VMware Tanzu, profile picture
Uploaded byVMware Tanzu
PDF, PPTX154 views

Containers Were Never Your End State

The document discusses containers and Kubernetes. It begins with an overview of containers and the container hype cycle, noting that containers are maturing from an initial hype phase. It then covers container principles like running as a non-privileged user, building container images using layers, tagging images, and deploying containerized applications on Kubernetes. The overall message is that containers are becoming a mainstream deployment approach but require systematic processes for operations and security.

Software◦
Related topics:
Software Developer•

Embed presentation

Download as PDF, PPTX
Containers were never your end state! Duncan Winn Will Arroyo @duncwinn @WillAArroyo
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Why This Talk? 2 Embedded OS (Windows & Linux) NSX-T CPI v1 v2 v3 ... CVEs Product Updates Java | .NET | NodeJS Pivotal Application Service (PAS) Application Code & Frameworks Buildpacks | Spring Boot | Spring Cloud | Steeltoe Elastic | Packaged Software | Spark Pivotal Container Service (PKS) >cf push >kubectl run YOU build the container vSphere Azure & Azure StackGoogle CloudAWSOpenstack Pivotal Network “3Rs” Github Concourse Concourse Pivotal Services Marketplace Pivotal and Partner Products Continuous delivery Public Cloud Services Customer Managed Services OpenServiceBrokerAPI Repair — CVEs Repave Rotate — Credhub The PLATFORM builds the container
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Where Are We?
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ This is not your end state… 4
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 5 …more like… Hype Cycle
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Hype Cycle 6
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Hype Cycle
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Hype Cycle •Mature Deployment Approach •Systematic Process for Day 2 Ops •Ecosystem Integration •Understand Failure / Security Boundaries •Appropriate Workloads 1. Container Principles 2.Building Container Images 3.Running Container Images 4.Deploying Kubernetes
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Principles
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ image Container Image kubelet CRI Container Runtime Interface Container Runtime Container Principles
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Runtime Interface kubelet Container gRPC Client CRI ShimgRPC Server Container Runtime Container image
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Running As A Non-Privileged User 12
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Running As A Non-Privileged User 13
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Getting Root Access 14
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Building Container Images
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers Build Base OS Middleware/Runtime App+Dependencies
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers Build App+Dependencies Middleware/Runtime Base OS
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 18 Use Layers Wisely 1. add 2. copy 3. run
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 19 Use Layers Wisely 1. add 2. copy 3. run
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 20 Use Layers Wisely 1. add 2. copy 3. run
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 21 Use Layers Wisely 1. add 2. copy 3. run
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 22 Use Layers Wisely 1. add 2. copy 3. run
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Building Images App+Dependencies Middleware/Runtime Base 1 to Many 1 to Many
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Building Images App+Dependencies Middleware/Runtime Base 1 to Many 1 to Many Build args
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Build Args Are Not Secure 25
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Build Args Are Not Secure 26
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Tagging Is Important 27 ubuntu:14.04 ubuntu:latestFROM ubuntu ubuntu:16.10
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Tagging Is Important 28 ubuntu:14.04 ubuntu:latestFROM ubuntu ubuntu:16.10 ubuntu:18.04
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Tagging Is Important 29 ubuntu:14.04 ubuntu:latestFROM ubuntu ubuntu:16.10 ubuntu:18.04 ubuntu:14.04 ubuntu:latestFROM ubuntu:latest ubuntu:16.10 ubuntu:18.04 ubuntu:14.04 ubuntu:latest FROM ubuntu:14.04 ubuntu:16.10 ubuntu:18.04
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers Build App+Dependencies Middleware/Runtime Base V3.8 1 to Many V8u181 1 to Many V1.1
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Running Container Images
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers (Run) App+Dependencies Middleware/Runtime Base Deploy Time Configuration 1 to Many 1 to Many V3.8 V8u181 V1.1 Code Repo
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploy Apps Package Manager kubectl helm install ./my-cart Kubectl create -f ./mycart/frontend-service.yml Kubectl create -f ./mycart/frontend-deployment.yml Kubectl create -f ./mycart/api-service.yml Kubectl create -f ./mycart/api-deployment.yml Kubectl create -f ./mycart/redis-service.yml Kubectl create -f ./mycart/db-service.yml Kubectl create -f ./mycart/redis-deployment.yml Kubectl create -f ./mycart/db-deployment.yml
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Big “A”pp Deploy Apps Small “a”pp Small “a”pp Small “a”pp Small “a”pp Small “a”pp Small
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploy Apps Package Manager kubectl helm install ./my-cart Kubectl create -f ./mycart/frontend-service.yml Kubectl create -f ./mycart/frontend-deployment.yml Kubectl create -f ./mycart/api-service.yml Kubectl create -f ./mycart/api-deployment.yml Kubectl create -f ./mycart/redis-service.yml Kubectl create -f ./mycart/db-service.yml Kubectl create -f ./mycart/redis-deployment.yml Kubectl create -f ./mycart/db-deployment.yml
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Trusted Registry
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Trusted Registry • OpenJDK Docker Image • Pulled Directly from Docker hub • Image created 9 hrs Prior • Scanned by Harbor • Signed by Harbor
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Trusted Registry
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Apps Pipelines Code Repo env var args build args Configuration
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Git Ops Config Repo Code Repo Kube Cluster build args env var args
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying Kubernetes
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying K8s Kubeadm RKE
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying a k8s cluster with PKS
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying K8s
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying K8s
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Securing K8s
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ K8s Day 2 Ops (Patching and Updating) ISO IaaS
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ K8s Day 2 Ops (Patching and Updating) MasterMaster Node 1 Node 2 Node 3 Node 4 Node 1
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Take Aways
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1. Choose a deployment method (close to upstream k8s) 2. Understand k8s components 3. Careful building docker images (governance + security) 4. Automate everything (platform, images, apps) Takeaways Repeat
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 51 > kubectl Multi-Cloud PKS Kubernetes Dashboard vRealize Ops PKS Control Plane GCP Service Broker > pks Operations Manager vRealize Operations Dev / Apps App User IT / Platform Ops …in support of an end state…
> Stay Connected. @duncwinn @willaarroyo #springon@s1
Container Principles 1. Quick To Create 2. Resource Consolidation 3. App Portability Control Resources Isolate and Secure Processes
Container Principles Docker Images Droplets+Stack File System
Container Misconceptions Walls Resource Limits Namespaces There Is No Container
Container Misconceptions Docker Images Droplets+Stack File System Docker-Engine Guardian Docker-CLI Garden Management RunC Implementation API-CLI RuntimeIT DOES NOT MATTER
Containers are not enough Container Misconceptions

