VMware Tanzu, profile picture
Uploaded byVMware Tanzu
PPTX, PDF1,066 views

PKS Networking with NSX-T: You Focus on your App, We'll Take Care of the Rest!

The document provides an overview of Pivotal Kubernetes Service (PKS) and its integration with NSX-T for container networking and management. It describes PKS as a managed Kubernetes solution that focuses on simplifying day 2 operations, utilizing BOSH for infrastructure management, and supports advanced networking features through NSX-T, including load balancing and network security policies. The presentation also outlines the cluster provisioning workflow, operational tools, and the benefits of using NSX-T alongside PKS compared to open-source alternatives.

Software◦
Related topics:
Software Developer•

Embed presentation

Downloaded 62 times
PKS Networking with NSX-T “you focus on your app, we'll take care of the rest !” Gaetano Borgione, @TanoBorgione Angela Chin, @AngelaSChin
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Agenda ● What is PKS ● Networking in Kubernetes ● What is NSX ● NSX + PKS ● Cluster Creation ● Cluster Upgrade 2
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Disclaimer
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Safe Harbor Statement The following is intended to outline the general direction of Pivotal's offerings. It is intended for information purposes only and may not be incorporated into any contract. Any information regarding pre-release of Pivotal offerings, future updates or other planned modifications is subject to ongoing evaluation by Pivotal and is subject to change. This information is provided without warranty or any kind, express or implied, and is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions regarding Pivotal's offerings. These purchasing decisions should only be based on features currently available. The development, release, and timing of any features or functionality described for Pivotal's offerings in this presentation remain at the sole discretion of Pivotal. Pivotal has no obligation to update forward looking information in this presentation. 4
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ What is PKS
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service 6
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters 7
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters 8
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters 9
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters ● Aimed at Day 2 Operations 1 0
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters ● Aimed at Day 2 Operations ● Uses BOSH! 1 1
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 2 BOSH Infrastructure
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 3 BOSH PKS Infrastructure watches
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 4 BOSH PKS K8s Infrastructure watches deploys
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 5 BOSH PKS K8s Infrastructure watches watches deploys
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 6 BOSH PKS K8s K8s Infrastructure watches watches deploys
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 7 BOSH PKS K8s K8s Infrastructure watches watches watches deploys
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager 1 8
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 19
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS 2 0 ● Deploys as a tile in Ops Manager PKS
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli 2 1 PKS
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... 2 2 PKS
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... 2 3 PKS k8s
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... pks get-credentials cluster-name 2 4 PKS k8s
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... pks get-credentials cluster-name 2 5 PKS k8s kubeconfig
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... pks get-credentials cluster-name kubectl get pods 2 6 PKS k8s kubeconfig
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking in Kubernetes
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure 2 8
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication 2 9
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication ● Ingress and LoadBalancers for ingress traffic 3 0
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication ● Ingress and LoadBalancers for ingress traffic ● NetworkPolicy for enforcing network rules 3 1
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication ● Ingress and LoadBalancers for ingress traffic ● NetworkPolicy for enforcing network rules ○ ...but not provided with Flannel alone 3 2
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ What is NSX-T ?
The NSX-T Platform Single platform for Networking, Security & Monitoring for Containers & VMs PKS PAS/PCFOpenShift VM Networking, Security, Monitoring Kubernetes 34
Address all K8s Networking Functions Load Balancing, IPAM, Routing, Firewalling Complete automation and dynamic provisioning of Network Objects required for K8s and Workloads Support for different topology choices for Pod and Node Networks (NAT/No-NAT) Network Security Policies for Kubernetes Clusters, Namespaces and Individual Services Full Network traceability/visibility using NSX-T in-built operational tools for Kubernetes How does PKS with NSX-T add value over opensource solutions 35
NSX-T: operational tools and automation 36 Traceflow, Port-Connection, Topology View Back-Up & Restore Selective Tech Support Logs Monitoring & Stats REST API support Dynamic libraries available in multiple languages (Java, Python, Terraform) Upstream OpenStack Support and Partner Ecosystem Getting started wizards Dashboards IPFIX, Port Mirroring, Port Connection Granular RBAC Upgrade Coordinator vRealize Log Insight / Splunk plugins Automation Operations Troubleshooting 36
