SlideShare a Scribd company logo
I N T E L L I G E N T C L O U D O R C H E S T R A T I O N
© 2019 Xosphere, Inc.
Tips and Tricks to Elevate
Your Kubernetes Game
Presented by Alan Hand
Founder and CEO of Xosphere
March 20, 2019
2
Who is this guy?
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
Alan Hand
Father
Engineer
Entrepreneur
3
Kubernetes – Day 1
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME4
Kubernetes – Day 2
5
Reasons to Pull Your Hair Out
-Provisioning
-Registry and Package Management
-Ingress and Load Balancing
-Monitoring and Logging
-CI/CD Toolchain
-RBAC and Security
-Governance
-Cost Optimization
-Federation
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
6
kubectl
kube control?
kube cuddle?
kube c t l?
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
7
Tip #1
Use Autocomplete and
Aliases
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
echo "source <(kubectl completion bash)" >> ~/.bashrc
alias k=kubectl
complete -F __start_kubectl k
8
Provisioning Options
-kubeadm
-kops
-Terraform
-Rancher
-OpenShift
-CaaS
-many others…
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
9
Tip #2
Use CaaS in cloud
environments
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
10
Monitoring Metrics
Cluster metrics
-Node resource utilization
-Number of Nodes
-Number of running Pods
Pod metrics
-Kubernetes metrics
-Container metrics
-Application metrics
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
11
Monitoring Solutions
Heapster, InfluxDB, and Grafana
Prometheus and Grafana
Heapster + ELK
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
12
Tip #3
Define labels with a
logical and easy-to-
understand schema
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
{ app: myapp, tier: frontend, env: test,
deployment: v3 }
13
What the EFK?
Cluster-level logging is not
offered natively
Elasticseach + FluentD +
Kibana to the rescue
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
14
Tip #4
Configure logs to use
JSON formatting
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
<source>
@type tail
path /var/lib/docker/containers/*/*.log
pos_file /var/log/fluentd-docker.pos
tag docker.*
format json
read_from_head true
</source>
15
RBAC Policies Are Not Optional
Support multiple users
Control operations each user can
execute
Control operations each process
inside a Pod can execute
Limit visibility of resources and
namespaces
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
16
RBAC Elements
Subjects
Resources
Verbs
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
17
Users vs. ServiceAccounts
Users
global, meant for humans
ServiceAccounts
namespaced, meant for
processes running in Pods
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
18
Tip #5
Use ServiceAccounts per
deployment with
minimum set of privileges
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
19
PodSecurityPolicy
Lists the conditions a Pod
must meet in order to run
in the cluster
Can be associated to
ServiceAccounts
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
20
PodSecurityPolicy
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
name: example
spec:
privileged: false
runAsUser:
rule: MustRunAsNonRoot
seLinux:
rule: RunAsAny
fsGroup:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
volumes:
- 'nfs’
hostPorts:
- min: 100
max: 100
21
Teams Are Like Siblings
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
22
Tip #6
Use namespaces to
segregate teams and
ResourceQuota to limit
consumption
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
23
ResourceQuota
Limit compute, storage,
and/or object counts
Can be scoped by
PriorityClass
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
24
PriorityClass
Indicates importance of a
Pod relative to other Pods
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
apiVersion: scheduling.k8s.io/v1beta1
kind: PriorityClass
metadata:
name: high-priority
value: 1000000
globalDefault: false
description: "This priority class should be used for
XYZ service pods only."
25
LimitRange
Similar to ResourceQuota
at the Pod or container
level
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
26
Tip #7
Use default LimitRange to
prevent accidental
resource leaks from
impacting other Pods
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
27
Cost Optimization Opportunities
Choose the right instance size
Use autoscaler to terminate
underutilized Nodes
Resize Pods
Use horizontal Pod autoscaler to
terminate idle Pods
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
28
See Spot Run
Significant savings up to 80%
No guarantees on availability
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
29
Tip #8
Use Xosphere to run
Nodes on Spot while
maintaining reliability and
availability
TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
Thank You
alan@xosphere.io 310.487.5851
30 © 2019 Xosphere, Inc.TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME

More Related Content

Similar to Tips and tricks to elevate your kubernetes game (3)

AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox
AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul MaddoxAWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox
AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox
AWS Riyadh User Group
 
Kubernetes: Beyond Baby Steps
Kubernetes: Beyond Baby StepsKubernetes: Beyond Baby Steps
Kubernetes: Beyond Baby Steps
DigitalOcean
 
ClickHouse on Kubernetes! By Robert Hodges, Altinity CEO
ClickHouse on Kubernetes! By Robert Hodges, Altinity CEOClickHouse on Kubernetes! By Robert Hodges, Altinity CEO
ClickHouse on Kubernetes! By Robert Hodges, Altinity CEO
Altinity Ltd
 
OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...
OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...
OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...
NETWAYS
 
Dessi docker kubernetes paas cloud
Dessi docker kubernetes paas cloudDessi docker kubernetes paas cloud
Dessi docker kubernetes paas cloud
Massimiliano Dessì
 
Come costruire una Platform As A Service con Docker, Kubernetes Go e Java
Come costruire una Platform As A Service con Docker, Kubernetes Go e JavaCome costruire una Platform As A Service con Docker, Kubernetes Go e Java
Come costruire una Platform As A Service con Docker, Kubernetes Go e Java
Codemotion
 
How we can do Multi-Tenancy on Kubernetes
How we can do Multi-Tenancy on KubernetesHow we can do Multi-Tenancy on Kubernetes
How we can do Multi-Tenancy on Kubernetes
Opsta
 
Natively clouded Journey
Natively clouded JourneyNatively clouded Journey
Natively clouded Journey
Haggai Philip Zagury
 
게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 - 유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...
게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 -  유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 -  유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...
게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 - 유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...
Amazon Web Services Korea
 
Kubered -Recipes for C2 Operations on Kubernetes
Kubered -Recipes for C2 Operations on KubernetesKubered -Recipes for C2 Operations on Kubernetes
Kubered -Recipes for C2 Operations on Kubernetes
Jeffrey Holden
 
Why I love Kubernetes Failure Stories and you should too - GOTO Berlin
Why I love Kubernetes Failure Stories and you should too - GOTO BerlinWhy I love Kubernetes Failure Stories and you should too - GOTO Berlin
Why I love Kubernetes Failure Stories and you should too - GOTO Berlin
Henning Jacobs
 
AMD It's Time to ROC
AMD It's Time to ROCAMD It's Time to ROC
AMD It's Time to ROC
inside-BigData.com
 
Kubernetes Architecture and Introduction – Paris Kubernetes Meetup
Kubernetes Architecture and Introduction – Paris Kubernetes MeetupKubernetes Architecture and Introduction – Paris Kubernetes Meetup
Kubernetes Architecture and Introduction – Paris Kubernetes Meetup
Stefan Schimanski
 
Docker Dhahran November 2017 meetup
Docker Dhahran November 2017 meetupDocker Dhahran November 2017 meetup
Docker Dhahran November 2017 meetup
Walid Shaari
 
Kubernetes Java Operator
Kubernetes Java OperatorKubernetes Java Operator
Kubernetes Java Operator
Anthony Dahanne
 
Kubernetes at Google Cloud Community Copenhagen
Kubernetes at Google Cloud Community CopenhagenKubernetes at Google Cloud Community Copenhagen
Kubernetes at Google Cloud Community Copenhagen
Kevin Simper
 
KubeCon EU 2016: Kubernetes and the Potential for Higher Level Interfaces
KubeCon EU 2016: Kubernetes and the Potential for Higher Level InterfacesKubeCon EU 2016: Kubernetes and the Potential for Higher Level Interfaces
KubeCon EU 2016: Kubernetes and the Potential for Higher Level Interfaces
KubeAcademy
 
K8s in 3h - Kubernetes Fundamentals Training
K8s in 3h - Kubernetes Fundamentals TrainingK8s in 3h - Kubernetes Fundamentals Training
K8s in 3h - Kubernetes Fundamentals Training
Piotr Perzyna
 
Gatekeeper: API gateway
Gatekeeper: API gatewayGatekeeper: API gateway
Gatekeeper: API gateway
ChengHui Weng
 
Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...
Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...
Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...
HostedbyConfluent
 

Similar to Tips and tricks to elevate your kubernetes game (3) (20)

AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox
AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul MaddoxAWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox
AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox
 
Kubernetes: Beyond Baby Steps
Kubernetes: Beyond Baby StepsKubernetes: Beyond Baby Steps
Kubernetes: Beyond Baby Steps
 
ClickHouse on Kubernetes! By Robert Hodges, Altinity CEO
ClickHouse on Kubernetes! By Robert Hodges, Altinity CEOClickHouse on Kubernetes! By Robert Hodges, Altinity CEO
ClickHouse on Kubernetes! By Robert Hodges, Altinity CEO
 
OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...
OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...
OSMC 2023 | Making your Kubernetes-based log collection reliable & durable wi...
 
