SlideShare a Scribd company logo
1 of 39
How Online Retailer Resident Scaled DevOps
with AWS and CloudShell Colony
Quali
Digital transformation is changing the world
The digital transformation bottleneck is environments
What is an “environment”?
Environments in DevOps
The benefits of EaaS approach
Resident
DevOps Goals
Using CloudShell Colony and AWS to scale DevOps – Solution
Drill Down
Results
Vision
AWS
Kubernetes on AWS with Amazon EKS
Conclusion
Q&A
Digital Transformation
is Changing the World
Maya Ber Lerner, CTO
Quali
The Digital Transformation Bottleneck is Environments
Approval requests
Stakeholders
Responsible for Infrastructure
Shadow IT
Waiting for
infrastructure kills
innovation
Bottleneck for innovation
Uncontrolled Direct
access to
infrastructure
Responsible for
cloud cost,
security and
compliance
DevOps Environment Challenges
Using environments
for development,
testing, support, Ops
• How can I offer self-service?
• How can I scale DevOps when I
integrate open source tools in the
broader toolchain?
• How can I make it easier to maintain
and troubleshoot environments?
Responsible to
provide environments
for DevOps
• How can I get environments fast?
• How can I do my job without
environments being a bottleneck?
• How can I get environments without
being responsible for cloud spend
or security?
• How can we benefit from the power and
flexibility of the cloud without losing
control?
• How can I manage environment cost?
• How can we avoid environment
security and compliance blind spots?
Innovate At Scale Under Control
Logging & Monitoring
Data/Service Virtualization
Applications Dev/Test/Sec Tools
Infrastructure
An environment is not about any single technology.
It’s about a business need
Environments Fuel Innovation
All the components you need to get a job done
Environments for DevOps
CI/CD
Dev Functional tests ProductionPerformance tests Dynamic security Staging
Source ControlArtifact Repository
Chaos monkey
Consume environments throughout the
value stream
Keep blueprints in your source
control tool
Get application artifacts from
your artifact repository
Integrate with Infrastructure as
Code tools
Infrastructure as Code
After
Before
Waiting for
infrastructure kills
innovation
Enabler for innovation
Business is no
longer constrained
by infrastructure
Digital Transformation
Stakeholders Policies and access Control
Blueprints
Approval requests
Stakeholders
Responsible for Infrastructure
Shadow IT
Bottleneck for innovation
Uncontrolled Direct
access to
infrastructure
Responsible for Infrastructure
Benefits of Environment as a Service
SERVE A
BUSINESS NEED
an environment
represents a business
need, abstracted from the
technology
SCALE
standardize and re-use
automation across the
value stream
CONTROL
automated cost control,
security and compliance
DRIVE BUSINESS
INSIGHTS
connect infrastructure
consumption data with
business need
Environment as a Service with CloudShell Colony
Sign Up
Create an account in
CloudShell Colony and
connect your
cloud-provider
1
Blueprint
Blueprint your
environment
2 Environments at
scale™
Launch environments from a self- service UI
or from the CI/CD pipeline with
Out-of-Box plugins.
All the way from development to production
3
Let’s see how Resident turned
this vision into reality with
CloudShell Colony on AWS cloud
Pavel Eliav, Head of DevOps
Resident
Introduction to Resident
Resident is an innovative retail ISV managing over 10 online brands
Resident is a house of direct-to-consumer brands in the home
goods space. The company owns and operates multiple brands
catering to different consumer furnishing needs including Nectar
and DreamCloud.
The company is headquartered in San Francisco with a
dedicated New York City office and an R&D facility in Tel
Aviv. Yet, at the heart of the company is the belief in
building a team using the best talent possible, no matter
where they reside. From 15 cities across 5 countries,
Resident also has a diversified virtual workforce of more
than 200 employees.
https://www.residenthome.com
Resident’s DevOps Goals
• Support fast growth with multiple globally distributed teams
• Avoid developers sharing static integration and staging environments >
remove bottlenecks and conflicts
• Make it possible to provide fast feedback on new features
• Cut time spent on ongoing environment maintenance and
troubleshooting activity
• Control and secure infrastructure access
• Accurately track AWS usage
The Resident Solution
On-Demand Secure Environments throughout the release pipeline.
ProductionQA Staging
Source Control Artifact RepositoryCloud Provider Pipeline
Used for:
Feature Development,
Integration Tests (CI)
https://www.nectarsleep.com/
ChatOps Bot
Used for:
Product Review
Last mile Validation
Security tests
https://www.dreamcloudsleep.com/
https://www.bundleliving.com/
https://www.wovenlyrugs.com/
… and more
Development
Used for:
Manual QA Tests