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ NSX-T + PKS
38 Pivotal Operations Manager BOSH Master Worker Worker Worker Master Worker Worker Worker Master Worker Worker Worker PKS-API UAA ODB kubo service adapter MySQL NSX-T Proxy Broker Telemetry Aggregator PKS Control Plane adminserver jobservice ui registry notary clair NSX-T vSphere vRLI Wavefront VAC PKS: High Level Architecture PKS CLI 38 38
PRINCIPAL IDENTITY 39 K8s Cluster Management Nodes T1 T1 for LB NSX-T LB K8s cluster 1 K8s cluster 2 K8s cluster n Ops-Manager BOSH PKS Control Plane Harbor T1 PKS mgmt plane NSX-T Edge Cluster NSX-T Controllers vCenter NSX-T Manager vCenter Physical L2/L3 switches Internet K8s Cluster and NSX-T Provisioning VIP API Server https://api.cluster.pks.customer.com Master VM#1, VM#2, VM#3 39 pks create-cluster my-cluster --plan small --num-nodes 3 Worker ‘VM’ Worker ‘VM’ Worker ‘VM’ Master ‘VM’ Master ‘VM’ Master ‘VM’ etcd API srv sched ctrlr mgr Worker ‘VM’ Worker ‘VM’ Worker ‘VM’ NSX NCP dash board NA NANA Kube DNS
Cluster Provisioning Workflow 41 PKS API 1 NSX-T Proxy Broker named_cloud_config 2 • pre-deployment provisioning o allocate cluster subnet o create named_cloud_config o create Node Network o create SNAT rule, if required, from k8s nodes to external • post-destroy decommissioning o delete SNAT rule, if required o release Virtual IP for API Server o delete Node Network o delete named_cloud_config o remove Principal Identity o run clean-up script for NSX-T cluster resources 3 manifest Service Adapter 5 CFCR release pks-nsx-t release 7 Ops Manager OD-Broker cloud_config 4 vSphere CPI 6 BOSH pks create-cluster my-cluster --plan small --num-nodes 3 41 41
Cluster Provisioning Workflow (cont.) 42 o NCP o NSX-CNI o OpenvSwitch o NSX scripts BOSH CFCR release vSphere CPI pks-nsx-t release 7 Worker ‘VM’ Worker ‘VM’ Worker ‘VM’ Master ‘VM’ Master ‘VM’ Master ‘VM’ 8 VMs tagged with BOSH ID 9 BOSH Job on Master Node to perform cluster-level provisioning o create Principal Identity o create Load Balancer for the new Cluster o reserve Virtual IP for API Server 10 42 42
PKS and NSX-T integration: Key Components NSX Container Plugin (NCP) 43 NCM Infra K8s / OS Adapter CloudFoundry Adapter NSX Container Plugin More… NSX Manager API Client NSX Manager NS: foo NS: bar NSX Example K8s topology K8s master etcd API-Server Scheduler • NCP is a software component provided by Vmware, running on a K8s Node.. • NCP is built in a modular way, so that individual adapters can be added for different CaaS and PaaS systems • NCP ‘listens’ to Kubernetes/CF to create the required NSX-T constructs. • CNI Integration is used.
PKS + NSX-T: built-in Load Balancing Kubernetes Ingress and Svc Type LB support NCM Infra K8s / OS Adapter CloudFoundry Adapter Libnetwork Adapter NSX Container Plugin More… NSX Manager API Client NSX Manager K8s master etcd API-Server Scheduler Virtual Server 10.114.209.209HTTP and/or HTTPS traffic Server Pool 1 Server Pool 2Rule 2 /bar/ Rule 1 /foo/ LB Service NCM Infra K8s / OS Adapter CloudFoundry Adapter Libnetwork Adapter NSX Container Plugin More… NSX Manager API Client NSX Manager K8s master etcd API-Server Scheduler Virtual Server 10.114.209.212TCP and/or UDP traffic Server Pool LB Service Built-in support for Ingress (L7) and Svc Type LB (L4) w/t NSX-T integration. Most other K8s networking choice don't support Svc Type LB (L4), and you need an additional technology like NGINX from Ingress (L7). 44
admin@k8s-master:~$ kubectl create namespace foo namespace ”foo" created admin@k8s-master:~$ kubectl create namespace bar namespace ”bar" created admin@k8s-master:~$ kubectl run nginx-foo --image=nginx -n foo deployment "nginx-foo" created admin@k8s-master:~$ kubectl run nginx-bar --image=nginx -n bar deployment "nginx-bar" created Namespace: foo Namespace: bar NSX / K8s topology 10.24.0.0/24 10.24.1.0/24 10.24.2.0/24 NAT boundary NAT boundary K8s nodesK8s Masters 45 PKS + NSX-T: Namespaces 45 45
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Cluster Upgrades
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades ● Install the new tile ● Update any new fields ● Deploy! 4 7
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 4 8 BOSH PKS K8s K8s Infrastructure watches watches watches deploys
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 4 9 BOSH PKS K8s K8s Infrastructure
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 0 BOSH PKS K8s K8s Infrastructure upgrade
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 1 BOSH PKS K8s K8s Infrastructure upgrade upgrade
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 52 BOSH PKS K8s K8s Infrastructure upgrade upgrade upgrade
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades ● NCP components upgrade within PKS 5 3
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 4 BOSH PKS K8s K8s Infrastructure upgrade upgrade upgrade
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 5 Master Worker MasterMaster WorkerWorker
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 6 Master Worker MasterMaster WorkerWorker
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 7 Master Worker MasterMaster WorkerWorker
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 8 Master Worker MasterMaster WorkerWorker NCP
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 9 Master Worker MasterMaster WorkerWorker NCP
Unless otherwise indicated, these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades ● NCP components upgrade within PKS ● NSX-T can be upgraded independent of PKS 6 0

