1© IBM Corporation
1
Lionel Macé
Bluemix Technical Sales Europe
Container Service
based on Kubernetes
Domain
Services
Mobile Cognitive IoT
Block
Chain
Health Video
SecurityandCompliance
Methods&Services
Developer
Services
Data &
Analytics
Integration App Services
DevOps
Tooling
Containers Cloud Foundry Event-Driven
Infrastructure
Services
Compute Storage Network
2
IBM Cloud Platform Portfolio
© 2016 IBM Corporation
3
Bluemix Public available on 5 Public Regions
© 2016 IBM Corporation
Dallas
(us-south)
London
(eu-gb)
Bluemix Public Location
50+ Cloud data centers
6 continents Sydney
(au-syd)
Paris
Bluemix
Dedicated
China
Frankfurt
(eu-de)
4© IBM Corporation
Virtual Servers
“Abstraction”
“Control”
Bare Metal
Dedicated Compute
High Memory
Intensive Disk I/O
Isolation
Familiar
Full Operating
System Control
Containers
Portable
Flexible
Light-weight
CF Apps
Speed
Manage code,
not infrastructure
OpenWhisk
Stateless
Event-Driven
Short-lived
…meetsyourdeveloperneeds…
Total Control FlexibilityMaximum Efficiency DevOps Minimal Cost Reactive
PaaSCaaSIaaS
IBM	Bluemix	Compute	Choice	&		Flexibility
5© IBM Corporation
Bare Metal ContainersVirtual Servers Cloud Foundry OpenWhisk
Actions: Code (single function)
Triggers: Events/Messages
Code
Data
Runtime
Middleware
OS
Virtualization
Servers
Storage
Networking
Code
Data
Runtime
Middleware
OS
Virtualization
Servers
Storage
Networking
Code
Data
Runtime
Middleware
OS
Virtualization
Servers
Storage
Networking
Code
Data
OS
Virtualization
Servers
Storage
Networking
Runtime
Middleware
Customer Managed
Service Provider Managed
Actions & Triggers
Bluemix	Compute	– Levels	of	Responsibility
6© IBM Corporation
Image Registry
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes
Master
Worker Node 1
Worker Node 2
Worker Node 3
Worker Node n
Kubernetes	Architecture
7© IBM Corporation
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes Master
Kubernetes	Architecture
API Server Scheduler Controller
etcd
8© IBM Corporation
Image Registry
Kubernetes
Master
Worker Node 1, 2, 3… n
Kubernetes	Architecture
Pod Pod Pod
docker
Kube-
proxy
Container
Container
Container
Container
Container
Container
Container
Container
Container
kubelet
9© IBM Corporation
IBM Managed Account
Image Registry
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes
Master
Worker Node 1
2 CPU - 4 GB RAM
Kubernetes	Free Cluster	– Single	Worker	Node
10© IBM Corporation
IBM Managed Account Customer Account
Image Registry
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes
Master
Worker Node 1
Worker Node 2
Worker Node 3
Worker Node n
Kubernetes	PaidCluster	- fully	customizable,	production-ready
11© IBM Corporation
IBM	Container	Service
• Fully dedicated, single tenant clusters
• Cluster nodes deployed within customer
account and network
• Full docker and Kubernetes API support
• Fully managed masters
• Integrated Bluemix services
• Integrated Micro-Services fabric
• Private cluster network with ingress and
load balancers
12© IBM Corporation
Kubernetes	Architecture	on	Bluemix
https://console.ng.bluemix.net/docs/api/content/containers/images/cs_org_ov.png
13© IBM Corporation
IBM Push Notifications
Application Security Manager
Compute
Concept Insights, Dialog
Natural Language Classifier
Question and Answer
Relationship Extraction
Text to Speech
AlchemyAPI
Language Translation
Personality Insights
Concept Expansion
Retrieve and Rank
Visual Recognition
Speech To Text
Watson
CDN
Media
API Management
Service Broker
Secure Gateway
Service Proxy
Service Discovery
Cloud Integration
Integrate
AppScan Dynamic Analyzer
AppScan Mobile Analyzer
Key Protect
IDaaS
Access Trail
Firewall
Security Groups
Mobile Analyzer for iOS
Security
IoT Insights
IoT Real Time Insights
IoT
