Best Practices for Managing Kubernetes and Stateful Services: Mesosphere & Sysdig Presentation
2 likes409 views
Mesosphere provides a platform (DC/OS) that enables businesses to manage hybrid cloud infrastructures integrating data services, containers, and microservices. Key features include automation, security management, and support for Kubernetes, allowing users to efficiently deploy and operate applications across various environments. The platform is utilized by major companies across diverse industries, enhancing their digital transformation efforts through real-time data and machine learning.
Best Practices for Managing Kubernetes and Stateful Services: Mesosphere & Sysdig Presentation
- 1. © 2016 Mesosphere, Inc. All Rights Reserved. 1 March 2018 MESOSPHERE + SYSDIG
- 3. Mesosphere Helps Businesses Navigate Digital Transformation and Cloud Capture value from real-time dataNew value streams using real-time data & machine learning/AI (e.g., personalization, IoT) Ship more apps quickly Accelerate concept-to-value and improve competitiveness Modernize enterprise architectureSave money with automation and enable hybrid cloud flexibility ● 30% of Fortune 50 companies ● 5 of top 10 banks in N. America ● 5 of top 10 telcos WW ● 5 of 10 most valued startups WW ● 6 top automotive tech companies WW
- 4. © 2016 Mesosphere, Inc. All Rights Reserved. PHYSICAL INFRASTRUCTURE MICROSERVICES, CONTAINERS, & DEV TOOLS VIRTUAL MACHINES PUBLIC CLOUDS DATA SERVICES, MACHINE LEARNING, & AI Security & Compliance Application-Aware Automation Multitenancy Hybrid Cloud Management 100+ MORE DatacenterEdge Datacenter and Cloud as a Single Computing Resource Powered by Apache Mesos 20+ MORE Unified hybrid cloud operations Securely manage cloud, datacenter, and edge infrastructures from a single control plane 4 Mesosphere DC/OS Intelligent resource pooling Optimize workload density for highest utilization with resource guarantees 3 Broad workload coverage Run today & tomorrow’s applications including traditional J2EE, containers, analytics & ML 1 Application-aware automation Automate workload-specific operating procedures to “as-a- Service” anything from Kubernetes to data services 2
- 5. © 2017 Mesosphere, Inc. All Rights Reserved. PHYSICAL INFRASTRUCTURE MICROSERVICES, CONTAINERS, & DEV TOOLS VIRTUAL MACHINES PUBLIC CLOUDS DATA SERVICES, MACHINE LEARNING, & AI Security & Compliance Application- Aware Automation Multitenancy Hybrid Cloud Management 100+ MOR E DatacenterEdge Datacenter and Cloud as a Single Computing Resource Powered by Apache Mesos 20+ MOR E 5 ● Multi-user identity and authentication ● Identity management integration (Active Directory/LDAP) ● Role-Based Access Control for containers, jobs, and data services ● Secrets management ● Public key infrastructure integration ● DC/OS "Universe" app store for datacenter services ● Container orchestration ● Data services management ● Distributed fault tolerant jobs scheduler (Cron) ● Fine grained access control list for containers & frameworks ● Service accounts ● Enterprise monitoring and troubleshooting tools MESOSPHERE DC/OS: KEY FEATURES ● Distributed load balancer with monitoring and name-based VIPs ● Guided on-premise and cloud installation templates (AWS, Azure) ● Powerful CLI and GUI ● Non-disruptive DC/OS upgrades ● Service discovery and basic health monitoring ● Deployment Troubleshooting and Debugging ● Apache Mesos distributed systems kernel ● Management of persistent and external volumes ● Virtual networks with IP per container and network isolation ● Unified Logging and Metrics DC/OS Feature Enterprise DC/OS Feature
- 6. DC/OS OSS and DC/OS Enterprise
- 7. © 2017 Mesosphere, Inc. All Rights Reserved. 7 ● Multi-user identity and authentication ● Identity management integration (Active Directory/LDAP) ● Role-Based Access Control for containers, jobs, and data services ● Secrets management ● Public key infrastructure integration ● DC/OS "Universe" app store for datacenter services ● Container orchestration ● Data services management ● Distributed fault tolerant jobs scheduler (Cron) ● Fine grained access control list for containers & frameworks ● Service accounts ● Enterprise monitoring and troubleshooting tools MESOSPHERE DC/OS: KEY FEATURES ● Distributed load balancer with monitoring and name-based VIPs ● Guided on-premise and cloud installation templates (AWS, Azure) ● Powerful CLI and GUI ● Non-disruptive DC/OS upgrades ● Service discovery and basic health monitoring ● Deployment Troubleshooting and Debugging ● Apache Mesos distributed systems kernel ● Management of persistent and external volumes ● Virtual networks with IP per container and network isolation ● Unified Logging and Metrics DC/OS Feature Enterprise DC/OS Feature
- 8. Kubernetes - As A Service
- 9. Crazy Wicked Simple HA Provisioning 1. Prerequisites 2. Installing the Client Tools 3. Provisioning Compute Resources 4. Provisioning the CA and Generating TLS Certificates 5. Generating Kubernetes Configuration Files for Authentication 6. Generating the Data Encryption Config and Key 7. Bootstrapping the etcd Cluster… 3x for HA 10. Bootstrapping the Kubernetes Control Plane… 3x for HA 13. Bootstrapping the Kubernetes Worker Nodes 14. Configuring kubectl for Remote Access 15. Provisioning Pod Network Routes 16. Deploying the DNS Cluster Add-on… Deploying other Add-ons 20. Smoke Test 21. Cleaning Up We turn this…. $ dcos package install kubernetes Into this….
- 10. Why Kubernetes on DC/OS: Automation Management Ability to easily create & scale pure play Kubernetes, data services, and OSS components anywhere Lifecycle Ability to install/upgrade/patch every component of the solution stack (data, K8s, CI/CDs and ML) Independence Ability for each LOB to choose components and manage resources and lifecycle according to its will Security 30% Fortune 50 | CNI | TLS | Authentication
- 11. Kubernetes with DC/OS 1.11 Features Simple HA Cluster Provisioning Robust API Server Auth Non-disruptive Upgrades Disaster Recovery Scalable Kubernetes Transport Layer Security Choice of Ingress and CNI* * Container Network Interface
- 12. Demo, The First: Deploying Kubernetes the easy way
- 13. Demo, The Second: Day 2 Operations the easy way
- 14. Demo, The Third: Kafka Streams just for fun J