NoOpsが目指す未来とコンテナ技術

•

8 likes•3,255 views

Hiromasa Oka

JAPAN CONTAINER DAYS V18.12 （セッション 2E5）の講演資料です。 https://containerdays.jp/

Technology

NoOps Japan
@yokawasa
Japan Container Days V18.12
NoOps Japan
@OkaHiromasa
NoOps

Ops …
NoOps =
No “Unconfortable” Ops
” ”

NoOps Meetup
https://www.slideshare.net/irix_jp/the-noops-strategy-and-tactics

Layer 1
Layer 2
Layer 3
Layer 4
Layer 5
Layer 6
Layer 7
: Gabe Monroy on Twitter: "Strata of the Container Ecosystem
https://twitter.com/gabrtv/status/539805332432637952
https://trends.google.co.jp/trends/explore?date=today%205-
y&q=Kubernetes,Mesosphere,Docker%20Swarm

2013
Docker
2008
LXC
2014 2015 2016 2017 2018
Google
k8s
CNCF
2013.3
2014.6
k8s1.0
2015.7
Docker
Swam
2014.12
Mesosphere
DC/OS
2016.4
Docker
k8s
2017.10
k8s1.10
2018.3
EKS, AKS
GA
2018.6
k8s
( Docker & Kubernetes )

CNCF (Cloud Native Computing Fundation)
•
• Container network interface (CNI)
• Container Storage interface (CSI)
• k8s Kubernetes

Pod Phase, restartPolicy
Liveness & Readiness Probe
Rolling Update
Horizontal Pod Autoscaler
Cluster Autoscaler

Open Service Broker• Rook
• NATS
• Operators
etcd, HPA, PVC, MySQL,
Postgres, Mongodb,
Redis, Jaeger, Envoy,
Kafka, Prometheus, etc.
StatefulSet
DaemonSet Service Catalog

• Helm
• Draft
• Skaffold
• Spinnaker
• Jenkins X

Container
Runtime
•
•
SAST/DAST
RBAC
CIS benchmarks
Namespace
RBAC
Pod Security Policy
Network Policy
Runtime
Runtime
• cri-o
• gVisor
• Kata containers
Orchestrator
Runtime Environment

Logging
Observability
Tracing Visualization
Monitoring
Observability

Service Mesh
Data Plane
Control Plane
Envoyproxy Blog: Service mesh data plane vs. control plane
https://blog.envoyproxy.io/service-mesh-data-plane-vs-control-plane-2774e720f7fc
Control Plane
Data Plane Mesh
Data Plane
① Control Plane Data Plane

• Pilot:
• Mixer:
• Citadel:
https://istio.io/docs/concepts/what-is-istio/

PodPodPod
https://docs.microsoft.com/ja-jp/dotnet/standard/microservices-
architecture/implement-resilient-applications/implement-circuit-breaker-pattern
PodPodPod
PodPodPod

PodPodPod
PodPodPod
PodPodPod
Service Breaker Destination Rule (Istio)
https://istio.io/docs/tasks/traffic-management/circuit-breaking/
Service Mesh

Discovery & Load Balancing
round robin, random, weighted least request
Traffic Splitting
A/B testing, canary rollouts, staged rollouts
Traffic Control
Handling Failures
circuit breakers, timeouts, and retries
Fault Injections
delays or abort
Rate Limiting
Distributed Tracing
Collecting Logs & Metrics
Service Graph
Authentication Policy
Mutual TLS Authentication
Istio RBAC
https://istio.io/docs/concepts/what-is-istio/

k8s Service Mesh
Knative - https://github.com/knative/docs

https://www.slideshare.net/CiscoSP360/introducing-application-engineered-routing-powered-by-segment-routing

https://www.slideshare.net/Templarad/141022-java-hot-spot-vm-gc#5 https://www.slideshare.net/hiromasaoka/noops-88082246

https://istio.io/docs/concepts/security/

Figure 1-1. Traditional network security architecture

• Zero Trust Control plane vs Data plane
• Zero Trust Control plane
• Zero Trust Data Plane: Control Plane

ü
ž (Resiliency) NoOps
ü
ž
ü
ž Firewall Zero Trust

ü
ž (Resiliency) NoOps
ü
ž
ü
ž Firewall Zero Trust
The Network is the Computer.