More Related Content

PPTX
Reactive Data Access with Spring Data
byVMware Tanzu
 
PPTX
What's New in Spring for Apache Kafka 2.0
byVMware Tanzu
 
PDF
riffing on Knative - Scott Andrews
byVMware Tanzu
 
PDF
Cloud Foundry Services on PKS with No Extra Code, "We Bosh So You Don’t Have ...
byVMware Tanzu
 
PDF
Square Pegs, Square Holes: CI/CD That Fits
byVMware Tanzu
 
PDF
Fast 5 Things You Can Do Now to Get Ready for the Cloud
byVMware Tanzu
 
PPTX
Crossing the CI/CD/DevOps Chasm
byVMware Tanzu
 
PPTX
Spring one2gx 2014 erdemgunay
byErdem Gunay
 
Reactive Data Access with Spring Data
byVMware Tanzu
 
What's New in Spring for Apache Kafka 2.0
byVMware Tanzu
 
riffing on Knative - Scott Andrews
byVMware Tanzu
 
Cloud Foundry Services on PKS with No Extra Code, "We Bosh So You Don’t Have ...
byVMware Tanzu
 
Square Pegs, Square Holes: CI/CD That Fits
byVMware Tanzu
 
Fast 5 Things You Can Do Now to Get Ready for the Cloud
byVMware Tanzu
 
Crossing the CI/CD/DevOps Chasm
byVMware Tanzu
 
Spring one2gx 2014 erdemgunay
byErdem Gunay
 

What's hot

PPTX
Reactive Applications on Apache Tomcat and Servlet 3.1 containers
byVMware Tanzu
 
PPTX
Latency analysis for your microservices using Spring Cloud & Zipkin
byVMware Tanzu
 
