Kubernetes-Based Paas

1. <#>
基于Kubernetes的KStar
PaaS平台
Qiu Xinhua
8/21/2018

2. Topics
8/21/2018
2
× KStar功能结构
× KStar技术架构
× Overview
× Cluster Management Architecture
× APaaS Overview
× APaaS User Management
× APaaS CI/CD
× APaaS Monitoring/Logging

3. 功能结构
8/21/2018
3

4. Technical Architecture -- Overview
8/21/2018
4
KStar Cluster Management
User Auth RBAC Policy/SecurityProvisioning
A-PaaS
App/Catalog CI/CD MornitoringDashboard Logging
KStar Kubernetes Engine
Cluster On-Premises
Cloud Vendors
EKS AKS GKE
VMs

5. Technical Architecture --
KStar Cluster Management
8/21/2018
5
AKSK8s Cluster/On-Premises
KStar Cluster Server
KStar API Server
Cluster Controller
IM Agent
A-PaaS (UI/CLI/API)
Cluster Agent 1 Cluster Agent 2 Cluster Agent N
ETCD
EKS

6. Technical Architecture -- KStar APaaS
Overview
8/21/2018
6
KStar APaaS
User
KStar API Server
Clusters
User Management
Dashboard
Monitoring
Logging
CI/CD APP Catalog
Registry

7. Technical Architecture -- KStar APaaS
User Managment
8/21/2018
7
KStar APaaS -- User Managment
KStar API Server
User Authorization SSO
User Authentication
SAML
OpenID/OAuth2
Local Auth
LDAP
RBAC ABAC Multi-Tenancy

8. Technical Architecture -- KStar APaaS
CI/CD
8/21/2018
8
0 git
commit
1 triger build Job
2 checkout code
3 code building
unit testing
code analysis
security
scanning
5 push image
7 triger to
deploy
8 pull image
9 deploy
4 image building
6 image security
scanning
KStar API Server

9. Technical Architecture -- KStar APaaS
Monitoring/Logging
8/21/2018
9
× Monitoring
× 集群监控，Kubernetes Dashboard
× Heapster/Prometheus/cAdvisor 集群
/VM/Container 不同级别指标收集
× InfluxDB，监控指标数据存储
× Grafana，监控数据 可视化、告警
× Logging
× Fluentd， Log收集
× Elasticsearch， Log搜索存储
× Kibana，Log可视化

10. 8/21/2018
10
Thanks
Q & A