Brendan Burns giving on talk at GlueCon 2015 on containers, devops, decoupling, system design, kubernetes and google container engine.

1. Kubernetes
Decoupling, DevOps and Composite Containers
Brendan Burns
Senior Staff Software Engineer

2. https://www.flickr.
com/photos/greeblie/2224507899

3. Decoupling SRE
Application SRE
Hardware SRE
Cluster SRE
Kernel/OS SRE

4. Homogenous Machine Fleet (Virtual or Physical)
Kubernetes API: Unified Compute Substrate
Application containers

5. Modular Container Design
“Good fences make good neighbors” - Robert Frost

6. Kubernetes Concepts: Pods
Container Foo
Namespaces
- Net
- IPC
- ..
Container Bar

7. Pod Sidecars
node.js
Git
Synchronizer
Sidecars extend and enhance

8. Pod Sidecars
nginx
Git
Synchronizer
Sidecars extend and enhance

9. Pod Ambassadors
web app twemproxy
Ambassadors represent and present
localhost

10. Pod Adapters
redis redis exporter
Adapters normalize and abstract
localhost

11. Pod Demo

12. A Quick Look @ Your Code

13. & Your Code Community
Contribute
Share Use Keep

14. Quick Look @ Your Cluster

15. Your Next Cluster
● Only update the part that needs updating
● Clean boundaries enable agile teams
● Advantages of reuse:
○ Faster to build systems
○ Leverage expert knowledge everywhere
○ Consistent interface and experience

16. Modular Container Design
● Separate concerns (e.g. “webserver”, “git syncher”)
● Design for reuse
○ Parameterize
○ Document
● Build consistent experiences
● Avoid NIH

17. From Legos to Starships

18. Kubernetes Concepts: Labels
Container Foo
Container Bar
Namespaces
- Net
- IPC
- ..

19. Kubernetes Concepts: Labels
frontend
production
production
backend
production
backend
bburns
testing

20. Kubernetes Concepts: Labels
frontend
production
production
backend
production
backend
bburns
testing
stage: production

21. Kubernetes Concepts: Labels
frontend
production
production
backend
production
backend
bburns
testing
stage: production
role: backend

22. Kubernetes Concepts:
Replication Controller
production
backend
production
backendproduction
backend
#N

23. Kubernetes Concepts: Services
production
backend
production
backend
production
backend
port(s)
name
1.2.3.4
“name”

24. Using labels in ops
frontend
production
frontend
production
frontend
production

25. Using labels in ops
frontend
production
frontend
production
frontend
production

26. Using labels in ops
frontend
production
frontend frontend
production

27. Using labels in ops
frontend
production
frontend
frontend
production

28. Using labels in ops
frontend
production
frontend
frontend
production
frontend
production

29. Using labels in ops
frontend
production
frontend
production
frontend
production
v1 v1 v1

30. Using labels in ops
frontend
production
frontend
production
frontend
production
v1 v1 v1
frontend
production
v2
Size: 0

31. Using labels in ops
frontend
production
frontend
production
v1 v1
frontend
production
v2

32. Using labels in ops
frontend
production
v1
frontend
production
frontend
production
v2 v2

33. Using labels in ops
frontend
production
v1
frontend
production
frontend
production
frontend
production
v2 v2 v2
Size: 0

34. Demo Time!

35. https://www.flickr.
com/photos/greeblie/2224507899

36. Decoupling the network
10.0.0.2
10.0.0.1
10.0.0.3 10.1.0.1
10.1.0.2
10.1.0.3

37. Decoupling the network
10.0.0.2
10.0.0.1
10.0.0.3 10.1.0.1
10.1.0.2
10.1.0.3
10.2.0.110.2.0.210.2.0.3
10.3.0.110.3.0.210.3.0.3
10.4.0.110.4.0.210.4.0.3
10.2.0.110.5.0.210.5.0.3
10.8.0.110.2.0.210.8.0.3
10.2.0.110.7.0.210.7.0.3

38. Decoupling the network
10.0.0.2
10.0.0.1
10.0.0.3 10.1.0.1
10.1.0.2
10.1.0.3
10.2.0.110.2.0.210.2.0.3
10.3.0.110.3.0.210.3.0.3
10.4.0.110.4.0.210.4.0.3
10.2.0.110.5.0.210.5.0.3
10.8.0.110.2.0.210.8.0.3
10.2.0.110.7.0.210.7.0.3

39. 10.5.0.310.2.0.3
Decoupling the network
10.3.0.1
10.5.0.1
10.2.0.1
10.4.0.2
connect(ip1, ip2, qos)

40. 10.5.0.310.2.0.3
Decoupling the network
10.3.0.1
10.4.0.1
10.2.0.1
10.4.0.2
connect(ip2, ip2, qos)
Encryption, Identity and Authorization in the SDN/API layer
Centralized auditing, compliance and enforcement
No certificate distribution

41. Questions?
#google-containers
google-containers@googlegroups.com
github.com/GoogleCloudPlatform/kubernetes
cloud.google.com/container-engine/