What's hot

OpenStackトラブルシューティング入門VirtualTech Japan Inc.

エンジニアの個人ブランディングと技術組織Takafumi ONAKA

Java ORマッパー選定のポイント #jsugMasatoshi Tada

DevOpsにおけるAnsibleの立ち位置と使い所Hidetoshi Hirokawa

フロー効率性とリソース効率性について #xpjugItsuki Kuroda

Spring Boot × Vue.jsでSPAを作るGo Miyasaka

At least onceってぶっちゃけ問題の先送りだったよね #kafkajpYahoo!デベロッパーネットワーク

構成情報データベースをGitで管理したいネットワーク運用者の憂鬱Yuya Rin

大規模オンプレミス環境はGitOpsの夢を見るか（CI/CD Conference 2021 by CloudNative Days 発表資料）NTT DATA Technology & Innovation

NTTデータ流 Hadoop活用のすすめ～インフラ構築・運用の勘所～NTT DATA OSS Professional Services

Oss貢献超入門Michihito Shigemura

Azure API Management 俺的マニュアル貴志上坂

BuildKitの概要と最近の機能Kohei Tokunaga

Unified JVM LoggingYuji Kubota

Grafana LokiではじめるKubernetesロギングハンズオン（NTT Tech Conference #4 ハンズオン資料）NTT DATA Technology & Innovation

え、まって。その並列分散処理、Kafkaのしくみでもできるの？ Apache Kafkaの機能を利用した大規模ストリームデータの並列分散処理

挫折しないRedmineGo Maeda

AWS LambdaとDynamoDBがこんなにツライはずがない #ssmjpMasahiro NAKAYAMA

Mercari JPのモノリスサービスをKubernetesに移行した話 PHP Conference 2022 9/24Shin Ohno

分散トレーシング技術について（Open tracingやjaeger）NTT Communications Technology Development

What's hot (20)

OpenStackトラブルシューティング入門

エンジニアの個人ブランディングと技術組織

Java ORマッパー選定のポイント #jsug

DevOpsにおけるAnsibleの立ち位置と使い所

フロー効率性とリソース効率性について #xpjug

Spring Boot × Vue.jsでSPAを作る

At least onceってぶっちゃけ問題の先送りだったよね #kafkajp

構成情報データベースをGitで管理したいネットワーク運用者の憂鬱

大規模オンプレミス環境はGitOpsの夢を見るか（CI/CD Conference 2021 by CloudNative Days 発表資料）

NTTデータ流 Hadoop活用のすすめ～インフラ構築・運用の勘所～

Oss貢献超入門

Azure API Management 俺的マニュアル

BuildKitの概要と最近の機能

Unified JVM Logging

Grafana LokiではじめるKubernetesロギングハンズオン（NTT Tech Conference #4 ハンズオン資料）

え、まって。その並列分散処理、Kafkaのしくみでもできるの？ Apache Kafkaの機能を利用した大規模ストリームデータの並列分散処理

挫折しないRedmine

AWS LambdaとDynamoDBがこんなにツライはずがない #ssmjp

Mercari JPのモノリスサービスをKubernetesに移行した話 PHP Conference 2022 9/24

分散トレーシング技術について（Open tracingやjaeger）

Similar to NoOpsが目指す未来とコンテナ技術

Java in the Age of Containers and ServerlessMarkus Eisele

Rocking the microservice world with Helidon-LAOUCTour2023.pdfAlberto Salazar

Java in the age of containers - JUG Frankfurt/MMarkus Eisele

From Zero to GitOps HeroesWeaveworks

Apache Mesos at Twitter (Texas LinuxFest 2014)Chris Aniszczyk

SpringOne Platform recap 정윤진VMware Tanzu Korea

State of Akka 2017 - The best is yet to comeKonrad Malawski

DEVBCN_Jakarta EE! The future of enterprise application behind the myths. _Al...Alberto Salazar

