Kubernetes and Cloud Native Meetup - March, 2019

http://K8scanadaslack.herokuapp.com
Joignez-vous au Slack K8s Canada!

Aidez-nous !
● À Montréal, Toronto, Ottawa, Québec, Kitchener-Waterloo
● Soumettez une présentation
● Commanditez ! Rejoignez-nous sur meetup.com
● Aidez nous à organizer un meetup

● CNCF Update by Archy
● Using K8s to solve K8s persistent workloads problems,
DevOps style! By Philippe Theriault
● Deploying Vault on K8s with Terraform by Bart Dziekan
● Kubeadm Upgrades User Story by Suvrojeet Ghosh
Agenda

Page
Intro
Ayrat “Archy”
Khayretdinov
CNCF Ambassador and Organizer
Solution Architect at CloudOps
akhayretdinov@cloudops.com
Carol Trang
Co-organizer and
Community Manager at CloudOps
ctrang@cloudops.com

Ateliers pratiques !
Montréal et en ligne
Deepen your knowledge of containers and microservices and their ecosystems.
● Docker and Kubernetes
● CI/CD
● IaC
● Advanced Docker and Kubernetes
● Machine Learning
cloudops.com/docker-and-kubernetes-workshops
info@cloudops.com
● OpenShift
● Kubernetes on Google Cloud
● Kubernetes on Azure
● Kubernetes on AWS

KubeCon + CloudNativeCon
● Europe 2019 (sponsorships and CFP closed)
○ CFP closed Friday, Jan 18
○ Barcelona: May 20-23, 2019
● China 2019 (sponsorships open)
○ Shanghai: June 24-26, 2019
● North America 2019 (sponsorships open)
○ San Diego: November 18-21, 2019

Please contact us if you want to submit a talk!

Page
CVE-2018-1002105
● CVE-2018-1002105 - allows to bypass authorization to the kubelet's APIs
● GKE
GKE Nodes fixed with - 1.10.9-gke.5, and 1.11.2-gke.18
● AKS
Fixed in version 1.11.5
● EKS
Fixed at 1.10.11.eks.3

Page
CVE-2019-5736
● CVE-2019-5736 (February 11, 2019) - in runc, allowing container escape
to obtain root privileges on the host node
● GKE
!!!Ubuntu nodes only
1.10.12-gke.7, 1.11.6-gke.11, 1.11.7-gke.4, 1.12.5-gke.5
● AKS
Fixed in version 1.12.5, 1.11.7
● EKS updated their clusters
AMI image - replace existing worker nodes with the new AMI ver.
Linux image - contact OS vendor for the updates

Page
Google Kubernetes Engine (GKE) Updates
● GKE Supports Kubernetes 1.11
● Containerd - Beta
● Vertical Pod Autoscaler - Beta
● Encryption of Kubernetes Secrets at Rest by Cloud KMS - Beta
● Managed Istio - Beta
● Serverless Add-on (knative) - Beta
● CSP and CSP Config Management - Beta

Page
Cloud Services Platform Config Management

cloudops.com @cloudops_
To learn more about Google cloud - Join us @

Page
● AKS - Supports Kubernetes 1.12!!!
● CoreDNS is now the default DNS for AKS clusters
● AKS Virtual Machine Scale Set (VMSS)- Preview
● AKS Cluster Autoscaling - Preview
● AKS Calico CNI support - Preview
● AKS Virtual Node - Preview
● AKS control plane audit Logs - Preview
AKS

Page
● AKS Pod Identity
● AKS cluster auto-upgrade
● Node auto-repair support for AKS
● AKS private cluster
● Availability Zones (AZ) support for AKS
● Multiple node pools for your AKS workloads
● Authorized IP Ranges for Kubernetes API server
● AKS pod security policy PSP
● Azure Kubernetes Service (AKS) on Azure Stack
AKS - What’s coming

Keynotes - CNCF Project Update

© 2018 Cloud Native Computing Foundation52
Cloud Native Computing Foundation
• Nonprofit, part of the Linux Foundation; founded Dec 2015
• Platinum members:
Incubating
Service Mesh Storage
Distributed Tracing Software Update
Spec
Security
Graduated
Package
Management
Orchestration Networking API
Service Proxy
Logging Remote
Procedure Call
Distributed Tracing
API
Container Runtime Container Runtime
Messaging
Monitoring
RegistryStorage

Cloud Native Computing Foundation54
CNCF Annual Report 2018
Please review CNCF’s Annual Report

CNCF TOC team
Kelsey Hightower
Developer advocate
@Google
Joe Beda
VMware
Brendan Burns
Microsoft
Matt Kleyn
Lyft

CNCF SIGs: Initial List
• Traffic (networking, service discovery, load balancing, service mesh, RPC, pubsub, etc)
– Envoy, Linkerd, NATS, gRPC, CoreDNS, CNI
• Observability (monitoring, logging, tracing, profiling, etc.)
– Prometheus, OpenTracing, Fluentd, Jaeger, Cortex, OpenMetrics,
• Governance (security, auth, authorization, auditing, policy enforcement, compliance, GDPR, cost management, etc)
– SPIFFE, SPIRE, Open Policy Agent, Notary, TUF, Falco,
• App Dev, Ops & Testing (PaaS, Serverless, Operators, CI/CD, Conformance, Chaos Eng, Scalability and Reliability
measurement etc.)
– Helm, CloudEvents, Telepresence, Buildpacks, (CNCF CI)
• Core and Applied Architectures (orchestration, scheduling, container runtimes, sandboxing technologies, packaging
and distribution, specialized architectures thereof (e.g. Edge, IoT, Big Data, AI/ML, etc).
– Kubernetes, containerd, rkt, Harbor, Dragonfly, Virtual Kubelet
• Storage (Block and File Stores, Databases, Key-Value stores etc)
– TiKV, etcd, Vitess, Rook

etcd is a distributed reliable key-value store

Congrats CoreDNS on Graduation!
• https://www.cncf.io/announcement/2019/01/24/coredns-graduation/

How to learn more about
CNCF projects?

Announcing Speaker

Intro
Philippe Theriault & Murat Karslioglu
CRO & Communauté OpenEBS
Bart Dziekan
K8s Architect
Suvro Ghosh
SW Engineer

Kubernetes and Cloud Native Meetup - March, 2019

Kubernetes and Cloud Native Meetup - March, 2019

More Related Content

What's hot

Similar to Kubernetes and Cloud Native Meetup - March, 2019

More from CloudOps2005

Recently uploaded

Kubernetes and Cloud Native Meetup - March, 2019