Use Case Drill Down – Self Service Environments
1 2
Environment Ready!
Results - Innovating Faster
Self Service in under 5 minutes
Global teams get access to secure https environments
using a self-service slack bot
No Static Environments
Remove conflicts and bottlenecks
100% Role Based Access Control
Access control to cloud accounts
Increased Development Speed
Dynamic environments make it possible to immediately
test new features, Develop more features in parallel.
Visibility on Cloud Utilization
Environments are tagged automatically and tracked.
Scale
Easy to manage standardized environments
The Vision
Adopting Containers & Kubernetes
• Launch environments on Amazon EKS Kubernetes Service.
• Migrate existing assets
• Overcome technical & cultural challenges with CloudShell Colony
Kubernetes on AWS
with Amazon EKS
Kevin Wall, Partner Solutions Architect
AWS Partner Network
• Create a culture of innovation by organizing into small DevOps teams
• Continually evaluate your security posture by automating security
• Componentize applications using microservices
• Update applications & infrastructure quickly by automating CI/CD
• Standardize and automate operations by modeling infrastructure as code
• Simplify infrastructure management with serverless technologies
• Improve application performance by increasing observability
AWS best practices for building modern applications
Monoliths and Microservices
Monolith
Does everything
Microservice
Does one thing
AWS Container Services Landscape
Management
Deployment, Scheduling,
Scaling & Management of
containerized applications
Hosting
Where the containers run
Amazon Elastic
Container Service
Amazon Elastic
Kubernetes
Service
Amazon EC2 AWS Fargate
Image Registry
Container Image Repository
Amazon Elastic
Container Registry
Balancing flexibility and simplicity:
Workload-by-workload
Flexibility focused
Low level of opinion
Low level of abstraction
Focus on infrastructure
and configuration
Installing, configuring, and managing
managing my compute environment is
environment is critical to achieving my
achieving my goals
Value simplicity
High level of opinion
High level of abstraction
Focus only on app
and primitive
Having a standardized and
on-demand compute environment
is critical to achieving my goals
Amazon Elastic
Container Service for
Kubernetes
51%
of Kubernetes workloads
run on AWS today
— CNCF
Customers adopting Kubernetes on AWS
Helps you run
containers at scale
Open source container
management platform
Gives you primitives
for building
modern applications
What is Kubernetes?
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Cluster.example.com
Node Components
Kubectl
Master Components
(Control Plane)
etcd
API Server
Kubelet
Worker
node
Kubelet
Worker
node
Kube-proxy Kube-proxy
Scheduler
Controller Mgr.
What is Kubernetes?
Amazon EKS
Worker VPC (your account)
Kubectl
Master VPC (AWS account)
etcd
AZ 1
API Server
etcd
API Server
prod-cluster-123.eks.amazonaws.com
EKS-owned ENI
Kubelet
AZ 1
Worker
node
EKS-owned ENI
Kubelet
AZ 2
Worker
node
AZ 2
Kube-proxy Kube-proxy
[mycluster].eks.amazonaws.com
Availability
Zone 1
Availability
Zone 2
Availability
Zone 3
Kubectl
Master VPC (AWS account)
Worker VPC
(Your account)
AWS Identity and Access Management
(IAM) Authentication
Kubectl
3) Authorizes AWS identity with RBAC
K8s API
1) Passes AWS identity
2) Verifies AWS identity
4) K8s action
allowed/denied
Container Storage Interface (CSI)
A flexible standard for orchestration
and storage provider connections
We support the CSI standard through following drivers:
Amazon Elastic Block Store: Amazon EBS CSI Driver
Amazon Elastic File System: Amazon EFS CSI Driver
Amazon FSx for Lustre: Amazon FSx CSI Driver
• Amazon EKS-Optimized AMI
• Standard EC2 compute instance types
• P2 and P3 accelerated instances
• i3 bare metal
• Spot Instances
Worker Node Instance Flexibility
Amazon EKS is Kubernetes-certified
Kubernetes conformance
• Amazon EKS runs 100% upstream Kubernetes
• Guaranteed portability and interoperability
• Timely updates
• Confirmability
Continuous Deployment Cycle
Code
Repository
Code Pipeline Execution New Image Generated Trigger Deployment
1 2 4
3 5
6
1
Developers continuously integrate
changes into a main branch hosted
within a repo
2
Triggers an execution of the pipeline
when a new version is found, builds
a new image with build id
3
Pushes the newly built image
tagged with build id to container repo
4
Trigger application deployment
5
Update Kubernetes deployment
6
Fetches new container image
and performs a rolling update
of deployment
Developer
Container Repo
Rich Partner Ecosystem
DevOpsFoundation Security Networking
Monitoring &
logging
More Information
Amazon EKS
https://aws.amazon.com/eks/
AWS YouTube Channel
https://www.youtube.com/user/AmazonWebServices
Amazon EKS Workshop
https://eksworkshop.com/
Conclusion
• Environment automation is great
Q&A
Challenges Results
Case Study |
quali.com
Thank You!