PDF
Running Spring Boot Applications as GraalVM Native Images
byVMware Tanzu
 
PPTX
Consumer Driven Contracts and Your Microservice Architecture
byVMware Tanzu
 
PPTX
Tycho Tutorial EclipseCon 2013
byjsievers
 
PPTX
Tycho Tutorial (EclipseCon 2012)
byjsievers
 
PPTX
Migrating from PDE to Tycho builds
byTeodor Madan
 
PDF
JHipster for Spring Boot webinar
byJulien Dubois
 
PPTX
RDBMS and Apache Geode Data Movement: Low Latency ETL Pipeline By Using Cloud...
byVMware Tanzu
 
PDF
Eliciting User Preferences for Personalized Explanations for Video Summaries
byoanainel
 
PPT
Building an HTML5 Video Player
byBrightcove
 
PPTX
Web-based development with Orion and Flux (APIcon 2014)
byMike Milinkovich
 
PDF
2013년 html5 총정리 (Summary of HTML5 Trend in 2013)
byWonsuk Lee
 
PDF
Introduction to cloud-native application development: with Heroku and Spring ...
byRoberto Casadei
 
PDF
2014 HTML5 총정리
byWonsuk Lee
 
PDF
Industry trend of HTML5 in 2012 (2012년 HTML5 총정리)
byWonsuk Lee
 
PDF
Maven 3 / Tycho
byKarsten Thoms
 
Reactive Applications on Apache Tomcat and Servlet 3.1 containers
byVMware Tanzu
 
Latency analysis for your microservices using Spring Cloud & Zipkin
byVMware Tanzu
 
Running Spring Boot Applications as GraalVM Native Images
byVMware Tanzu
 
Consumer Driven Contracts and Your Microservice Architecture
byVMware Tanzu
 
Tycho Tutorial EclipseCon 2013
byjsievers
 
Tycho Tutorial (EclipseCon 2012)
byjsievers
 
Migrating from PDE to Tycho builds
byTeodor Madan
 
JHipster for Spring Boot webinar
byJulien Dubois
 
RDBMS and Apache Geode Data Movement: Low Latency ETL Pipeline By Using Cloud...
byVMware Tanzu
 
Eliciting User Preferences for Personalized Explanations for Video Summaries
byoanainel
 
Building an HTML5 Video Player
byBrightcove
 
Web-based development with Orion and Flux (APIcon 2014)
byMike Milinkovich
 
2013년 html5 총정리 (Summary of HTML5 Trend in 2013)
byWonsuk Lee
 
Introduction to cloud-native application development: with Heroku and Spring ...
byRoberto Casadei
 
2014 HTML5 총정리
byWonsuk Lee
 
Industry trend of HTML5 in 2012 (2012년 HTML5 총정리)
byWonsuk Lee
 
Maven 3 / Tycho
byKarsten Thoms
 

Similar to Containers Were Never Your End State

PDF
Lattice: A Cloud-Native Platform for Your Spring Applications
byMatt Stine
 
PDF
Building .NET Microservices
byVMware Tanzu
 
PDF
Running Java Applications on Cloud Foundry
byVMware Tanzu
 
PDF
Kubernetes Docker Container Implementation Ppt PowerPoint Presentation Slide ...
bySlideTeam
 
PPTX
The Cloud Native Journey
byVMware Tanzu
 
PDF
Introduction to Docker and Containers- Learning Simple
bySandeep Hijam
 
PPTX
Containers and Big Data
byDataWorks Summit
 
PPTX
You don’t need DTAP + Backbase implementation - Amsterdam 17-12-2015
byPavel Chunyayev
 
PPTX
Architecture evolution
byamit bezalel
 
PDF
P to V to C: The Value of Bringing “Everything” to Containers
byVMware Tanzu
 
PDF
12 Factor, or Cloud Native Apps - What EXACTLY Does that Mean for Spring Deve...
byVMware Tanzu
 
PDF
You've Made Kubernetes Available to Your Developers, Now What?
bycornelia davis
 
PPTX
From Zero to DevOps Superhero: The Container Edition (JenkinsWorld SF)
byJessica Deen
 
PPTX
ThatConference 2016 - Highly Available Node.js
byBrad Williams
 
PDF
Upstate DevOps - Containers 101 - March 28, 2019
byAllen Vailliencourt
 
PPTX
Disruptive Trends in Application Development
byWaveMaker, Inc.
 
