Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kuma
Search
Takafumi Ikeda
March 26, 2020
Technology
2
3.4k
Kuma
https://k8sjp.connpass.com/event/170099/
Takafumi Ikeda
March 26, 2020
Tweet
Share
More Decks by Takafumi Ikeda
See All by Takafumi Ikeda
APIゲートウェイとサービスメッシュ
ikeike443
0
270
はじめてのKong Konnect
ikeike443
0
170
10分で分るGitHub Actions
ikeike443
3
1.9k
GitHub Actionsはどのような未来を描くのか
ikeike443
3
2.7k
GitHubber@日本
ikeike443
6
12k
GitHub Business Seminar
ikeike443
1
130
How we ship GitHub with GitHub -- ChatOps
ikeike443
0
300
効果的にGitHubを使うために
ikeike443
10
3.9k
How People Build Software
ikeike443
0
220
Other Decks in Technology
See All in Technology
2024-10-30-reInventStandby_StudyGroup_Intro
shinichirokawano
1
630
Apple/Google/Amazonの決済システムの違いを踏まえた定期購読課金システムの構築 / abema-billing-system
cyberagentdevelopers
PRO
1
220
【若手エンジニア応援LT会】AWS Security Hubの活用に苦労した話
kazushi_ohata
0
160
新卒1年目が向き合う生成AI事業の開発を加速させる技術選定 / ai-web-launcher
cyberagentdevelopers
PRO
7
1.5k
Oracle Cloud Infrastructureデータベース・クラウド:各バージョンのサポート期間
oracle4engineer
PRO
27
12k
Vueで Webコンポーネントを作って Reactで使う / 20241030-cloudsign-vuefes_after_night
bengo4com
4
2.5k
Amazon_CloudWatch_ログ異常検出_導入ガイド
tsujiba
4
1.6k
生成AIの強みと弱みを理解して、生成AIがもたらすパワーをプロダクトの価値へ繋げるために実践したこと / advance-ai-generating
cyberagentdevelopers
PRO
1
180
よくわからんサービスについての問い合わせが来たときの強い味方 Amazon Q について
kazzpapa3
0
220
生成AIと知識グラフの相互利用に基づく文書解析
koujikozaki
1
140
LeSSに潜む「隠れWF病」とその処方箋
lycorptech_jp
PRO
2
120
新卒1年目が挑む!生成AI × マルチエージェントで実現する次世代オンボーディング / operation-ai-onboarding
cyberagentdevelopers
PRO
1
160
Featured
See All Featured
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
25
1.8k
The Power of CSS Pseudo Elements
geoffreycrofte
72
5.3k
What's in a price? How to price your products and services
michaelherold
243
12k
A better future with KSS
kneath
238
17k
The Art of Delivering Value - GDevCon NA Keynote
reverentgeek
7
150
Making Projects Easy
brettharned
115
5.9k
Git: the NoSQL Database
bkeepers
PRO
425
64k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
9
680
Ruby is Unlike a Banana
tanoku
96
11k
Scaling GitHub
holman
458
140k
Designing on Purpose - Digital PM Summit 2013
jponch
115
6.9k
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
328
21k
Transcript
Kuma ৮ͬͯΈͨ Takafumi Ikeda Solution Engineer, Kong
@ikeike443 Takafumi Ikeda Solutions Engineer
None
Kuma ͱ
• ϢχόʔαϧίϯτϩʔϧϓϨʔϯ • ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7 • DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s, VMʹDPೖ
• ๛ͳػೳ: mTLS, Traffic Segmentation, Traffic Routing, Traffic Metrics, Traffic Logs, Health- checking, etc • ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ • ήʔτΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI Gateway/IngressʹରԠ
Kuma.io/install
./conf/kuma-cp.conf ./bin/kuma-dp ./bin/kuma-cp ./bin/kumactl Kuma Files ./bin/kuma-tcp-echo ./kuma-prometheus-sd ./bin/envoy ./README
Kuma.io In Kubernetes In Universal
CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ
backend-api elasticsearch redis frontend-app αϯϓϧΞϓϦέʔγϣϯ
None
None
None
None
None
Mutual TLSͷઃఆ
Kuma.io backend-api elasticsearch redis frontend-app mTLS mTLS mTLS
INSERT AN IMAGE FOR ALL THE AREA mTLS 18 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: Mesh metadata: name: default spec: mtls: ca: builtin: {} enabled: true EOF
Traffic Permissionsͷઃఆ
INSERT AN IMAGE FOR ALL THE AREA Traffic-permission 20 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: TrafficPermission mesh: default metadata: namespace: kuma-demo name: frontend-to-backend spec: sources: - match: service: frontend.kuma-demo.svc:80 destinations: - match: service: backend.kuma-demo.svc:3001 EOF
Kong Integration
Kuma.io API Server kuma-system kuma-demo kuma-injector Search Back-end Reviews-Redis Envoy
Sidecar Proxy Envoy Sidecar Proxy Envoy Sidecar Proxy labels: kuma.io/sidecar-injection: enabled Ingress/GW Envoy Sidecar Proxy Front-end Envoy Sidecar Proxy Kong Integration (Gateway Mode)
Traffic Routing/Canary - New in 0.3.2
Kuma.io backend-api v0 frontend-app backend-api v1 backend-api v2 Weight: 80
Weight: 0 Weight: 20
·ͱΊ • KumaΠϯετʔϧ͕؆୯Ͱѻ͍͍͢ • k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ • ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃΞΫςΟϒʹߦΘΕ͍͕ͯͯظͰ͖Δ • ϓϩμΫγϣϯࣄྫ·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ
Slack: https://chat.kuma.io μϯϩʔυ: kuma.io/install ΫΠοΫσϞ: https://github.com/Kong/kuma-demo ϦϯΫू