More Related Content

What's hot

From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!Jules Pierre-Louis
 
App Modernisation with Microsoft Azure
App Modernisation with Microsoft AzureApp Modernisation with Microsoft Azure
App Modernisation with Microsoft AzureAdam Stephensen
 
Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps  Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps Chetan Gordhan
 
Introduction to DevSecOps
Introduction to DevSecOpsIntroduction to DevSecOps
Introduction to DevSecOpsSetu Parimi
 
Operationalize all the network things
Operationalize all the network thingsOperationalize all the network things
Operationalize all the network thingsLori MacVittie
 
Mainframe MRI from CA Technologies
Mainframe MRI from CA TechnologiesMainframe MRI from CA Technologies
Mainframe MRI from CA TechnologiesCA Technologies
 
Infrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service FabricInfrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service FabricSaba Jamalian
 
Secure your Application with Google cloud armor
Secure your Application with Google cloud armorSecure your Application with Google cloud armor
Secure your Application with Google cloud armorDevOps Indonesia
 
State of Mainframe DevOps
State of Mainframe DevOpsState of Mainframe DevOps
State of Mainframe DevOpsDevOps.com
 
Pushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservicesPushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservicesLori MacVittie
 
Securing Your Database Dynamic DB Credentials
Securing Your Database  Dynamic DB CredentialsSecuring Your Database  Dynamic DB Credentials
Securing Your Database Dynamic DB CredentialsDevOps Indonesia
 
DevSecOps in 10 minutes
DevSecOps in 10 minutesDevSecOps in 10 minutes
DevSecOps in 10 minuteskieranjacobsen
 
The DevOps Journey
The DevOps JourneyThe DevOps Journey
The DevOps JourneyMicro Focus
 
DevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security SuccessDevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security SuccessPuma Security, LLC
 
Iac evolutions
Iac evolutionsIac evolutions
Iac evolutionsPrancer Io
 
When Developers Operate and Operators Develop
When Developers Operate and Operators DevelopWhen Developers Operate and Operators Develop
When Developers Operate and Operators DevelopAdrian Cockcroft
 
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...CloudIDSummit
 
Application_security_Strategic
Application_security_StrategicApplication_security_Strategic
Application_security_StrategicRamesh VG
 

What's hot (20)

From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!
 