Dessi docker kubernetes paas cloud
Dessi docker kubernetes paas cloudDessi docker kubernetes paas cloud
Dessi docker kubernetes paas cloud
 
Come costruire una Platform As A Service con Docker, Kubernetes Go e Java
Come costruire una Platform As A Service con Docker, Kubernetes Go e JavaCome costruire una Platform As A Service con Docker, Kubernetes Go e Java
Come costruire una Platform As A Service con Docker, Kubernetes Go e Java
 
How we can do Multi-Tenancy on Kubernetes
How we can do Multi-Tenancy on KubernetesHow we can do Multi-Tenancy on Kubernetes
How we can do Multi-Tenancy on Kubernetes
 
Natively clouded Journey
Natively clouded JourneyNatively clouded Journey
Natively clouded Journey
 
게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 - 유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...
게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 -  유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 -  유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...
게임 고객사를 위한 ‘AWS 컨테이너 교육’ 자료 - 유재석 솔루션즈 아키텍트, AWS :: Gaming Immersion Day 201...
 
Kubered -Recipes for C2 Operations on Kubernetes
Kubered -Recipes for C2 Operations on KubernetesKubered -Recipes for C2 Operations on Kubernetes
Kubered -Recipes for C2 Operations on Kubernetes
 
Why I love Kubernetes Failure Stories and you should too - GOTO Berlin
Why I love Kubernetes Failure Stories and you should too - GOTO BerlinWhy I love Kubernetes Failure Stories and you should too - GOTO Berlin
Why I love Kubernetes Failure Stories and you should too - GOTO Berlin
 
AMD It's Time to ROC
AMD It's Time to ROCAMD It's Time to ROC
AMD It's Time to ROC
 
Kubernetes Architecture and Introduction – Paris Kubernetes Meetup
Kubernetes Architecture and Introduction – Paris Kubernetes MeetupKubernetes Architecture and Introduction – Paris Kubernetes Meetup
Kubernetes Architecture and Introduction – Paris Kubernetes Meetup
 
Docker Dhahran November 2017 meetup
Docker Dhahran November 2017 meetupDocker Dhahran November 2017 meetup
Docker Dhahran November 2017 meetup
 
Kubernetes Java Operator
Kubernetes Java OperatorKubernetes Java Operator
Kubernetes Java Operator
 
Kubernetes at Google Cloud Community Copenhagen
Kubernetes at Google Cloud Community CopenhagenKubernetes at Google Cloud Community Copenhagen
Kubernetes at Google Cloud Community Copenhagen
 
KubeCon EU 2016: Kubernetes and the Potential for Higher Level Interfaces
KubeCon EU 2016: Kubernetes and the Potential for Higher Level InterfacesKubeCon EU 2016: Kubernetes and the Potential for Higher Level Interfaces
KubeCon EU 2016: Kubernetes and the Potential for Higher Level Interfaces
 
K8s in 3h - Kubernetes Fundamentals Training
K8s in 3h - Kubernetes Fundamentals TrainingK8s in 3h - Kubernetes Fundamentals Training
K8s in 3h - Kubernetes Fundamentals Training
 
Gatekeeper: API gateway
Gatekeeper: API gatewayGatekeeper: API gateway
Gatekeeper: API gateway
 
Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...
Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...
Not Your Mother's Kafka - Deep Dive into Confluent Cloud Infrastructure | Gwe...
 

Recently uploaded

GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
Neo4j
 
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to ProductionGenerative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Aggregage
 
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 202420240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Matthew Sinclair
 
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
Edge AI and Vision Alliance
 
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AIMind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
Kumud Singh
 
20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
Matthew Sinclair
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Malak Abu Hammad
 
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with SlackLet's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
shyamraj55
 
Artificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopmentArtificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopment
Octavian Nadolu
 
Pushing the limits of ePRTC: 100ns holdover for 100 days
Pushing the limits of ePRTC: 100ns holdover for 100 daysPushing the limits of ePRTC: 100ns holdover for 100 days
Pushing the limits of ePRTC: 100ns holdover for 100 days
Adtran
 
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Speck&Tech
 
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
Neo4j
 
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
DianaGray10
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
Ana-Maria Mihalceanu
 
Large Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial ApplicationsLarge Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial Applications
Rohit Gautam
 
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
SOFTTECHHUB
 
PCI PIN Basics Webinar from the Controlcase Team
PCI PIN Basics Webinar from the Controlcase TeamPCI PIN Basics Webinar from the Controlcase Team
PCI PIN Basics Webinar from the Controlcase Team
ControlCase
 
Video Streaming: Then, Now, and in the Future
Video Streaming: Then, Now, and in the FutureVideo Streaming: Then, Now, and in the Future
Video Streaming: Then, Now, and in the Future
Alpen-Adria-Universität
 
20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website
Pixlogix Infotech
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
名前 です男
 

Recently uploaded (20)

GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
 
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to ProductionGenerative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
 
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 202420240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
 
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
 
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AIMind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
 
20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
 
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with SlackLet's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
 
Artificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopmentArtificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopment
 
Pushing the limits of ePRTC: 100ns holdover for 100 days
Pushing the limits of ePRTC: 100ns holdover for 100 daysPushing the limits of ePRTC: 100ns holdover for 100 days
Pushing the limits of ePRTC: 100ns holdover for 100 days
 
