The minimal information that you need to know to

1. All You Need to Know to Deploy
Applications on Kubernetes
Eric Johnson, Google - @erjohnso
Oleksandr Slynko, Pivotal - @alex_sly

2. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
All you need is YAML
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone

3. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
The fine print...
We're making a few assumptions, so here are a few prerequisites. (e.g. not covered)
● Containers
● Image repositories
● Version control
● Build and test
● Security
● Monitoring and logging
● ...and more

4. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
What we'll actually cover...
● How to deploy an application?
● How to access it?
● How to keep it running?

5. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
The app: Spring Music
https://github.com/cloudfoundry-samples/spring-music
● Spring Boot
● Database?
● ...andy mods?

6. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Plan
● How to deploy application?
● How to access it?
● How to keep it running?

7. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
The image
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
image: s1pdemo/springmusic:v2
● Spring Music image
● Versioned
● Runnable (local dev)

8. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
The container
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
● Single running process

9. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Configuration (environment variables)
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
env:
- name: SOMETHING
value: value

10. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Configuration (files)
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties

11. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Pod
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
...
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
● Set of containers
● Communicate using files

12. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Pod
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
● Run some command before starting each pod

13. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Don’t use pods directly

14. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
ReplicaSet
● Make sure N pods are running at the same time

15. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Deployment
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone

16. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
StatefulSet
● Applications with state (disks)
● Applications can only start/upgrade sequentially

17. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Plan
● How to deploy application?
● How to access it?
● How to keep it running?

18. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Service
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
● Internal - will have static ips inside the
cluster
● External - NodePort or Load Balancer

19. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Readiness probe
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2

20. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Plan
● How to deploy application?
● How to access it?
● How to keep it running?

21. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Replicas
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
replicas: 3

22. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Replicate across cluster
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
affinity:
podAntiAffinity:
requiredDuringScheduling
IgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey:
"kubernetes.io/hostname"

23. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Survive upgrades
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
● How many pods can be
unavailable at any time

24. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Graceful shutdown
Handle SIGTERM signal
Pre-stop hook

25. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Kill unresponsive application
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: springone
name: springone
spec:
ports:
- port: 80
targetPort: 8080
selector:
k8s-app: springone
type: LoadBalancer
---
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: springone
spec:
minAvailable: 2
selector:
matchLabels:
k8s-app: springone
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
description: Great demo
labels:
k8s-app: springone
name: springone
namespace: default
spec:
progressDeadlineSeconds: 600
...
replicas: 3
selector:
matchLabels:
k8s-app: springone
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
k8s-app: springone
name: springone
spec:
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- springone
topologyKey: "kubernetes.io/hostname"
volumes:
- name: shared-data
emptyDir: {}
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
...
initContainers:
- name: run-migration
image: s1pdemo/springmusicmigration:v2
command: ["/bin/run_migration.sh"]
containers:
- image: s1pdemo/tweet_loader:21fab0554
name: poller
volumeMounts:
- name: shared-data
mountPath: /tweet-info
- image: s1pdemo/springmusic:v2
imagePullPolicy: Always
name: springone
env:
- name: SOMETHING
value: value
securityContext:
privileged: false
volumeMounts:
- name: shared-data
mountPath: /data/tweets
- name: config-volume
configMap:
name: springone
items:
- key: application.properties
path: application.properties
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 3
successThreshold: 2
...
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds:
30
---
apiVersion: v1
data:
application.properties:
spring.music=springonedemoCONFIGVALUE
kind: ConfigMap
metadata:
name: springone
livenessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 45
periodSeconds: 3

26. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Further reading
Secrets
Horizontal Pod Autoscaler
Pod Security Policies
Resource Limits
Pod Priority Class
Cluster DNS
Ingress Controllers

27. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Recap
● How to deploy application?
○ Deployments, Stateful Sets
● How to access it?
○ Service
● How to keep it running?
○ Replicas, Affinity Groups,
Graceful shutdown, Liveness
Probe

28. Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-
NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Thank you!
Want to try this out for yourself?
● Create a Kubernetes cluster
○ Create a GKE cluster: https://cloud.google.com/kubernetes-engine/
■ Gets started for free: https://cloud.google.com/free/
○ Create a CFCR cluster - check the next talk
○ Or create a PKS cluster - https://pivotal.io/pks
● Big YAML: https://bit.ly/k8s-manifest
● Slides: https://bit.ly/all-you-need-is-yaml