More Related Content

PPTX
Deploying Spring Boot apps on Kubernetes
byVMware Tanzu
 
PDF
PCF in the Land of NSX: A Closer Look at PCF with NSX-V vs. NSX-T
byVMware Tanzu
 
PPTX
Making Microservices Smarter with Istio, Envoy and Pivotal Ingress Router
byVMware Tanzu
 
PPTX
Pivotal Container Service Overview
byVMware Tanzu
 
PDF
Crafting a New Enterprise App Platform with Cloud Foundry, Kubernetes, Istio,...
byVMware Tanzu
 
PPTX
Hitting the Enterprise Sweet Spot—A Real-World View of PKS Deployment and Suc...
byVMware Tanzu
 
PDF
PKS: The What and How of Enterprise-Grade Kubernetes
byVMware Tanzu
 
PDF
Concourse, Spinnaker, Cloud Foundry, Oh My! Creating Sophisticated Deployment...
byVMware Tanzu
 
Deploying Spring Boot apps on Kubernetes
byVMware Tanzu
 
PCF in the Land of NSX: A Closer Look at PCF with NSX-V vs. NSX-T
byVMware Tanzu
 
Making Microservices Smarter with Istio, Envoy and Pivotal Ingress Router
byVMware Tanzu
 
Pivotal Container Service Overview
byVMware Tanzu
 
Crafting a New Enterprise App Platform with Cloud Foundry, Kubernetes, Istio,...
byVMware Tanzu
 
Hitting the Enterprise Sweet Spot—A Real-World View of PKS Deployment and Suc...
byVMware Tanzu
 
PKS: The What and How of Enterprise-Grade Kubernetes
byVMware Tanzu
 
Concourse, Spinnaker, Cloud Foundry, Oh My! Creating Sophisticated Deployment...
byVMware Tanzu
 

What's hot

PDF
Pivotal Platform: A First Look at the October Release
byVMware Tanzu
 
PDF
Anthos Application Modernization Platform
byGDG Cloud Bengaluru
 
PPTX
Building Developer Pipelines with PKS, Harbor, Clair, and Concourse
byVMware Tanzu
 
PDF
K8s at Scale in the Enterprise: Self-Service Through the View of Personas
byVMware Tanzu
 
PDF
Pivotal Cloud Foundry 2.0: First Look
byVMware Tanzu
 
PPTX
Fabio rapposelli pks-vmug
byVMUG IT
 
PDF
Kube Your Enthusiasm - Paul Czarkowski
byVMware Tanzu
 
PDF
Enterprise Application Migration
byVMware Tanzu
 
PDF
VMware Tanzu Introduction- June 11, 2020
byVMware Tanzu
 
PDF
Packaging and Distributing Applications for Kubernetes
byVMware Tanzu
 
PDF
Migrating from Self-Managed Kubernetes on EC2 to a GitOps Enabled EKS
byWeaveworks
 
PDF
Open shift 4-update
bySaeidVarmazyar
 
PDF
PKS is Not JAK8sP (Just Another Kubernetes Platform)
byVMware Tanzu
 
PDF
Pivotal Cloud Foundry 2.5: A First Look
byVMware Tanzu
 
PDF
Unlock Sustainable Kubernetes Services for TAS
byVMware Tanzu
 
PDF
Managing serverless workloads with knative
byGDG Cloud Bengaluru
 
PDF
Crossing the Streams! Rollout Strategies to Keep Your Users Happy!
byVMware Tanzu
 
PPTX
Enterprise pks overview
byBoskey Savla
 
PPTX
What is Windows Azure Platform
byDavid Chou
 
PDF
Connecting Spring Apps to Distributed SQL Clusters Running in Kubernetes
byVMware Tanzu
 
Pivotal Platform: A First Look at the October Release
byVMware Tanzu
 
Anthos Application Modernization Platform
byGDG Cloud Bengaluru
 
Building Developer Pipelines with PKS, Harbor, Clair, and Concourse
byVMware Tanzu
 
K8s at Scale in the Enterprise: Self-Service Through the View of Personas
byVMware Tanzu
 
