SlideShare a Scribd company logo
Spin Up your Kubernetes
Infrastructure the GitOps Way
Michal Vančo
CNCF Webinar
&
Michal Vančo
K8S Cloud Architect, Consultant
@michalvanco
michal@kubermatic.com
Who Am I?
• Living in Czech Republic, Brno
• Consultant & K8S cloud architect in PS team @Kubermatic
• Helping customers with their cloud native journeys
• Full-stack engineer with focus on automation, delivery and QA
• 14 years experience in Software Engineering
Before ...
• Full-stack engineer / architect / manager @GoodData
• JBoss Middleware projects @Red Hat
michal-vanco
This Webinar Will Be About...
● Brief Kubermatic introduction
● start.kubermatic project preview
● Motivations and usage of CNCF tools
● GitOps and declarative management on all levels
● Security aspects
● Live Demo
Kubermatic,
the Leading Kubernetes Experts
● Creator of KubeOne & Kubermatic Kubernetes Platform,
Enterprise Software Platform, widely deployed in EU
● The top Kubernetes employer in Europe
● #6 top committer to the Kubernetes Project for over 3 years
● Employs the #1 and #2 top contributors to Kubernetes
Dashboard for over 3 years
Our Team
90+ employees
Located
All across the globe
Conway's law in Action
Designing a highly distributed product as
a highly distributed company
Our Vision: Power Through Automation
Building the world’s most adaptable and autonomous service
operations platform.
free up resources save time improve your systems keep up with new tech
Our Portfolio
Automate operations of a single Kubernetes cluster on your chosen
cloud, on-prem, or edge environment.
Automate multi cloud, on-prem, and edge operations with a single
management UI enabling you to deliver the cloud native
transformation immediately.
The operator of operators. Centrally manage all your services and
applications across multiple clusters, clouds and regions with
Kubernetes native API and tooling.
Automate operations of a single Kubernetes cluster on your chosen cloud, on-prem, or edge
environment.
KubeOne
AZ 3
AZ 2
AZ 1 Subnet 1
Users
Control Plane 1 Host Worker Node
Subnet 2
Control Plane 2 Host Worker Node
Subnet 3
Control Plane 3 Host Worker Node
Load Balancer
VPC
Automate multi-cloud, on-prem, and edge operations with a single management UI enabling you
to deliver the cloud native transformation immediately.
Kubermatic Kubernetes Platform
Multi Cluster Management
For cluster lifecycle, deployments, configuration, policies, observability, maintenance
Includes the Master Components for Configuration
Highly Available Kubernetes Cluster
Scales User Cluster Master
Components
Delivers additional logic and
features
API Controller Scheduler etcd
Seed Cluster Seed Cluster Seed Cluster Seed Cluster
User k8s
Worker
User k8s
Worker
User k8s
Worker
User k8s
Worker
User k8s
Worker
User k8s
Worker
User k8s
Worker
User k8s
Worker
API Controller Scheduler etcd
start.kubermatic
1
Git Provider
2
Cloud Provider
3
Cluster
4
KKP
5
KKP Bootstrap Config
6
Summary
Specify details of your
master cluster and provider
Specify details of your KKP
configuration
Specify details of your initial
KKP configuration, initial
datacenter and details of
your provider
Download the preconfigured
bundle
+
Web wizard that guides you through the categorized steps.
Example structure of downloaded archive.
How Do I Deliver?
● Combination of
automatic pipeline +
GitOps tool (Flux v2)
● Setup Git repo
and git push
● Alternatively follow
the README-local
steps
Main Motivations
User-friendly wizard,
detailed documentation,
ready for any
customizations
Quick and Easy to
Bootstrap
GitHub Workflow /
GitLab CI/CD for master
cluster preparation,
GitOps for KKP and
other k8s resources
Fully Automated
Sensitive values safely
stored in Git,
Mozilla SOPS for
encryption / decryption
Secure
Ready to be customized, scaled and managed in sustainable way!
Used CNCF tools
What Are the Steps Under the Hood?
+
Cloud resources are created by Terraform and output is used by KubeOne.
KubeOne Master Cluster
K8s Master K8s Master K8s Master
Worker Worker Worker
Load balancer
HA Kubernetes cluster is provisioned by KubeOne, workers are managed by the machine-controller.
Master Cluster
addons (sc, autoscaler, ..)
Empty Kubernetes cluster with various KubeOne addons.
KKP installer is used for orchestration of installation steps (set of checks, helm charts installation, etc.).
Master Cluster
addons (sc, autoscaler, ..)
nginx-ingress
cert-manager
API Operator UI
oauth (dex)
These namespaces were created by KKP installer on k8s cluster (core components for KKP).
Master Cluster
addons (sc, autoscaler, ..)
nginx-ingress
cert-manager
API Operator UI
oauth (dex)
kkp.endpoint.xyz (DNS)
DNS records are registered – that enables provisioning of certificates and access to KKP dashboard.
Master Cluster
addons (sc, autoscaler, ..)
nginx-ingress
cert-manager
API Operator UI
flux-system
oauth (dex)
kkp.endpoint.xyz (DNS)
GitOps tool (Flux v2) is bootstrapped on k8s cluster.
Master / Seed Cluster
addons (sc, autoscaler, ..)
nginx-ingress
cert-manager
API Operator UI
flux-system
monitoring
logging
minio
iap
oauth (dex)
Seed Project User
(admin)
SOPS
kustomization
KKP
Settings
kkp.endpoint.xyz (DNS)
GitOps managed resources are now delivered (various KKP resources, set of helm charts - MLA, minio, IAP).
Master / Seed Cluster
addons (sc, autoscaler, ..)
nginx-ingress
cert-manager
API Operator UI
flux-system
monitoring
logging
minio
iap
oauth (dex)
Seed Project User
(admin)
Preset KKP Cluster
Template
SOPS
kustomization
KKP
Settings
kkp.endpoint.xyz (DNS)
Additional kustomization delivered other resources while applying decryption with SOPS directly.
GitOps Way on All Levels
Declarative, declarative...
Want more?
● User Cluster templates
● Addons, OPA policies
● Other KKP resources
● User Clusters (to be
supported in future KKP
release)
● Flux2 KKP Addon for User
clusters
(flux/clusters/xyz/…)
● ArgoCD KKP Addon is
also available
$ flux bootstrap gitlab 
--owner=${CI_PROJECT_NAMESPACE} 
--repository=${CI_PROJECT_NAME} 
--branch=main 
--personal=true 
--path=flux/clusters/master 
--commit-message-appendix='[ci skip]'
Programmatic API Access
$ curl -o gce-gitlab-<customer>.zip -X POST -H 
"Content-Type: application/json" 
--data-binary @req-gce.json 
https://start.kubermatic.com/api/generate
# file: req-gce.json
{
"gitProvider": "github",
"cloudProvider": "gce",
"kubernetesSpec": {
"clusterName": "kkp-demo-gce",
"masterVersion": "v1.22.2",
"containerRuntime": "containerd",
"cloudProvider": {
"gce": {
"region": "europe-west3"
}
}
},
"kkpSpec": {
"version": "v2.19.2",
"endpoint": "kkp-gce.lab.kubermatic.io",
"seed": {
"datacenterName": "gce-europe",
"datacenterSpec": {
"gce": {
"region": "europe-west3"
}
}
},
"preset": {
"gce": {
"serviceAccount": "xxx"
}
}, …
}
* OpenAPI definition to be exposed
Security
Usage of Mozilla SOPS + AGE
# file: secrets.md
Only Pipeline and K8s Is Able to Decrypt Values
Demo Time
Try It Yourself!
start.kubermatic.com
VISIT NOW
We Want to Hear from You!
kubermatic-community.slack.com #start-kubermatic
kubermatic.com/contact-us
Team
Michal Vančo
Project Lead
Marcin Maciaszczyk
UI Developer
Marko Mudrinić
Developer
Sebastian Florek
UI Developer
Sascha Haase
Product Manager
Weronika Franczyk
Designer
Chiara Schieder
Designer
Thank You for Your Attention!
And Enjoy Your GitOps Journey :)
Email: michal@kubermatic.com
Project: start.kubermatic.com
Demo repo (GitLab+GCP): gitlab.com/michal.vanco/start-kkp-webinar-demo
Demo repo (GitHub+AWS): github.com/michalvanco/start-kkp-aws
Documentation: docs.kubermatic.com/kubermatic/master/installation/start_kkp