App Modernisation with Microsoft Azure
App Modernisation with Microsoft AzureApp Modernisation with Microsoft Azure
App Modernisation with Microsoft Azure
 
Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps  Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps
 
Introduction to DevSecOps
Introduction to DevSecOpsIntroduction to DevSecOps
Introduction to DevSecOps
 
Securing DevOps Lifecycle
Securing DevOps LifecycleSecuring DevOps Lifecycle
Securing DevOps Lifecycle
 
Operationalize all the network things
Operationalize all the network thingsOperationalize all the network things
Operationalize all the network things
 
Mainframe MRI from CA Technologies
Mainframe MRI from CA TechnologiesMainframe MRI from CA Technologies
Mainframe MRI from CA Technologies
 
Infrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service FabricInfrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service Fabric
 
Secure your Application with Google cloud armor
Secure your Application with Google cloud armorSecure your Application with Google cloud armor
Secure your Application with Google cloud armor
 
State of Mainframe DevOps
State of Mainframe DevOpsState of Mainframe DevOps
State of Mainframe DevOps
 
Pushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservicesPushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservices
 
Securing Your Database Dynamic DB Credentials
Securing Your Database  Dynamic DB CredentialsSecuring Your Database  Dynamic DB Credentials
Securing Your Database Dynamic DB Credentials
 
DevSecOps in 10 minutes
DevSecOps in 10 minutesDevSecOps in 10 minutes
DevSecOps in 10 minutes
 
The DevOps Journey
The DevOps JourneyThe DevOps Journey
The DevOps Journey
 
DevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security SuccessDevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security Success
 
Iac evolutions
Iac evolutionsIac evolutions
Iac evolutions
 
Introduction to Microservices
Introduction to MicroservicesIntroduction to Microservices
Introduction to Microservices
 
When Developers Operate and Operators Develop
When Developers Operate and Operators DevelopWhen Developers Operate and Operators Develop
When Developers Operate and Operators Develop
 
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
 
Application_security_Strategic
Application_security_StrategicApplication_security_Strategic
Application_security_Strategic
 

Similar to How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony

The state of containers for your DevOps journey
The state of containers for your DevOps journeyThe state of containers for your DevOps journey
The state of containers for your DevOps journeyAgile Montréal
 
Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Adrian Todorov
 
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...Ian Choi
 
Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4WhaTap Labs
 
Containers and Kubernetes
Containers and KubernetesContainers and Kubernetes
Containers and KubernetesNills Franssens
 
All you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft AzureAll you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft AzureEvgeny Rudinsky
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsJessica Deen
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
 How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPTAmazon Web Services
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS
 How Symantec Cloud Workload Protection Secures LifeLock on AWS How Symantec Cloud Workload Protection Secures LifeLock on AWS
How Symantec Cloud Workload Protection Secures LifeLock on AWSAmazon Web Services
 
Continuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWSContinuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWSAmazon Web Services
 
Improving Security Agility using DevSecOps
Improving Security Agility using DevSecOpsImproving Security Agility using DevSecOps
Improving Security Agility using DevSecOpsAmazon Web Services
 
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...Amazon Web Services
 
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWSAWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWSAmazon Web Services
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsJessica Deen
 
Microsoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on AzureMicrosoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on AzureJessica Deen
 
Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201Amazon Web Services
 
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)Alex Henthorn-Iwane
 
Kubernetes for .NET Developers
Kubernetes for .NET DevelopersKubernetes for .NET Developers
Kubernetes for .NET DevelopersLorenzo Barbieri
 
Running Containers on Azure
Running Containers on AzureRunning Containers on Azure
Running Containers on AzureNick Trogh
 

Similar to How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony (20)

The state of containers for your DevOps journey
The state of containers for your DevOps journeyThe state of containers for your DevOps journey
The state of containers for your DevOps journey
 
Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...
 
