Downloaded 75 times
Uploaded byVMware Tanzu
VMware Tanzu Kubernetes Connect
This document provides an agenda and materials for a workshop on VMware Tanzu for Kubernetes Operations. The agenda includes an introduction to challenges faced by platform teams maintaining Kubernetes platforms, an overview of Tanzu for Kubernetes Operations and how it can help address those challenges, and a hands-on lab session. Tanzu for Kubernetes Operations is a collection of products that provide capabilities for common customer needs around managing containerized platforms at scale, including simplified management of Kubernetes clusters across clouds, centralized visibility and security policies, and developer self-service access.
More Related Content
Similar to VMware Tanzu Kubernetes Connect
VMware Tanzu Kubernetes Connect
- 1. Confidential │ ©2022VMware, Inc. Kubernetes Connect Tanzu for Kubernetes Operations
- 2. Confidential │ ©2022VMware, Inc. 3 VMware Tanzu Kubernetes Connect WELCOME! We will begin Shortly! Please make sure you have signed up for our Live Workshop Environment Step 1. Signup at https://console.cloud.vmware.com (Sign in via Customer Connect if you have an account) Step 2. Login at https://pathfinder.vmware.com/ Use the ‘LOGIN USING MY VMWARE / CSP’ button to login Note: Please make sure your email address is the same for both sign-ups
- 3. Confidential │ ©2022VMware, Inc. 4 Agenda 11:00–11:05am Welcome & Introductions 11:05–11:25am Challenges faced by Platform teams maintaining Kubernetes Platforms 11:25–11:45am Introduction to Tanzu for Kubernetes Operations 11:45-12:20pm How to simplify container management and optimize infrastructure performance across all your clouds 12:20-12:30pm Break 12:30-1:30pm Hands-On Self-Guided Lab
- 4. Confidential │ ©2022VMware, Inc. 5 Speakers Rick Roque Chris Almond Ryan Conley Boskey Savla Staff Solutions Engineer Senior Solution Engineer Staff Solutions Engineer Technical Marketing Architect
- 5. Confidential │ ©2022VMware, Inc. 6 Challenges faced by Platform teams maintaining Kubernetes Platforms
- 6. Confidential │ ©2022VMware, Inc. 7 Path to Multi-Cloud Kubernetes Application Development Teams On-Premise Organizations Multi-Cloud Roadmap 1 2
- 7. Confidential │ ©2022VMware, Inc. 9 Key Technology Themes Kubernetes Multi-Cloud
- 8. Confidential │ ©2022VMware, Inc. 10 Infrastructure EC2 EBS VPC ELB VM’s VMDK VDS NSX ALB Cloud Storage Compute Engine Load Balancer VPC Disk Storage Virtual Network Virtual Machines Load Balancer Kubectl apply –f app.yaml Kubernetes as the Singular Infrastructure API Application Development Teams Kubernetes
- 9. Confidential │ ©2022VMware, Inc. 11 Kubernetes Principles Maintain Desired State Distribute Containerized Workloads Decouple App from Infrastructure Attach labels to all things common
- 10. Confidential │ ©2022VMware, Inc. 12 Applications Storage Volumes Micro Services Service Service Service Infrastructure EC2 EBS VPC ELB VM’s VMDK VDS NSX ALB Cloud Storage Compute Engine Load Balancer VPC Disk Storage Virtual Network Virtual Machines Load Balancer kubectl apply –f app.yaml Containerized Application Lifecycle Application Development Teams
- 11. Confidential │ ©2022VMware, Inc. 13 Cloud Provider Network Provider Storage Provider ACI Azure Disk Volume GCP Drive Kubernetes Infrastructure Providers Plugins for various Vendors
- 12. Confidential │ ©2022VMware, Inc. 14 Applications Storage Volumes Micro Services Service Service Service Infrastructure EC2 EBS VPC ELB VM’s VMDK VDS NSX ALB Cloud Storage Compute Engine Load Balancer VPC Disk Storage Virtual Network Virtual Machines Load Balancer kubectl apply –f app.yaml Challenges managing Containerized Platforms Application Development Teams Day 1 Right level of access to the K8s API Self Service access to API Day n Full Stack Monitoring Backup & Restore Day 2 Service are Encrypted? Secure Communications Monitoring Day 2 What workloads are being Provisioned What services are being exposed? How much Infra is being Provisioned? Day 0 Ability to Provision Clusters on demand Right Drivers, Base OS image, Secure