PDF
Docker in Production: How RightScale Delivers Cloud Applications
byRightScale
 
PPTX
Container Shangri-La Attaining the Promise of Container Paradise
byXebiaLabs
 
PDF
Kubernetes Up And Running Dive Into The Future Of Infrastructure 2nd Brendan ...
byxnhazusvop532
 
PDF
Get your Spatial on with MongoDB in the Cloud
byMongoDB
 
Lattice: A Cloud-Native Platform for Your Spring Applications
byMatt Stine
 
Building .NET Microservices
byVMware Tanzu
 
Running Java Applications on Cloud Foundry
byVMware Tanzu
 
Kubernetes Docker Container Implementation Ppt PowerPoint Presentation Slide ...
bySlideTeam
 
The Cloud Native Journey
byVMware Tanzu
 
Introduction to Docker and Containers- Learning Simple
bySandeep Hijam
 
Containers and Big Data
byDataWorks Summit
 
You don’t need DTAP + Backbase implementation - Amsterdam 17-12-2015
byPavel Chunyayev
 
Architecture evolution
byamit bezalel
 
P to V to C: The Value of Bringing “Everything” to Containers
byVMware Tanzu
 
12 Factor, or Cloud Native Apps - What EXACTLY Does that Mean for Spring Deve...
byVMware Tanzu
 
You've Made Kubernetes Available to Your Developers, Now What?
bycornelia davis
 
From Zero to DevOps Superhero: The Container Edition (JenkinsWorld SF)
byJessica Deen
 
ThatConference 2016 - Highly Available Node.js
byBrad Williams
 
Upstate DevOps - Containers 101 - March 28, 2019
byAllen Vailliencourt
 
Disruptive Trends in Application Development
byWaveMaker, Inc.
 
Docker in Production: How RightScale Delivers Cloud Applications
byRightScale
 
Container Shangri-La Attaining the Promise of Container Paradise
byXebiaLabs
 
Kubernetes Up And Running Dive Into The Future Of Infrastructure 2nd Brendan ...
byxnhazusvop532
 
Get your Spatial on with MongoDB in the Cloud
byMongoDB
 

More from VMware Tanzu

PPTX
tanzu_developer_connect.pptx
byVMware Tanzu
 
PDF
SpringOne Tour: Deliver 15-Factor Applications on Kubernetes with Spring Boot
byVMware Tanzu
 
PDF
Tanzu Developer Connect Workshop - English
byVMware Tanzu
 
PDF
Spring Boot 3 And Beyond
byVMware Tanzu
 
PDF
Spring Cloud Gateway - SpringOne Tour 2023 Charles Schwab.pdf
byVMware Tanzu
 
PPTX
Building Cloud Ready Apps
byVMware Tanzu
 
PPTX
Platforms, Platform Engineering, & Platform as a Product
byVMware Tanzu
 
PDF
Spring into AI presented by Dan Vega 5/14
byVMware Tanzu
 
PDF
What AI Means For Your Product Strategy And What To Do About It
byVMware Tanzu
 
PDF
Virtual Developer Connect Workshop - English
byVMware Tanzu
 
PDF
Simplify and Scale Enterprise Apps in the Cloud | Dallas 2023
byVMware Tanzu
 
PDF
Make the Right Thing the Obvious Thing at Cardinal Health 2023
byVMware Tanzu
 
PDF
Tanzu Developer Connect - French
byVMware Tanzu
 
PDF
Tanzu Virtual Developer Connect Workshop - French
byVMware Tanzu
 
PDF
Simplify and Scale Enterprise Apps in the Cloud | Seattle 2023
byVMware Tanzu
 
PDF
Simplify and Scale Enterprise Apps in the Cloud | Boston 2023
byVMware Tanzu
 
PPTX
Enhancing DevEx and Simplifying Operations at Scale
byVMware Tanzu
 
PDF
Spring Update | July 2023
byVMware Tanzu
 
PDF
SpringOne Tour: Domain-Driven Design: Theory vs Practice
byVMware Tanzu
 
PDF
SpringOne Tour: The Influential Software Engineer
byVMware Tanzu
 
tanzu_developer_connect.pptx
byVMware Tanzu
 
SpringOne Tour: Deliver 15-Factor Applications on Kubernetes with Spring Boot
byVMware Tanzu
 