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
 
Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4
 
Containers and Kubernetes
Containers and KubernetesContainers and Kubernetes
Containers and Kubernetes
 
All you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft AzureAll you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft Azure
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOps
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
 How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS
 How Symantec Cloud Workload Protection Secures LifeLock on AWS How Symantec Cloud Workload Protection Secures LifeLock on AWS
How Symantec Cloud Workload Protection Secures LifeLock on AWS
 
Continuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWSContinuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWS
 
Improving Security Agility using DevSecOps
Improving Security Agility using DevSecOpsImproving Security Agility using DevSecOps
Improving Security Agility using DevSecOps
 
Kubernetes vs App Service
Kubernetes vs App ServiceKubernetes vs App Service
Kubernetes vs App Service
 
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
 
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWSAWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOps
 
Microsoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on AzureMicrosoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on Azure
 
Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201
 
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
 
Kubernetes for .NET Developers
Kubernetes for .NET DevelopersKubernetes for .NET Developers
Kubernetes for .NET Developers
 
Running Containers on Azure
Running Containers on AzureRunning Containers on Azure
Running Containers on Azure
 

More from DevOps.com

Modernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source SoftwareModernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source SoftwareDevOps.com
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...DevOps.com
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...DevOps.com
 
Next Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and SnykNext Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and SnykDevOps.com
 
Vulnerability Discovery in the Cloud
Vulnerability Discovery in the CloudVulnerability Discovery in the Cloud
Vulnerability Discovery in the CloudDevOps.com
 
2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and Predictions2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and PredictionsDevOps.com
 
A New Year’s Ransomware Resolution
A New Year’s Ransomware ResolutionA New Year’s Ransomware Resolution
A New Year’s Ransomware ResolutionDevOps.com
 
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)DevOps.com
 
Don't Panic! Effective Incident Response
Don't Panic! Effective Incident ResponseDon't Panic! Effective Incident Response
Don't Panic! Effective Incident ResponseDevOps.com
 
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's CultureCreating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's CultureDevOps.com
 
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with TeleportRole Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with TeleportDevOps.com
 
Monitoring Serverless Applications with Datadog
Monitoring Serverless Applications with DatadogMonitoring Serverless Applications with Datadog
Monitoring Serverless Applications with DatadogDevOps.com
 
Deliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or PrivatelyDeliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or PrivatelyDevOps.com
 
Securing medical apps in the age of covid final
Securing medical apps in the age of covid finalSecuring medical apps in the age of covid final
Securing medical apps in the age of covid finalDevOps.com
 
How to Build a Healthy On-Call Culture
How to Build a Healthy On-Call CultureHow to Build a Healthy On-Call Culture
How to Build a Healthy On-Call CultureDevOps.com
 
The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021DevOps.com
 
Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?DevOps.com
 
Secure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift EnvironmentsSecure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift EnvironmentsDevOps.com
 
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...DevOps.com
 
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...DevOps.com
 

More from DevOps.com (20)

Modernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source SoftwareModernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source Software
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
 
Next Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and SnykNext Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and Snyk
 
Vulnerability Discovery in the Cloud
Vulnerability Discovery in the CloudVulnerability Discovery in the Cloud
Vulnerability Discovery in the Cloud
 
2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and Predictions2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and Predictions
 
A New Year’s Ransomware Resolution
A New Year’s Ransomware ResolutionA New Year’s Ransomware Resolution
A New Year’s Ransomware Resolution
 
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
 
Don't Panic! Effective Incident Response
Don't Panic! Effective Incident ResponseDon't Panic! Effective Incident Response
Don't Panic! Effective Incident Response
 
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's CultureCreating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
 
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with TeleportRole Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
 
Monitoring Serverless Applications with Datadog
Monitoring Serverless Applications with DatadogMonitoring Serverless Applications with Datadog
Monitoring Serverless Applications with Datadog
 
Deliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or PrivatelyDeliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or Privately
 
Securing medical apps in the age of covid final
Securing medical apps in the age of covid finalSecuring medical apps in the age of covid final
Securing medical apps in the age of covid final
 
How to Build a Healthy On-Call Culture
How to Build a Healthy On-Call CultureHow to Build a Healthy On-Call Culture
How to Build a Healthy On-Call Culture
 
The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021
 
Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?
 