Pivotal Cloud Foundry 2.0: First Look
byVMware Tanzu
 
Fabio rapposelli pks-vmug
byVMUG IT
 
Kube Your Enthusiasm - Paul Czarkowski
byVMware Tanzu
 
Enterprise Application Migration
byVMware Tanzu
 
VMware Tanzu Introduction- June 11, 2020
byVMware Tanzu
 
Packaging and Distributing Applications for Kubernetes
byVMware Tanzu
 
Migrating from Self-Managed Kubernetes on EC2 to a GitOps Enabled EKS
byWeaveworks
 
Open shift 4-update
bySaeidVarmazyar
 
PKS is Not JAK8sP (Just Another Kubernetes Platform)
byVMware Tanzu
 
Pivotal Cloud Foundry 2.5: A First Look
byVMware Tanzu
 
Unlock Sustainable Kubernetes Services for TAS
byVMware Tanzu
 
Managing serverless workloads with knative
byGDG Cloud Bengaluru
 
Crossing the Streams! Rollout Strategies to Keep Your Users Happy!
byVMware Tanzu
 
Enterprise pks overview
byBoskey Savla
 
What is Windows Azure Platform
byDavid Chou
 
Connecting Spring Apps to Distributed SQL Clusters Running in Kubernetes
byVMware Tanzu
 

Similar to PKS Networking with NSX-T: You Focus on your App, We'll Take Care of the Rest!

PDF
Kubernetes and Windows: At Scale with Enterprise PKS
byVMware Tanzu
 
PPTX
The Reality of DIY Kubernetes vs. PKS
byVMware Tanzu
 
PDF
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
bycornelia davis
 
PDF
Managing Kubernetes operating Kubernetes clusters in the real world First Edi...
byjayedmonotbp
 
PPTX
Basics of Kubernetes on BOSH: Run Production-grade Kubernetes on the SDDC
byMatt McNeeney
 
PDF
Pivotal Developer-Ready Infrastructure Slides
byVMware Tanzu
 
PDF
Running and Managing Kubernetes on OpenStack
byVictor Palma
 
PDF
Kubernetes: Learning from Zero to Production
byRosemary Wang
 
PDF
S1P: Spring Cloud on PKS
byMauricio (Salaboy) Salatino
 
PDF
Developer Secure Containers for the Cyberspace Battlefield
byVMware Tanzu
 
PPTX
Yet Another K8s Installer
byVMware Tanzu
 
PDF
Deliver Your Service on PKS
byVMware Tanzu
 
PDF
Kubernetes for the Spring Developer
byVMware Tanzu
 
PDF
Cloud-Native Operations with Kubernetes and CI/CD
byVMware Tanzu
 
PDF
Pivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
byVMware Tanzu
 
PPTX
Infrastructure design for Kubernetes
byGuillaume Morini
 
PDF
JDO 2019: What you should be aware of before setting up kubernetes on premise...
byPROIDEA
 
PDF
6 Things You Need to Know to Safely Run Kubernetes
byVMware Tanzu
 
PDF
Kubernetes 201: Taking your Managed Kubernetes service to the next level
byOVHcloud
 
PPTX
PKS - Solving Complexity for Modern Data Workloads
byCarlos Andrés García
 
Kubernetes and Windows: At Scale with Enterprise PKS
byVMware Tanzu
 
The Reality of DIY Kubernetes vs. PKS
byVMware Tanzu
 
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
bycornelia davis
 
Managing Kubernetes operating Kubernetes clusters in the real world First Edi...
byjayedmonotbp
 
Basics of Kubernetes on BOSH: Run Production-grade Kubernetes on the SDDC
byMatt McNeeney
 
Pivotal Developer-Ready Infrastructure Slides
byVMware Tanzu
 
Running and Managing Kubernetes on OpenStack
byVictor Palma
 
Kubernetes: Learning from Zero to Production
byRosemary Wang
 
S1P: Spring Cloud on PKS
byMauricio (Salaboy) Salatino
 
Developer Secure Containers for the Cyberspace Battlefield
byVMware Tanzu
 
Yet Another K8s Installer
byVMware Tanzu
 
Deliver Your Service on PKS
byVMware Tanzu
 
Kubernetes for the Spring Developer
byVMware Tanzu
 
Cloud-Native Operations with Kubernetes and CI/CD
byVMware Tanzu
 
Pivotal Container Service : la nuova soluzione per gestire Kubernetes in azienda
byVMware Tanzu
 
Infrastructure design for Kubernetes
byGuillaume Morini
 
JDO 2019: What you should be aware of before setting up kubernetes on premise...
byPROIDEA
 
6 Things You Need to Know to Safely Run Kubernetes
byVMware Tanzu
 
Kubernetes 201: Taking your Managed Kubernetes service to the next level
byOVHcloud
 