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
 
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
 
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
 
Large Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial ApplicationsLarge Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial Applications
 
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
 
PCI PIN Basics Webinar from the Controlcase Team
PCI PIN Basics Webinar from the Controlcase TeamPCI PIN Basics Webinar from the Controlcase Team
PCI PIN Basics Webinar from the Controlcase Team
 
Video Streaming: Then, Now, and in the Future
Video Streaming: Then, Now, and in the FutureVideo Streaming: Then, Now, and in the Future
Video Streaming: Then, Now, and in the Future
 
20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
 

Tips and tricks to elevate your kubernetes game (3)

  • 1. I N T E L L I G E N T C L O U D O R C H E S T R A T I O N © 2019 Xosphere, Inc. Tips and Tricks to Elevate Your Kubernetes Game Presented by Alan Hand Founder and CEO of Xosphere March 20, 2019
  • 2. 2 Who is this guy? TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME Alan Hand Father Engineer Entrepreneur
  • 3. 3 Kubernetes – Day 1 TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 4. TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME4 Kubernetes – Day 2
  • 5. 5 Reasons to Pull Your Hair Out -Provisioning -Registry and Package Management -Ingress and Load Balancing -Monitoring and Logging -CI/CD Toolchain -RBAC and Security -Governance -Cost Optimization -Federation TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 6. 6 kubectl kube control? kube cuddle? kube c t l? TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 7. 7 Tip #1 Use Autocomplete and Aliases TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME echo "source <(kubectl completion bash)" >> ~/.bashrc alias k=kubectl complete -F __start_kubectl k
  • 9. 9 Tip #2 Use CaaS in cloud environments TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 10. 10 Monitoring Metrics Cluster metrics -Node resource utilization -Number of Nodes -Number of running Pods Pod metrics -Kubernetes metrics -Container metrics -Application metrics TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 11. 11 Monitoring Solutions Heapster, InfluxDB, and Grafana Prometheus and Grafana Heapster + ELK TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 12. 12 Tip #3 Define labels with a logical and easy-to- understand schema TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME { app: myapp, tier: frontend, env: test, deployment: v3 }
  • 13. 13 What the EFK? Cluster-level logging is not offered natively Elasticseach + FluentD + Kibana to the rescue TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 14. 14 Tip #4 Configure logs to use JSON formatting TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME <source> @type tail path /var/lib/docker/containers/*/*.log pos_file /var/log/fluentd-docker.pos tag docker.* format json read_from_head true </source>
  • 15. 15 RBAC Policies Are Not Optional Support multiple users Control operations each user can execute Control operations each process inside a Pod can execute Limit visibility of resources and namespaces TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 16. 16 RBAC Elements Subjects Resources Verbs TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 17. 17 Users vs. ServiceAccounts Users global, meant for humans ServiceAccounts namespaced, meant for processes running in Pods TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 18. 18 Tip #5 Use ServiceAccounts per deployment with minimum set of privileges TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 19. 19 PodSecurityPolicy Lists the conditions a Pod must meet in order to run in the cluster Can be associated to ServiceAccounts TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 20. 20 PodSecurityPolicy TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME apiVersion: extensions/v1beta1 kind: PodSecurityPolicy metadata: name: example spec: privileged: false runAsUser: rule: MustRunAsNonRoot seLinux: rule: RunAsAny fsGroup: rule: RunAsAny supplementalGroups: rule: RunAsAny volumes: - 'nfs’ hostPorts: - min: 100 max: 100
  • 21. 21 Teams Are Like Siblings TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 22. 22 Tip #6 Use namespaces to segregate teams and ResourceQuota to limit consumption TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 23. 23 ResourceQuota Limit compute, storage, and/or object counts Can be scoped by PriorityClass TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 24. 24 PriorityClass Indicates importance of a Pod relative to other Pods TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME apiVersion: scheduling.k8s.io/v1beta1 kind: PriorityClass metadata: name: high-priority value: 1000000 globalDefault: false description: "This priority class should be used for XYZ service pods only."
  • 25. 25 LimitRange Similar to ResourceQuota at the Pod or container level TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 26. 26 Tip #7 Use default LimitRange to prevent accidental resource leaks from impacting other Pods TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 27. 27 Cost Optimization Opportunities Choose the right instance size Use autoscaler to terminate underutilized Nodes Resize Pods Use horizontal Pod autoscaler to terminate idle Pods TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 28. 28 See Spot Run Significant savings up to 80% No guarantees on availability TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 29. 29 Tip #8 Use Xosphere to run Nodes on Spot while maintaining reliability and availability TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME
  • 30. Thank You alan@xosphere.io 310.487.5851 30 © 2019 Xosphere, Inc.TIPS AND TRICKS TO ELEVATE YOUR KUBERNETES GAME