matthias sohn adel zaalouk sap from containers to
play

Matthias Sohn Adel Zaalouk SAP From Containers to Kubernetes From - PowerPoint PPT Presentation

Apr 08, 2024 •370 likes •1.72k views

Matthias Sohn Adel Zaalouk SAP From Containers to Kubernetes From Containers to Kubernetes Container Container Runtime Host OS VM From Containers to Kubernetes Container Container Runtime Host OS VM From Containers to Kubernetes

  1. Common Kubernetes Cluster Setup Master Master Master Worker Worker Worker Master Master Master Worker Worker Worker Master Worker Master Worker Master HA HA HA Worker Master Worker Master Worker Master Worker Worker Worker Master Master Worker Master Worker HA Worker Worker Master HA Master Worker Worker green machines The host the control plane, often in HA and on separated hardware The host the actual workload and blue machines (usually underutilized or, worse, overutilized) are managed by Kubernetes (usually pretty well utilized)

  2. Gardener Kubernetes Cluster Setup Gar

  3. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Master Worker Master Worker Master Worker HA

  4. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Master Worker Master Worker Master Worker HA

  5. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Seed Cluster Master Master Worker Worker Master Master Worker Worker Master Worker Master Worker HA HA

  6. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Seed Cluster Master Master Worker Worker Master Master Worker Worker Master Worker Master Worker HA HA

  7. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Master Worker Master Worker Worker Master Worker Master Worker Worker HA HA

  8. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA

  9. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA Worker

  10. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA Worker Worker Worker Worker Worker Worker Worker Worker

  11. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA Worker Worker Worker Worker Zooming into the Worker Seed Cluster reveals… Worker Worker Worker Inside a Seed Cluster Worker

  12. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA Worker manages Worker Worker Worker Zooming into the API Server ETCD Worker Seed Cluster reveals… Controller Mgr Scheduler Worker Worker Multiple Shoot Cluster Control Planes Worker Inside a Seed Cluster Worker

  13. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA Worker manages Worker Worker Worker Zooming into the API Server ETCD Worker Seed Cluster reveals… Controller Mgr Scheduler Worker Worker Multiple Shoot Cluster ETCD API Server Control Planes Worker Controller Mgr Scheduler Inside a Seed Cluster Worker

  14. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA Worker manages Worker Worker Worker Zooming into the API Server ETCD Worker Seed Cluster reveals… Controller Mgr Scheduler Worker Worker Multiple Shoot Cluster ETCD API Server Control Planes Worker Controller Mgr Scheduler ETCD API Server … Inside a Seed Cluster Worker

  15. Gardener Kubernetes Cluster Setup Gar Gardener Cluster Shoot Clusters Seed Cluster Master Master Worker Worker Worker Worker Master Worker Worker Master Worker Worker Master Worker Master Worker Worker HA HA Worker manages Worker Worker Worker Zooming into the API Server ETCD Worker Seed Cluster reveals… Controller Mgr Scheduler Worker Worker Multiple Shoot Cluster ETCD API Server Control Planes Worker Controller Mgr Scheduler Gardener Machine Controller Manager ETCD API Server … Machine Provisioning Inside a Seed Self-Healing Cluster Worker Auto-Update Auto-Scaling

  16. Gardener Design Principle Primary Gar

  17. Gardener Design Principle Primary Gar Do Do not ot rei einven ent the e wheel eel … “Let Kubernetes drive the design of the Gardener .”

  18. Lingua Franca – Gar Gardener Cluster Resource

  19. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: version: 1.11.2 kubeAPIServer: featureGates: ... runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  20. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: version: 1.11.2 kubeAPIServer: featureGates: ... runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  21. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: version: 1.11.2 kubeAPIServer: featureGates: ... runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  22. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: version: 1.11.2 kubeAPIServer: featureGates: ... runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  23. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker Specify Worker Pools machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: version: 1.11.2 kubeAPIServer: featureGates: ... runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  24. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker Specify Worker Pools machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: Set Kubernetes Version version: 1.11.2 kubeAPIServer: featureGates: ... runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  25. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker Specify Worker Pools machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: Set Kubernetes Version version: 1.11.2 kubeAPIServer: featureGates: ... Tweak Kubernetes Control Plane runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  26. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker Specify Worker Pools machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: Set Kubernetes Version version: 1.11.2 kubeAPIServer: featureGates: ... Tweak Kubernetes Control Plane runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: Define When and What to Update begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true status: ...