Application Server on Cloud
Business Rules
Workflow
Big Insights
Data Cache
Session Cache
MQ Light
Message Hub
Workflow Scheduler
Application
Presence Insights
Mobile Data
Mobile Client Access
Quality Assurance
Mobile Application Security
Push
Mobile
Block Storage
Object Storage
Storage
Networking
User Defined Services
User Defined APIs
Private APIs
OpenStack VMs
Docker Containers
Cloud Foundry Runtimes
Event Driven Apps
Bare Metal
Blueprints (Patterns)
CMS
Data & Analytics
Analytics for Apache Hadoop
dashDB
BigInsights for Apache Hadoop
DataWorks
Cloudant NoSQL DB
Elasticsearch by Compose
Apache Spark
Geospatial Analytics
IBM DB2 on Cloud
Predictive Analytics
MongoDB by Compose
Redis by Compose
PostgreSQL by Compose
SQL Database
Insights for Twitter
Streaming Analytics
Time Series Database
Embeddable Reporting
SDN
Load Balancer
VPN
Active Deploy
Image Builder
Delivery Pipeline
Tracking and Plan GIT
Auto-Scaling
Monitoring and Analytics
DevOps
Alert Notification
Seamless	integration	of	Kube cluster	with	Bluemix	Services
Insights for Weather
14© IBM Corporation
• Secure compute hosts
• Built-in security and isolation
• Hosted secured Private
image registry
• Private network overlays
• Automatic Vulnerability
scanning
Securing	containers
https://console.ng.bluemix.net/docs/containers/container_security.html
15© IBM Corporation
Policy Violations
Vulnerable Packages
Vulnerability	Advisor
16© IBM Corporation
Vulnerability	Advisor	– Live	Container	Scanning
17© IBM Corporation
http://www-03.ibm.com/security/xforce/
Integration	between	Vulnerability	Advisor	and	IBM	X-Force
18© IBM Corporation
Leveragingcontainer Pods, Replica Sets
and Worker Nodes
Container	Application	Resiliency	– High	Availability	Patterns
19© IBM Corporation
• Integrated logging and monitoring on Bluemix based on ELK stack
• Native Kubernetes dashboard or API
Monitoring	Containers
20© IBM Corporation
IBM Container
Image Build
Service
Image
Registry
Open	Toolchain

IBM Bluemix Nice meetup #5 - 20170504 - Container Service based on Kubernetes

  • 1.
    1© IBM Corporation 1 LionelMacé Bluemix Technical Sales Europe Container Service based on Kubernetes
  • 2.
    Domain Services Mobile Cognitive IoT Block Chain HealthVideo SecurityandCompliance Methods&Services Developer Services Data & Analytics Integration App Services DevOps Tooling Containers Cloud Foundry Event-Driven Infrastructure Services Compute Storage Network 2 IBM Cloud Platform Portfolio © 2016 IBM Corporation
  • 3.
    3 Bluemix Public availableon 5 Public Regions © 2016 IBM Corporation Dallas (us-south) London (eu-gb) Bluemix Public Location 50+ Cloud data centers 6 continents Sydney (au-syd) Paris Bluemix Dedicated China Frankfurt (eu-de)
  • 4.
    4© IBM Corporation VirtualServers “Abstraction” “Control” Bare Metal Dedicated Compute High Memory Intensive Disk I/O Isolation Familiar Full Operating System Control Containers Portable Flexible Light-weight CF Apps Speed Manage code, not infrastructure OpenWhisk Stateless Event-Driven Short-lived …meetsyourdeveloperneeds… Total Control FlexibilityMaximum Efficiency DevOps Minimal Cost Reactive PaaSCaaSIaaS IBM Bluemix Compute Choice & Flexibility
  • 5.
    5© IBM Corporation BareMetal ContainersVirtual Servers Cloud Foundry OpenWhisk Actions: Code (single function) Triggers: Events/Messages Code Data Runtime Middleware OS Virtualization Servers Storage Networking Code Data Runtime Middleware OS Virtualization Servers Storage Networking Code Data Runtime Middleware OS Virtualization Servers Storage Networking Code Data OS Virtualization Servers Storage Networking Runtime Middleware Customer Managed Service Provider Managed Actions & Triggers Bluemix Compute – Levels of Responsibility
  • 6.
