docker kill $(docker ps -a -q)'
23. Docker Project https://go.wodarek.com/bcc-repo
24. Lunch
25. Kubernetes
26. The problem
27. What is Kubernetes? Greek for "helmsman" or "pilot" A docker container orchestrator k8s
28. Logical organization of a Kubernetes cluster
29. Logical organization of a Kubernetes cluster
30. Node The physical machines of your kubernetes cluster(s) Whatever OS, as long as it can run docker Can be a RasPi or a 16 core Xeon
31. Pod The basic building block of k8s Specifies a container (or containers) to be deployed together as a unit Look like a single “machine” from the inside Usually stateless*
32. Deployments An abstraction above pods to manage replications and readiness Desired state configuration Scaling Rolling updates Rollbacks Liveness & Readiness Probes
33. Deployments An abstraction above pods to manage replications and readiness Desired state configuration Scaling Rolling updates Rollbacks Liveness & Readiness Probes
34. Service Provides a DNS name to access a service Based on selectors, it finds the pods that need to be load balanced Liveness & Readiness Probes
35. Service Provides a DNS name to access a service Based on selectors, it finds the pods that need to be load balanced Liveness & Readiness Probes
36. Namespace A scope for names Share a cluster with multiple environments and users
37. Namespace A scope for names Share a cluster with multiple environments and users
38. Volume A file storage location that lives as long as the pod does Some types back-end into persistent disk location (so that you don’t lose your data on restart)
39. Storage Class Configure how you like your storage
40. Persistent Volume Manually configure what your storage looks like
41. Persistent Volume Claims Actually claim the volume for something
42. PVC in action
43. StatefulSets For stateful applications
44. Secret A safe and secure way to provide sensitive information to your pods Per namespace isolation Credentials Can be presented as a volume to pods
45. Allows you to push any amount of information, en mass, into containers Allows you to push implementation-specific details into a provided pod (see kube-lego example) I’ve even used it for environment variables Config-Maps
46. kubectl Kubectl is life `gcloud components install kubectl`
47. Build pipeline Cloudbuild CI Something!
48. Kubernetes Project https://go.wodarek.com/bcc-repo
49. Thank you! Thomas Wodarek @kc8zpq /ThomasWo