Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Captaining a Container Ship
Search
Sponsored
·
Ship Features Fearlessly
Turn features on and off without deploys. Used by thousands of Ruby developers.
→
Jochen Lillich
April 25, 2017
Technology
0
90
Captaining a Container Ship
My talk about Docker orchestration with Kontena at DrupalCon Baltimore 2017
Jochen Lillich
April 25, 2017
Tweet
Share
More Decks by Jochen Lillich
See All by Jochen Lillich
Under Pressure
geewiz
0
91
Monorepo vs Multirepo
geewiz
0
76
Dealing with IRQ conflicts in 2018
geewiz
0
72
Planning for the Unpredictable
geewiz
0
220
Content - Culture - Community
geewiz
0
390
Drupal on Docker
geewiz
0
260
Getting the most out of Varnish (DrupalCamp Galway 2014)
geewiz
0
240
DevOps with Drupal
geewiz
0
340
Dynamic Infrastructure Orchestration
geewiz
1
120
Other Decks in Technology
See All in Technology
イベントで大活躍する電子ペーパー名札を作る(その2) 〜 M5PaperとM5PaperS3 〜 / IoTLT @ JLCPCB オープンハードカンファレンス
you
PRO
0
210
PostgreSQL 18のNOT ENFORCEDな制約とDEFERRABLEの関係
yahonda
0
130
FastMCP OAuth Proxy with Cognito
hironobuiga
3
210
AI時代のオンプレ-クラウドキャリアチェンジ考
yuu0w0yuu
0
270
「通るまでRe-run」から卒業!落ちないテストを書く勘所
asumikam
2
770
Zephyr(RTOS)でOpenPLCを実装してみた
iotengineer22
0
130
脳が溶けた話 / Melted Brain
keisuke69
1
1.1k
GitHub Copilot CLI で Azure Portal to Bicep
tsubakimoto_s
0
270
GitHub Advanced Security × Defender for Cloudで開発とSecOpsのサイロを超える: コードとクラウドをつなぐ、開発プラットフォームのセキュリティ
yuriemori
1
100
やさしいとこから始めるGitHubリポジトリのセキュリティ
tsubakimoto_s
3
1.9k
20260323_データ分析基盤でGeminiを使う話
1210yuichi0
0
190
FlutterでPiP再生を実装した話
s9a17
0
210
Featured
See All Featured
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
333
22k
How to Think Like a Performance Engineer
csswizardry
28
2.5k
Reality Check: Gamification 10 Years Later
codingconduct
0
2.1k
Side Projects
sachag
455
43k
Keith and Marios Guide to Fast Websites
keithpitt
413
23k
The SEO Collaboration Effect
kristinabergwall1
0
410
Building Better People: How to give real-time feedback that sticks.
wjessup
370
20k
Bridging the Design Gap: How Collaborative Modelling removes blockers to flow between stakeholders and teams @FastFlow conf
baasie
0
490
Digital Projects Gone Horribly Wrong (And the UX Pros Who Still Save the Day) - Dean Schuster
uxyall
0
860
Stewardship and Sustainability of Urban and Community Forests
pwiseman
0
160
B2B Lead Gen: Tactics, Traps & Triumph
marketingsoph
0
86
BBQ
matthewcrist
89
10k
Transcript
DOCKER ORCHESTRATION WITH KONTENA CAPTAINING A CONTAINER SHIP
None
None
None
DOCKER ORCHESTRATION WITH KONTENA WHY ORCHESTRATION? ▸ With Docker, there’s
never only one container, and they all need to be ▸ managed ▸ distributed ▸ scheduled ▸ load balanced ▸ Dependencies between containers require ▸ Links ▸ Service discovery ▸ Shared secrets
“KONTENA IS AN OPEN SOURCE CONTAINER PLATFORM BUILT TO MAXIMISE
DEVELOPER HAPPINESS. WORKS ON ANY CLOUD, EASY TO SETUP, SIMPLE TO USE.” DOCKER ORCHESTRATION WITH KONTENA
DOCKER ORCHESTRATION WITH KONTENA WHY KONTENA? ▸ Simple ▸ Inexpensive
▸ Full-featured ▸ Production-ready ▸ Secure ▸ Flexible