More Related Content

Similar to Kubermatic.pdf

Pivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
Pivotal Container Service : la nuova soluzione per gestire Kubernetes in aziendaPivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
Pivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
VMware Tanzu
 
The path to a serverless-native era with Kubernetes
The path to a serverless-native era with KubernetesThe path to a serverless-native era with Kubernetes
The path to a serverless-native era with Kubernetes
sparkfabrik
 
Project Gardener - EclipseCon Europe - 2018-10-23
Project Gardener - EclipseCon Europe - 2018-10-23Project Gardener - EclipseCon Europe - 2018-10-23
Project Gardener - EclipseCon Europe - 2018-10-23
msohn
 
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
QAware GmbH
 
Red Hat and kubernetes: awesome stuff coming your way
Red Hat and kubernetes:  awesome stuff coming your wayRed Hat and kubernetes:  awesome stuff coming your way
Red Hat and kubernetes: awesome stuff coming your way
Johannes Brännström
 
Load Balancing in the Cloud using Nginx & Kubernetes
Load Balancing in the Cloud using Nginx & KubernetesLoad Balancing in the Cloud using Nginx & Kubernetes
Load Balancing in the Cloud using Nginx & Kubernetes
Lee Calcote
 
Sumo Logic Cert Jam - Advanced Metrics with Kubernetes
Sumo Logic Cert Jam - Advanced Metrics with KubernetesSumo Logic Cert Jam - Advanced Metrics with Kubernetes
Sumo Logic Cert Jam - Advanced Metrics with Kubernetes
Sumo Logic
 