Secure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift EnvironmentsSecure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift Environments
 
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
 
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
 

Recently uploaded

Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Patryk Bandurski
 
Connect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationConnect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationSlibray Presentation
 
costume and set research powerpoint presentation
costume and set research powerpoint presentationcostume and set research powerpoint presentation
costume and set research powerpoint presentationphoebematthew05
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity
 
Install Stable Diffusion in windows machine
Install Stable Diffusion in windows machineInstall Stable Diffusion in windows machine
Install Stable Diffusion in windows machinePadma Pradeep
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024The Digital Insurer
 
Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationBeyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationSafe Software
 
Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitecturePixlogix Infotech
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Mark Simos
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024Lorenzo Miniero
 
Human Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR SystemsHuman Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR SystemsMark Billinghurst
 
CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):comworks
 
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticsKotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticscarlostorres15106
 
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks..."LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...Fwdays
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Mattias Andersson
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brandgvaughan
 

Recently uploaded (20)

DMCC Future of Trade Web3 - Special Edition
DMCC Future of Trade Web3 - Special EditionDMCC Future of Trade Web3 - Special Edition
DMCC Future of Trade Web3 - Special Edition
 
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
Integration and Automation in Practice: CI/CD in Mule Integration and Automat...
 
Connect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationConnect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck Presentation
 
costume and set research powerpoint presentation
costume and set research powerpoint presentationcostume and set research powerpoint presentation
costume and set research powerpoint presentation
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio Web
 
Install Stable Diffusion in windows machine
Install Stable Diffusion in windows machineInstall Stable Diffusion in windows machine
Install Stable Diffusion in windows machine
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024
 
Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationBeyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
 
Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC Architecture
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024
 
Human Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR SystemsHuman Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR Systems
 
CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):CloudStudio User manual (basic edition):
CloudStudio User manual (basic edition):
 
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticsKotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics
 
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks..."LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?
 
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptxE-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brand
 

