Orchestrer Docker avec Kubernetes

1. 2016 IBM Corporation
Orchestrer vos conteneurs Docker
avec KUBERNETES
Discover – Session
Pierre Yves DROIN
TLT DOCKER
LEADER
Meetup on May 4
th
2017
Benjamin FUENTES
Bluemix Evangelist
- Software Architect
and Developer
Lionel Macé
Bluemix Technical
Sales Europe
IBM Hybrid Cloud

2. 2017 IBM Corporation
Understand (quickly) Docke
Education Package
PIERRE YVES DROIN
TLT DOCKER LEADER

3. D E S IG N :Iv a n T ou ss ain t
© 2016 IBM Corporation
Docker Basic Functions

4. 2017 IBM Corporation
What is Kubernetes (K8S) ?
Education Package
PIERRE YVES DROIN
TLT DOCKER LEADER

5. D E S IG N :Iv a n T ou ss ain t
© 2016 IBM Corporation
Container Orchestration
Physical InfrastructureLayer 1 Raw Compute,Storage,Network
VirtualInfrastructureLayer 2 vSphere,EC2,GCP, Azure, OpenStack
Operating SystemLayer 3 Ubuntu,RHEL,CoreOS,Unikernels
ContainerEngineLayer 4 Docker,rkt, runC (OCI), Osv, LXC, LXD
Orchestration/Scheduling
Service Model
Layer 5 Kubernetes, Docker Swarm, Marathon/Mesos, Nomad, Diego
Development Workflow
Opinionated Containers
Layer 6 Cloud Foundry,OpenShift,Docker Cloud,Deis,Apcera,Apprenda

6. 2016 IBM Corporation
Orchestration Tool – data from Anchore's survey

7. D E S IG N :Iv a n T ou ss ain t
© 2016 IBM Corporation
What is Kubernetes ?
• Kubernetes is an open-source platform for automating deployment, scaling, and
operations of application containers across clusters of hosts, providing
container-centric infrastructure.
• Container orchestrator
• Runs and manages containers
• Supports multiple cloud and bare-metal environments
• Inspired and informed by Google's experiences and internal systems
• 100% Open source, written in Go
• Manage applications, not machines
• Rich ecosystem of plug-ins for scheduling, storage, networking

8. D E S IG N :Iv a n T ou ss ain t
© 2016 IBM Corporation
Kubernetes Terminology
· Nodes
· Hosts that run Kubernetesapplications
· Master node
· Controls and manages the cluster
· Kubectl – command line client
· REST API – used for communicating with the workers
· Scheduling and replication logic
· Generally 2 or more master nodes for resiliency, but are not used for scaling out the cluster
· Worker node
· Node that hosts the K8 services
· Kubelet – K8s agent that accepts commands from the master
· Kubeproxy – network proxy service on a node level
· Responsible for routing activities for inbound or ingress traffic
· Docker host
· Containers
· Units of packaging
· Pods
· A collection of containers that run on a worker node
· A pod can contain more than one service
· Each pod has it’s own IP
· A pod shares a PID namespace, network, and hostname

9. D E S IG N :Iv a n T ou ss ain t
© 2016 IBM Corporation
Kubernetes Terminology (cont)
· Replication Controller
· Ensures availability and scalability
· Responsible for maintaining as many pods as requested by the user
· Uses a template that describes specifically what each pod should contain
· Labels
· Metadata assigned to K8 resources – such as pods, services
· Key-Value pairsfor identification
· Critical to K8s as it relies on querying the cluster for resources that have certain labels
· Services
· Collection of podsexposed as an endpoint
· Information stored in the K8 cluster state and networking info propagated to all worker nodes
· Secrets
· Sensitive information that containers need to read or consume
· Are special volumes mounted automatically so that the containers can read its contents
· Each entry has it’s own path
· Proxy
· Implementation of a network proxy and a load balancer
· Support the service abstraction along with other network operation
· Responsible for route the appropriate POD based on IP and port number of the incoming request
· Etcd
· A metadata service providing the backend data store

10. D E S IG N :Iv a n T ou ss ain t
© 2016 IBM Corporation
Kubernetes ArchitectureDiagram (wikipedia source)

11. © IBM Corporation
Image Registry
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes
Master
Worker Node 1
Worker Node 2
Worker Node 3
Worker Node n
Kubernetes Architecture

12. © IBM Corporation
API
UI
User
Interface
CLI
Command
Line
Interface
Kubernetes Master
Kubernetes Architecture
API Server Scheduler Controller
etcd

13. © IBM Corporation
Image Registry
Kubernetes
Master
Worker Node 1, 2, 3… n
Kubernetes Architecture
Pod Pod Pod
docker
Kube-
proxy
Container
Container
Container
Container
Container
Container
Container
Container
Container
kubelet