From Hello World to Real World: Creating a Production-Grade Container Environment - Bill Maxwell & Shannon Williams Containers are lightweight, portable and easy to orchestrate, so the enthusiasm for running applications in them is understandable. Once you get past the "hello world" moment of deploying a single container app, though, you quickly realize that running complex apps using containers in production takes a little more work. Bill and Shannon will walk through building a production-grade container environment from the ground up: from the first deployment of a container, through considerations for building a registry, to introducing container monitoring and logging and plugging containers into your existing CI/CD. They'll look at the transition from scripting and automation tools to cluster management and orchestration, and how service discovery and application templates quickly become key elements to deploying complex applications. The journey will continue on to container networking, load balancing and config injection, as well as how to manage secrets, define access control policies, and provide visibility and control for your new container service. Along the way, Bill and Shannon will be demonstrating different tools, talking about some of the issues you'll run into, and discussing lessons the community has learned about production-grade container environments so far.

1. © 2016 Rancher Labs, Inc.© 2016 Rancher Labs, Inc .
From Hello World
to Real World
May 24, 2016
#ranchermeetup

2. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Shannon Williams
Co-Founder/VP Marketing
@smw355
Shannon@rancher.com
1
Bill Maxwell
DevOps Lead
@cloudnautique
bill@rancher.com
#ranchermeetup

3. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Agenda
• A Dev and a Dream
• Moving to servers
• Demo – CI/CD, Provisioning
• Visibility challenges and Orchestration
• Demo: Orchestration, Logging, Monitoring
• Clustered services, Meta Data, Configuration Injection, Secre
• Demo – Deploying Complex services
2 #ranchermeetup

4. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Our Goal: A Production Docker Service
3
Develop Build Containerize Test Deploy/Upgrade Operate

5. © 2016 Rancher Labs, Inc.
A Dev and a Dream
11:10 Today
Docker For the Developer
Borja Burgos, Docker

6. © 2016 Rancher Labs, Inc.
We should use this everywhere!
Provisioning
CI/CD Tool Container Registry
Host

7. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Demo – Launching our app
GitHub
Jenkins
DockerHub
6

8. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Application Deployed!
Immediate Issues
- Visibility
- Monitoring
- Logging
7

9. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Logging and Monitoring Stacks
8
Host
InfluxDB
Prometheus
Grafana
Elasticsearch
Kibana

10. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Resiliency, Scheduling and
Orchestration
9
Host
Host
Host
New Issues:
- Clustering
- Networking
- Service Discovery
- Scheduling
- Health Checks
- Load Balancing
- Upgrades
1:20 Today
Cluster Schedulers & Firmament
- Ionel Gog, Cambridge
- Malte Schwarzkopf, MIT
9:45 Tomorrow
Kubernetes in Production
- Mike Splain, Barkly

11. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Networking, Service Discovery & Load
Balancing
10
SDN
Load Balancers
Health Checks
Service Discovery
Host Host Host
3:30 Today
Overlay Networks
- Andrey Sibiryov, Uber

12. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Demo – Getting Serious
Rancher
Elasticsearch
Logstash
Prometheus
11

13. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Metadata service
Complexity Increases
12
New Issues:
- Configuration Injection
- Metadata Services
- Persistent Storage
- External Services
- Access Control
- Secret Management
- Audit
11:55 Today
Compliance Ops
- Elliot Murphy, Kindly Ops
11:10 Today
Managing Secrets
- Jeff Mitchell, Hashicorp
Host Host Host

14. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Host
File System Container
Gluster Process Volume Creator Peer Detection
Host
Building a Gluster Pod
13
Service
Discovery
Host
File System Container
Gluster Process Volume Creator Peer Detection
File System Container
Gluster Process Volume Creator Peer Detection

15. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Demo –Complexity
GlusterFS
14

16. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Final Thoughts
• Container ecosystem is rich
• Most of the tools we talked about today are
free and open source
• Don’t get caught up in analysis-paralysis
15

17. © 2016 Rancher Labs, Inc.©2016 Rancher Labs, Inc.
Learn More: Monthly Online Meetups
rancher.com/events youtube.com/rancher
16

18. © 2016 Rancher Labs, Inc.© 2016 Rancher Labs, Inc .
Thank you
rancher.com