This document discusses using Kubernetes services on Google Cloud Platform. It provides an overview of Google Container Engine and how it integrates with GCP services like Cloud Logging, Cloud Monitor, and Stackdriver. It also covers auxiliary GCP services that are useful for continuous integration and continuous delivery (CICD) with Kubernetes on Google Cloud, such as Source Code Repository, Container Registry, Container Builder, and Build Trigger.

1. 從Google Cloud看
Kubernetes服務
Simon Su @ GCPUG.TW

2. Simon Su
var simon = {/** I am at GCPUG.TW **/};
simon.cloud_gde = true;
simon.blog = ‘http://peihsinsu.blogspot.com';
simon.slideshare = ‘http://slideshare.net/peihsinsu/';
simon.email = ‘simonsu.mail@gmail.com’;
simon.say(‘Good luck to everybody!');

3. Google Cloud Platform User Group

4. GCPUG.TW

5. GCPUG.TW
GCPUG.TW談Kubernetes… Meetup#27
Using Kubernetes to deploy Django in GCP / Walter Liu
● https://www.slideshare.net/walterliu7/using-kubernetes-to-deploy-django-in-gcp
深入Kubernetes Network，Calico Overlet Network介紹 / 光光 / Hiiir DevOps扛壩子
● https://www.slideshare.net/IsaacTseng/20170705-kubernetes-with-calico
從AWS轉移到GCP，一個新創團隊搬家的故事​ / 陳彥文
● https://www.slideshare.net/wenchen3/from-aws-to-gcp-tableapp-architecture-story

6. GCPUG.TW
GCPUG.TW談Kubernetes… Meetup #28
Running Workloads in K8S / Janet / K8S Developer
● https://speakerdeck.com/janetkuo/running-workloads-in-kubernetes
容器下高度客製的負載平衡方式​ / Jerry / Citrix SE
● https://drive.google.com/open?id=0B34e2qGHFGOQSTJ4djZxREc1SVk
FOSSASIA / FOSSASIA Summit及運用Kubernetes部署開源 / Noah / 社群雜工
● https://docs.google.com/presentation/d/1oMIfwQH9mQ3MRuMRzvTz751W
JEXNie-8cg3gpGwN-rU/edit#slide=id.g24215d6772_0_11

7. GCPUG.TW
GCPUG.TW談Kubernetes… Meetup #29
Kubernetes volume provisioning using Ceph distributed storage / Kyle /
InwinSTACK Architect
● https://drive.google.com/open?id=0B18kWCds9VWhZk5GWUh4N0lQXzA
跟DevOps有約 - GCE 上搭配 Cloud Storage 建置 Drone CICD / Gary / QNAP Senior
Engineer
● https://www.slideshare.net/ssuser567f65/gce-cloud-storage-drone-ci
輕輕鬆鬆做 MicroService之 Screenshot as a Service / Cage / QNAP Senior
Engineer
● https://kaichu.io/2017/09/09/screenshot-as-a-service/

8. 今天跟大家輕鬆聊K8S…
不簡單的GKE… 很簡單的用...

9. Outline
● Google Container Engine簡介
● 透視Container Engine與Google Cloud Platform的結合
● GKE與Cloud Logging, Cloud Monitor, Stackdriver的整合與
● Google Cloud上GKE面向CICD的輔助服務

10. 哪些事... 我的服務不想遇到...

11. Google Container Engine 簡介
● 繼承開源，完全相容Kuberbetes環境與操作
● 簡易管理，10個node以下master node由Google負責
● 結合雲端，與Global Load Balancer、Network Load Balancer 整合
● 無痛升級，無縫銜接最新版本
● 自動擴展，K8S資源依所需擴展
● 視圖整合，執行環境介面整合
● 輔助工具，CI/CD整合，Container Registry整合

12. Demo
話不多說...
開個GKE Cluster…
其實簡單der
….
….
https://console.cloud.google.com/freetrial

13. Google Container Engine簡介
深入了解，才能進階排除障礙...

14. GKE幫你做了哪些事情？
Firewall
Routing
Load
Balancer
IP address

15. GKE介面介紹 - Container Cluster

16. GKE介面介紹 - Workload

17. GKE介面介紹 - Discovery & Load Balancer

18. GKE介面介紹 - Configuration

19. GKE介面介紹 - Storage

20. 連線GKE內建的K8S Portal
● 連線您的GKE集群
gcloud container clusters get-credentials [cluster_name]
--zone [cluster_zone]--project [cluster_project]
● 連線了的GKE Dashboard
kubectl proxy
http://127.0.0.1:8001/

21. 透視Container Engine與
Google Cloud Platform的結合

22. GKE建立之初
● Master node
● Routing
● IP
● Firewall

23. GCE instance(s) for GKE Cluster
Google代管
Master Node
透過Instance
Group封裝K8S
minion

24. Auto scale enabled
● Minion auto scale
● Scale metrics
○ CPU Usage
○ HTTP Load Balancing Usage
○ Stackdriver metric
○ Multiple metrics

25. Routing for PODs & SVCs

26. Firewalls
configured
● TCP 22 port for kubectl exec
● VM internal route

27. K8S Minion External IP Address

28. 有了GKE… 再來個Demo
從第一個K8S應用說起...
kubectl run nginx --image nginx --port 80
kubectl expose nginx --type=LoadBalancer

29. 與Global LB及Network LB整合
K8S Ingress
vs.
GCE HTTP(S) Load
Balancer
K8S Service
vs.
GCE Network
Load Balancer

30. 與GCE Disk整合
● Integrate with K8S Volume
● Persistence Disk, SSD
● Migrate disj over K8S minions

31. 雲端的IP、防火牆與路由
● IP apply & binding
● Firewall for service port
● Routing for all communications

32. Service Firewall
● Ingress firewall
● Port allow for all traffic

33. Service IP

34. 看個複雜點的Demo
brew install kubernetes-helm
helm init
helm search wordpress
helm install stable/wordpress

35. 看看HELM部屬的Wordpress架構
Wordpress
(deploy/pod)
MariaDB
(deploy/pod)
SVC

36. Firewall上的變化
Wordpress
(deploy/pod)
MariaDB
(deploy/pod)
SVC

37. 監控SVC的
Healthcheck
● 整合GCE Healthcheck

38. SVC的外部IP

39. GKE與
- Cloud Logging
- Cloud Monitor
- Stackdriver
的整合與

40. GKE &
Cloud Logging
● Node log
● Cluster log
● Container log

41. ● Customize your monitor
metrics by filter and regular
expressions
Cloud Monitor &
Custom Metrics

42. ● Integrate with GCP store
services
○ BigQuery
○ Cloud Storage
○ Pub/Sub
Cloud Monitor Export

43. GKE 的 Stackdriver 監控

44. 深入到 Pod 的監控

45. Google Cloud上GKE面向
CICD的輔助服務

46. ● 私有的 source code 存放
● 可連結 Github, Bitbucket
● 整合線上 source code 檢視
Source Code Repository

47. Container Registry
● 私有的 Container Image 存放處
● GCE 環境存取快素
● 網頁視覺化 Image 管理介面
● 繼承 GCS 優勢
○ 無限量儲存
○ 高 SLA

48. Container Builder / Build Trigger
● 與版本控管(Cloud Repository)服務整合
● 每月免費 build server 額度
● Cloud init 腳本客製化

49. Build Histories

50. 沒騙你... 用了就很簡單吧...