Metal-k8s presentation by Julien Girardin @ Paris Kubernetes Meetup
Metal-k8s presentation by Julien Girardin @ Paris Kubernetes MeetupMetal-k8s presentation by Julien Girardin @ Paris Kubernetes Meetup
Metal-k8s presentation by Julien Girardin @ Paris Kubernetes Meetup
Laure Vergeron
 
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptxKubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptx
HectorSebastianMendo
 
Ultimate Guide to Microservice Architecture on Kubernetes
Ultimate Guide to Microservice Architecture on KubernetesUltimate Guide to Microservice Architecture on Kubernetes
Ultimate Guide to Microservice Architecture on Kubernetes
kloia
 
Pivotal Container Service Overview
Pivotal Container Service Overview Pivotal Container Service Overview
Pivotal Container Service Overview
VMware Tanzu
 
Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...
Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...
Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...
Tobias Schneck
 
How to Migrate 100 Clusters from On-Prem to Google Cloud Without Downtime
How to Migrate 100 Clusters from On-Prem to Google Cloud Without DowntimeHow to Migrate 100 Clusters from On-Prem to Google Cloud Without Downtime
How to Migrate 100 Clusters from On-Prem to Google Cloud Without Downtime
loodse
 
Federated Kubernetes: As a Platform for Distributed Scientific Computing
Federated Kubernetes: As a Platform for Distributed Scientific ComputingFederated Kubernetes: As a Platform for Distributed Scientific Computing
Federated Kubernetes: As a Platform for Distributed Scientific Computing
Bob Killen
 
Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018
Anthony Dahanne
 
Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...
Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...
Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...
confluent
 
Cloud-native .NET Microservices mit Kubernetes
Cloud-native .NET Microservices mit KubernetesCloud-native .NET Microservices mit Kubernetes
Cloud-native .NET Microservices mit Kubernetes
QAware GmbH
 
Kubernetes #1 intro
Kubernetes #1   introKubernetes #1   intro
Kubernetes #1 intro
Terry Cho
 
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry MeetupPivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
cornelia davis
 
How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...
How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...
How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...
Lightbend
 

Similar to Kubermatic.pdf (20)

Pivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
Pivotal Container Service : la nuova soluzione per gestire Kubernetes in aziendaPivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
Pivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
 
The path to a serverless-native era with Kubernetes
The path to a serverless-native era with KubernetesThe path to a serverless-native era with Kubernetes
The path to a serverless-native era with Kubernetes
 
Project Gardener - EclipseCon Europe - 2018-10-23
Project Gardener - EclipseCon Europe - 2018-10-23Project Gardener - EclipseCon Europe - 2018-10-23
Project Gardener - EclipseCon Europe - 2018-10-23
 
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
 
Red Hat and kubernetes: awesome stuff coming your way
Red Hat and kubernetes:  awesome stuff coming your wayRed Hat and kubernetes:  awesome stuff coming your way
Red Hat and kubernetes: awesome stuff coming your way
 
Load Balancing in the Cloud using Nginx & Kubernetes
Load Balancing in the Cloud using Nginx & KubernetesLoad Balancing in the Cloud using Nginx & Kubernetes
Load Balancing in the Cloud using Nginx & Kubernetes
 
Sumo Logic Cert Jam - Advanced Metrics with Kubernetes
Sumo Logic Cert Jam - Advanced Metrics with KubernetesSumo Logic Cert Jam - Advanced Metrics with Kubernetes
Sumo Logic Cert Jam - Advanced Metrics with Kubernetes
 
Metal-k8s presentation by Julien Girardin @ Paris Kubernetes Meetup
Metal-k8s presentation by Julien Girardin @ Paris Kubernetes MeetupMetal-k8s presentation by Julien Girardin @ Paris Kubernetes Meetup
Metal-k8s presentation by Julien Girardin @ Paris Kubernetes Meetup
 
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptxKubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptx
 
Ultimate Guide to Microservice Architecture on Kubernetes
Ultimate Guide to Microservice Architecture on KubernetesUltimate Guide to Microservice Architecture on Kubernetes
Ultimate Guide to Microservice Architecture on Kubernetes
 
Pivotal Container Service Overview
Pivotal Container Service Overview Pivotal Container Service Overview
Pivotal Container Service Overview
 
Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...
Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...
Kubermatic How to Migrate 100 Clusters from On-Prem to Google Cloud Without D...
 
How to Migrate 100 Clusters from On-Prem to Google Cloud Without Downtime
How to Migrate 100 Clusters from On-Prem to Google Cloud Without DowntimeHow to Migrate 100 Clusters from On-Prem to Google Cloud Without Downtime
How to Migrate 100 Clusters from On-Prem to Google Cloud Without Downtime
 
Federated Kubernetes: As a Platform for Distributed Scientific Computing
Federated Kubernetes: As a Platform for Distributed Scientific ComputingFederated Kubernetes: As a Platform for Distributed Scientific Computing
Federated Kubernetes: As a Platform for Distributed Scientific Computing
 
Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018Kubernetes for java developers - Tutorial at Oracle Code One 2018
Kubernetes for java developers - Tutorial at Oracle Code One 2018
 
Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...
Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...
Modern Cloud-Native Streaming Platforms: Event Streaming Microservices with A...
 
