1.
Next Generation
Infrastructure
John Willis
@botchagalupe

2.
https://github.com/botchagalupe/my-presentations
John Willis / @botchagalupe

3.
Containers
Kubernetes
Whereof what's past is prologue

4.
Containers
Kubernetes
Whereof what's past is prologue
Kubernetes is a container management system

5.
Containers
Kubernetes
Whereof what's past is prologue
Kubernetes is a container management system

6.
Containers
Kubernetes
Whereof what's past is prologue
Kubernetes is a container management platform
Kubernetes is a container management system

7.
Containers
Kubernetes
Whereof what's past is prologue
Kubernetes is a container management platform
Kubernetes is a container management system

8.
Containers
Kubernetes
Whereof what's past is prologue
Kubernetes is a container management platform
Kubernetes is a container management system
Kubernetes is a services management platform

9.
In Scope
• Open Container Initiative (OCI)
• Container Ecosystem
• Service Mesh
• Kubernetes API Extensibility

10.
Out of Scope
• Introduction to Containers
• Storage
• Networking
• Ecosystem Tools
• Cloud Native Computing Foundation (CNCF)
• Serverless

11.
Container
Ecosystem

12.
Container Ecosystem
• Container Runtimes
• Container Engines
• Container Orchestration

13.
Container Runtime
• Runc
• Railcar
• Kata Containers

14.
Container Engines
• Docker
• RKT
• CRI-O

15.
Docker (engine)
• Moby
• Docker CE
• Docker EE

16.
Cloud (engine - CAS)
• ECS (Amazon)
• ACS (Azure)
• GKE (Google *)

17.
Container Orchestration
• Kubernetes
• Swarm
• Mesos

18.
Kubernetes Distributions
• The-Hard-Way
• Heptio (un-distribution)
• Openshift
• Docker
• Mesos

19.
Cloud (orchestration)
• EKS (Amazon)
• AKS (Azure)
• GKE (Google)

20.
Service
Mesh

21.
Service Mesh
• Infrastructure layer for service to service
communications
• Lightweight proxies deployed together with
the services.
• Ensures consistent routing, security,
resilience and monitoring.

22.
Service Mesh Capabilities
• Observability
• Traffic Control
• Service Discovery
• Load Balancing
• Resilience
• Deployment Strategies
• Security

23.
ISTIO Architecture

24.
ISTIO
• Data Plane
• Intercepts all inbound (ingress) and outbound (egress)
network traffic.
• Service mesh sidecar model (proxy) is an implementation of
the data plane that runs as a container in a Kubernetes Pod.
• Control Plane
• Manages and configures proxies to route traffic, enforce
policies, and collect telemetry.
• Made up of three services: Pilot, Mixer, and Auth.

25.
ISTIO Control Plane
• Pilot
• Service Discovery, RouteRule
and DestinationPolicy.
• Mixer
• Telemetry, ACL’s, White Lists,
Rate Limits, Custom Metrics
• Auth
• Certificate Authority, TLS,
Encryption.

26.
ISTIO Sidecar Proxies
• Envoy
• Envoy is a Layer 7 proxy developed by Lyft.
• Default and most popular implementation of
ISTIO.
• nginMesh (Nginx)
• Works in the ISTIO environment.
• NGINX JavaScript module (LUA)

27.
Kubernetes
API
Extensibility

28.
Kubernetes API
• Kubenernetes APIs allow users to specify the desired
state of a Kubernetes cluster with declarative yaml or
json config for a Resource.
• Facilitating self-healing APIs that continuously watch the
state of the system.
• Leveraging tools that work with any Kubernetes config such
as kubectl and kustomize.
• Integrating with Kubernetes Authz and Authn.
• Developers can build and publish their own Kubernetes APIs
which may be installed into running clusters by cluster
admins.

29.
Custom Resource and
Controllers
• Custom Controllers have access to Kubernetes
API that can see the current state and make
decisions in milliseconds.
• Custom Controllers can use custom rules that
can monitor a cluster, change pods, and scale
endpoints of an applications.
• Useful for abstracting complexities of managing
state-full applications in Kubernetes clusters.

30.
Kubernetes’s Extensibility
Examples

31.
Kubebuilder
• SDK for rapidly building and publishing Kubernetes APIs in
go. It facilitates using canonical techniques used by core
Kubernetes APIs as well as techniques specific to
extensions.
• Initializing new project library dependencies and structure.
• Bootstrapping API scaffolding code, tests, and documentation.
• High level abstractions wrapping client-go, apimachinery, and
apiserver libraries.
• Building and publishing API container images and yaml config.
• Building and publish API reference documentation.