►
From YouTube: Kubeapps Your One Stop Shop to Deploy and Manage Helm Apps Juan Ariza, Technical Staff & Andres M
Description
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects
Kubeapps- Your One-Stop Shop to Deploy and Manage Helm Apps - Juan Ariza, Technical Staff & Andres Martinez, Software Engineer, VMware
A
Stole
can
welcome
in
this
talk.
We
won't.
We
are
going
to
talk
about
cube,
apps
your
one-stop
shop
to
deploy
and
manage
helmet
vacation
before
star
very
quick
a
little
bit
about
us.
We
are
undressed
and
I
mean
qualms.
We
used
to
work
for
benami
now
being
where
and
we've
been
working
on.
Cuban
Edison
hamed
applications
related
projects
for
three
four
years,
and
this
is
the
kind
of
current
maintainer
of
two
prius
cublas
in
cubes,
and
I
mainly
based
focus
on
application
packaging
in
different
formats,
one
of
them,
of
course,
Hamptons.
A
So
we
have
people
like
Joe
Beda,
one
of
the
founders
of
kubernetes,
help
in
helping
us
to
improve
all
our
our
community's
product.
If
you
have
any
questions
regarding
these
other
projects
that
we
are
not
going
to
talk
about
them,
please
feel
free
to
come
to
us.
We
will
have
be
happy
to
talk
about
them.
Okay.
So,
let's
of
cubes
what
is
cubes
here,
we
have
a
very
fancy
definition,
which
says
it's
a
web-based
UI
for
deploying
and
managing
applications
incriminating
clusters.
A
What
that
is,
what
does
it
mean?
I
like
to
think
of
cubes
as
a
marketplace?
The
same
way
that
in
our
in
our
phones,
we
we're
going
to
stand
up
like
a
shoe.
We
go
to
Google,
Play
or
App
Store,
and
we
find
fortification
we
want
to
install
and
we
install
it.
Okay.
This
is
more
or
less
experience
that
we
are
used
to
so
with
Cuba's.
We
try
to
do
the
same,
but
with
help
applications
with
charts.
So
with
cubes
you
can
browse
the
application
that
you
are
interested.
A
You
can
deploy
it
the
other
application
in
your
cluster.
You
can
inspect
that
application
review
all
the
values.
The
parameters
that
that
specific
chart
offers
you,
and
you
can
also
do
some
day.
Operations
such
as
upgrades,
remove
the
application
and
also
you
can
do
some
roll
backs.
We
will
talk
about
it.
It's
an
open
source
project.
A
Here
you
have
the
link
to
github,
so
you
are
more
than
welcome
to
contribute
to
the
project,
and
now
we
are
going
to
talk
a
little
bit
about
each
of
these
features
that
cube
apps
offer
and
how
you
can
do
it.
So
we
mentioned
that
with
cubes.
You
can
browse
applications.
Ok,
when
you
launch
cube
apps
by
default,
is
going
to
look
for
ham
charts
in
the
official
repository.
It
means
it's
going
to
go
to
the
official,
stable,
repo,
official
incubator
repo
and
it's
going
to
look
for
applications
there.
A
But
let's
say
that
you
have
your
own
chart
and
you
have
them
in
your
own
repository
cube.
Apps
also
allow
you
to
add
your
own
repos,
so
you
can
discover
and
deploy
them
through
the
same
web
UI.
So
at
this
moment
you
can
add
almost
every
repo
that
you
you
have.
We
have
documentation
for
adding
your
repo
if
you
have
it
implemented
with
charm,
museum
or
harbor
or
a
4:30
factory,
and
it's
really
simple
you
will.
A
You
will
see
like
that
is
really
simple
to
add
your
own
repo
and
browse
your
custom
charts
and,
as
we
mentioned
once,
that
you
browse
for
the
application
that
you
are
interest
in.
Let's
say
that
you
are
that
you
want
to
deploy
mariadb,
you
just
need
to
look
for
it.
Then
you
customize
the
parameters,
the
values
channel,
that
you
want
to
use
to
deploy
that
application,
and
once
you
are
happy
with
it,
we
just
need
to
deploy
and
start
operating
it.
A
You
will
be
able
to
run
upgrades
or
back,
etc
and,
as
we
said
really
simple
day
to
operations,
let's
say
that
I
already
launched
multi
DB
in
my
cluster.
If
I
want
to
run
and
I
bring
this
web
UI
also
offers
me
the
possibility
to
run
an
upgrade,
modify
the
values
or
run
the
latest
chart
or
whatever
I
want
to
do
to
run.
The
update
rang
it
and
in
case
that,
for
some
reason,
I
did
something
wrong.
I
will
be
able
also
to
roll
to
run
rollbacks.
A
A
I
will
be
requested
to
login
into
cubes
when
you
log
into
Google
Apps.
You
need
to
identify
yourself
so
I
have
already
an
service
account
associated
to
me,
so
I
just
need
to
grab
a
token
associated
to
that
service
account
so
once
I
get
that
token.
I
can
login
into
into
the
class
step
into
sorry
into
cubes
and.
A
I
will
be
able
to
play
around
you.