Cloud-native .NET Microservices mit Kubernetes
Cloud-native .NET Microservices mit KubernetesCloud-native .NET Microservices mit Kubernetes
Cloud-native .NET Microservices mit Kubernetes
 
Kubernetes #1 intro
Kubernetes #1   introKubernetes #1   intro
Kubernetes #1 intro
 
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry MeetupPivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
 
How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...
How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...
How to build streaming data pipelines with Akka Streams, Flink, and Spark usi...
 

More from LibbySchulze

Running distributed tests with k6.pdf
Running distributed tests with k6.pdfRunning distributed tests with k6.pdf
Running distributed tests with k6.pdf
LibbySchulze
 
Extending Kubectl.pptx
Extending Kubectl.pptxExtending Kubectl.pptx
Extending Kubectl.pptx
LibbySchulze
 
Enhancing Data Protection Workflows with Kanister And Argo Workflows
Enhancing Data Protection Workflows with Kanister And Argo WorkflowsEnhancing Data Protection Workflows with Kanister And Argo Workflows
Enhancing Data Protection Workflows with Kanister And Argo Workflows
LibbySchulze
 
Fallacies in Platform Engineering.pdf
Fallacies in Platform Engineering.pdfFallacies in Platform Engineering.pdf
Fallacies in Platform Engineering.pdf
LibbySchulze
 
Intro to Fluvio.pptx.pdf
Intro to Fluvio.pptx.pdfIntro to Fluvio.pptx.pdf
Intro to Fluvio.pptx.pdf
LibbySchulze
 
Enhance your Kafka Infrastructure with Fluvio.pptx
Enhance your Kafka Infrastructure with Fluvio.pptxEnhance your Kafka Infrastructure with Fluvio.pptx
Enhance your Kafka Infrastructure with Fluvio.pptx
LibbySchulze
 
CNCF On-Demand Webinar_ LitmusChaos Project Updates.pdf
CNCF On-Demand Webinar_ LitmusChaos Project Updates.pdfCNCF On-Demand Webinar_ LitmusChaos Project Updates.pdf
CNCF On-Demand Webinar_ LitmusChaos Project Updates.pdf
LibbySchulze
 
Oh The Places You'll Sign.pdf
Oh The Places You'll Sign.pdfOh The Places You'll Sign.pdf
Oh The Places You'll Sign.pdf
LibbySchulze
 
Rancher MasterClass - Avoiding-configuration-drift.pptx
Rancher  MasterClass - Avoiding-configuration-drift.pptxRancher  MasterClass - Avoiding-configuration-drift.pptx
Rancher MasterClass - Avoiding-configuration-drift.pptx
LibbySchulze
 
vFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptx
vFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptxvFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptx
vFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptx
LibbySchulze
 
CNCF Live Webinar: Low Footprint Java Containers with GraalVM
CNCF Live Webinar: Low Footprint Java Containers with GraalVMCNCF Live Webinar: Low Footprint Java Containers with GraalVM
CNCF Live Webinar: Low Footprint Java Containers with GraalVM
LibbySchulze
 
EnRoute-OPA-Integration.pdf
EnRoute-OPA-Integration.pdfEnRoute-OPA-Integration.pdf
EnRoute-OPA-Integration.pdf
LibbySchulze
 
AirGap_zusammen_neu.pdf
AirGap_zusammen_neu.pdfAirGap_zusammen_neu.pdf
AirGap_zusammen_neu.pdf
LibbySchulze
 
Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...
Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...
Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...
LibbySchulze
 
OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...
OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...
OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...
LibbySchulze
 
CNCF_ A step to step guide to platforming your delivery setup.pdf
CNCF_ A step to step guide to platforming your delivery setup.pdfCNCF_ A step to step guide to platforming your delivery setup.pdf
CNCF_ A step to step guide to platforming your delivery setup.pdf
LibbySchulze
 
CNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdf
CNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdfCNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdf
CNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdf
LibbySchulze
 
Securing Windows workloads.pdf
Securing Windows workloads.pdfSecuring Windows workloads.pdf
Securing Windows workloads.pdf
LibbySchulze
 
Securing Windows workloads.pdf
Securing Windows workloads.pdfSecuring Windows workloads.pdf
Securing Windows workloads.pdf
LibbySchulze
 
Advancements in Kubernetes Workload Identity for Azure
Advancements in Kubernetes Workload Identity for AzureAdvancements in Kubernetes Workload Identity for Azure
Advancements in Kubernetes Workload Identity for Azure
LibbySchulze
 

More from LibbySchulze (20)