- 13. Confidential │ ©2022VMware, Inc. 15 Tanzu for Kubernetes Operations
- 14. Confidential │ ©2022VMware, Inc. 16 Applications Storage Volumes Micro Services Service Service Service Infrastructure EC2 EBS VPC ELB VM’s VMDK VDS NSX ALB Cloud Storage Compute Engine Load Balancer VPC Disk Storage Virtual Network Virtual Machines Load Balancer kubectl apply –f app.yaml Tanzu for Kubernetes Operations Application Development Teams Day 1 Right level of access to the K8s API Self Service access to API Day n Full Stack Monitoring Backup & Restore Day 2 Service are Encrypted? Secure Communications Monitoring Day 2 What workloads are being Provisioned What services are being exposed? How much Infra is being Provisioned? Day 0 Ability to Provision Clusters on demand Right Drivers, Base OS image, Secure Tanzu Mission Control Tanzu Kubernetes Grid Tanzu Observability Tanzu Mission Control Tanzu Service Mesh Deploy Secure K8s clusters in minutes on any Cloud/Infra -Provide Central Identity to the K8s API -Self –Service Access - Establish Enterprise-wide Guardrails - Implement Network , Image, Custom Policies - Implement fleet wide - Cross-Cloud Service Mesh - mTLS by default
- 15. Confidential │ ©2022VMware, Inc. Tanzu for Kubernetes Operations Packaged capabilities for common customer challenges Ryan Conley (he/him) Staff Platform Architect, Modern Apps @ryanconley Chris Almond (he/him) Platform Architect, Modern Apps
- 16. Confidential │ ©2022VMware, Inc. 18 Agenda Dive into Tanzu for Kubernetes Operations Open Source, Kubernetes, Apps, oh my! Getting into Production Enterprise Needs for Production Reference Architectures Key Outcomes Call to Action Simplify, Secure, and Speed app delivery
- 17. Confidential │ ©2022VMware, Inc. 20 Why Tanzu? Modernize your apps & infrastructure to continuously deliver better software to production Applications Code and containerize custom applications Speed development with open-source containers Automate deployment of apps into production DEVELOPER EXPERIENCE Infrastructure Multi-Cloud Deploy and manage K8s across clouds, clusters and teams Apply enterprise observability to drive decisions Ensure secure and reliable communication between services OPERATOR EXPERIENCE
- 18. Confidential │ ©2022VMware, Inc. 21 Application Modernization Strategy Match apps to infrastructure Retire SaaS Build / Refactor Retain Rehost / Migrate Replatform Optimize and retain existing apps, as-Is Rewrite apps using cloud native technologies Put apps in containers / native cloud Move apps to cloud and rehost Retire traditional app and convert to a new SaaS app Lower difficulty, infrequent app updates. Focus on infrastructure cost savings. Adoption of cloud native technologies for innovation speed. Focus on business metrics. Change and Value Curve Most Apps (60-70%) tend to land here Invest here where it makes good business sense
- 19. Confidential │ ©2022VMware, Inc. 22 “It ain’t what you don’t know that gets you into trouble. It’s what you know for sure that just ain’t so.” Mark Twain Environmental Challenges
- 20. Confidential │ ©2022VMware, Inc. 24 Modern Infrastructure: Tanzu for Kubernetes Operations Enterprise-grade, operationally sustainable Kubernetes, at scale
- 21. Confidential │ ©2022VMware, Inc. 25 Enterprise Grade – What Ops Cares About Optimize platform and application operating costs Enforce security, networking, and compliance requirements Automate and monitor cloud K8s platform operations Enable self-service access to the right abstractions and app building blocks Start with Kubernetes Ops Enforce security, networking, and compliance requirements