Tanzu Developer Connect Workshop - English
byVMware Tanzu
 
Spring Boot 3 And Beyond
byVMware Tanzu
 
Spring Cloud Gateway - SpringOne Tour 2023 Charles Schwab.pdf
byVMware Tanzu
 
Building Cloud Ready Apps
byVMware Tanzu
 
Platforms, Platform Engineering, & Platform as a Product
byVMware Tanzu
 
Spring into AI presented by Dan Vega 5/14
byVMware Tanzu
 
What AI Means For Your Product Strategy And What To Do About It
byVMware Tanzu
 
Virtual Developer Connect Workshop - English
byVMware Tanzu
 
Simplify and Scale Enterprise Apps in the Cloud | Dallas 2023
byVMware Tanzu
 
Make the Right Thing the Obvious Thing at Cardinal Health 2023
byVMware Tanzu
 
Tanzu Developer Connect - French
byVMware Tanzu
 
Tanzu Virtual Developer Connect Workshop - French
byVMware Tanzu
 
Simplify and Scale Enterprise Apps in the Cloud | Seattle 2023
byVMware Tanzu
 
Simplify and Scale Enterprise Apps in the Cloud | Boston 2023
byVMware Tanzu
 
Enhancing DevEx and Simplifying Operations at Scale
byVMware Tanzu
 
Spring Update | July 2023
byVMware Tanzu
 
SpringOne Tour: Domain-Driven Design: Theory vs Practice
byVMware Tanzu
 
SpringOne Tour: The Influential Software Engineer
byVMware Tanzu
 

Recently uploaded

PPTX
Fast-tracking quality for hundreds applications with automated testing layers
byBogdan Plieshka
 
PDF
Microservices-Final !!!!!!!!!!!!!!!!.pdf
bydoquangminh962004
 
PPTX
Road_Quality_Indicator using deeplearning algorithms and computer vision
byDHARUNPRASHOBMM
 
PDF
How Modern Custom Software is Revolutionizing Mortgage Lending Processes -Ma...
byMatellio
 
PPTX
Custom chat gpt integration services.pptx
byChetu
 
PDF
Revolutionising-SQL-Data-Modelling-with-SqlDBM.pdf
bySQL DBM
 
PDF
Constraints First - Why Our On-Prem Ticketing System Starts With Limits, Not ...
bySpirit Face
 
PPTX
Privacy Preserving Detection of Sensitive Data Exposure (1).pptx
byNikitaMandhan4
 
PPTX
Computer_Virus_Presentation_With_Slide7.pptx
byHEVISLIVE
 
PDF
nsfconvertersoftwaretoconvertNSFtoPST.pdf
byNSF Converter Software
 
PDF
Solved First Semester B.C.A. C Programming Question Paper – Jan/Feb 2025
byKuvempu University
 
PPTX
Modern P&C Insurance Software for Smarter, Faster Operations.pptx
byInsurance Tech Services
 
PPTX
OTT Content Analytics Enhanced by ALTBalaji Data Scraping.pptx
byyashpatric
 
PDF
DSD-INT 2025 Integrating Nature-Based Solutions into Hydrological Models A Li...
byDeltares
 
PDF
Cybersecurity Alert- What Organisations Must Watch Out For This Christmas Fes...
byCybernetic Global Intelligence
 
PDF
Database Management Systems(DBMS):UNIT-I Introduction to Database(DBMS) BCA S...
byKuvempu University
 
PPTX
AI Clinic Management Software for Pulmonology Clinics Bringing Clarity, Contr...
byEasy Clinic
 
PDF
Virtual Study Circles Innovative Ways to Collaborate Online.pdf
byExplain Learning
 
PPTX
List on Python Programming Language.pptx
byRICHARDALONSAGAY1
 
PDF
DSD-INT 2025 Hydrological response of the Puget Sound area to a changing clim...
byDeltares
 
Fast-tracking quality for hundreds applications with automated testing layers
byBogdan Plieshka
 
Microservices-Final !!!!!!!!!!!!!!!!.pdf
bydoquangminh962004
 
Road_Quality_Indicator using deeplearning algorithms and computer vision
byDHARUNPRASHOBMM
 