Running distributed tests with k6.pdf
Running distributed tests with k6.pdfRunning distributed tests with k6.pdf
Running distributed tests with k6.pdf
 
Extending Kubectl.pptx
Extending Kubectl.pptxExtending Kubectl.pptx
Extending Kubectl.pptx
 
Enhancing Data Protection Workflows with Kanister And Argo Workflows
Enhancing Data Protection Workflows with Kanister And Argo WorkflowsEnhancing Data Protection Workflows with Kanister And Argo Workflows
Enhancing Data Protection Workflows with Kanister And Argo Workflows
 
Fallacies in Platform Engineering.pdf
Fallacies in Platform Engineering.pdfFallacies in Platform Engineering.pdf
Fallacies in Platform Engineering.pdf
 
Intro to Fluvio.pptx.pdf
Intro to Fluvio.pptx.pdfIntro to Fluvio.pptx.pdf
Intro to Fluvio.pptx.pdf
 
Enhance your Kafka Infrastructure with Fluvio.pptx
Enhance your Kafka Infrastructure with Fluvio.pptxEnhance your Kafka Infrastructure with Fluvio.pptx
Enhance your Kafka Infrastructure with Fluvio.pptx
 
CNCF On-Demand Webinar_ LitmusChaos Project Updates.pdf
CNCF On-Demand Webinar_ LitmusChaos Project Updates.pdfCNCF On-Demand Webinar_ LitmusChaos Project Updates.pdf
CNCF On-Demand Webinar_ LitmusChaos Project Updates.pdf
 
Oh The Places You'll Sign.pdf
Oh The Places You'll Sign.pdfOh The Places You'll Sign.pdf
Oh The Places You'll Sign.pdf
 
Rancher MasterClass - Avoiding-configuration-drift.pptx
Rancher  MasterClass - Avoiding-configuration-drift.pptxRancher  MasterClass - Avoiding-configuration-drift.pptx
Rancher MasterClass - Avoiding-configuration-drift.pptx
 
vFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptx
vFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptxvFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptx
vFunction Konveyor Meetup - Why App Modernization Projects Fail - Aug 2022.pptx
 
CNCF Live Webinar: Low Footprint Java Containers with GraalVM
CNCF Live Webinar: Low Footprint Java Containers with GraalVMCNCF Live Webinar: Low Footprint Java Containers with GraalVM
CNCF Live Webinar: Low Footprint Java Containers with GraalVM
 
EnRoute-OPA-Integration.pdf
EnRoute-OPA-Integration.pdfEnRoute-OPA-Integration.pdf
EnRoute-OPA-Integration.pdf
 
AirGap_zusammen_neu.pdf
AirGap_zusammen_neu.pdfAirGap_zusammen_neu.pdf
AirGap_zusammen_neu.pdf
 
Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...
Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...
Copy of OTel Me All About OpenTelemetry The Current & Future State, Navigatin...
 
OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...
OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...
OTel Me All About OpenTelemetry The Current & Future State, Navigating the Pr...
 
CNCF_ A step to step guide to platforming your delivery setup.pdf
CNCF_ A step to step guide to platforming your delivery setup.pdfCNCF_ A step to step guide to platforming your delivery setup.pdf
CNCF_ A step to step guide to platforming your delivery setup.pdf
 
CNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdf
CNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdfCNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdf
CNCF Online - Data Protection Guardrails using Open Policy Agent (OPA).pdf
 
Securing Windows workloads.pdf
Securing Windows workloads.pdfSecuring Windows workloads.pdf
Securing Windows workloads.pdf
 
Securing Windows workloads.pdf
Securing Windows workloads.pdfSecuring Windows workloads.pdf
Securing Windows workloads.pdf
 
Advancements in Kubernetes Workload Identity for Azure
Advancements in Kubernetes Workload Identity for AzureAdvancements in Kubernetes Workload Identity for Azure
Advancements in Kubernetes Workload Identity for Azure
 

Recently uploaded

This 7-second Brain Wave Ritual Attracts Money To You.!
This 7-second Brain Wave Ritual Attracts Money To You.!This 7-second Brain Wave Ritual Attracts Money To You.!
This 7-second Brain Wave Ritual Attracts Money To You.!
nirahealhty
 
1.Wireless Communication System_Wireless communication is a broad term that i...
1.Wireless Communication System_Wireless communication is a broad term that i...1.Wireless Communication System_Wireless communication is a broad term that i...
1.Wireless Communication System_Wireless communication is a broad term that i...
JeyaPerumal1
 
Bridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptx
Bridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptxBridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptx
Bridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptx
Brad Spiegel Macon GA
 
The+Prospects+of+E-Commerce+in+China.pptx
The+Prospects+of+E-Commerce+in+China.pptxThe+Prospects+of+E-Commerce+in+China.pptx
The+Prospects+of+E-Commerce+in+China.pptx
laozhuseo02
 
Latest trends in computer networking.pptx
Latest trends in computer networking.pptxLatest trends in computer networking.pptx
Latest trends in computer networking.pptx
JungkooksNonexistent
 