- 22. Confidential │ ©2022VMware, Inc. 26 Kubernetes Ops Platform Resource and capacity visibility Quota policies Multi-cloud cluster lifecycle management Identity federation and multi-team RBAC Developer self-service access Full-stack, production grade observability Easy to use UI, CLI, and declarative API’s Manage any Kubernetes environment Implement per App Service Level Objectives Policy management, security and compliance End to end mTLS encryption and Data protection L4-L7 load balancing and ingress Optimize platform and application operating costs Enforce security, networking, and compliance requirements Automate and monitor cloud K8s platform operations Enable self-service access to the right abstractions and app building blocks Enforce security, networking, and compliance requirements Deploy and Configure the Platform Install, integrate, and configure a secure platform to run your apps Containerize and Deploy your Apps Quickly migrate apps that matter most to your Kubernetes platform OPS
- 23. Confidential │ ©2022VMware, Inc. 27 Tanzu Kubernetes for Operations Observability Management Security and Policy Networking Multi-Cloud | Multi-Cluster | Any K8s Multi-cloud
- 24. Confidential │ ©2022VMware, Inc. 28 Manage Kubernetes Global Control Plane Visibility, Lifecycle, & Policies For any Kubernetes Mgmt Clusters Mgmt Clusters K8s cluster (attached) K8s cluster (attached) Tanzu Kubernetes Cluster Tanzu Kubernetes Cluster Tanzu Kubernetes Cluster Tanzu Kubernetes Cluster Tanzu Kubernetes Cluster Any Kubernetes Tanzu Mission Control
- 25. Confidential │ ©2022VMware, Inc. 29 Full-Stack Collection Real-Time Ingestion Data Resolution and Retention Intelligent Routing 4D Data Processing High performance analytics, AI/ML Business Decisions Alerts Visualize Troubleshoot Predict Automate Ingestion Analysis Action DevOps Platform Engineer Infrastructure Admin Audience Metrics Traces Histograms Span Logs Applications Any Cloud Infrastructure Microservices Containers loT Serverless End to End Observability Full Stack Visibility for Everyone
- 26. Confidential │ ©2022VMware, Inc. 30 Challenges with Legacy Ingress Services for Kubernetes Multiple disparate solutions with complex operations Pod Pod Pod Pod Pod Pod L4 LB Node 1 Node N Cluster 1: Active L4 LB Standby GSLB Traffic to other clusters/sites WAF IPAM DNS Ingress Controller Ingress Controller … • Multiple discrete solutions Disparate LB, Ingress, GSLB, DNS, IPAM and WAF products • Complex operations Difficult to manage and troubleshoot independent components • Lack of observability Multiple point products with little analytics and no end-to-end visibility • Partial automation Compromising between feature and cloud- native automation / scale
- 27. Confidential │ ©2022VMware, Inc. 31 Converged Kubernetes Ingress Services Single L4 and L7 platform for holistic app operation • Integrated solution Comprehensive LB, Ingress, intrinsic security, WAF, GSLB, DNS, and IPAM • Operational simplicity A single solution with central control and ease of troubleshooting • Rich observability Real-time telemetry with application insights • Cloud-native automation with elasticity Elastic autoscaling based on closed-loop analytics and decision automation Consolidated Application Services Ingress + LB + WAF + GSLB / DNS / IPAM Tanzu
- 28. Confidential │ ©2022VMware, Inc. 32 K8s Integration using AVI Kubernetes Operator Deployment overview and components Control Plane Avi Controller Node N Node 1 Kubernetes Cluster Avi Kubernetes Operator Application Pods Avi ServiceEngines Application Pods Application Pods Deployment Components Avi Kubernetes Operator (AKO) • Provides Ingress-Controller and Avi configuration functionality • Translates K8s objects to Avi Controller APIs • Runs as a pod in the K8s/OC cluster Avi Controller • Manages lifecycle of service engines • Provides centralized analytics and observability Avi Service Engines • Hosts the virtual-services for K8s/OC ingresses/routes • Handles virtual-service data-plane traffic • Runs as VMs, external to the cluster