Cross-platform UI Engines Rendering PerformanceIgalia

From Java Monoliths to K8sVMware Tanzu

From Monolith to K8s - Spring One 2020Mauricio (Salaboy) Salatino

LorraineJUG - WildFlyAlexis Hassler

Deploy Python apps in 5 min with a PaaSAppsembler

9 steps to awesome with kubernetesBaraniBuuny

$Mvvm is like born fraction$ $Mvvm is like born fraction$

Mvvm is like born fractionKen Haneda

Daniel Steigerwald - Este.js - konec velkého SchizmaDevelcz

Upgrading JavaScript to ES6 and using TypeScript as a shortcutChristian Heilmann

Full Stack Reactive with React and Spring WebFlux - Switzerland JUG 2020Matt Raible

Making ES6 available to all with ChakraCore and TypescriptChristian Heilmann

Orchestrating MicroservicesMauricio (Salaboy) Salatino

Similar to NoOpsが目指す未来とコンテナ技術 (20)

Java in the Age of Containers and Serverless

Rocking the microservice world with Helidon-LAOUCTour2023.pdf

Java in the age of containers - JUG Frankfurt/M

From Zero to GitOps Heroes

Apache Mesos at Twitter (Texas LinuxFest 2014)

SpringOne Platform recap 정윤진

State of Akka 2017 - The best is yet to come

DEVBCN_Jakarta EE! The future of enterprise application behind the myths. _Al...

Cross-platform UI Engines Rendering Performance

From Java Monoliths to K8s

From Monolith to K8s - Spring One 2020

LorraineJUG - WildFly

Deploy Python apps in 5 min with a PaaS

9 steps to awesome with kubernetes

$Mvvm is like born fraction$ $Mvvm is like born fraction$

Mvvm is like born fraction

Daniel Steigerwald - Este.js - konec velkého Schizma

Upgrading JavaScript to ES6 and using TypeScript as a shortcut

Full Stack Reactive with React and Spring WebFlux - Switzerland JUG 2020

Making ES6 available to all with ChakraCore and Typescript

Orchestrating Microservices

Recently uploaded

A Year of the Servo Reboot: Where Are We Now?Igalia

Real Time Object Detection Using Open CVKhem

GenCyber Cyber Security Day PresentationMichael W. Hawkins

How to convert PDF to text with Nanonetsnaman860154

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

CNv6 Instructor Chapter 6 Quality of Servicegiselly40

Scaling API-first – The story of a global engineering organizationRadu Cotescu

🐬 The future of MySQL is Postgres 🐘RTylerCroy

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong

From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software

What Are The Drone Anti-jamming Systems Technology?Antenna Manufacturer Coco

[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge

Automating Google Workspace (GWS) & more with Apps Scriptwesley chun

Driving Behavioral Change for Information Management through Data-Driven Gree...Enterprise Knowledge

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer

Tata AIG General Insurance Company - Insurer Innovation Award 2024The Digital Insurer

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

Recently uploaded (20)

A Year of the Servo Reboot: Where Are We Now?

Real Time Object Detection Using Open CV

GenCyber Cyber Security Day Presentation

How to convert PDF to text with Nanonets

Factors to Consider When Choosing Accounts Payable Services Providers.pptx

CNv6 Instructor Chapter 6 Quality of Service

Scaling API-first – The story of a global engineering organization

🐬 The future of MySQL is Postgres 🐘

2024: Domino Containers - The Next Step. News from the Domino Container commu...

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

What Are The Drone Anti-jamming Systems Technology?

[2024]Digital Global Overview Report 2024 Meltwater.pdf

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

Automating Google Workspace (GWS) & more with Apps Script

Driving Behavioral Change for Information Management through Data-Driven Gree...