BASIC C++ lecture NOTE C++ lecture 3.pptx
BASIC C++ lecture NOTE C++ lecture 3.pptxBASIC C++ lecture NOTE C++ lecture 3.pptx
BASIC C++ lecture NOTE C++ lecture 3.pptx
natyesu
 
How to Use Contact Form 7 Like a Pro.pptx
How to Use Contact Form 7 Like a Pro.pptxHow to Use Contact Form 7 Like a Pro.pptx
How to Use Contact Form 7 Like a Pro.pptx
Gal Baras
 
原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样
原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样
原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样
3ipehhoa
 
一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理
一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理
一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理
ufdana
 
APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024
APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024
APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024
APNIC
 
急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样
急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样
急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样
3ipehhoa
 
一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理
一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理
一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理
eutxy
 
1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样
1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样
1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样
3ipehhoa
 
Multi-cluster Kubernetes Networking- Patterns, Projects and Guidelines
Multi-cluster Kubernetes Networking- Patterns, Projects and GuidelinesMulti-cluster Kubernetes Networking- Patterns, Projects and Guidelines
Multi-cluster Kubernetes Networking- Patterns, Projects and Guidelines
Sanjeev Rampal
 
一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理
一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理
一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理
keoku
 
guildmasters guide to ravnica Dungeons & Dragons 5...
guildmasters guide to ravnica Dungeons & Dragons 5...guildmasters guide to ravnica Dungeons & Dragons 5...
guildmasters guide to ravnica Dungeons & Dragons 5...
Rogerio Filho
 
JAVIER LASA-EXPERIENCIA digital 1986-2024.pdf
JAVIER LASA-EXPERIENCIA digital 1986-2024.pdfJAVIER LASA-EXPERIENCIA digital 1986-2024.pdf
JAVIER LASA-EXPERIENCIA digital 1986-2024.pdf
Javier Lasa
 
History+of+E-commerce+Development+in+China-www.cfye-commerce.shop
History+of+E-commerce+Development+in+China-www.cfye-commerce.shopHistory+of+E-commerce+Development+in+China-www.cfye-commerce.shop
History+of+E-commerce+Development+in+China-www.cfye-commerce.shop
laozhuseo02
 
Internet-Security-Safeguarding-Your-Digital-World (1).pptx
Internet-Security-Safeguarding-Your-Digital-World (1).pptxInternet-Security-Safeguarding-Your-Digital-World (1).pptx
Internet-Security-Safeguarding-Your-Digital-World (1).pptx
VivekSinghShekhawat2
 
Comptia N+ Standard Networking lesson guide
Comptia N+ Standard Networking lesson guideComptia N+ Standard Networking lesson guide
Comptia N+ Standard Networking lesson guide
GTProductions1
 

Recently uploaded (20)

This 7-second Brain Wave Ritual Attracts Money To You.!
This 7-second Brain Wave Ritual Attracts Money To You.!This 7-second Brain Wave Ritual Attracts Money To You.!
This 7-second Brain Wave Ritual Attracts Money To You.!
 
1.Wireless Communication System_Wireless communication is a broad term that i...
1.Wireless Communication System_Wireless communication is a broad term that i...1.Wireless Communication System_Wireless communication is a broad term that i...
1.Wireless Communication System_Wireless communication is a broad term that i...
 
Bridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptx
Bridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptxBridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptx
Bridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptx
 
The+Prospects+of+E-Commerce+in+China.pptx
The+Prospects+of+E-Commerce+in+China.pptxThe+Prospects+of+E-Commerce+in+China.pptx
The+Prospects+of+E-Commerce+in+China.pptx
 
Latest trends in computer networking.pptx
Latest trends in computer networking.pptxLatest trends in computer networking.pptx
Latest trends in computer networking.pptx
 
BASIC C++ lecture NOTE C++ lecture 3.pptx
BASIC C++ lecture NOTE C++ lecture 3.pptxBASIC C++ lecture NOTE C++ lecture 3.pptx
BASIC C++ lecture NOTE C++ lecture 3.pptx
 
How to Use Contact Form 7 Like a Pro.pptx
How to Use Contact Form 7 Like a Pro.pptxHow to Use Contact Form 7 Like a Pro.pptx
How to Use Contact Form 7 Like a Pro.pptx
 
原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样
原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样
原版仿制(uob毕业证书)英国伯明翰大学毕业证本科学历证书原版一模一样
 
一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理
一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理
一比一原版(CSU毕业证)加利福尼亚州立大学毕业证成绩单专业办理
 
APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024
APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024
APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024
 
急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样
急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样
急速办(bedfordhire毕业证书)英国贝德福特大学毕业证成绩单原版一模一样
 
一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理
一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理
一比一原版(LBS毕业证)伦敦商学院毕业证成绩单专业办理
 
1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样
1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样
1比1复刻(bath毕业证书)英国巴斯大学毕业证学位证原版一模一样
 
Multi-cluster Kubernetes Networking- Patterns, Projects and Guidelines
Multi-cluster Kubernetes Networking- Patterns, Projects and GuidelinesMulti-cluster Kubernetes Networking- Patterns, Projects and Guidelines
Multi-cluster Kubernetes Networking- Patterns, Projects and Guidelines
 
一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理
一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理
一比一原版(SLU毕业证)圣路易斯大学毕业证成绩单专业办理
 
guildmasters guide to ravnica Dungeons & Dragons 5...
guildmasters guide to ravnica Dungeons & Dragons 5...guildmasters guide to ravnica Dungeons & Dragons 5...
guildmasters guide to ravnica Dungeons & Dragons 5...
 