    6© IBM Corporation ImageRegistry API UI User Interface CLI Command Line Interface Kubernetes Master Worker Node 1 Worker Node 2 Worker Node 3 Worker Node n Kubernetes Architecture
  • 7.
    7© IBM Corporation API UI User Interface CLI Command Line Interface KubernetesMaster Kubernetes Architecture API Server Scheduler Controller etcd
  • 8.
    8© IBM Corporation ImageRegistry Kubernetes Master Worker Node 1, 2, 3… n Kubernetes Architecture Pod Pod Pod docker Kube- proxy Container Container Container Container Container Container Container Container Container kubelet
  • 9.
    9© IBM Corporation IBMManaged Account Image Registry API UI User Interface CLI Command Line Interface Kubernetes Master Worker Node 1 2 CPU - 4 GB RAM Kubernetes Free Cluster – Single Worker Node
  • 10.
    10© IBM Corporation IBMManaged Account Customer Account Image Registry API UI User Interface CLI Command Line Interface Kubernetes Master Worker Node 1 Worker Node 2 Worker Node 3 Worker Node n Kubernetes PaidCluster - fully customizable, production-ready
  • 11.
    11© IBM Corporation IBM Container Service •Fully dedicated, single tenant clusters • Cluster nodes deployed within customer account and network • Full docker and Kubernetes API support • Fully managed masters • Integrated Bluemix services • Integrated Micro-Services fabric • Private cluster network with ingress and load balancers
  • 12.
  • 13.
    13© IBM Corporation IBMPush Notifications Application Security Manager Compute Concept Insights, Dialog Natural Language Classifier Question and Answer Relationship Extraction Text to Speech AlchemyAPI Language Translation Personality Insights Concept Expansion Retrieve and Rank Visual Recognition Speech To Text Watson CDN Media API Management Service Broker Secure Gateway Service Proxy Service Discovery Cloud Integration Integrate AppScan Dynamic Analyzer AppScan Mobile Analyzer Key Protect IDaaS Access Trail Firewall Security Groups Mobile Analyzer for iOS Security IoT Insights IoT Real Time Insights IoT Application Server on Cloud Business Rules Workflow Big Insights Data Cache Session Cache MQ Light Message Hub Workflow Scheduler Application Presence Insights Mobile Data Mobile Client Access Quality Assurance Mobile Application Security Push Mobile Block Storage Object Storage Storage Networking User Defined Services User Defined APIs Private APIs OpenStack VMs Docker Containers Cloud Foundry Runtimes Event Driven Apps Bare Metal Blueprints (Patterns) CMS Data & Analytics Analytics for Apache Hadoop dashDB BigInsights for Apache Hadoop DataWorks Cloudant NoSQL DB Elasticsearch by Compose Apache Spark Geospatial Analytics IBM DB2 on Cloud Predictive Analytics MongoDB by Compose Redis by Compose PostgreSQL by Compose SQL Database Insights for Twitter Streaming Analytics Time Series Database Embeddable Reporting SDN Load Balancer VPN Active Deploy Image Builder Delivery Pipeline Tracking and Plan GIT Auto-Scaling Monitoring and Analytics DevOps Alert Notification Seamless integration of Kube cluster with Bluemix Services Insights for Weather
  • 14.
    14© IBM Corporation •Secure compute hosts • Built-in security and isolation • Hosted secured Private image registry • Private network overlays • Automatic Vulnerability scanning Securing containers https://console.ng.bluemix.net/docs/containers/container_security.html
  • 15.
    15© IBM Corporation PolicyViolations Vulnerable Packages Vulnerability Advisor
  • 16.
  • 17.
  • 18.
    18© IBM Corporation LeveragingcontainerPods, Replica Sets and Worker Nodes Container Application Resiliency – High Availability Patterns
  • 19.
    19© IBM Corporation •Integrated logging and monitoring on Bluemix based on ELK stack • Native Kubernetes dashboard or API Monitoring Containers
  • 20.
    20© IBM Corporation IBMContainer Image Build Service Image Registry Open Toolchain