- 29. Confidential │ ©2022VMware, Inc. 33 App silos—running in multiple platforms and clouds Many endpoints to monitor, scale, and make resilient Inconsistent operational and remediation policies Disjointed security, auditing, and compliance Consistent Visibility, Control, and Security, for Applications Across Clouds Enterprise-Class Service Mesh Multi-platform and multi- cloud federation Centralized visibility and remediation Global policies for users, services and data Centralized security, audit, and compliance No changes to application code Public Clouds VMs Serverless SaaS Kubernetes
- 30. Confidential │ ©2022VMware, Inc. 35 Tanzu for Kubernetes Operations – Reference Architectures A quick tour of our content strategy https://docs.vmware.com/en/VMware-Tanzu/services/tanzu-reference-architecture/GUID-reference-designs-index.html
- 31. Confidential │ ©2022VMware, Inc. 36 Tanzu for Kubernetes Operations – Reference Architectures Public GitHub Repo as a Source of Truth: https://github.com/vmware-tanzu-labs/tanzu-validated-solutions Tanzu Validated Solutions is a publicly-available repository for authoring, updating, and publishing reference architecture materials for docs.vmware.com. This repository provides a continuous feedback mechanism for improvement.
- 32. Confidential │ ©2022VMware, Inc. 39 VMware Tanzu® Application Platform™ VMware Tanzu® for Kubernetes Operations VMware Tanzu Labs® Application Modernization | Agile Development | Secure Software Supply Chain | Platform Development DEV TEAMS SEC TEAMS OPS TEAMS How to Become Great at Modern Software Developer Experience DevSecOps Platform Operations Code, Iterate, Data Manage Platform Lifecycle Network Deploy Scan, Sign, Store Integrate, Build, Test Operate, Observe, Optimize An end-to-end story
- 33. Confidential │ ©2022VMware, Inc. 40 Address Common Challenges Speed development and delivery of containerized workloads Secure the container lifecycle Simplify operating containers and clusters across clouds Modular platform for developing and delivering apps atop any Kubernetes
Editor's Notes
- #3 Click to add notes
- #20 Transition to API-first, now defacto standard Journey towards writing cloud native apps & VMware’s SaaS transformation Partnerships with hyperscalers & VCPP’s
- #21 * Strategic imperative toward developer consumable infrastructure * Migration from GUI driven to API driven first + control plane UIs * OSS BU build out * Mult-cloud ====== Modern Applications require modern infrastructure. Only VMware has the breath of technologies and services to help you modernize your entire existing IT stack and provide a developer experience built on today’s most innovative tools and platforms. As enterprises accelerate their digital transformation initiatives, they are adopting a multi-cloud strategy. They are taking advantage of cloud native technologies like Kubernetes to deploy and run applications for faster time-to-market. And as they do so most large enterprises today have millions of lines of existing code that are very difficult to maintain and change—but these applications are essential to the business and to the adoption of multi-cloud strategy. How can you extend the value of your existing software investment to benefit from the advantages of modern software delivery and operation? How can you simplify the way you run and manage modernized workloads alongside existing software? How can you get to production more often with new customer experiences? Drawing on years of helping the world’s largest companies build the foundation for digital business, VMware is here for what might be your most important work: modernizing your applications and infrastructure. VMware Tanzu offers full-stack modernization, enabling you to transform your teams and your applications running on Kubernetes, while simplifying operations of your software across multi-cloud infrastructure.