  27. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker Specify Worker Pools machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: Set Kubernetes Version version: 1.11.2 kubeAPIServer: featureGates: ... Tweak Kubernetes Control Plane runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: Define When and What to Update begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true Gardener Reported Status status: ...

  28. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker Specify Worker Pools machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: Set Kubernetes Version version: 1.11.2 kubeAPIServer: featureGates: ... Tweak Kubernetes Control Plane runtimeConfig: ... admissionPlugins: ... kubeControllerManager: featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: Define When and What to Update begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true Gardener Reported Status status: ...

  29. Lingua Franca – Gar Gardener Cluster Resource apiVersion: garden.sapcloud.io/v1 Native Kubernetes Resource kind: Shoot metadata: name: my-cluster namespace: garden-project spec: dns: Gardener or Self-Managed DNS provider: aws-route53 domain: cluster.ondemand.com cloud: aws: networks: Define Your Infrastructure Needs vpc: cidr: 10.250.0.0/16 workers: - name: cpu-worker Specify Worker Pools machineType: m4.xlarge autoScalerMin: 5 autoScalerMax: 20 kubernetes: Set Kubernetes Version version: 1.11.2 kubeAPIServer: featureGates: ... Tweak Kubernetes Control Plane runtimeConfig: ... admissionPlugins: ... kubeControllerManager: Avoid Vendor Lock-In featureGates: ... kubeScheduler: featureGates: ... kubelet: featureGates: ... maintenance: timeWindow: Define When and What to Update begin: 220000+0000 end: 230000+0000 autoUpdate: kubernetesVersion: true Gardener Reported Status status: ...

  30. Garden Cluster Seed Cluster Shoot Cluster Administrator End-User R R R R R R R Gardener Kubernetes Kubify kubectl gardenctl Kubernetes Dashboard Dashboard kubectl Dashboard R R R R R R R HTTPS Garden Cluster Seed Cluster Shoot Cluster Garden Cluster API LB Ingress LB Seed Cluster API LB Shoot Cluster API LB Shoot Cluster VPN LB R R R R Storage Garden Cluster Storage Seed Cluster [K8s] DS, RS, SS, J, ... [K8s] DS, RS, SS, J, ... Control Plane Control Plane [CRD] Machine Deployment [CRD] Shoot, Seed, ... R R R R R R Worker W Worker Worker Kubelet + Container Runtime Kubelet + Container Runtime Kubelet + Container Runtime etcd Main Backup SS Main PV VPN D Gardener Dashboard D etcd Events SS Events PV R Calico DS Gardener API Server D API Server VPN D R R Kube Proxy DS Gardener Controller Manager D R ... Scheduler D R Core DNS D Controller Manager D Optional Addons New Shoot Clusters can be created via the Gardener dashboard or by uploading a new Shoot resource to Addon Manager D the Garden Cluster. The Gardener picks it up and starts a Terraform job to create the necessary IaaS Machine Controller D Actual Workload R components. Then it deploys the Shoot Cluster Control ... Plane into the Seed Cluster and required add-ons into Terraformer J R the Shoot Cluster. Update or delete operations are Shoot Cluster Control Plane handled by the Gardener fully automatically as well. Monitoring VPN ... Logging R ... ... SCP ... IaaS IaaS