How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony

  • 1. How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony
  • 2. Quali Digital transformation is changing the world The digital transformation bottleneck is environments What is an “environment”? Environments in DevOps The benefits of EaaS approach Resident DevOps Goals Using CloudShell Colony and AWS to scale DevOps – Solution Drill Down Results Vision AWS Kubernetes on AWS with Amazon EKS Conclusion Q&A
  • 3. Digital Transformation is Changing the World Maya Ber Lerner, CTO Quali
  • 4. The Digital Transformation Bottleneck is Environments Approval requests Stakeholders Responsible for Infrastructure Shadow IT Waiting for infrastructure kills innovation Bottleneck for innovation Uncontrolled Direct access to infrastructure
  • 5. Responsible for cloud cost, security and compliance DevOps Environment Challenges Using environments for development, testing, support, Ops • How can I offer self-service? • How can I scale DevOps when I integrate open source tools in the broader toolchain? • How can I make it easier to maintain and troubleshoot environments? Responsible to provide environments for DevOps • How can I get environments fast? • How can I do my job without environments being a bottleneck? • How can I get environments without being responsible for cloud spend or security? • How can we benefit from the power and flexibility of the cloud without losing control? • How can I manage environment cost? • How can we avoid environment security and compliance blind spots? Innovate At Scale Under Control
  • 6. Logging & Monitoring Data/Service Virtualization Applications Dev/Test/Sec Tools Infrastructure An environment is not about any single technology. It’s about a business need Environments Fuel Innovation All the components you need to get a job done
  • 7. Environments for DevOps CI/CD Dev Functional tests ProductionPerformance tests Dynamic security Staging Source ControlArtifact Repository Chaos monkey Consume environments throughout the value stream Keep blueprints in your source control tool Get application artifacts from your artifact repository Integrate with Infrastructure as Code tools Infrastructure as Code
  • 8. After Before Waiting for infrastructure kills innovation Enabler for innovation Business is no longer constrained by infrastructure Digital Transformation Stakeholders Policies and access Control Blueprints Approval requests Stakeholders Responsible for Infrastructure Shadow IT Bottleneck for innovation Uncontrolled Direct access to infrastructure Responsible for Infrastructure
  • 9. Benefits of Environment as a Service SERVE A BUSINESS NEED an environment represents a business need, abstracted from the technology SCALE standardize and re-use automation across the value stream CONTROL automated cost control, security and compliance DRIVE BUSINESS INSIGHTS connect infrastructure consumption data with business need
  • 10. Environment as a Service with CloudShell Colony Sign Up Create an account in CloudShell Colony and connect your cloud-provider 1 Blueprint Blueprint your environment 2 Environments at scale™ Launch environments from a self- service UI or from the CI/CD pipeline with Out-of-Box plugins. All the way from development to production 3
  • 11. Let’s see how Resident turned this vision into reality with CloudShell Colony on AWS cloud Pavel Eliav, Head of DevOps Resident
  • 12. Introduction to Resident Resident is an innovative retail ISV managing over 10 online brands Resident is a house of direct-to-consumer brands in the home goods space. The company owns and operates multiple brands catering to different consumer furnishing needs including Nectar and DreamCloud. The company is headquartered in San Francisco with a dedicated New York City office and an R&D facility in Tel Aviv. Yet, at the heart of the company is the belief in building a team using the best talent possible, no matter where they reside. From 15 cities across 5 countries, Resident also has a diversified virtual workforce of more than 200 employees. https://www.residenthome.com
  • 13. Resident’s DevOps Goals • Support fast growth with multiple globally distributed teams • Avoid developers sharing static integration and staging environments > remove bottlenecks and conflicts • Make it possible to provide fast feedback on new features • Cut time spent on ongoing environment maintenance and troubleshooting activity • Control and secure infrastructure access • Accurately track AWS usage
  • 14. The Resident Solution On-Demand Secure Environments throughout the release pipeline. ProductionQA Staging Source Control Artifact RepositoryCloud Provider Pipeline Used for: Feature Development, Integration Tests (CI) https://www.nectarsleep.com/ ChatOps Bot Used for: Product Review Last mile Validation Security tests https://www.dreamcloudsleep.com/ https://www.bundleliving.com/ https://www.wovenlyrugs.com/ … and more Development Used for: Manual QA Tests
  • 15. Use Case Drill Down – Self Service Environments 1 2 Environment Ready!
  • 16. Results - Innovating Faster Self Service in under 5 minutes Global teams get access to secure https environments using a self-service slack bot No Static Environments Remove conflicts and bottlenecks 100% Role Based Access Control Access control to cloud accounts Increased Development Speed Dynamic environments make it possible to immediately test new features, Develop more features in parallel. Visibility on Cloud Utilization Environments are tagged automatically and tracked. Scale Easy to manage standardized environments