- #22 * Where do you start in this journey? ======= How do our customers move from existing and heritage applications to modern, cloud native applications? You may hear this as the 5 Rs On left side, work tends to go more quickly and results in IT-centric cost savings without much benefit from a time-to-market or business perspective. As you move to the right … efforts tend to deliver more business-centric benefits by helping to improve development velocity and IT efficiency through adoption of cloud native technologies and application architectures It’s not a one size fits all approach. You must take into account business requirements and technology factors. Does it make sense to move based on licensing costs or revenue opportunities? Is this a mission critical system that requires urgent attention? And what is involved technically, based on existing tooling, frameworks, and dependencies. A significant portion of apps are being rehosted or re-platformed – with strategic investment in new or rearchitected/refactored apps. Think of rehost as a ‘lift and shift’. It’s moving apps to cloud infrastructure ‘as is’ with a VM instance running in your cloud of choice. This could assist in infrastructure costs, but you won’t see the benefits of running apps on the cloud. Others may go a little further to take advantage of the services of the cloud, like replacing legacy database instances with something managed by the cloud provider. This is more commonly termed replatforming.
- #24 Rec: What, Why, & How
- #25 Template instructions [remove before publishing] Use any content slide from the template to build the main content of the presentation. When possible, always choose the leaf and aqua colorway within this presentation.
- #26 Elevator Pitch:
- #28 * Consistent Kubernetes runtime across clouds * Simplify provisioning & configuration of clusters, such as L7 Ingress, logging, or enforcing security stds by default
- #30 Container based applications bring a new set of visibility challenges for each of the consumers. Developers need visibility into the microservices that are deployed across a variety of environments and how they interact. DevOps teams and SREs need visibility into a broader set of the stack and platform operators want to ensure that they are managing capacity and have the right level of visibility to be proactive. But most importantly, there needs to be a common point of view from the infrastructure to the application. Tanzu Observability provides just that - being able to ingest metrics from the whole stack and providing a common view for everyone to work from whether it is to provide alerts, accelerate troubleshooting, provide historical data, or even begin to predict trends through analytics.
- #31 Template instructions [remove before publishing] Use any content slide from the template to build the main content of the presentation. When possible, always choose the leaf and aqua colorway within this presentation.
- #32 Template instructions [remove before publishing] Use any content slide from the template to build the main content of the presentation. When possible, always choose the leaf and aqua colorway within this presentation.
- #33 Template instructions [remove before publishing] Use any content slide from the template to build the main content of the presentation. When possible, always choose the leaf and aqua colorway within this presentation.
- #38 Arni & James
- #40 Overview of Tanzu portfolio and how Tanzu for Kubernetes Operations fits in What we hear from customers on most important outcomes – speed developer cycles, security the SW supply chain, simplify and scale ops. These are the outcomes we’re focused on with the Tanzu portfolio – enabling orgs to speed app dev and delivery cycles, enforcing security and compliance requirements in the SW supply chain, and meeting their operations needs including connectivity, govnerance, observability, automation – in a multi cloud world Looking at the key personas/teams we are targeting - Developers can focus on delivering key business logic. Security teams can ensure security and compliance guardrails are inserted end-to-end (and automated), and operations teams (or platform teams) can focus on the platform and the applications and clusters. Starting on the right side of this flow, Tanzu for Kubernetes Operations is a cloud-agnostic platform that enables your teams to consistently and cost-effectively build and operate modern, distributed applications securely and at scale — on any cloud On the left side, Tanzu Application Platform is a rich set of developer tooling with a pre-paved path to production for building and deploying software quickly and securely on any compliant public cloud or on-premises Kubernetes cluster. And to accelerate your time to value, Tanzu Labs can step in to help modernize apps, build platforms and impart critical skills that will enable your teams to scale.