  31. Garden Cluster Seed Cluster Shoot Cluster Administrator End-User R R R R R R R Gardener Kubernetes Kubify kubectl gardenctl Kubernetes Dashboard Dashboard kubectl Dashboard R R R R R R R HTTPS Garden Cluster Seed Cluster Shoot Cluster Garden Cluster API LB Ingress LB Seed Cluster API LB Shoot Cluster API LB Shoot Cluster VPN LB R R R R Storage Garden Cluster Storage Seed Cluster [K8s] DS, RS, SS, J, ... [K8s] DS, RS, SS, J, ... Control Plane Control Plane [CRD] Machine Deployment [CRD] Shoot, Seed, ... R R R R R R Worker W Worker Worker Kubelet + Container Runtime Kubelet + Container Runtime Kubelet + Container Runtime etcd Main Backup SS Main PV VPN D Gardener Dashboard D etcd Events SS Events PV R Calico DS Gardener API Server D API Server VPN D R R Kube Proxy DS Gardener Controller Manager D R ... Scheduler D R Core DNS D Controller Manager D Optional Addons New Shoot Clusters can be created via the Gardener dashboard or by uploading a new Shoot resource to Addon Manager D the Garden Cluster. The Gardener picks it up and starts a Terraform job to create the necessary IaaS Machine Controller D Actual Workload R components. Then it deploys the Shoot Cluster Control ... Plane into the Seed Cluster and required add-ons into Terraformer J R the Shoot Cluster. Update or delete operations are Shoot Cluster Control Plane handled by the Gardener fully automatically as well. Monitoring VPN ... Logging R ... ... SCP ... IaaS IaaS

  32. Garden Cluster Seed Cluster Shoot Cluster Administrator End-User R R R R R R R Gardener Kubernetes Kubify kubectl gardenctl Kubernetes Dashboard Dashboard kubectl Dashboard R R R R R R R HTTPS Garden Cluster Seed Cluster Shoot Cluster Garden Cluster API LB Ingress LB Seed Cluster API LB Shoot Cluster API LB Shoot Cluster VPN LB R R R R Storage Garden Cluster Storage Seed Cluster [K8s] DS, RS, SS, J, ... [K8s] DS, RS, SS, J, ... Control Plane Control Plane [CRD] Machine Deployment [CRD] Shoot, Seed, ... R R R R R R Worker W Worker Worker Kubelet + Container Runtime Kubelet + Container Runtime Kubelet + Container Runtime etcd Main Backup SS Main PV VPN D Gardener Dashboard D etcd Events SS Events PV R Calico DS Gardener API Server D API Server VPN D R R Kube Proxy DS Gardener Controller Manager D R ... Scheduler D R Core DNS D Controller Manager D Optional Addons New Shoot Clusters can be created via the Gardener dashboard or by uploading a new Shoot resource to Addon Manager D the Garden Cluster. The Gardener picks it up and starts a Terraform job to create the necessary IaaS Machine Controller D Actual Workload R components. Then it deploys the Shoot Cluster Control ... Plane into the Seed Cluster and required add-ons into Terraformer J R the Shoot Cluster. Update or delete operations are Shoot Cluster Control Plane handled by the Gardener fully automatically as well. Monitoring VPN ... Logging R ... ... SCP ... IaaS IaaS

  33. Garden Cluster Seed Cluster Shoot Cluster Administrator End-User R R R R R R R Gardener Kubernetes Kubify kubectl gardenctl Kubernetes Dashboard Dashboard kubectl Dashboard R R R R R R R HTTPS Garden Cluster Seed Cluster Shoot Cluster Garden Cluster API LB Ingress LB Seed Cluster API LB Shoot Cluster API LB Shoot Cluster VPN LB R R R R Storage Garden Cluster Storage Seed Cluster [K8s] DS, RS, SS, J, ... [K8s] DS, RS, SS, J, ... Control Plane Control Plane [CRD] Machine Deployment [CRD] Shoot, Seed, ... R R R R R R Worker W Worker Worker Kubelet + Container Runtime Kubelet + Container Runtime Kubelet + Container Runtime etcd Main Backup SS Main PV VPN D Gardener Dashboard D etcd Events SS Events PV R Calico DS Gardener API Server D API Server VPN D R R Kube Proxy DS Gardener Controller Manager D R ... Scheduler D R Core DNS D Controller Manager D Optional Addons New Shoot Clusters can be created via the Gardener dashboard or by uploading a new Shoot resource to Addon Manager D the Garden Cluster. The Gardener picks it up and starts a Terraform job to create the necessary IaaS Machine Controller D Actual Workload R components. Then it deploys the Shoot Cluster Control ... Plane into the Seed Cluster and required add-ons into Terraformer J R the Shoot Cluster. Update or delete operations are Shoot Cluster Control Plane handled by the Gardener fully automatically as well. Monitoring VPN ... Logging R ... ... SCP ... IaaS IaaS