The
web,
UI
I
will
be
able
to
search
for
applications,
go
to
my
catalog
cetera.
So,
as
I
mentioned,
we
can
add
our
custom
catalog.
So
at
this
moment
you
just
need
to
go
to
configuration,
go
to
application
repositories
and
at
this
moment
I
have
all
this
catalog
already
installed
in
cubes
I
have
the
stable,
the
stable
one,
the
incubator
one
I
added
the
dynamic
one
and
I
also
have
this
one
here
that,
as
you
can
see
it's
it's
a
char,
Museum
repo
that
I
previously
added.
A
But
if
you
want
what
your
custom
repoed,
you
just
need
to
click.
On
add
repository,
add
the
name,
the
URL
add
your
authentication.
If
needed
and
install
the
repo,
and
it
will
be
that
easy,
you
will
be
able
to
blows
applications
when
your
chat
repository.
So
let's
say
that
I
want
to
deploy
an
application
that
I
have
in
my
custom,
repo
called
my
char
medium.
A
A
A
Cubes
is
going
to
be
checking
the
state
of
that
application
and
once
it's
ready
it
will
deploy
here
ready
to
do
so
is
checking
the
available
replicas
and
the
desire
replicas.
Once
you
meet
the
desirable
replicas,
it
will
consider
the
application
ready.
So,
as
you
can
see
here,
it's
alerting
me
that
there
is
an
upgrade.
This
is
because
I
installed
a
version
100
and
cuba's
detected
that
there
is
a
new
version
of
this
chart.
So
it's
going
to
tell
me:
hey.
There
is
a
new
version.
A
A
Never
so
once
I
do
this,
as
I
mentioned,
we
can
do
roll
backs.
So
whenever
we
detect
that
something
is
wrong,
we
just
can
go
here.
Dragon
roll
backs
go
back
to
the
revision
one
and,
with
the
same
experience
that
we
have
with
him,
we
will
have
it,
but
through
this
web,
UI,
ok
and
with
this,
which
is
like
the
basic
things
that
you
can
do
with
cubes
I,
will
turn
200
we're
going
to
talk
about
security,
stuff
and
more
advanced
feature
of
cubes.
C
B
B
The
problem
is,
if,
if
you
have
a
multi
tenant
cluster
in
which
you
have
different
users,
that
are
only
allowed
to
access
a
specific
name
with
spaces
and
if
they
are
only
allowed
to
access
their
namespace,
they
can
actually
access
tiller
and
install
whatever
they
want
on
the
cluster,
which
is
obviously
a
security
issue.
The
way
that
you
can
follow
the
same
security,
good
good
practices
for
for
security,
and
they
tell
you
to
install
tiller
but
using
a
certificate
at
TLS
certificate,
so
only
the
people
that
can
access
that
certificate
are
able
to
access
still.
B
So
that's
what
we
are
going
to
do
and
from
that
moment
people
are
not
allowed
to
access
tiller,
but
that's
not
the
end
of
the
problem,
because
if
you
install
cubes
and
you
allowed
cubes,
obviously
to
access
tiller
and
you
give
cubits
the
certificate,
you
also
need
to
protect
people
from
from
accessing
things
that
even
even
they
are
not
allowed
to
for
doing
that.
What
we
are
doing
is
resolving
the
the
manifest
that
are
related
to
a
chart.
B
So
let's
say
that
these
first
users,
users
want
to
install
WordPress
she's,
going
to
go
to
cubes
he's
going
to
click
on
WordPress,
and
we
are
going
to
resolve
that
that
mean
that
he's
going
to
deploy
a
deployment
in
that
namespace
he's
going
to
deploy
whatever
and
then
using
our
buck.
We
are
going
to
check
if
that's
really
possible
in
case
it's
not
possible.
We
are
going
to
report
it.
Okay,
contact
your
administrator
to
give
you
some
permissions
for
demonstrate
and
what
first
so,
no
you're
closer
to
to
production.
Okay,
you
have
a
secure
cluster.
B
B
But
here
I
wanted
to
mention
that
we
are
not
reinventing
the
wheel
at
the
end
of
the
day.
What
we
are
going
to
do
is
to
map
email
account
to
a
certain
hour
but
crawl
in
communities.
So
for
managing
permission
in
kubernetes
you
are
still
gonna
use
our
buck,
which
is
the
default
solution
for
for
authorization
syndication
or
for
socialization.
B
B
B
B
B
B
B
What
else
do
you
need
in
the
way
to
production?
I?
Don't
know
if
you
are
running
workloads
in
production
one
once
you
reach
the
point
in
which
you
need
to
deploy
a
database
or
something
with
state,
it's
kind
of
tricky.
If
you
want
to
do
that
using
kubernetes
deployment,
when
it
is,
you
know,
persistent
volumes,
and
so
so,
usually
what
you
do
when
you
reach
its
point,
is
to
go
to
AWS
and
use
RDS,
or
go
to
assure
and
use
a
short
cycle
database
or
any
of
the
solution
that
they
manage.