How to Troubleshoot Apps for the Modern Connected Worker

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Tata AIG General Insurance Company - Insurer Innovation Award 2024

Data Cloud, More than a CDP by Matt Robison

Presentation on how to chat with PDF using ChatGPT code interpreter

NoOpsが目指す未来とコンテナ技術

1. NoOps Japan @yokawasa Japan Container Days V18.12 NoOps Japan @OkaHiromasa NoOps

6. Ops …

7. Ops … NoOps = No “Unconfortable” Ops ” ”

9. NoOps Meetup https://www.slideshare.net/irix_jp/the-noops-strategy-and-tactics

10.

11. SRE

12.

13.

14.

15.

16.

17.

18. NoOps Failure

19. (Resiliency) (VM)

20. (Resiliency) (VM)

21.

22.

23.

24. Layer 1 Layer 2 Layer 3 Layer 4 Layer 5 Layer 6 Layer 7 : Gabe Monroy on Twitter: "Strata of the Container Ecosystem https://twitter.com/gabrtv/status/539805332432637952 https://trends.google.co.jp/trends/explore?date=today%205- y&q=Kubernetes,Mesosphere,Docker%20Swarm

25. 2013 Docker 2008 LXC 2014 2015 2016 2017 2018 Google k8s CNCF 2013.3 2014.6 k8s1.0 2015.7 Docker Swam 2014.12 Mesosphere DC/OS 2016.4 Docker k8s 2017.10 k8s1.10 2018.3 EKS, AKS GA 2018.6 k8s ( Docker & Kubernetes )

26. CNCF (Cloud Native Computing Fundation) • • Container network interface (CNI) • Container Storage interface (CSI) • k8s Kubernetes

27.

28. Pod Phase, restartPolicy Liveness & Readiness Probe Rolling Update Horizontal Pod Autoscaler Cluster Autoscaler

29. Open Service Broker• Rook • NATS • Operators etcd, HPA, PVC, MySQL, Postgres, Mongodb, Redis, Jaeger, Envoy, Kafka, Prometheus, etc. StatefulSet DaemonSet Service Catalog

30. • Helm • Draft • Skaffold • Spinnaker • Jenkins X

31. Container Runtime • • SAST/DAST RBAC CIS benchmarks Namespace RBAC Pod Security Policy Network Policy Runtime Runtime • cri-o • gVisor • Kata containers Orchestrator Runtime Environment

32. Logging Observability Tracing Visualization Monitoring Observability

33.

34.

35.

36. Service Mesh Data Plane Control Plane Envoyproxy Blog: Service mesh data plane vs. control plane https://blog.envoyproxy.io/service-mesh-data-plane-vs-control-plane-2774e720f7fc Control Plane Data Plane Mesh Data Plane ① Control Plane Data Plane

37. • Pilot: • Mixer: • Citadel: https://istio.io/docs/concepts/what-is-istio/

38. Service Mesh ②

39. PodPodPod https://docs.microsoft.com/ja-jp/dotnet/standard/microservices- architecture/implement-resilient-applications/implement-circuit-breaker-pattern PodPodPod PodPodPod

40. PodPodPod PodPodPod PodPodPod Service Breaker Destination Rule (Istio) https://istio.io/docs/tasks/traffic-management/circuit-breaking/ Service Mesh

41. Discovery & Load Balancing round robin, random, weighted least request Traffic Splitting A/B testing, canary rollouts, staged rollouts Traffic Control Handling Failures circuit breakers, timeouts, and retries Fault Injections delays or abort Rate Limiting Distributed Tracing Collecting Logs & Metrics Service Graph Authentication Policy Mutual TLS Authentication Istio RBAC https://istio.io/docs/concepts/what-is-istio/

42. k8s Service Mesh Knative - https://github.com/knative/docs

43. NoOps

44. NoOps

45.

46.

47.

48.

49.

50. Ops

51.

52.

53. The Network is the computer.