  34. Gardener uses… Following the Design Principle Gar K8S building blocks Kubernetes as deployment underlay

  35. Gardener uses… Following the Design Principle Gar K8S building blocks Deployments Replicasets Pods Kubernetes as deployment underlay

  36. Gardener uses… Following the Design Principle Gar K8S building blocks Deployments Replicasets Load- Balancer Pods Kubernetes as deployment underlay

  37. Gardener uses… Following the Design Principle Gar K8S building blocks Jobs Deployments Replicasets Load- Balancer Pods Kubernetes as deployment underlay

  38. Gardener uses… Following the Design Principle Gar K8S building blocks Jobs Deployments Secrets Replicasets Load- Config Balancer Maps Pods Kubernetes as deployment underlay

  39. Gardener uses… Following the Design Principle Gar K8S building blocks Stateful Sets Jobs Deployments Secrets PVs PVCs Replicasets Load- Config Driver Balancer Maps Pods Kubernetes as deployment underlay

  40. Gardener uses… Following the Design Principle Gar K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets PVs PVCs Controllers CRDs Replicasets Load- Config Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  41. Gardener uses… Following the Design Principle Gar K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets Admission Control PVs PVCs Controllers CRDs Replicasets Load- Config RBAC Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  42. Gardener uses… Following the Design Principle Gar Additional Tooling K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets Admission Control PVs PVCs Controllers CRDs Replicasets Load- Config RBAC Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  43. Gardener uses… Following the Design Principle Gar Additional Tooling Add-On Manager Helm K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets Admission Control PVs PVCs Controllers CRDs Replicasets Load- Config RBAC Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  44. Gardener uses… Following the Design Principle Gar Additional Tooling Network policies Add-On Manager Calico Helm K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets Admission Control PVs PVCs Controllers CRDs Replicasets Load- Config RBAC Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  45. Gardener uses… Following the Design Principle Gar Additional Tooling Network policies Cert Manager Add-On Manager Cluster Autoscaler Calico Helm Cert Broker K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets Admission Control PVs PVCs Controllers CRDs Replicasets Load- Config RBAC Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  46. Gardener uses… Following the Design Principle Gar Additional Tooling Network policies Cert Manager Add-On Manager Cluster Prometheus Autoscaler Calico Helm Cert Broker EFK Stack K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets Admission Control PVs PVCs Controllers CRDs Replicasets Load- Config RBAC Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  47. Gardener uses… Following the Design Principle Gar Workload Additional Tooling Network policies Cert Manager Add-On Manager Cluster Prometheus Autoscaler Calico Helm Cert Broker EFK Stack K8S building blocks Stateful Sets Reconciliation Jobs Deployments Secrets Admission Control PVs PVCs Controllers CRDs Replicasets Load- Config RBAC Driver Balancer API Server Extension Maps Pods Kubernetes as deployment underlay

  48. Where are all these clusters coming from? Garden clusters are installed on a bootstrap cluster • in GKE, EKS, AKS • set up using Gardener’s Kubify • DR setup with the Gardener Ring (planned) Seed clusters are created as shoot clusters by the Gardener Shoot clusters are created by their seed cluster which is managed by the Gardener

  49. Gardener Demo

  51. Gar Gardener Commu Community Installer Setting up a Gardener landscape is not trivial, so we have a community installer: https://github.com/gardener/landscape-setup • Many shortcuts to make it simple (Gardener and Seed in a single cluster) • Do not use productively! • You can use it as a starter for a productive setup • Different cluster and different cloud provider accounts recommended

  52. Gardener is Open Source Gar

  53. Gardener is Open Source Gar Long-Term Goal Become CNCF Project

  54. Gardener is Open Source Gar Long-Term Goal Become CNCF Project Gardener Blog CNCF Presentation Kubernetes Podcast Hacker News Reddit

