Kubernetes: beyond Minikube

A presentation at Codemotion Meetup Barcelona in October 2019 in Barcelona, Spain by Horacio Gonzalez

Slide 1

Slide 1

30 October, 2019 BARCELONA #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 2

Slide 2

30 October, 2019 Kubernetes: Beyond Minikube Horacio Gonzalez @LostInBrittany BARCELONA #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 3

Slide 3

Who are we? Introducing myself and introducing OVHcloud #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 4

Slide 4

Horacio Gonzalez @LostInBrittany Spaniard lost in Brittany. Developer, speaker, dreamer, geek Flutter #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 5

Slide 5

OVHcloud: A Global Leader 200k Private cloud VMs running 1 Dedicated IaaS Europe 30 Datacenters Own 20Tbps Hosting capacity : 1.3M Physical Servers 360k Servers already deployed Netwok with 35 PoPs

1.3M Customers in 138 Countries #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 6

Slide 6

OVHcloud: Our solutions Cloud Web Hosting Mobile Hosting Telecom VPS Containers ▪ Dedicated Server Domain names VoIP Public Cloud Compute ▪ Data Storage Email SMS/Fax Private Cloud ▪ Network and Database CDN Virtual desktop Serveur dédié Security Object Storage Web hosting Cloud Storage Over the Box ▪ Licences Cloud Desktop Securities MS Office Hybrid Cloud Messaging MS solutions #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 7

Slide 7

Summary What I would like to speak about: ○ Orchestrating containers ○ Kubernetes: some concepts ○ I have deployed on Minikube, woah! ○ From Minikube to prod ○ Building a managed Kubernetes service #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 8

Slide 8

Kubernetes for Developers Or what’s this kubething for? #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 9

Slide 9

Orchestrating containers Like herding cats… but in hard mode! #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 10

Slide 10

From bare metal to containers Another paradigm shift #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 11

Slide 11

Containers are easy… For developers #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 12

Slide 12

Less simple if you must operate them Like in a production context #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 13

Slide 13

And what about microservices? Are you sure you want to operate them by hand? #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 14

Slide 14

Taming microservices with Kubernetes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 15

Slide 15

Kubernetes Way more than a buzzword! #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 16

Slide 16

Masters and nodes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 17

Slide 17

Some more details #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 18

Slide 18

Desired State Management #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 19

Slide 19

Extending Kubernetes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 20

Slide 20

Multi-environment made easy Dev, staging, prod, multi-cloud… #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 21

Slide 21

Declarative infrastructure Multi-environment made easy #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 22

Slide 22

Having identical, software defined envs #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 23

Slide 23

Kubernetes modulaty Extending and customizing K8s #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 24

Slide 24

Extending Kubernetes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 25

Slide 25

Istio, a Service Mesh for Kubernetes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 26

Slide 26

I have deployed on Minikube, woah! A great fastlane into Kubernetes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 27

Slide 27

Running a full K8s in your laptop A great learning tool #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 28

Slide 28

Your laptop isn’t a true cluster Don’t expect real performances #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 29

Slide 29

Minikube is only the beginning #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 30

Slide 30

From Minikube to prod A journey not for the faint of heart #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 31

Slide 31

The truth is somewhere inside… #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 32

Slide 32

The network is going to feel it… #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 33

Slide 33

The storage dilemma #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 34

Slide 34

The ETCD vulnerability #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 35

Slide 35

The storage dilemma #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 36

Slide 36

The ETCD vulnerability #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 37

Slide 37

The security journey #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 38

Slide 38

Security Hardening your Kubernetes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 39

Slide 39

Kubernetes is insecure by design It’s a feature, not a bug It’s up to the K8s admin to secure it according to their needs #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 40

Slide 40

Not everybody has the same security needs #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 41

Slide 41

Kubernetes allows to enforce security practices as needed #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 42

Slide 42

Listing some good practices #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 43

Slide 43

And remember, even the best can get hacked Remain attentive, don’t get too confident #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 44

Slide 44

Managed Kubernetes Because operating K8s isn’t your job #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 45

Slide 45

Kubernetes is powerful It can make Developers’ and DevOps’ lives easier #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 46

Slide 46

But there is a price: operating it Lot of things to think about #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 47

Slide 47

Different roles Each role asks for very different knowledge and skill sets #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 48

Slide 48

Most companies don’t need to operate the clusters As they don’t build and rack their own servers! #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 49

Slide 49

If you don’t need to build it, choose a certified managed solution You get the cluster, the operator get the problems #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 50

Slide 50

Like our OVH Managed Kubernetes Made with 💗 by the Platform team #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 51

Slide 51

Making OVHcloud Mananaged Kubernetes How and why we did what we did #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 52

Slide 52

Kubinception: running K8s on K8s Using Kubernetes to run Kubernetes #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 53

Slide 53

Kubinception: where are the nodes? #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 54

Slide 54

Kubinception with several customers #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 55

Slide 55

And the ETCD? #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 56

Slide 56

Do you want to try? Send me an email to get some vouchers… horacio.gonzalez@corp.ovh.com #Codemotion #Barcelona #Kubernetes @LostInBrittany

Slide 57

Slide 57

Thank you! +34 91 758 34 77 comercial@ovh.es @ovh_es, @ovh_support_es #Codemotion #Barcelona #Kubernetes @LostInBrittany