Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kuma
Search
Takafumi Ikeda
March 26, 2020
Technology
2
3.5k
Kuma
https://k8sjp.connpass.com/event/170099/
Takafumi Ikeda
March 26, 2020
Tweet
Share
More Decks by Takafumi Ikeda
See All by Takafumi Ikeda
APIゲートウェイとサービスメッシュ
ikeike443
0
400
はじめてのKong Konnect
ikeike443
0
200
10分で分るGitHub Actions
ikeike443
3
2.1k
GitHub Actionsはどのような未来を描くのか
ikeike443
3
2.8k
GitHubber@日本
ikeike443
6
12k
GitHub Business Seminar
ikeike443
1
140
How we ship GitHub with GitHub -- ChatOps
ikeike443
0
340
効果的にGitHubを使うために
ikeike443
10
4k
How People Build Software
ikeike443
0
240
Other Decks in Technology
See All in Technology
AI時代、“平均値”ではいられない
uhyo
4
1.1k
Introduction to Sansan Meishi Maker Development Engineer
sansan33
PRO
0
310
AI時代におけるデータの重要性 ~データマネジメントの第一歩~
ryoichi_ota
0
710
Introduction to Sansan for Engineers / エンジニア向け会社紹介
sansan33
PRO
5
43k
Okta Identity Governanceで実現する最小権限の原則 / Implementing the Principle of Least Privilege with Okta Identity Governance
tatsumin39
0
150
Claude Code Subagents 再入門 ~cc-sddの実装で学んだこと~
gotalab555
10
17k
Zephyr(RTOS)にEdge AIを組み込んでみた話
iotengineer22
1
240
RDS の負荷が高い場合に AWS で取りうる具体策 N 連発/a-series-of-specific-countermeasures-available-on-aws-when-rds-is-under-high-load
emiki
7
4.5k
「魔法少女まどか☆マギカ Magia Exedra」のIPのキャラクターを描くための3Dルック開発
gree_tech
PRO
0
130
AIエージェント入門 〜基礎からMCP・A2Aまで〜
shukob
0
130
Biz職でもDifyでできる! 「触らないAIワークフロー」を実現する方法
igarashikana
3
1.3k
OSSで50の競合と戦うためにやったこと
yamadashy
3
890
Featured
See All Featured
Code Reviewing Like a Champion
maltzj
526
40k
Designing Dashboards & Data Visualisations in Web Apps
destraynor
231
53k
4 Signs Your Business is Dying
shpigford
185
22k
Building a Scalable Design System with Sketch
lauravandoore
463
33k
Balancing Empowerment & Direction
lara
5
700
Why You Should Never Use an ORM
jnunemaker
PRO
59
9.6k
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
10
880
Facilitating Awesome Meetings
lara
56
6.6k
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
49
3.1k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
35
3.2k
jQuery: Nuts, Bolts and Bling
dougneiner
65
7.9k
KATA
mclloyd
PRO
32
15k
Transcript
Kuma ৮ͬͯΈͨ Takafumi Ikeda Solution Engineer, Kong
@ikeike443 Takafumi Ikeda Solutions Engineer
None
Kuma ͱ
• ϢχόʔαϧίϯτϩʔϧϓϨʔϯ • ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7 • DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s, VMʹDPೖ
• ๛ͳػೳ: mTLS, Traffic Segmentation, Traffic Routing, Traffic Metrics, Traffic Logs, Health- checking, etc • ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ • ήʔτΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI Gateway/IngressʹରԠ
Kuma.io/install
./conf/kuma-cp.conf ./bin/kuma-dp ./bin/kuma-cp ./bin/kumactl Kuma Files ./bin/kuma-tcp-echo ./kuma-prometheus-sd ./bin/envoy ./README
Kuma.io In Kubernetes In Universal
CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ
backend-api elasticsearch redis frontend-app αϯϓϧΞϓϦέʔγϣϯ
None
None
None
None
None
Mutual TLSͷઃఆ
Kuma.io backend-api elasticsearch redis frontend-app mTLS mTLS mTLS
INSERT AN IMAGE FOR ALL THE AREA mTLS 18 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: Mesh metadata: name: default spec: mtls: ca: builtin: {} enabled: true EOF
Traffic Permissionsͷઃఆ
INSERT AN IMAGE FOR ALL THE AREA Traffic-permission 20 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: TrafficPermission mesh: default metadata: namespace: kuma-demo name: frontend-to-backend spec: sources: - match: service: frontend.kuma-demo.svc:80 destinations: - match: service: backend.kuma-demo.svc:3001 EOF
Kong Integration
Kuma.io API Server kuma-system kuma-demo kuma-injector Search Back-end Reviews-Redis Envoy
Sidecar Proxy Envoy Sidecar Proxy Envoy Sidecar Proxy labels: kuma.io/sidecar-injection: enabled Ingress/GW Envoy Sidecar Proxy Front-end Envoy Sidecar Proxy Kong Integration (Gateway Mode)
Traffic Routing/Canary - New in 0.3.2
Kuma.io backend-api v0 frontend-app backend-api v1 backend-api v2 Weight: 80
Weight: 0 Weight: 20
·ͱΊ • KumaΠϯετʔϧ͕؆୯Ͱѻ͍͍͢ • k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ • ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃΞΫςΟϒʹߦΘΕ͍͕ͯͯظͰ͖Δ • ϓϩμΫγϣϯࣄྫ·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ
Slack: https://chat.kuma.io μϯϩʔυ: kuma.io/install ΫΠοΫσϞ: https://github.com/Kong/kuma-demo ϦϯΫू