How Modern Custom Software is Revolutionizing Mortgage Lending Processes -Ma...
byMatellio
 
Custom chat gpt integration services.pptx
byChetu
 
Revolutionising-SQL-Data-Modelling-with-SqlDBM.pdf
bySQL DBM
 
Constraints First - Why Our On-Prem Ticketing System Starts With Limits, Not ...
bySpirit Face
 
Privacy Preserving Detection of Sensitive Data Exposure (1).pptx
byNikitaMandhan4
 
Computer_Virus_Presentation_With_Slide7.pptx
byHEVISLIVE
 
nsfconvertersoftwaretoconvertNSFtoPST.pdf
byNSF Converter Software
 
Solved First Semester B.C.A. C Programming Question Paper – Jan/Feb 2025
byKuvempu University
 
Modern P&C Insurance Software for Smarter, Faster Operations.pptx
byInsurance Tech Services
 
OTT Content Analytics Enhanced by ALTBalaji Data Scraping.pptx
byyashpatric
 
DSD-INT 2025 Integrating Nature-Based Solutions into Hydrological Models A Li...
byDeltares
 
Cybersecurity Alert- What Organisations Must Watch Out For This Christmas Fes...
byCybernetic Global Intelligence
 
Database Management Systems(DBMS):UNIT-I Introduction to Database(DBMS) BCA S...
byKuvempu University
 
AI Clinic Management Software for Pulmonology Clinics Bringing Clarity, Contr...
byEasy Clinic
 
Virtual Study Circles Innovative Ways to Collaborate Online.pdf
byExplain Learning
 
List on Python Programming Language.pptx
byRICHARDALONSAGAY1
 
DSD-INT 2025 Hydrological response of the Puget Sound area to a changing clim...
byDeltares
 