JAVIER LASA-EXPERIENCIA digital 1986-2024.pdf
JAVIER LASA-EXPERIENCIA digital 1986-2024.pdfJAVIER LASA-EXPERIENCIA digital 1986-2024.pdf
JAVIER LASA-EXPERIENCIA digital 1986-2024.pdf
 
History+of+E-commerce+Development+in+China-www.cfye-commerce.shop
History+of+E-commerce+Development+in+China-www.cfye-commerce.shopHistory+of+E-commerce+Development+in+China-www.cfye-commerce.shop
History+of+E-commerce+Development+in+China-www.cfye-commerce.shop
 
Internet-Security-Safeguarding-Your-Digital-World (1).pptx
Internet-Security-Safeguarding-Your-Digital-World (1).pptxInternet-Security-Safeguarding-Your-Digital-World (1).pptx
Internet-Security-Safeguarding-Your-Digital-World (1).pptx
 
Comptia N+ Standard Networking lesson guide
Comptia N+ Standard Networking lesson guideComptia N+ Standard Networking lesson guide
Comptia N+ Standard Networking lesson guide
 

Kubermatic.pdf

  • 1. Spin Up your Kubernetes Infrastructure the GitOps Way Michal Vančo CNCF Webinar &
  • 2. Michal Vančo K8S Cloud Architect, Consultant @michalvanco michal@kubermatic.com Who Am I? • Living in Czech Republic, Brno • Consultant & K8S cloud architect in PS team @Kubermatic • Helping customers with their cloud native journeys • Full-stack engineer with focus on automation, delivery and QA • 14 years experience in Software Engineering Before ... • Full-stack engineer / architect / manager @GoodData • JBoss Middleware projects @Red Hat michal-vanco
  • 3. This Webinar Will Be About... ● Brief Kubermatic introduction ● start.kubermatic project preview ● Motivations and usage of CNCF tools ● GitOps and declarative management on all levels ● Security aspects ● Live Demo
  • 4. Kubermatic, the Leading Kubernetes Experts ● Creator of KubeOne & Kubermatic Kubernetes Platform, Enterprise Software Platform, widely deployed in EU ● The top Kubernetes employer in Europe ● #6 top committer to the Kubernetes Project for over 3 years ● Employs the #1 and #2 top contributors to Kubernetes Dashboard for over 3 years Our Team 90+ employees Located All across the globe Conway's law in Action Designing a highly distributed product as a highly distributed company
  • 5. Our Vision: Power Through Automation Building the world’s most adaptable and autonomous service operations platform. free up resources save time improve your systems keep up with new tech
  • 6. Our Portfolio Automate operations of a single Kubernetes cluster on your chosen cloud, on-prem, or edge environment. Automate multi cloud, on-prem, and edge operations with a single management UI enabling you to deliver the cloud native transformation immediately. The operator of operators. Centrally manage all your services and applications across multiple clusters, clouds and regions with Kubernetes native API and tooling.
  • 7. Automate operations of a single Kubernetes cluster on your chosen cloud, on-prem, or edge environment. KubeOne
  • 8. AZ 3 AZ 2 AZ 1 Subnet 1 Users Control Plane 1 Host Worker Node Subnet 2 Control Plane 2 Host Worker Node Subnet 3 Control Plane 3 Host Worker Node Load Balancer VPC
  • 9. Automate multi-cloud, on-prem, and edge operations with a single management UI enabling you to deliver the cloud native transformation immediately. Kubermatic Kubernetes Platform
  • 10. Multi Cluster Management For cluster lifecycle, deployments, configuration, policies, observability, maintenance Includes the Master Components for Configuration Highly Available Kubernetes Cluster Scales User Cluster Master Components Delivers additional logic and features API Controller Scheduler etcd Seed Cluster Seed Cluster Seed Cluster Seed Cluster User k8s Worker User k8s Worker User k8s Worker User k8s Worker User k8s Worker User k8s Worker User k8s Worker User k8s Worker API Controller Scheduler etcd
  • 12.
  • 13. 1 Git Provider 2 Cloud Provider 3 Cluster 4 KKP 5 KKP Bootstrap Config 6 Summary Specify details of your master cluster and provider Specify details of your KKP configuration Specify details of your initial KKP configuration, initial datacenter and details of your provider Download the preconfigured bundle + Web wizard that guides you through the categorized steps.
  • 14. Example structure of downloaded archive.
