Go containerless on Kubernetes with WebAssembly and Rust

WebAssembly is not just innovating the Web—it’s transforming Kubernetes and the cloud-native world with unmatched efficiency and security. Imagine a world beyond containers; that’s what WebAssembly offers. If it sounds daunting, don’t worry—I’m here to make it crystal clear. Discover why WebAssembly matters, how it works, and the incredible benefits it brings.

We’ll dive into getting started with WebAssembly on Kubernetes using Rust and tools like Krustlet and WasmEdge. Explore real implementations, exciting use cases, and hands-on examples. Ready for an exhilarating journey into the future of cloud-native? Let’s go!

Transcript

1. Go containerless on Kubernetes With WebAssembly and Rust Deepu K Sasidharan
2. @oktaDev | @deepu105 | deepu.tech ➔ JHipster co-chair ➔ Java Champion ➔ Creator of KDash, JDL Studio, JWT UI ➔ Developer Advocate @ Okta ➔ OSS aficionado, polyglot dev, author, speaker Hi, I’m Deepu K Sasidharan @deepu105@mastodon.social deepu.tech @deepu105 deepu05
3. @oktaDev | @deepu105 | deepu.tech Containers on Kubernetes
4. @oktaDev | @deepu105 | deepu.tech
5. @oktaDev | @deepu105 | deepu.tech Advantages of Containers
6. @oktaDev | @deepu105 | deepu.tech →Uses less system resources than a VM →Portable →Consistent and reproducible builds →Faster to boot and run →Easier to scale and manage →More secure →… →Container images are lightweight
7. @oktaDev | @deepu105 | deepu.tech Limitations of Containers
8. @oktaDev | @deepu105 | deepu.tech →Needs a lot of low level OS primitives →Does not provide a fine grained control of security sandbox →Images are OS and architecture dependent
9. @oktaDev | @deepu105 | deepu.tech Containerless == WebAssembly webassembly.org
10. @oktaDev | @deepu105 | deepu.tech
11. @oktaDev | @deepu105 | deepu.tech
12. @oktaDev | @deepu105 | deepu.tech Advantages of Wasm + WASI
13. @oktaDev | @deepu105 | deepu.tech →Security isolation (memory isolation and sandbox) →Memory safety and efficiency →Lightweight →Portable(OS/Architecture) →Startup speed and near native execution speed
14. @oktaDev | @deepu105 | deepu.tech Downsides of Wasm + WASI
15. @oktaDev | @deepu105 | deepu.tech →Resource isolation is still not standardized →Networking is still not standardized. No TLS. →Network isolation is still not standardized →Multithreading is still in the works →You can’t just take existing projects and make a Wasm binary →Not matured ecosystem
16. @oktaDev | @deepu105 | deepu.tech WebAssembly Runtimes
17. @oktaDev | @deepu105 | deepu.tech WasmEdge Widely used in the Kubernetes ecosystem WASI-like extensions Container tooling, Dapr microservices
18. @oktaDev | @deepu105 | deepu.tech Others Wasmtime Wasmer Spin Slight
19. @oktaDev | @deepu105 | deepu.tech WebAssembly on Kubernetes
20. @oktaDev | @deepu105 | deepu.tech Existing Ecosystem Compatibility
21. @oktaDev | @deepu105 | deepu.tech
22. @oktaDev | @deepu105 | deepu.tech
23. @oktaDev | @deepu105 | deepu.tech
24. @oktaDev | @deepu105 | deepu.tech Rust + WebAssembly
25. @oktaDev | @deepu105 | deepu.tech →First class WebAssembly support →Smaller binaries →Great ecosystem for WebAssembly →Great Developer Experience →Performance: Low-Level Control with High-Level Ergonomics
26. @oktaDev | @deepu105 | deepu.tech Demo time
27. @oktaDev | @deepu105 | deepu.tech # Create a Rust WASM app $ clone https://github.com/deepu105/word-generator-wasi-rust.git # Build for WASM $ rustup target add wasm32-wasi $ cargo build /-target wasm32-wasi /-release # Install WasmEdge for testing /> https://wasmedge.org/docs/start/install # Run the server locally $ wasmedge target/wasm32-wasi/release/weather_forecast.wasm # Open another terminal and test the server $ curl "http://localhost:8090?starts_with=d" https://github.com/deepu105/ word-generator-wasi-rust
28. @oktaDev | @deepu105 | deepu.tech # Install buildah for creating OCI images /> https://github.com/containers/buildah/blob/main/install.md # Build an OCI Image $ buildah build /-annotation "module.wasm.image/variant=compat-smart" -t word_generator_wasi Dockerfile_OCI # Push the OCI Image to Docker Hub $ buildah push /-authfile ~/.docker/config.json word_generator_wasi docker://docker.io/deepu105/word_generator_wasi:latest # Create a "KinD" Cluster $ kind create cluster # Enable WasmEdge support using KWasm /> https://kwasm.sh/quickstart/ # Deploy the app $ kubectl apply -f k8s-manifest.yaml https://github.com/deepu105/ word-generator-wasi-rust
29. @oktaDev | @deepu105 | deepu.tech Future?
30. @oktaDev | @deepu105 | deepu.tech →Rust is an ideal language for Wasm+WASI →Many features are being standardized →Machine learning support is coming →Many new features →Containerless is definitely on the horizon →WebAssembly on Kubernetes and cloud is still evolving
31. © Okta and/or its affiliates. All rights reserved. For Okta internal use only. DATA CLASSIFICATION: OKTA INTERNAL dev_day a 24 hour virtual event September 24, 2024 Registration opens summer of 2024 Stay up to date with the latest at: a0.to/devday
32. @oktaDev | @deepu105 | deepu.tech Thank You Subscribe to our newsletter a0.to/nl-signup/java