Container Service based on Kubernetes

1. 1© IBM Corporation
1
Lionel Macé
Bluemix Technical Sales Europe
Container Service
based on Kubernetes

2. Domain
Services
Mobile Cognitive IoT
Block
Chain
Health Video
SecurityandCompliance
Methods&Services
Developer
Services
Data &
Analytics
Integration App Services
DevOps
Tooling
Containers Cloud Foundry Event-Driven
Infrastructure
Services
Compute Storage Network
2
IBM Cloud Platform Portfolio
© 2016 IBM Corporation

3. 3
Bluemix Public available on 5 Public Regions
© 2016 IBM Corporation
Dallas
(us-south)
London
(eu-gb)
Bluemix Public Location
50+ Cloud data centers
6 continents Sydney
(au-syd)
Paris
Bluemix
Dedicated
China
Frankfurt
(eu-de)

4. 4© IBM Corporation
Virtual Servers
“Abstraction”
“Control”
Bare Metal
Dedicated Compute
High Memory
Intensive Disk I/O
Isolation
Familiar
Full Operating
System Control
Containers
Portable
Flexible
Light-weight
CF Apps
Speed
Manage code,
not infrastructure
OpenWhisk
Stateless
Event-Driven
Short-lived
…meetsyourdeveloperneeds…
Total Control FlexibilityMaximum Efficiency DevOps Minimal Cost Reactive
PaaSCaaSIaaS
IBM Bluemix Compute Choice & Flexibility

5. 5© IBM Corporation
Bare Metal ContainersVirtual Servers Cloud Foundry OpenWhisk
Actions: Code (single function)
Triggers: Events/Messages
Code
Data
Runtime
Middleware
OS
Virtualization
Servers
Storage
Networking
Code
Data
Runtime
Middleware
OS
Virtualization
Servers
Storage
Networking
Code
Data
Runtime
Middleware
OS
Virtualization
Servers
Storage
Networking
Code
Data
OS
Virtualization
Servers
Storage
Networking
Runtime
Middleware
Customer Managed
Service Provider Managed
Actions & Triggers
Bluemix Compute – Levels of Responsibility

6. 6© IBM Corporation
Image Registry
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes
Master
Worker Node 1
Worker Node 2
Worker Node 3
Worker Node n
Kubernetes Architecture

7. 7© IBM Corporation
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes Master
Kubernetes Architecture
API Server Scheduler Controller
etcd

8. 8© IBM Corporation
Image Registry
Kubernetes
Master
Worker Node 1, 2, 3… n
Kubernetes Architecture
Pod Pod Pod
docker
Kube-
proxy
Container
Container
Container
Container
Container
Container
Container
Container
Container
kubelet

9. 9© IBM Corporation
IBM Managed Account
Image Registry
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes
Master
Worker Node 1
2 CPU - 4 GB RAM
Kubernetes Free Cluster – Single Worker Node

10. 10© IBM Corporation
IBM Managed Account Customer Account
Image Registry
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes
Master
Worker Node 1
Worker Node 2
Worker Node 3
Worker Node n
Kubernetes PaidCluster - fully customizable, production-ready

11. 11© IBM Corporation
IBM Container Service
• Fully dedicated, single tenant clusters
• Cluster nodes deployed within customer
account and network
• Full docker and Kubernetes API support
• Fully managed masters
• Integrated Bluemix services
• Integrated Micro-Services fabric
• Private cluster network with ingress and
load balancers

12. 12© IBM Corporation
Kubernetes Architecture on Bluemix
https://console.ng.bluemix.net/docs/api/content/containers/images/cs_org_ov.png

13. 13© IBM Corporation
IBM Push Notifications
Application Security Manager
Compute
Concept Insights, Dialog
Natural Language Classifier
Question and Answer
Relationship Extraction
Text to Speech
AlchemyAPI
Language Translation
Personality Insights
Concept Expansion
Retrieve and Rank
Visual Recognition
Speech To Text
Watson
CDN
Media
API Management
Service Broker
Secure Gateway
Service Proxy
Service Discovery
Cloud Integration
Integrate
AppScan Dynamic Analyzer
AppScan Mobile Analyzer
Key Protect
IDaaS
Access Trail
Firewall
Security Groups
Mobile Analyzer for iOS
Security
IoT Insights
IoT Real Time Insights
IoT
Application Server on Cloud
Business Rules
Workflow
Big Insights
Data Cache
Session Cache
MQ Light
Message Hub
Workflow Scheduler
Application
Presence Insights
Mobile Data
Mobile Client Access
Quality Assurance
Mobile Application Security
Push
Mobile
Block Storage
Object Storage
Storage
Networking
User Defined Services
User Defined APIs
Private APIs
OpenStack VMs
Docker Containers
Cloud Foundry Runtimes
Event Driven Apps
Bare Metal
Blueprints (Patterns)
CMS
Data & Analytics
Analytics for Apache Hadoop
dashDB
BigInsights for Apache Hadoop
DataWorks
Cloudant NoSQL DB
Elasticsearch by Compose
Apache Spark
Geospatial Analytics
IBM DB2 on Cloud
Predictive Analytics
MongoDB by Compose
Redis by Compose
PostgreSQL by Compose
SQL Database
Insights for Twitter
Streaming Analytics
Time Series Database
Embeddable Reporting
SDN
Load Balancer
VPN
Active Deploy
Image Builder
Delivery Pipeline
Tracking and Plan GIT
Auto-Scaling
Monitoring and Analytics
DevOps
Alert Notification
Seamless integration of Kube cluster with Bluemix Services
Insights for Weather

14. 14© IBM Corporation
• Secure compute hosts
• Built-in security and isolation
• Hosted secured Private
image registry
• Private network overlays
• Automatic Vulnerability
scanning
Securing containers
https://console.ng.bluemix.net/docs/containers/container_security.html

15. 15© IBM Corporation
Policy Violations
Vulnerable Packages
Vulnerability Advisor

16. 16© IBM Corporation
Vulnerability Advisor – Live Container Scanning

17. 17© IBM Corporation
http://www-03.ibm.com/security/xforce/
Integration between Vulnerability Advisor and IBM X-Force

18. 18© IBM Corporation
Leveragingcontainer Pods, Replica Sets
and Worker Nodes
Container Application Resiliency – High Availability Patterns

19. 19© IBM Corporation
• Integrated logging and monitoring on Bluemix based on ELK stack
• Native Kubernetes dashboard or API
Monitoring Containers

20. 20© IBM Corporation
IBM Container
Image Build
Service
Image
Registry
Open Toolchain