  55. Thank You! GitHub https://github.com/gardener Home Page https://gardener.cloud Wiki https://github.com/gardener/documentation/wiki Mailing List https://groups.google.com/forum/?fromgroups#!forum/gardener Slack Channel https://kubernetes.slack.com/messages/gardener Community Installer https://github.com/gardener/landscape-setup

  57. Evaluate the Sessions Sign in and vote at eclipsecon.org -1 0 +1

  58. Ku Kubernetes Mach chine Controller Manager Problem • Node provisioning and de-provisioning is out of scope of current Kubernetes • In the beginning we used terraform scripts ➦ unmanageable • No mechanism • to smoothly scale clusters • upgrade cluster nodes for all providers Machine Controller Manager • Node custom resources to manage nodes via k8s API • Plugins enable support for different cloud providers • Enables cluster auto-scaling and upgrade of cluster nodes

  59. MCM Mod MCM Model Model for Kubernetes deployments works great Pod Machine So why not use it for machines? ReplicaSet MachineSet Deployment MachineDeployment

  60. MCM Custom Resources

  61. MCM Custom Resources Machine Name: test-machine MachineClass: v1

  62. MCM Custom Resources AWS-Machine-Class (Template) Name: v1 Machine Type: t2.large Disk Size: 50GB Secret: test-secret …… Machine Name: test-machine MachineClass: v1

  63. MCM Custom Resources AWS-Machine-Class Secret (Template) Name: test-secret Name: v1 Cloudconfig: Machine Type: t2.large abc….xzy Disk Size: 50GB AccessKeyId: abc123 Secret: test-secret SecretAccessKey: xyz789 …… Machine Name: test-machine MachineClass: v1

Recommend

News from Git in Eclipse Matthias Sohn (SAP) merge strategy extension point enables

News from Git in Eclipse Matthias Sohn (SAP) merge strategy extension point enables

News from Git in Eclipse Matthias Sohn (SAP) merge strategy extension point enables external merge strategy used by EMF Compare to provide model merge (Neon) JGit 4.0, EGit 4.1 EMF Compare provides model merge strategy Computes

660 views • 41 slides
Containers/Docker Mirna Alaisami Matthias Haeussler What is a container? in general 2

Containers/Docker Mirna Alaisami Matthias Haeussler What is a container? in general 2

Containers/Docker Mirna Alaisami Matthias Haeussler What is a container? in general 2 What is a Container? "in General" The term comes originally from the transportation world! A shipping container is any

620 views • 47 slides
Unprivileged Containers Jess Frazelle, @jessfraz How do containers help security? Containers are

Unprivileged Containers Jess Frazelle, @jessfraz How do containers help security? Containers are

Unprivileged Containers Jess Frazelle, @jessfraz How do containers help security? Containers are not going to be the answer to preventing your application from being compromised, but they can limit the damage from a compromise. How do

823 views • 25 slides
Improving Trust in Containers Matthew Garrett @mjg59 | mjg59@coreos.com | coreos.com

Improving Trust in Containers Matthew Garrett @mjg59 | mjg59@coreos.com | coreos.com

Improving Trust in Containers Matthew Garrett @mjg59 | mjg59@coreos.com | coreos.com Containers are great Containers are resource efficient Containers make deployment easy Containers can be monitored easily Containers are secure But are

508 views • 38 slides
Everything you need to know about Containers Security Track Containers Jos Manuel Ortega

Everything you need to know about Containers Security Track Containers Jos Manuel Ortega

Everything you need to know about Containers Security Track Containers Jos Manuel Ortega @jmortegac Agenda Introduction to containers security Linux Containers(LXC) Docker Security Security pipeline && Container

807 views • 57 slides
SUSE Containers as a Service Platform 53 53 Why Do You Want to Invest in Containers? 54 54

SUSE Containers as a Service Platform 53 53 Why Do You Want to Invest in Containers? 54 54

