Containers are no longer in the distant future; a lot of businesses are starting to, or are already using, containers in dev/test. In this talk, we will walk through the offerings Puppet has to help you leap from dev/test to a production-from-scratch environment in the cloud. We will run through deploying Puppet Enterprise in AWS with Puppet's ready-made CloudFormation templates that leverage Puppet's AWS AMI for Puppet Enterprise. Then we'll use code deploy to pull the Puppet Kubernetes module, and deploy our production-ready cluster with our first application in a highly available configuration, using garethr/kubernetes. Not only will we run through the process — in theory, we will deploy the cluster live in real time. So you will not only have the tools to deploy a production-ready cluster, you will have had the experience of seeing it done in the real world.

1. Zero to Kubernetes
Scott Coulton
Principal Software Engineer
Puppet

2. @scotty-c
@scottcoulton

3. The Team
Greg Hardy
Dave Try
Mark Fuller
Sheena Tharakanparampil
Mark Willson
Sinead Heverin
Gert Drapers

4. This Talk
What we will cover

5. So you're a Puppet user
and you want to move to
Kubernetes
But where do you start ?
5

6. Agenda
The Tools
What has Puppet released and why ?
Development
From cluster changes to Helm chart deployments
Production
The end goal
6

7. Let's build some clusters.
We will come back to them later
7

8. 8
The Tools

9. We wanted to build Full Kubernetes experience for our
users.
This needed to true for both Development and
Ops
9

10. Kubernetes.
● Container orchestration
● Cloud native
● Pluggable container runtime
● Truly distributed application
https://forge.puppet.com/puppetlabs/kubernetes
10

11. Helm.
● Kubernetes application packaging framework
● A standardised way to deploy complex applications
● Open source repo for public charts
https://forge.puppet.com/puppetlabs/helm
11

12. Rook. (Coming soon)
● Block level storage for Kubernetes
● Built on ceph
● Deployed as a Helm chart
● Standardised storage layer between cloud and bare metal
12

13. How we help you move to Kubernetes efficiently
13
Development

14. Kubernetes is Complex.
At Puppet we wanted to abstract Complexity where
we can to make your life delivering your applications easier.
14

15. Enter Kream.
(Kubernetes rules everything around me)
https://github.com/puppetlabs/kream
15

16. Kream gives you.
● What we call Kubernetes in a box
● 3 nodes (You can build more it’s in the readme)
● Helm
● Rook
16

17. To build the Cluster.
rake cluster_up
17

18. This is where it really counts
18
Production

19. Security is important.
● You want end to TLS
● You want your nodes to be in rbac groups
● Nodes should use bootstrap tokens
19

20. How is Puppet helping you with
you security controls.
20

21. We have a tool to help
https://github.com/puppetlabs/puppetlabs-kubernetes/tree/mas
ter/tooling
21

22. This tool gives you.
● All your security controls are autogenerated
● The tool outputs to a hiera file
22

23. Commands:
kube_tool.rb build_hiera FQDN, IP, BOOTSTRAP_CONTROLLER_IP,
ETCD_INITIAL_CLUSTER, ETCD_IP, KUBE_API_ADVERTISE_ADDRESS,
INSTALL_DASHBOARD # Pass the cluster params to build your hiera
configuration
kube_tool.rb help [COMMAND]
23
How to run it.

24. ./kube_tool.rb build_hiera kubernetes 172.17.10.101 172.17.10.101
"etcd-kube-master=http://172.17.10.101:2380,etcd-kube-replica-mast
er-01=http://172.17.10.210:2380,etcd-kube-replica-master-02=http:/
/172.17.10.220:2380" "%{::ipaddress_enp0s8}"
"%{::ipaddress_enp0s8}" true
24
How to run it.

25. Let’s do it live.
25

26. The hiera file is already in Kream.
26

27. Lets check our cloud deployment.
27

28. Questions.
28