Upgrade to Pro — share decks privately, control downloads, hide ads and more …

CI/CD with Kubernetes

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Bastian Hofmann Bastian Hofmann
August 30, 2019
Programming
250
0

CI/CD with Kubernetes

Avatar for Bastian Hofmann

Bastian Hofmann

August 30, 2019

More Decks by Bastian Hofmann

See All by Bastian Hofmann
Monitoring in Kubernetes with Prometheus and Grafana
Avatar for Bastian Hofmann bastianhofmann
0
370
Creating a fast Kubernetes Development Workflow
Avatar for Bastian Hofmann bastianhofmann
0
150
Highly available cross-region deployments with Kubernetes
Avatar for Bastian Hofmann bastianhofmann
1
170
From source to Kubernetes in 30 minutes
Avatar for Bastian Hofmann bastianhofmann
0
200
Introduction to Kubernetes
Avatar for Bastian Hofmann bastianhofmann
1
140
Creating a fast Kubernetes Development Workflow
Avatar for Bastian Hofmann bastianhofmann
1
290
Deploying your first Micro-Service application to Kubernetes
Avatar for Bastian Hofmann bastianhofmann
2
210
Creating a fast Kubernetes Development Workflow
Avatar for Bastian Hofmann bastianhofmann
0
280
Dive-In-Workshop: Kubernetes
Avatar for Bastian Hofmann bastianhofmann
0
460

Other Decks in Programming

See All in Programming
生成AI導入の「期待外れ」を乗り越える ー 開発フロー改革が目指す、真の組織変革
Avatar for starfish719 starfish719
0
4.1k
全PRの83%がAIレビューだけでマージできるようになった開発組織はその後どうなったか
Avatar for a-thug athug
1
1.5k
AIが無かった頃の素敵な出会いの話
Avatar for コドモン開発チーム codmoninc
1
390
AI時代に設計が 最大の生産性レバーになる 意図駆動開発とデータを消さない設計｜Don't Delete Your Data or Your Intent — Design as the Deepest Lever in the AI Era
Avatar for Tomohisa Takaoka tomohisa
1
740
Google Apps Script で Ruby を動かす
Avatar for Shogo Kawahara kawahara
0
140
関東Kaggler会_NVIDIA_Nemotron_コンペ_振り返り
Avatar for rick rick_ds
0
490
Cloudflare is Agents
Avatar for chimame chimame
0
150
yield再入門 #phpcon
Avatar for hideki kinjyo o0h
PRO
0
990
その節約、円になってますか？
Avatar for isamu asakawa isamumumu
1
710
属人化した知識を、 AIが辿れる地図にする
Avatar for PKSHA Technology（パークシャテクノロジー） pkshadeck
PRO
1
150
複数の Claude Code が"放置"されてしまう問題をCLI ダッシュボードを自作して解決した話
Avatar for sumihiro3 sumihiro3
1
670
生成AIで帳票OCRが「簡単に」作れる時代になった？
Avatar for Shohei Kondo kon_shou
0
640

Featured

See All Featured
How to Grow Your eCommerce with AI & Automation
Avatar for Katarina Dahlin katarinadahlin
PRO
1
230
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
2
52k
Chasing Engaging Ingredients in Design
Avatar for Sebastian Deterding codingconduct
0
260
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
274
21k
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
34
9.6k
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
220k
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
57
7.1k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
230
23k
Accessibility Awareness
Avatar for Sarah Abderemane sabderemane
1
170
Sam Torres - BigQuery for SEOs
Avatar for Tech SEO Connect techseoconnect
PRO
0
460
Marketing Yourself as an Engineer | Alaka | Gurzu
Avatar for Gurzu gurzu
0
270
Reality Check: Gamification 10 Years Later
Avatar for Sebastian Deterding codingconduct
0
2.2k

Transcript

  1. @BastianHofmann CI/CD with Kubernetes Bastian Hofmann [email protected]

  2. Continuous Integration

  3. Continuous Delivery

  4. None

  5. Container orchestration platform

  6. Deploy, run and scale your services in isolated containers

  7. No vendor lock in

  8. Standardized APIs

  9. Runs on

  10. Your laptop

  11. None

  12. Bare metal

  13. Cloud Providers

  14. And if you don't want to install and maintain Kubernetes

    yourself

  15. Managed Kubernetes

  16. None
  17. None

  18. So we have code, how do we get this into

    Kubernetes?

  19. Lot's of tools

  20. Example for this talk

  21. None

  22. Example application

  23. https:/ /gitlab.com/bashofmann/ angular-test-app

  24. https:/ /gitlab.com/bashofmann/ angular-test-app-finished

  25. Pipeline with multiple stages, each stage can have multiple jobs

  26. Stage 1: Preparing

  27. Stage 2: Linters and Tests

  28. Stage 3: Building an image

  29. Stage 4: On master: Deploying to Kubernetes into a stage

    namespace

  30. Stage 5: On master: Testing if stage works

  31. Stage 6: On tag: Tag the docker image

  32. Stage 7: On tag: Deploying to Kubernetes into a prod

    namespace

  33. Stage 8: On tag: Testing if prod works

  34. In detail

  35. Stage 1: Preparing

  36. Only do slow operations once and cache and re-use results

  37. Stage 2: Linters and Tests

  38. Add linters for everything

  39. Unit tests

  40. Integration tests

  41. Browser tests

  42. Stage 3: Building an image

  43. Make the build as fast as possible

  44. Make the image as small as possible

  45. Stage 4: On master: Deploying to Kubernetes into a stage

    namespace

  46. Stage 5: On master: Testing if stage works

  47. Stage 6: On tag: Tag the docker image

  48. Stage 7: On tag: Deploying to Kubernetes into a prod

    namespace

  49. Stage 8: On tag: Testing if prod works

  50. Use a versioning scheme

  51. Never deploy "latest"

  52. Use Kubernetes namespaces

  53. Use Helm or similar tools

  54. Make use of Kubernetes "magic"

  55. Sealed Secrets

  56. Secrets are stored encrypted in Git and encrypted inside of

    the cluster

  57. LoadBalancers

  58. Automatically creates a highly available LoadBalancer with a public IP

    address

  59. Ingress controller

  60. The ingress controller (nginx) listens on routing rules in Ingress

    Resources and configures itself to route incoming traffic to the correct running and healthy pods

  61. cert-manager

  62. Cert-manager listens on Ingress Resources and if they need TLS,

    requests a certificate from LetsEncrypt

  63. external-dns

  64. External-DNS listens on Ingress Resources and creates DNS entries

  65. Prometheus

  66. Kubernetes and Node metrics are automatically included

  67. Kubernetes and Node alerts are automatically included

  68. Kubernetes and Node dashboards are automatically included

  69. Scraping targets can be automatically discovered

  70. Service Meshes

  71. None

  72. Alternatives

  73. Flux

  74. None

  75. Knative

  76. Kubernetes-based platform to deploy and manage modern serverless workloads

  77. Tekton CD

  78. CI that runs completely within Kubernetes with Kubernetes Custom Resources

  79. [email protected] https:/ /twitter.com/BastianHofmann http:/ /speakerdeck.com/u/bastianhofmann