PKS - Solving Complexity for Modern Data Workloads
byCarlos Andrés García
 

More from VMware Tanzu

PPTX
tanzu_developer_connect.pptx
byVMware Tanzu
 
PDF
SpringOne Tour: Deliver 15-Factor Applications on Kubernetes with Spring Boot
byVMware Tanzu
 
PDF
Tanzu Developer Connect Workshop - English
byVMware Tanzu
 
PDF
Spring Boot 3 And Beyond
byVMware Tanzu
 
PPTX
Platforms, Platform Engineering, & Platform as a Product
byVMware Tanzu
 
PPTX
Building Cloud Ready Apps
byVMware Tanzu
 
PDF
What AI Means For Your Product Strategy And What To Do About It
byVMware Tanzu
 
PDF
Spring into AI presented by Dan Vega 5/14
byVMware Tanzu
 
PDF
Spring Cloud Gateway - SpringOne Tour 2023 Charles Schwab.pdf
byVMware Tanzu
 
PDF
Virtual Developer Connect Workshop - English
byVMware Tanzu
 
PPTX
Enhancing DevEx and Simplifying Operations at Scale
byVMware Tanzu
 
PDF
Spring Update | July 2023
byVMware Tanzu
 
PDF
Tanzu Developer Connect - French
byVMware Tanzu
 
PDF
Tanzu Virtual Developer Connect Workshop - French
byVMware Tanzu
 
PDF
Simplify and Scale Enterprise Apps in the Cloud | Dallas 2023
byVMware Tanzu
 
PDF
Simplify and Scale Enterprise Apps in the Cloud | Seattle 2023
byVMware Tanzu
 
PDF
Simplify and Scale Enterprise Apps in the Cloud | Boston 2023
byVMware Tanzu
 
PDF
Make the Right Thing the Obvious Thing at Cardinal Health 2023
byVMware Tanzu
 
PDF
SpringOne Tour: Domain-Driven Design: Theory vs Practice
byVMware Tanzu
 
PDF
SpringOne Tour: The Influential Software Engineer
byVMware Tanzu
 
tanzu_developer_connect.pptx
byVMware Tanzu
 
SpringOne Tour: Deliver 15-Factor Applications on Kubernetes with Spring Boot
byVMware Tanzu
 
Tanzu Developer Connect Workshop - English
byVMware Tanzu
 
Spring Boot 3 And Beyond
byVMware Tanzu
 
Platforms, Platform Engineering, & Platform as a Product
byVMware Tanzu
 
Building Cloud Ready Apps
byVMware Tanzu
 
What AI Means For Your Product Strategy And What To Do About It
byVMware Tanzu
 
Spring into AI presented by Dan Vega 5/14
byVMware Tanzu
 
Spring Cloud Gateway - SpringOne Tour 2023 Charles Schwab.pdf
byVMware Tanzu
 
Virtual Developer Connect Workshop - English
byVMware Tanzu
 
Enhancing DevEx and Simplifying Operations at Scale
byVMware Tanzu
 
Spring Update | July 2023
byVMware Tanzu
 
Tanzu Developer Connect - French
byVMware Tanzu
 
Tanzu Virtual Developer Connect Workshop - French
byVMware Tanzu
 
Simplify and Scale Enterprise Apps in the Cloud | Dallas 2023
byVMware Tanzu
 
Simplify and Scale Enterprise Apps in the Cloud | Seattle 2023
byVMware Tanzu
 
Simplify and Scale Enterprise Apps in the Cloud | Boston 2023
byVMware Tanzu
 
Make the Right Thing the Obvious Thing at Cardinal Health 2023
byVMware Tanzu
 
SpringOne Tour: Domain-Driven Design: Theory vs Practice
byVMware Tanzu
 
SpringOne Tour: The Influential Software Engineer
byVMware Tanzu
 

Recently uploaded

PDF
PeopleSoft Lift and Shift to Oracle Cloud Infrastructure.pdf
byAstuteBusiness
 
PDF
How Does AI Improve Location-Based Mobile App Development for Businesses.pdf
byNet-Craft.com
 
PDF
Code, Coins and Collaboration: How Open Source Shapes Modern Finance.
byDavid Okononfua
 
PDF
Code, Coins and Collaboration: How Open Source Shapes Modern Finance.
byDavid Okononfua
 
PDF
SecureChain AI (SCAI) Token – Smart Contract Security Audit Report by EtherAu...
byEtherAuthority
 
PPTX
#15 All About Anypoint MQ - Calicut MuleSoft Meetup Group
bycalicutmulesoftmeetu
 
PPTX
GDS Integration Solution | GDS Integration Service
byyugababu033
 
PPTX
Application Security – Static Application Security Testing (SAST)
byLalit Jagotra
 