DOCKER ORCHESTRATION WITH KONTENA KONTENA IS SIMPLE ▸ Easy to
install in < 1h ▸ Comes with all important functionality ▸ Extends docker-compose configuration syntax
DOCKER ORCHESTRATION WITH KONTENA KONTENA IS INEXPENSIVE ▸ Open Source
Software ▸ Supports Let’s Encrypt out of the box
DOCKER ORCHESTRATION WITH KONTENA KONTENA IS FULL-FEATURED ▸ Private image
registry ▸ Load balancer ▸ Service discovery ▸ Secrets storage (“Vault”) ▸ Key-Value store
DOCKER ORCHESTRATION WITH KONTENA KONTENA IS PRODUCTION-READY ▸ User authentication
and authorisation ▸ Health checks ▸ Support for stateful applications ▸ Real-time log and statistics streams ▸ Audit trail
DOCKER ORCHESTRATION WITH KONTENA KONTENA IS SECURE ▸ Virtual networks
with encrypted traffic ▸ VPN access
DOCKER ORCHESTRATION WITH KONTENA KONTENA IS FLEXIBLE
$ WHOAMI JOCHEN LILLICH ▸ CEO/CTO at freistil IT ▸
Twitter: @geewiz ▸ Email:
[email protected]
Dev Ops Development Deployment Idea App
USING KONTENA
None
DOCKER ORCHESTRATION WITH KONTENA KONTENA SERVER ▸ Controls the whole
platform ▸ Access via OAuth tokens ▸ Kontena Cloud ▸ External OAuth providers
DOCKER ORCHESTRATION WITH KONTENA CREATING A KONTENA SERVER
DOCKER ORCHESTRATION WITH KONTENA GRIDS ▸ Separate groups of Kontena
nodes ▸ Encrypted overlay network ▸ Direct access via VPN
DOCKER ORCHESTRATION WITH KONTENA CREATING A GRID
DOCKER ORCHESTRATION WITH KONTENA KONTENA NODES ▸ Automatic discovery ▸
Permanent connection to Kontena server
DOCKER ORCHESTRATION WITH KONTENA ADDING NODES TO A GRID
KONTENA SERVICES
DOCKER ORCHESTRATION WITH KONTENA SERVICES ▸ Container image ▸ Volumes
▸ Resources ▸ Links to other containers ▸ Environment variables ▸ Secrets ▸ Registration
DOCKER ORCHESTRATION WITH KONTENA SERVICE DEPLOYMENT ▸ Strategy ▸ No
of instances ▸ Affinity to other services ▸ Port to wait for ▸ Health check
DOCKER ORCHESTRATION WITH KONTENA STATELESS SERVICE
DOCKER ORCHESTRATION WITH KONTENA STATEFUL SERVICE
DOCKER ORCHESTRATION WITH KONTENA SCALING A SERVICE
KONTENA STACKS
DOCKER ORCHESTRATION WITH KONTENA KONTENA STACKS ▸ Set of services
▸ Versioned ▸ Grid-local DNS domain
DOCKER ORCHESTRATION WITH KONTENA DEPLOYING A STACK
DOCKER ORCHESTRATION WITH KONTENA STACK DEFINITION: PREAMBLE
DOCKER ORCHESTRATION WITH KONTENA STACK DEFINITION: VARIABLES
DOCKER ORCHESTRATION WITH KONTENA STACK DEFINITION: SERVICES
DOCKER ORCHESTRATION WITH KONTENA STACK DEFINITION: SERVICES (CONT.)
LOAD BALANCING
DOCKER ORCHESTRATION WITH KONTENA ADDING A LOADBALANCER
SSL
DOCKER ORCHESTRATION WITH KONTENA REGISTERING WITH LET’S ENCRYPT
DOCKER ORCHESTRATION WITH KONTENA USING THE LE CERTIFICATE
DOCKER ORCHESTRATION WITH KONTENA SUMMARY ▸ Kontena is... ▸ simple
▸ inexpensive ▸ full-featured ▸ production-ready ▸ secure ▸ flexible ▸ worth a try!
DOCKER ORCHESTRATION WITH KONTENA RESOURCES www.freistilbox.com/drupalcon.html
ONE MORE THING... JOIN US FOR CONTRIBUTION SPRINTS Friday, April
28, 2017 First-Time Sprinter Workshop 9:00am-12:00pm Room: 307-308 Mentored Core Sprint 9:00am-12:00pm Room:301-303 General Sprints 9:00am-6:00pm Room:309-310