  • 15. How Do I Deliver? ● Combination of automatic pipeline + GitOps tool (Flux v2) ● Setup Git repo and git push ● Alternatively follow the README-local steps
  • 16. Main Motivations User-friendly wizard, detailed documentation, ready for any customizations Quick and Easy to Bootstrap GitHub Workflow / GitLab CI/CD for master cluster preparation, GitOps for KKP and other k8s resources Fully Automated Sensitive values safely stored in Git, Mozilla SOPS for encryption / decryption Secure Ready to be customized, scaled and managed in sustainable way!
  • 17.
  • 19. What Are the Steps Under the Hood?
  • 20. + Cloud resources are created by Terraform and output is used by KubeOne.
  • 21. KubeOne Master Cluster K8s Master K8s Master K8s Master Worker Worker Worker Load balancer HA Kubernetes cluster is provisioned by KubeOne, workers are managed by the machine-controller.
  • 22. Master Cluster addons (sc, autoscaler, ..) Empty Kubernetes cluster with various KubeOne addons.
  • 23. KKP installer is used for orchestration of installation steps (set of checks, helm charts installation, etc.).
  • 24. Master Cluster addons (sc, autoscaler, ..) nginx-ingress cert-manager API Operator UI oauth (dex) These namespaces were created by KKP installer on k8s cluster (core components for KKP).
  • 25. Master Cluster addons (sc, autoscaler, ..) nginx-ingress cert-manager API Operator UI oauth (dex) kkp.endpoint.xyz (DNS) DNS records are registered – that enables provisioning of certificates and access to KKP dashboard.
  • 26. Master Cluster addons (sc, autoscaler, ..) nginx-ingress cert-manager API Operator UI flux-system oauth (dex) kkp.endpoint.xyz (DNS) GitOps tool (Flux v2) is bootstrapped on k8s cluster.
  • 27. Master / Seed Cluster addons (sc, autoscaler, ..) nginx-ingress cert-manager API Operator UI flux-system monitoring logging minio iap oauth (dex) Seed Project User (admin) SOPS kustomization KKP Settings kkp.endpoint.xyz (DNS) GitOps managed resources are now delivered (various KKP resources, set of helm charts - MLA, minio, IAP).
  • 28. Master / Seed Cluster addons (sc, autoscaler, ..) nginx-ingress cert-manager API Operator UI flux-system monitoring logging minio iap oauth (dex) Seed Project User (admin) Preset KKP Cluster Template SOPS kustomization KKP Settings kkp.endpoint.xyz (DNS) Additional kustomization delivered other resources while applying decryption with SOPS directly.
  • 29. GitOps Way on All Levels
  • 30. Declarative, declarative... Want more? ● User Cluster templates ● Addons, OPA policies ● Other KKP resources ● User Clusters (to be supported in future KKP release) ● Flux2 KKP Addon for User clusters (flux/clusters/xyz/…) ● ArgoCD KKP Addon is also available $ flux bootstrap gitlab --owner=${CI_PROJECT_NAMESPACE} --repository=${CI_PROJECT_NAME} --branch=main --personal=true --path=flux/clusters/master --commit-message-appendix='[ci skip]'
  • 31. Programmatic API Access $ curl -o gce-gitlab-<customer>.zip -X POST -H "Content-Type: application/json" --data-binary @req-gce.json https://start.kubermatic.com/api/generate # file: req-gce.json { "gitProvider": "github", "cloudProvider": "gce", "kubernetesSpec": { "clusterName": "kkp-demo-gce", "masterVersion": "v1.22.2", "containerRuntime": "containerd", "cloudProvider": { "gce": { "region": "europe-west3" } } }, "kkpSpec": { "version": "v2.19.2", "endpoint": "kkp-gce.lab.kubermatic.io", "seed": { "datacenterName": "gce-europe", "datacenterSpec": { "gce": { "region": "europe-west3" } } }, "preset": { "gce": { "serviceAccount": "xxx" } }, … } * OpenAPI definition to be exposed
  • 33. Usage of Mozilla SOPS + AGE
  • 35. Only Pipeline and K8s Is Able to Decrypt Values
  • 38. We Want to Hear from You! kubermatic-community.slack.com #start-kubermatic kubermatic.com/contact-us
  • 39. Team Michal Vančo Project Lead Marcin Maciaszczyk UI Developer Marko Mudrinić Developer Sebastian Florek UI Developer Sascha Haase Product Manager Weronika Franczyk Designer Chiara Schieder Designer
  • 40. Thank You for Your Attention! And Enjoy Your GitOps Journey :) Email: michal@kubermatic.com Project: start.kubermatic.com Demo repo (GitLab+GCP): gitlab.com/michal.vanco/start-kkp-webinar-demo Demo repo (GitHub+AWS): github.com/michalvanco/start-kkp-aws Documentation: docs.kubermatic.com/kubermatic/master/installation/start_kkp