SUSE Containers as a Service Platform 53 53 Why Do You Want to Invest in Containers? 54 54 What are Containers? A package/image that can be deployed anywhere (thats running a Linux Kernel) Developers create a layered image of their

996 views • 53 slides
Herd of Containers Sad DIF Database Engineer Herd of Containers: PostgreSQL in containers at

Herd of Containers Sad DIF Database Engineer Herd of Containers: PostgreSQL in containers at

Herd of Containers Sad DIF Database Engineer Herd of Containers: PostgreSQL in containers at BlaBlaCar pgDay Paris, Mar 15, 2018 BlaBlaCar Overview Todays agenda PostgreSQL usage at BlaBlaCar Switching to a new implementation

844 views • 40 slides
Disk Galaxies of the Local Group: Dynamics from HST Proper Motions S. Tony Sohn (STScI) + R.

Disk Galaxies of the Local Group: Dynamics from HST Proper Motions S. Tony Sohn (STScI) + R.

Disk Galaxies of the Local Group: Dynamics from HST Proper Motions S. Tony Sohn (STScI) + R. van der Marel, J. Anderson, G. Besla + others ApJ, 753, 7/8/9 [July 2012] I. HST measurement (Sohn et al.) II. Implied velocity + LG mass (vdMarel et

276 views • 14 slides
Persistent storage for Containers Anil Degwekar What are we talking about? Containers have

Persistent storage for Containers Anil Degwekar What are we talking about? Containers have

Persistent storage for Containers Anil Degwekar What are we talking about? Containers have become popular replacing many Physical / Virtual Machine use cases But: The persistent storage problem for containers is still not fully solved

1.01k views • 17 slides
The UNESCO Institute for Lifelong Learning Malak ZAALOUK 27 March 2019 Chairperson of the

The UNESCO Institute for Lifelong Learning Malak ZAALOUK 27 March 2019 Chairperson of the

The UNESCO Institute for Lifelong Learning Malak ZAALOUK 27 March 2019 Chairperson of the Governing Board Implementation of the Recommendations of the Working Group on the Governance, Procedures and Working Methods of the Governing Bodies of UNESCO

364 views • 10 slides
Containers in the Enterprise Avoiding the Kobayashi Maru Agenda Containers Bring Change

Containers in the Enterprise Avoiding the Kobayashi Maru Agenda Containers Bring Change

Containers in the Enterprise Avoiding the Kobayashi Maru Agenda Containers Bring Change An Approach Required Software Processes Cultural Changes Additional Concerns Lessons Learned Why This Talk? Containers are

678 views • 49 slides
Container Patterns Matthias Lbken plus give feedback GiantSwarm.io Simple Microservice

Container Patterns Matthias Lbken plus give feedback GiantSwarm.io Simple Microservice

Container Patterns Matthias Lbken plus give feedback GiantSwarm.io Simple Microservice Infrastructure build for developers. Deploy your containers in seconds. Scaling with your needs: Public, Private, On-Prem Docker is an

1.07k views • 59 slides
Exploding the Linux Container Host Presenter: Ben Corrie (@bensdoings) Containers vs VMs

Exploding the Linux Container Host Presenter: Ben Corrie (@bensdoings) Containers vs VMs

Exploding the Linux Container Host Presenter: Ben Corrie (@bensdoings) Containers vs VMs Google Wisdom: VMs and Containers are similar but different Try running containers in VMs for security Containers are best for scale-out

314 views • 17 slides
De-biasing the Lasso: Optimal Sample Size for Gaussian Designs Adel Javanmard USC Marshall

De-biasing the Lasso: Optimal Sample Size for Gaussian Designs Adel Javanmard USC Marshall

De-biasing the Lasso: Optimal Sample Size for Gaussian Designs Adel Javanmard USC Marshall School of Business Data Science and Operations department Based on joint work with Andrea Montanari Oct 2015 Adel Javanmard (USC ) Hypothesis Testing

955 views • 67 slides
Learning Linear Bayesian Networks with Latent Variables Adel Javanmard Stanford University joint

Learning Linear Bayesian Networks with Latent Variables Adel Javanmard Stanford University joint

