SlideShare uses cookies to improve functionality and performance, and to provide you with relevant advertising. If you continue browsing the site, you agree to the use of cookies on this website. See our User Agreement and Privacy Policy.
SlideShare uses cookies to improve functionality and performance, and to provide you with relevant advertising. If you continue browsing the site, you agree to the use of cookies on this website. See our Privacy Policy and User Agreement for details.
Successfully reported this slideshow.
Activate your 14 day free trial to unlock unlimited reading.
Docker Meetup San Francisco: Radical Agility with Docker & AWS
This slidedeck is about Zalando's open-source PaaS framework STUPS (stups.io), which was built in-house to enable multiple teams to use the full power of AWS without scarifying vital aspects like security, trace-ability and architectural standards. Docker plays a key role in this setup and helps us to realize an easy and robust deployment process.
The corresponding meetup took place at Oct 28 2015 at Microsoft Reactor Space in San Francisco organized by Docker.
This slidedeck is about Zalando's open-source PaaS framework STUPS (stups.io), which was built in-house to enable multiple teams to use the full power of AWS without scarifying vital aspects like security, trace-ability and architectural standards. Docker plays a key role in this setup and helps us to realize an easy and robust deployment process.
The corresponding meetup took place at Oct 28 2015 at Microsoft Reactor Space in San Francisco organized by Docker.
Docker Meetup San Francisco: Radical Agility with Docker & AWS
1.
Radical Agility
with Docker & AWS
Docker San Fransisco Meetup 2015-10-28
volker.pilz@zalando.de
@volkr
tech.zalando.com
2.
ONE OF EUROPE’S LARGEST ONLINE FASHION RETAILERS
★ 15 countries
★ 3 fulfillment centers
★ 16+ mn active customers
★ 2.2+ bn € ($ ~2.5 bn) revenue 2014
★ 135+ mn visits per month
★ 9.000+ employees
★ IPO in Oct 2014
★ ~7 bn € current valuation (Oct 2015)
3.
… WITH A STRONG FOCUS ON TECHNOLOGY
★ 800+ in Tech Dept
★ 5 main tech locations in Europe
○ Berlin
○ Dortmund
○ Hamburg
○ Dublin
○ Helsinki
Visit us our tech page:
tech.zalando.com
4.
Mobile first company: > 50% traffic from mobile devices
15.
➊ One AWS account per Team
➋ Deployment with Docker
➌ Managed SSH Access
➍ REST/OAuth 2.0 mandatory
➎ Traceability of changes
IN A NUTSHELL
STUPS
16.
AWS
STUPS
DOCKER
DEPLOY
SSH ACCESS AUDIT
REPORTS
FULL AWS
ACCESS
A PLATFORM ON TOP OF AMAZON WEB SERVICES
17.
“We provide maximum freedom for
developers while enabling near-real-
time audit compliance for every
single application.”
-- Zalando STUPS Delivery Team
18.
Apache License
Version 2.0STUPS
github.com/zalando-stups
20.
OUR FOCUS FOR TODAY
✓ PierOne
Docker Registry with S3 storage
✓ Senza
Deploy Tool using CloudFormation
✓ Taupage AMI
Amazon Machine Image with Docker Runtime
http://docs.stups.io/en/latest/user-guide/standalone-deployment.html
41.
EXAMPLE STACK
AWS EC2
Taupage AMI
Docker Container
Application
✓ In isolated
team
account
✓ Created by
senza
through
Cloud
Formation
✓ Docker Runtime
✓ Managed SSH access
✓ Audit Logging
✓ Log Collection
✓ Monitoring
✓ Reviewed security
additions
✓ Ubuntu
✓ OpenJDK
✓ Zalando CA
certificate
✓ scm-source
…
42.
● Ubuntu & OpenJDK base image
https://github.com/zalando/docker-openjdk
● Log to STDOUT
● Config via KMS encrypted env vars
● AMI runs Docker daemon out-of-the-box
● Non-root execution
● Persistence via EBS mounts
● Immutable stacks, no orchestration
● DNS endpoints
RECAP: DOCKER IN STUPS