PPTX
Reimagining Service with AI Voice Agents | Webinar
byCEPTES Software
 
PPTX
NSF Converter Software to Convert NSF to PST, EML, MSG
byNSF Converter Software
 
PDF
Navigating SEC Regulations for Crypto Exchanges Preparing for a Compliant Fut...
byzak jasper
 
PDF
INTRODUCTION TO DATABASES, MYSQL, MS ACCESS, PHARMACY DRUG DATABASE.pdf
bylikudas9861
 
PDF
Operating System (OS) :UNIT-I Introduction to Operating System BCA SEP SEM-II...
byKuvempu University
 
PDF
Resource-Levelled Critical-Path Analysis Balancing Time, Cost and Constraints
byOrangescrum
 
PDF
Influence Without Power - Why Empathy is Your Best Friend.pdf
bySuzanne Lagerweij
 
PDF
Here’s the case study that shows how companies lose ₹2–6 Cr annually due to m...
bysiddhantdazzlo
 
PPTX
AI Clinic Management Software for Pulmonology Clinics Bringing Clarity, Contr...
byEasy Clinic
 
PDF
Database Management Systems(DBMS):UNIT-I Introduction to Database(DBMS) BCA S...
byKuvempu University
 
PDF
Database Management Systems(DBMS):UNIT-II Relational Data Model BCA SEP SEM ...
byKuvempu University
 
PDF
Data structure using C :UNIT-I Introduction to Data structures and Stacks BCA...
byKuvempu University
 
PeopleSoft Lift and Shift to Oracle Cloud Infrastructure.pdf
byAstuteBusiness
 
How Does AI Improve Location-Based Mobile App Development for Businesses.pdf
byNet-Craft.com
 
Code, Coins and Collaboration: How Open Source Shapes Modern Finance.
byDavid Okononfua
 
Code, Coins and Collaboration: How Open Source Shapes Modern Finance.
byDavid Okononfua
 
SecureChain AI (SCAI) Token – Smart Contract Security Audit Report by EtherAu...
byEtherAuthority
 
#15 All About Anypoint MQ - Calicut MuleSoft Meetup Group
bycalicutmulesoftmeetu
 
GDS Integration Solution | GDS Integration Service
byyugababu033
 
Application Security – Static Application Security Testing (SAST)
byLalit Jagotra
 
Reimagining Service with AI Voice Agents | Webinar
byCEPTES Software
 
NSF Converter Software to Convert NSF to PST, EML, MSG
byNSF Converter Software
 
Navigating SEC Regulations for Crypto Exchanges Preparing for a Compliant Fut...
byzak jasper
 
INTRODUCTION TO DATABASES, MYSQL, MS ACCESS, PHARMACY DRUG DATABASE.pdf
bylikudas9861
 
Operating System (OS) :UNIT-I Introduction to Operating System BCA SEP SEM-II...
byKuvempu University
 
Resource-Levelled Critical-Path Analysis Balancing Time, Cost and Constraints
byOrangescrum
 
Influence Without Power - Why Empathy is Your Best Friend.pdf
bySuzanne Lagerweij
 
Here’s the case study that shows how companies lose ₹2–6 Cr annually due to m...
bysiddhantdazzlo
 
AI Clinic Management Software for Pulmonology Clinics Bringing Clarity, Contr...
byEasy Clinic
 
Database Management Systems(DBMS):UNIT-I Introduction to Database(DBMS) BCA S...
byKuvempu University
 
Database Management Systems(DBMS):UNIT-II Relational Data Model BCA SEP SEM ...
byKuvempu University
 
Data structure using C :UNIT-I Introduction to Data structures and Stacks BCA...
byKuvempu University
 

PKS Networking with NSX-T: You Focus on your App, We'll Take Care of the Rest!