Learning Linear Bayesian Networks with Latent Variables Adel Javanmard Stanford University joint work with Anima Anandkumar , Daniel Hsu , Sham Kakade University of California, Irvine Microsoft Research, New England Adel

972 views • 52 slides
Kubernetes Matthias Haeussler Mirna Alaisami Overview Overview Kubernetes is an open-source

Kubernetes Matthias Haeussler Mirna Alaisami Overview Overview Kubernetes is an open-source

Kubernetes Matthias Haeussler Mirna Alaisami Overview Overview Kubernetes is an open-source platform designed to automate deploying , scaling , and operating application containers . Kubernetes v1.0 was released in 2015. It utilizes

916 views • 52 slides
our container journey @beshippable shippable.com our container journey containers can

our container journey @beshippable shippable.com our container journey containers can

our container journey @beshippable shippable.com our container journey containers can make us way more efficient containers can save us money on hosting containers sound interesting company founded in 2013

848 views • 30 slides
The proposed containers are "Flat-pack" type. Disassembled and reduced as

The proposed containers are "Flat-pack" type. Disassembled and reduced as

CON-IMEX CONTAINERS 2009 AKAR Logistics 70 Beecham Court Owings Mills, MD 21117 USA Sophia Akar Tel: + 410-961-7232 / + 410-961-0327 Fax: + 410-356-8267 sophia@akarlogistics.com 1 / 20 GENERAL The proposed containers are

313 views • 20 slides
This is the 19 th Annual Sohn Investment Conference. The first time I spoke here was in 2002. It is

This is the 19 th Annual Sohn Investment Conference. The first time I spoke here was in 2002. It is

This is the 19 th Annual Sohn Investment Conference. The first time I spoke here was in 2002. It is amazing how this great event has grown, and I am honored to be here. 1 2 A couple weeks ago, we wrote in our quarterly letter that we believe that

877 views • 66 slides
Fairport Containers Supporting the Charity Retail Sector www.fairportcontainers.co.uk

Fairport Containers Supporting the Charity Retail Sector www.fairportcontainers.co.uk

Fairport Containers Supporting the Charity Retail Sector www.fairportcontainers.co.uk Introductions David Porter Fairport Containers Director Steve Collinson Managing Director Fairport Containers Ltd Tam Unsworth Recycling Banks

552 views • 28 slides
Singularity - Containers for Scientific Computing ZID Workshop Michael Fink Universitt

Singularity - Containers for Scientific Computing ZID Workshop Michael Fink Universitt

Singularity - Containers for Scientific Computing ZID Workshop Michael Fink Universitt Innsbruck Innsbruck Nov 2018 Overview Preliminaries Why containers Understanding Containers vs. Virtual Machines Comparison of

482 views • 37 slides
Alm dos Containers na Nuvem QConSP - Containers & Devops 26 April 2017 Guilherme Rezende

Alm dos Containers na Nuvem QConSP - Containers & Devops 26 April 2017 Guilherme Rezende

Alm dos Containers na Nuvem QConSP - Containers & Devops 26 April 2017 Guilherme Rezende Globo.com About me Software Engineer at Globo.com/Tsuru @guilhermebr (GitHub) in/guilhermebr (LinkedIn) @gbrezende (Twitter) Agenda Cloud Native

636 views • 45 slides
Hypothesis Testing for High-Dimensional Regression: Nearly Optimal Sample Size Adel Javanmard

Hypothesis Testing for High-Dimensional Regression: Nearly Optimal Sample Size Adel Javanmard

Hypothesis Testing for High-Dimensional Regression: Nearly Optimal Sample Size Adel Javanmard Stanford University- UC Berkeley Based on joint work with Andrea Montanari January 2015 Adel Javanmard (Stanford- UC Berkeley) Hypothesis Testing

820 views • 62 slides
200 days on Adel Abd Al- Mahdis Government

200 days on Adel Abd Al- Mahdis Government

200 days on Adel Abd Al- Mahdis Government 200 Munqith Dagher IIACSS Group June 2019 IIACSS The first and the largest private research group in Iraq established in 2003 Conducted

769 views • 39 slides

More recommend