Who are we? Introducing myself and introducing OVHcloud
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 4
Horacio Gonzalez @LostInBrittany Spaniard lost in Brittany. Developer, speaker, dreamer, geek
Flutter
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 5
OVHcloud: A Global Leader 200k Private cloud VMs running
1
Dedicated IaaS Europe
30 Datacenters
Own 20Tbps
Hosting capacity : 1.3M Physical Servers 360k Servers already deployed
Netwok with 35 PoPs
1.3M Customers in 138 Countries
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 6
OVHcloud: Our solutions
Cloud
Web Hosting
Mobile Hosting
Telecom
VPS
Containers ▪ Dedicated Server
Domain names
VoIP
Public Cloud
Compute ▪ Data Storage
Email
SMS/Fax
Private Cloud
▪ Network and Database
CDN
Virtual desktop
Serveur dédié
Security Object Storage
Web hosting
Cloud Storage Over the Box
▪ Licences
Cloud Desktop
Securities
MS Office
Hybrid Cloud
Messaging
MS solutions
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 7
Summary What I would like to speak about: ○
Orchestrating containers
○
Kubernetes: some concepts
○
I have deployed on Minikube, woah!
○
From Minikube to prod
○
Building a managed Kubernetes service
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 8
Kubernetes for Developers Or what’s this kubething for?
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 9
Orchestrating containers
Like herding cats… but in hard mode! #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 10
From bare metal to containers
Another paradigm shift #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 11
Containers are easy…
For developers #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 12
Less simple if you must operate them
Like in a production context #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 13
And what about microservices?
Are you sure you want to operate them by hand? #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 14
Taming microservices with Kubernetes
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 15
Kubernetes Way more than a buzzword!
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 16
Masters and nodes
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 17
Some more details
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 18
Desired State Management
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Istio, a Service Mesh for Kubernetes
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 26
I have deployed on Minikube, woah! A great fastlane into Kubernetes
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 27
Running a full K8s in your laptop
A great learning tool #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 28
Your laptop isn’t a true cluster
Don’t expect real performances #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 29
Minikube is only the beginning
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 30
From Minikube to prod A journey not for the faint of heart
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 31
The truth is somewhere inside…
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 32
The network is going to feel it…
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 33
The storage dilemma
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 34
The ETCD vulnerability
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 35
The storage dilemma
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 36
The ETCD vulnerability
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 37
The security journey
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 38
Security Hardening your Kubernetes
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 39
Kubernetes is insecure by design
It’s a feature, not a bug It’s up to the K8s admin to secure it according to their needs #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 40
Not everybody has the same security needs
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 41
Kubernetes allows to enforce security practices as needed
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 42
Listing some good practices
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 43
And remember, even the best can get hacked
Remain attentive, don’t get too confident #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 44
Managed Kubernetes Because operating K8s isn’t your job
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 45
Kubernetes is powerful
It can make Developers’ and DevOps’ lives easier #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 46
But there is a price: operating it
Lot of things to think about #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 47
Different roles
Each role asks for very different knowledge and skill sets #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 48
Most companies don’t need to operate the clusters
As they don’t build and rack their own servers! #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 49
If you don’t need to build it, choose a certified managed solution
You get the cluster, the operator get the problems #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 50
Like our OVH Managed Kubernetes
Made with 💗 by the Platform team #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 51
Making OVHcloud Mananaged Kubernetes How and why we did what we did
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 52
Kubinception: running K8s on K8s
Using Kubernetes to run Kubernetes #Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 53
Kubinception: where are the nodes?
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 54
Kubinception with several customers
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 55
And the ETCD?
#Codemotion #Barcelona #Kubernetes
@LostInBrittany
Slide 56
Do you want to try?
Send me an email to get some vouchers… horacio.gonzalez@corp.ovh.com
#Codemotion #Barcelona #Kubernetes
@LostInBrittany