  • 17. The Vision Adopting Containers & Kubernetes • Launch environments on Amazon EKS Kubernetes Service. • Migrate existing assets • Overcome technical & cultural challenges with CloudShell Colony
  • 18. Kubernetes on AWS with Amazon EKS Kevin Wall, Partner Solutions Architect AWS Partner Network
  • 19. • Create a culture of innovation by organizing into small DevOps teams • Continually evaluate your security posture by automating security • Componentize applications using microservices • Update applications & infrastructure quickly by automating CI/CD • Standardize and automate operations by modeling infrastructure as code • Simplify infrastructure management with serverless technologies • Improve application performance by increasing observability AWS best practices for building modern applications
  • 20. Monoliths and Microservices Monolith Does everything Microservice Does one thing
  • 21. AWS Container Services Landscape Management Deployment, Scheduling, Scaling & Management of containerized applications Hosting Where the containers run Amazon Elastic Container Service Amazon Elastic Kubernetes Service Amazon EC2 AWS Fargate Image Registry Container Image Repository Amazon Elastic Container Registry
  • 22. Balancing flexibility and simplicity: Workload-by-workload Flexibility focused Low level of opinion Low level of abstraction Focus on infrastructure and configuration Installing, configuring, and managing managing my compute environment is environment is critical to achieving my achieving my goals Value simplicity High level of opinion High level of abstraction Focus only on app and primitive Having a standardized and on-demand compute environment is critical to achieving my goals
  • 24. 51% of Kubernetes workloads run on AWS today — CNCF
  • 26. Helps you run containers at scale Open source container management platform Gives you primitives for building modern applications What is Kubernetes? © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
  • 27. Cluster.example.com Node Components Kubectl Master Components (Control Plane) etcd API Server Kubelet Worker node Kubelet Worker node Kube-proxy Kube-proxy Scheduler Controller Mgr. What is Kubernetes?
  • 28. Amazon EKS Worker VPC (your account) Kubectl Master VPC (AWS account) etcd AZ 1 API Server etcd API Server prod-cluster-123.eks.amazonaws.com EKS-owned ENI Kubelet AZ 1 Worker node EKS-owned ENI Kubelet AZ 2 Worker node AZ 2 Kube-proxy Kube-proxy
  • 29. [mycluster].eks.amazonaws.com Availability Zone 1 Availability Zone 2 Availability Zone 3 Kubectl Master VPC (AWS account) Worker VPC (Your account)
  • 30. AWS Identity and Access Management (IAM) Authentication Kubectl 3) Authorizes AWS identity with RBAC K8s API 1) Passes AWS identity 2) Verifies AWS identity 4) K8s action allowed/denied
  • 31. Container Storage Interface (CSI) A flexible standard for orchestration and storage provider connections We support the CSI standard through following drivers: Amazon Elastic Block Store: Amazon EBS CSI Driver Amazon Elastic File System: Amazon EFS CSI Driver Amazon FSx for Lustre: Amazon FSx CSI Driver
  • 32. • Amazon EKS-Optimized AMI • Standard EC2 compute instance types • P2 and P3 accelerated instances • i3 bare metal • Spot Instances Worker Node Instance Flexibility
  • 33. Amazon EKS is Kubernetes-certified Kubernetes conformance • Amazon EKS runs 100% upstream Kubernetes • Guaranteed portability and interoperability • Timely updates • Confirmability
  • 34. Continuous Deployment Cycle Code Repository Code Pipeline Execution New Image Generated Trigger Deployment 1 2 4 3 5 6 1 Developers continuously integrate changes into a main branch hosted within a repo 2 Triggers an execution of the pipeline when a new version is found, builds a new image with build id 3 Pushes the newly built image tagged with build id to container repo 4 Trigger application deployment 5 Update Kubernetes deployment 6 Fetches new container image and performs a rolling update of deployment Developer Container Repo
  • 35. Rich Partner Ecosystem DevOpsFoundation Security Networking Monitoring & logging
  • 36. More Information Amazon EKS https://aws.amazon.com/eks/ AWS YouTube Channel https://www.youtube.com/user/AmazonWebServices Amazon EKS Workshop https://eksworkshop.com/
  • 38. Q&A
  • 39. Challenges Results Case Study | quali.com Thank You!

Editor's Notes

  1. Environment can be a lot of different components, because it’s not about technology. Today you can have VMs or containers or switches or firewalls in your environment, and tomorrow there may be some other thing – but you will still need an environment. For testing, for development, for production, for demos and PoCs
  2. Teams get access to secure https environments using a self-service slack bot in under 5 minutes Transition from static to dynamic environments – optimizing cloud consumption and increasing development speed Testing on production-like environments Environments standardized and easy to manage Cloud Account Access control All cloud infrastructure is automatically and consistently tagged