  • 1.
    PKS Networking withNSX-T “you focus on your app, we'll take care of the rest !” Gaetano Borgione, @TanoBorgione Angela Chin, @AngelaSChin
  • 2.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Agenda ● What is PKS ● Networking in Kubernetes ● What is NSX ● NSX + PKS ● Cluster Creation ● Cluster Upgrade 2
  • 3.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Disclaimer
  • 4.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Safe Harbor Statement The following is intended to outline the general direction of Pivotal's offerings. It is intended for information purposes only and may not be incorporated into any contract. Any information regarding pre-release of Pivotal offerings, future updates or other planned modifications is subject to ongoing evaluation by Pivotal and is subject to change. This information is provided without warranty or any kind, express or implied, and is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions regarding Pivotal's offerings. These purchasing decisions should only be based on features currently available. The development, release, and timing of any features or functionality described for Pivotal's offerings in this presentation remain at the sole discretion of Pivotal. Pivotal has no obligation to update forward looking information in this presentation. 4
  • 5.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ What is PKS
  • 6.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service 6
  • 7.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters 7
  • 8.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters 8
  • 9.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters 9
  • 10.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters ● Aimed at Day 2 Operations 1 0
  • 11.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Pivotal Container Service ● Managed Kubernetes for multiple clusters ● Aimed at Day 2 Operations ● Uses BOSH! 1 1
  • 12.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 2 BOSH Infrastructure
  • 13.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 3 BOSH PKS Infrastructure watches
  • 14.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 4 BOSH PKS K8s Infrastructure watches deploys
  • 15.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 5 BOSH PKS K8s Infrastructure watches watches deploys
  • 16.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 6 BOSH PKS K8s K8s Infrastructure watches watches deploys
  • 17.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 1 7 BOSH PKS K8s K8s Infrastructure watches watches watches deploys
  • 18.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager 1 8
  • 19.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 19
  • 20.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS 2 0 ● Deploys as a tile in Ops Manager PKS
  • 21.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli 2 1 PKS
  • 22.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... 2 2 PKS
  • 23.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... 2 3 PKS k8s
  • 24.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... pks get-credentials cluster-name 2 4 PKS k8s
  • 25.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... pks get-credentials cluster-name 2 5 PKS k8s kubeconfig
  • 26.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ PKS ● Deploys as a tile in Ops Manager ● Interact via the pks cli pks create-cluster cluster-name... pks get-credentials cluster-name kubectl get pods 2 6 PKS k8s kubeconfig
  • 27.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking in Kubernetes
  • 28.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure 2 8
  • 29.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication 2 9
  • 30.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication ● Ingress and LoadBalancers for ingress traffic 3 0
  • 31.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication ● Ingress and LoadBalancers for ingress traffic ● NetworkPolicy for enforcing network rules 3 1
  • 32.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Networking ● CNI (Container Network Interface): choose your own adventure ● Baseline Flannel for pod communication ● Ingress and LoadBalancers for ingress traffic ● NetworkPolicy for enforcing network rules ○ ...but not provided with Flannel alone 3 2
  • 33.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ What is NSX-T ?
  • 34.
    The NSX-T Platform Singleplatform for Networking, Security & Monitoring for Containers & VMs PKS PAS/PCFOpenShift VM Networking, Security, Monitoring Kubernetes 34
  • 35.
    Address all K8sNetworking Functions Load Balancing, IPAM, Routing, Firewalling Complete automation and dynamic provisioning of Network Objects required for K8s and Workloads Support for different topology choices for Pod and Node Networks (NAT/No-NAT) Network Security Policies for Kubernetes Clusters, Namespaces and Individual Services Full Network traceability/visibility using NSX-T in-built operational tools for Kubernetes How does PKS with NSX-T add value over opensource solutions 35
  • 36.
    NSX-T: operational toolsand automation 36 Traceflow, Port-Connection, Topology View Back-Up & Restore Selective Tech Support Logs Monitoring & Stats REST API support Dynamic libraries available in multiple languages (Java, Python, Terraform) Upstream OpenStack Support and Partner Ecosystem Getting started wizards Dashboards IPFIX, Port Mirroring, Port Connection Granular RBAC Upgrade Coordinator vRealize Log Insight / Splunk plugins Automation Operations Troubleshooting 36
  • 37.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ NSX-T + PKS
  • 38.
