Kubernetes Workshop @ BASTA 2020

Ausfallsichere und skalierbare Anwendungen zu betreiben und dabei ohne Ausfallzeiten neue Versionen Ihrer Software bereitzustellen, klingt auch heute noch für viele Lösungsanbieter nach einem schönen Traum. Mit Kubernetes und insbesondere den verwalteten Angeboten wie Azure Kubernetes Service (AKS) ist dieser Traum für Viele in greifbare Nähe gerückt. In diesem Tagesworkshop erklärt Thorsten Hans die Eigenschaften, Bestandteile und Möglichkeiten, die Kubernetes als Anwendungsplattform bietet. Nach dem Einstieg und den ersten Schritten mit Kubernetes werden Sie lernen, wie existierende Anwendungsbestandteile im Container-Orchestrator bereitgestellt und effektiv betrieben werden können. Essenzielle Themen, wie beispielsweise automatische Skalierung, der Umgang mit sensitiven Konfigurationsdaten, oder die Verwendung von externen, persistenten Datenspeichern, werden anhand von Beispielen aus der Praxis erläutert und können von Ihnen selbst erprobt werden.

Transcript

1. Kubernetes für Entwickler und Architekten Thorsten Hans @ThorstenHans Consultant
2. Focus: Cloud Native & Infrastructure as Code Consultant @ Thinktecture AG thorsten.hans@thinktecture.com thorsten.hans@gmail.com thinktecture.com thorsten-hans.com @ThorstenHans Thorsten Hans
3. Talking Points Intro Running Applications Adopting Platform Capabilities Exposing Applications to the public
4. Open-Source Container Orchestrator § Initially founded by Google / now maintained by CNCF § Successor of Google’s Borg § Original Codename Seven1 § Greek for pilot or helmsman of a ship § Written in go 1 - https://en.wikipedia.org/wiki/Seven_of_Nine Kubernetes
5. What is Kubernetes § Container Orchestrator § Runs Containers § Takes care about Networking / Isolation of workloads § Abstracts hardware from developers § Cloud-Agnostic § Container Lifecycle Management § Deployment, Rolling Upgrades, Scaling, Load-Balancing Kubernetes
6. Kubernetes Master Kubernetes Node Pool 1 Kubernetes Worker Node Kubernetes Worker Node Birds-View Kubernetes Architecture
7. Kubernetes Master Kubernetes Node Pool 1 Kubernetes Worker Node Kubernetes Worker Node Birds-View Kubernetes Architecture Kubernetes Node Pool 2 Kubernetes Worker Node Kubernetes Worker Node
8. Kubernetes Master Kubernetes Node Pool 1 Kubernetes Worker Node Kubernetes Worker Node Birds-View Kubernetes Architecture Kubernetes Node Pool 2 Kubernetes Worker Node Kubernetes Worker Node
9. Kubernetes Master Kubernetes Node Pool 1 Kubernetes Worker Node Kubernetes Worker Node Birds-View Kubernetes Architecture Kubernetes Node Pool 2 Kubernetes Worker Node Kubernetes Worker Node Azure Container Instances
10. Hosting Opportunities § Public cloud offerings § Azure § Amazon AWS § Google Compute Cloud § Digital Ocean § On-Premisses datacenter § Locally § Kind, microk8s, minikube, … Kubernetes Cluster
11. Creating a Kubernetes Cluster in Azure / locally - Create a new Kubernetes Cluster in Azure using Azure CLI - Create a new Kubernetes Cluster locally using Kind - Install Kubectl locally Demo
12. Talking Points Intro Running Applications Adopting Platform Capabilities Exposing Applications to the public
13. Kubernetes Core Capabilities § Pod is the smallest unit of work in Kubernetes § 1 Pod can contain multiple Docker Containers § All containers of a Pod run on the same host § More complex and powerful variations are ReplicaSets and Deployments Running Applications
14. Running Applications in Kubernetes - Pod Spec - Deployment Spec - General kubectl operations Demo
15. Talking Points Intro Running Applications Adopting Platform Capabilities Exposing Applications to the public
16. ConfigMaps and Secrets § Inject configuration values into your application containers § For sensitive values consider using Kubernetes Secrets § Simple Key-Value storage principles § Kuberentes Secrets are just encoded Adopting Platform Capabilities
17. Ressource Requests and Limits § Specify minimal requirements per container § Specify maximum resource utilization per container § Mandatory for each piece of the overall application, deployed to a Kubernetes cluster Adopting Platform Capabilities
18. Readiness and Liveness Probes § Let Kubernetes monitor and heal your applications § Probes support different approaches to verify application health § HTTP § TCP § Process Execution Adopting Platform Capabilities
19. Adopting Platform Capabilities - Create Secrets and ConfigMaps - Use Secrets and ConfigMaps - Add support for Health Probes - Define Resource Requests and Limits Demo
20. Talking Points Intro Running Applications Adopting Platform Capabilities Exposing Applications to the public
21. Ingress § Ingress Controllers route requests from the internet § NGINX Ingress is an open-source Ingress Controller § Ingress declarations specify routing § Ingress Controller routes traffic Exposing Applications to the public
22. CertManager § Use CertManager to provide SSL certificates § Flexible, cluster-wide certificate management solution § Issues certificates to services § Support for § ACME (Let's Encrypt) § HashiCorp Vault § Venafi § self signed and internal certificate authorities. Exposing Applications to the public
23. Exposing Applications to the public - Install NGINX Ingress - Install CertManager - Create Ingress definitions - Request SSL certificate from Let’s Encrypt Demo