Containers Were Never Your End State

  • 1.
    Containers were neveryour end state! Duncan Winn Will Arroyo @duncwinn @WillAArroyo
  • 2.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Why This Talk? 2 Embedded OS (Windows & Linux) NSX-T CPI v1 v2 v3 ... CVEs Product Updates Java | .NET | NodeJS Pivotal Application Service (PAS) Application Code & Frameworks Buildpacks | Spring Boot | Spring Cloud | Steeltoe Elastic | Packaged Software | Spark Pivotal Container Service (PKS) >cf push >kubectl run YOU build the container vSphere Azure & Azure StackGoogle CloudAWSOpenstack Pivotal Network “3Rs” Github Concourse Concourse Pivotal Services Marketplace Pivotal and Partner Products Continuous delivery Public Cloud Services Customer Managed Services OpenServiceBrokerAPI Repair — CVEs Repave Rotate — Credhub The PLATFORM builds the container
  • 3.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Where Are We?
  • 4.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ This is not your end state… 4
  • 5.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 5 …more like… Hype Cycle
  • 6.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Hype Cycle 6
  • 7.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Hype Cycle
  • 8.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Hype Cycle •Mature Deployment Approach •Systematic Process for Day 2 Ops •Ecosystem Integration •Understand Failure / Security Boundaries •Appropriate Workloads 1. Container Principles 2.Building Container Images 3.Running Container Images 4.Deploying Kubernetes
  • 9.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Principles
  • 10.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ image Container Image kubelet CRI Container Runtime Interface Container Runtime Container Principles
  • 11.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Container Runtime Interface kubelet Container gRPC Client CRI ShimgRPC Server Container Runtime Container image
  • 12.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Running As A Non-Privileged User 12
  • 13.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Running As A Non-Privileged User 13
  • 14.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Getting Root Access 14
  • 15.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Building Container Images
  • 16.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers Build Base OS Middleware/Runtime App+Dependencies
  • 17.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers Build App+Dependencies Middleware/Runtime Base OS
  • 18.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 18 Use Layers Wisely 1. add 2. copy 3. run
  • 19.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 19 Use Layers Wisely 1. add 2. copy 3. run
  • 20.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 20 Use Layers Wisely 1. add 2. copy 3. run
  • 21.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 21 Use Layers Wisely 1. add 2. copy 3. run
  • 22.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 22 Use Layers Wisely 1. add 2. copy 3. run
  • 23.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Building Images App+Dependencies Middleware/Runtime Base 1 to Many 1 to Many
  • 24.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Building Images App+Dependencies Middleware/Runtime Base 1 to Many 1 to Many Build args
  • 25.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Build Args Are Not Secure 25
  • 26.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Build Args Are Not Secure 26
  • 27.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Tagging Is Important 27 ubuntu:14.04 ubuntu:latestFROM ubuntu ubuntu:16.10
  • 28.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Tagging Is Important 28 ubuntu:14.04 ubuntu:latestFROM ubuntu ubuntu:16.10 ubuntu:18.04
  • 29.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Tagging Is Important 29 ubuntu:14.04 ubuntu:latestFROM ubuntu ubuntu:16.10 ubuntu:18.04 ubuntu:14.04 ubuntu:latestFROM ubuntu:latest ubuntu:16.10 ubuntu:18.04 ubuntu:14.04 ubuntu:latest FROM ubuntu:14.04 ubuntu:16.10 ubuntu:18.04
  • 30.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers Build App+Dependencies Middleware/Runtime Base V3.8 1 to Many V8u181 1 to Many V1.1
  • 31.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Running Container Images
  • 32.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Image Layers (Run) App+Dependencies Middleware/Runtime Base Deploy Time Configuration 1 to Many 1 to Many V3.8 V8u181 V1.1 Code Repo
  • 33.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploy Apps Package Manager kubectl helm install ./my-cart Kubectl create -f ./mycart/frontend-service.yml Kubectl create -f ./mycart/frontend-deployment.yml Kubectl create -f ./mycart/api-service.yml Kubectl create -f ./mycart/api-deployment.yml Kubectl create -f ./mycart/redis-service.yml Kubectl create -f ./mycart/db-service.yml Kubectl create -f ./mycart/redis-deployment.yml Kubectl create -f ./mycart/db-deployment.yml
  • 34.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Big “A”pp Deploy Apps Small “a”pp Small “a”pp Small “a”pp Small “a”pp Small “a”pp Small
  • 35.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploy Apps Package Manager kubectl helm install ./my-cart Kubectl create -f ./mycart/frontend-service.yml Kubectl create -f ./mycart/frontend-deployment.yml Kubectl create -f ./mycart/api-service.yml Kubectl create -f ./mycart/api-deployment.yml Kubectl create -f ./mycart/redis-service.yml Kubectl create -f ./mycart/db-service.yml Kubectl create -f ./mycart/redis-deployment.yml Kubectl create -f ./mycart/db-deployment.yml
  • 36.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Trusted Registry
  • 37.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Trusted Registry • OpenJDK Docker Image • Pulled Directly from Docker hub • Image created 9 hrs Prior • Scanned by Harbor • Signed by Harbor
  • 38.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Trusted Registry
  • 39.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Apps Pipelines Code Repo env var args build args Configuration
  • 40.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Git Ops Config Repo Code Repo Kube Cluster build args env var args
  • 41.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying Kubernetes
  • 42.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying K8s Kubeadm RKE
  • 43.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying a k8s cluster with PKS
  • 44.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying K8s
  • 45.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Deploying K8s
  • 46.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Securing K8s
  • 47.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ K8s Day 2 Ops (Patching and Updating) ISO IaaS
  • 48.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ K8s Day 2 Ops (Patching and Updating) MasterMaster Node 1 Node 2 Node 3 Node 4 Node 1
  • 49.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Take Aways
  • 50.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1. Choose a deployment method (close to upstream k8s) 2. Understand k8s components 3. Careful building docker images (governance + security) 4. Automate everything (platform, images, apps) Takeaways Repeat
  • 51.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 51 > kubectl Multi-Cloud PKS Kubernetes Dashboard vRealize Ops PKS Control Plane GCP Service Broker > pks Operations Manager vRealize Operations Dev / Apps App User IT / Platform Ops …in support of an end state…
  • 52.
  • 53.
    Container Principles 1. QuickTo Create 2. Resource Consolidation 3. App Portability Control Resources Isolate and Secure Processes
  • 54.
  • 55.
  • 56.
    Container Misconceptions Docker Images Droplets+Stack FileSystem Docker-Engine Guardian Docker-CLI Garden Management RunC Implementation API-CLI RuntimeIT DOES NOT MATTER
  • 57.