    38 Pivotal Operations Manager BOSH Master WorkerWorker Worker Master Worker Worker Worker Master Worker Worker Worker PKS-API UAA ODB kubo service adapter MySQL NSX-T Proxy Broker Telemetry Aggregator PKS Control Plane adminserver jobservice ui registry notary clair NSX-T vSphere vRLI Wavefront VAC PKS: High Level Architecture PKS CLI 38 38
  • 39.
    PRINCIPAL IDENTITY 39 K8s Cluster ManagementNodes T1 T1 for LB NSX-T LB K8s cluster 1 K8s cluster 2 K8s cluster n Ops-Manager BOSH PKS Control Plane Harbor T1 PKS mgmt plane NSX-T Edge Cluster NSX-T Controllers vCenter NSX-T Manager vCenter Physical L2/L3 switches Internet K8s Cluster and NSX-T Provisioning VIP API Server https://api.cluster.pks.customer.com Master VM#1, VM#2, VM#3 39 pks create-cluster my-cluster --plan small --num-nodes 3 Worker ‘VM’ Worker ‘VM’ Worker ‘VM’ Master ‘VM’ Master ‘VM’ Master ‘VM’ etcd API srv sched ctrlr mgr Worker ‘VM’ Worker ‘VM’ Worker ‘VM’ NSX NCP dash board NA NANA Kube DNS
  • 40.
    Cluster Provisioning Workflow 41 PKSAPI 1 NSX-T Proxy Broker named_cloud_config 2 • pre-deployment provisioning o allocate cluster subnet o create named_cloud_config o create Node Network o create SNAT rule, if required, from k8s nodes to external • post-destroy decommissioning o delete SNAT rule, if required o release Virtual IP for API Server o delete Node Network o delete named_cloud_config o remove Principal Identity o run clean-up script for NSX-T cluster resources 3 manifest Service Adapter 5 CFCR release pks-nsx-t release 7 Ops Manager OD-Broker cloud_config 4 vSphere CPI 6 BOSH pks create-cluster my-cluster --plan small --num-nodes 3 41 41
  • 41.
    Cluster Provisioning Workflow(cont.) 42 o NCP o NSX-CNI o OpenvSwitch o NSX scripts BOSH CFCR release vSphere CPI pks-nsx-t release 7 Worker ‘VM’ Worker ‘VM’ Worker ‘VM’ Master ‘VM’ Master ‘VM’ Master ‘VM’ 8 VMs tagged with BOSH ID 9 BOSH Job on Master Node to perform cluster-level provisioning o create Principal Identity o create Load Balancer for the new Cluster o reserve Virtual IP for API Server 10 42 42
  • 42.
    PKS and NSX-Tintegration: Key Components NSX Container Plugin (NCP) 43 NCM Infra K8s / OS Adapter CloudFoundry Adapter NSX Container Plugin More… NSX Manager API Client NSX Manager NS: foo NS: bar NSX Example K8s topology K8s master etcd API-Server Scheduler • NCP is a software component provided by Vmware, running on a K8s Node.. • NCP is built in a modular way, so that individual adapters can be added for different CaaS and PaaS systems • NCP ‘listens’ to Kubernetes/CF to create the required NSX-T constructs. • CNI Integration is used.
  • 43.
    PKS + NSX-T:built-in Load Balancing Kubernetes Ingress and Svc Type LB support NCM Infra K8s / OS Adapter CloudFoundry Adapter Libnetwork Adapter NSX Container Plugin More… NSX Manager API Client NSX Manager K8s master etcd API-Server Scheduler Virtual Server 10.114.209.209HTTP and/or HTTPS traffic Server Pool 1 Server Pool 2Rule 2 /bar/ Rule 1 /foo/ LB Service NCM Infra K8s / OS Adapter CloudFoundry Adapter Libnetwork Adapter NSX Container Plugin More… NSX Manager API Client NSX Manager K8s master etcd API-Server Scheduler Virtual Server 10.114.209.212TCP and/or UDP traffic Server Pool LB Service Built-in support for Ingress (L7) and Svc Type LB (L4) w/t NSX-T integration. Most other K8s networking choice don't support Svc Type LB (L4), and you need an additional technology like NGINX from Ingress (L7). 44
  • 44.
    admin@k8s-master:~$ kubectl createnamespace foo namespace ”foo" created admin@k8s-master:~$ kubectl create namespace bar namespace ”bar" created admin@k8s-master:~$ kubectl run nginx-foo --image=nginx -n foo deployment "nginx-foo" created admin@k8s-master:~$ kubectl run nginx-bar --image=nginx -n bar deployment "nginx-bar" created Namespace: foo Namespace: bar NSX / K8s topology 10.24.0.0/24 10.24.1.0/24 10.24.2.0/24 NAT boundary NAT boundary K8s nodesK8s Masters 45 PKS + NSX-T: Namespaces 45 45
  • 45.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Cluster Upgrades
  • 46.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades ● Install the new tile ● Update any new fields ● Deploy! 4 7
  • 47.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 4 8 BOSH PKS K8s K8s Infrastructure watches watches watches deploys
  • 48.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 4 9 BOSH PKS K8s K8s Infrastructure
  • 49.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 0 BOSH PKS K8s K8s Infrastructure upgrade
  • 50.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 1 BOSH PKS K8s K8s Infrastructure upgrade upgrade
  • 51.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 52 BOSH PKS K8s K8s Infrastructure upgrade upgrade upgrade
  • 52.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades ● NCP components upgrade within PKS 5 3
  • 53.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 4 BOSH PKS K8s K8s Infrastructure upgrade upgrade upgrade
  • 54.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 5 Master Worker MasterMaster WorkerWorker
  • 55.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 6 Master Worker MasterMaster WorkerWorker
  • 56.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 7 Master Worker MasterMaster WorkerWorker
  • 57.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 8 Master Worker MasterMaster WorkerWorker NCP
  • 58.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades 5 9 Master Worker MasterMaster WorkerWorker NCP
  • 59.
    Unless otherwise indicated,these slides are © 2013-2018 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Upgrades ● NCP components upgrade within PKS ● NSX-T can be upgraded independent of PKS 6 0