B
B
The
vicinities
is
that
there
is
something
called
the
kubernetes
service
catalog
that
allows
you
to
deploy,
for
example,
an
RDS
instance
just
using
kubernetes
entities,
so
you
can
deploy
a
custom
resource
that
is
RDS
instance
or
actual
sequel
instance,
and
that
is
going
to
spin
up
the
it's
going
to
talk
to
the
provider
is
going
to
deploy
everything
and
you
don't
need
to
worry
about
anything.
And
then
you
can
view
the
Tetra
denzel's
to
access
that
service.
It's
really
useful
and
we
give
up.
We
have
support
for
that.
You
can
actually
use
the
same
way.
B
B
If
I
go
to
the
configuration
you
can
see
here,
they
have
installed,
they
assured
service
program.
Okay,
this
allows
me
to
deploy
anything
that
as
your
exposés
here,
you
can
see
the
hash
table
of
my
sickle
databases,
but
here
you
can
see
the
list
of
things
that
I
can
deploy.
You
can
deploy
cosmos
to
be
icy-cold
Postgres
whatever.
B
B
B
Instance
of
my
sequel
database
and
then
you
could
create
something
called
a
binding.
This
is
art.
These
are
just
the
credentials
for
this
for
this
database.
So
if
you
show
here,
you
can
see
all
the
all
the
credentials
for
this
instance
that
is
running
in
nature.
So
for
using
this,
you
just
need
to
go
to
the
catalog
search
for
your
application
that
you
want
to
use,
deploy
it,
and
then
here
there
is
a
field
external
database.
B
B
So,
okay,
we
still
have
a
couple
of
minutes.
What
else
this
is
not
the
end,
the
plate,
obviously
a
project
you'd,
never
finish
so
what's
next
with
with
cubes.
This
is
something
that
we
are
thinking
on
doing,
but
I
want
to
clarify
that
you
can't
help
designing.
What
do
you
want
to
have
here
in
the
in
the
egg
hub
repository?
But,
first
of
all,
you
have
seen
that
for
deploying
something
you
need
to
read
this
value
so
channel,
which
may
be
not
that
friendly.
B
If
you
really
need
to
know
the
chart
and
know
what
you're
doing
and
usually
just
need
to
change
the
disk
size,
you
just
need
to
change
the
user
and
password
some
basic
things
that
it's
common
for
further
application.
We
should
be
able
to
do
this
and
deploy
a
very
simple,
very
simple
formula
form
in
which
you
can
just
pick
whatever
the
option
you
you
want
also
something
important.
Something
interesting
is
that
we're
thinking
on
how
we
can
make
it
better
to
show
the
status
of
an
application
right
now
we
are
just
dumping.
B
All
the
information
like
if
you
can
miss
that
status,
but
we
think
we
can
do
better.
There
is
a
new
project
called
project
optin
from
being
word,
it's
kind
of
a
vanity
stash
word,
but
the
cool
thing
about
it
is
that
it
allows
you
to
see
resources
like
this.
They
are
connected
and,
for
example,
for
deployment
you're
able
to
see
which
parts
are
healthy,
which
parts
are
not
so
it's
really
really
visible.
B
So
we
may
think
of
something
similar
for
for
this,
but
instead
of
for
specific
resources
for
the
whole
application,
so
you
can
have
a
one
bu
for
for
everything
and
obviously
can
be
three
can
be
three:
is
there
at
the
door
once
this
is
table
once
it's
released?
We
will
be
able
to
to
add
this
to
our
support
for
this,
and
probably
we
get
rid
of
something
of
some
issues
related
to
to
tiller,
and
you
know
all
the
security
issues
so
I
think
that's
all.
We
still
have
a
couple
of
minutes
for
question.
B
You
have
so
the
question
was:
if
cube
ops
is
protected
with
a
certificate
whose
cubes
able
to
talk
to
contact
it.
You
have
to
for
doing
that.
You
need
to
deploy
that
certificate
as
a
secret
in
the
namespace
in
which
your
own
cubes,
if
you
do
so
cubes,
can
be
configured
to
use
that
TLS
certificate
and
contact
tiller
securely.
B
Except
well,
for
example,
in
the
case
of
warpless
behind
the
scenes
you
are
deploying
a
MariaDB
chart,
it's
a
chart
that
has
two
charts.
You
can
change
the
values
of
the
reality
of
the
day
of
the
requirement
if
you
modify
the
main
values
of
Germany,
that
is
not
trivial
to
know
it's
something
that
people
may
miss.
So
that's
why,
maybe,
with
the
form,
with
a
new
way
of
showing
this
form,
we
can
help
with
that.
It's
not
trivial
right
now
to
change.
B
B
Just
so,
the
question
was,
if
it's
possible,
to
tie
a
service
instance
and
create
directly,
maybe
if
you
select
WordPress
and
say:
okay
I
want
this
WordPress
with
this
service
instance
right
now,
it's
not
possible,
but
maybe
if
we
implement
an
issue
way
of
twins,
oh
we
can
do
that
using
the
this
simple.
This
simple
form
in
which
you
can
say:
okay,
I
I,
don't
want
the
fault
database
I
want
a
new
instance
created
in
inertia,
yeah
to
be
possible.
Recent
first.