Cloud Native Computing Foundation Helm Summit 2019, 1 Oct 2019

Previous Meeting

⏯

youtube image

►

From YouTube: Ship It Faster, Safer & Cheaper GitOps with Helm, Yusuke KUOKA, Development Engineer

Description

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Ship It Faster, Safer & Cheaper State of the Art of GitOps with Helm, Yusuke KUOKA, Research & Development Engineer

A

Okay, hi everyone, I'm use, kakuka I'm, a maintainable code by Devas and harem fire brigade and Nikas control and I'm no good at speaking any human language, very good at creating bags. So do you understand me at all? Okay, thank you. Okay, I'll speak about this specifically so today, pro-europe, seen away that it's cheap and fast and safe, I. Think the general general questions you want to achieve in your department papery. So the vocabulary are be using in this presentation, this five and six and the conscience integration. You said CI.

A

This is about ensuring your code already ready to be deployed, and culture means that ups and configure, including equipment, manifest hungry gauges and contains everybody means you make changes visible to customers. Often, and this doesn't necessary, mean automatic. So you usually use feature Flags, one-click, pepper, lower back for this, and the setting is conscious deployment. It's about automating continuous table like 10g, cheaper and roll back.

A

Do you not get up open, hardwick, ETOPS, good, good, so CI out explained, in contrast to get off ships about doing operation like that boy from gaseous system?

A

One problems is that it's prone to failure and get ops is about doing operation rock there'll be a get conned. You get idempotency hilarity, I extract them compared to ships. Dysentery muttonchops is about. In my opinion, it's about triggering sheer joy. Kid comics be a chat. Message should be a comment. Okay, so today we are solving these problems or diploma so Piper and shall be Lesko shall have less cost. Let's make destined for cost less operational cost should have more speed more throughput, it's about suit to top beers, less latency.

A

You should also have more safety, your deployment weapon, so don't induce any downtime and shouldn't export credentials so challenge we have. It is really make it cheaper with spot plaintiff instance, do use a double so GGC anyone.

A

So maybe you have spot a preemptive instance, and that is talked about any time, but very cheap absorber bt-, faster with code. Scaring people to contain many customers make it safer. Mr. Grouch eveness and suspend the rollback on failure and Friday in cross the pipeline I, don't deep dive into every topics here, but in this 20 minute presentation, I'll be introducing self-hosting geocirrus parks, brigade, making faster with kubernetes all its primitives and make it safe for my vodka and frogs bigger city.

A

Ok, for this talk, please she ups better I, don't I, don't force you to migrate Iquitos. But if you do see ups, you can do seok's better.

A

After that you can migrate or do better get ops just my opinion, but you can choose to use her phone for ships and get offs and you can choose to choose Brigade for she and city it is it enforced.

A

So, my god day is that enable you to be your own good enough. She of detox by brain, give you just ideas, examples, okay! So the first question is: how do you review the birthday? Okay? Think about the second okay, in my opinion, departments to Covanta signature, it's basically about the constellation root of Cooper country ham and customs.

A

Okay, unconscious deployment, it's a kind of recon solution dilute it. Rican serves your current cross, the state to the desired state, and we usually yes, so we usually make you my our deployment process. Look like this, so you reckon serve by deploying fix it delivering features and you after the permit. You have a lot or truly a case or something to reconcile. Are the deponents.

A

Statically and you can just use cubic entreprise and you come at Summerfest in this Monday every deployment and missing. You deserves death approved from York Rasta. Everything current state is operated.

A

In store for you deployment pipeline, so if you want to reconcile you across the state with him, you must use him up will install, and this is the only way to the conserve your cross service. Have this special box by in stirring your child is missing in your cross and up to radio you harm release, if it does it with the senior cross anyway, using customized for your department.

A

In this module you just use customers a beautiful where you coupon, it is manifest and you could become drop right from it.

A

Okay, maybe many people in this room is using these dynamic reconstruction options. The the most basic model is that cubic onto based. You generous, manifest from templates in your templates. You sell, shares quit or do whatever you like to generate manifest from your templates and finally, I include the cutting operation.

A

A new general I use the AMA files and we said: was shell script or something, and you run up great I mean customized best model you general resource is the patch files dynamically and customers build ok. So more concretely, you are coupons the deployment process. They should look like this.

A

You will observe your cross estate and you deployment run Cooper control or him or maybe customize.

A

Ok, so I don't know what solution exactly do you use today, but in this sincere system includes Travis Sarkozy, a Jenkins can cause the room or a brigade. So maybe you will be running well with the three tiers in this view, if you do get ops, you may be using frogs or OCD or your in-house commands operator for the opponents. Okay, so I don't deep dive into each to use, but a common problem for sure she is that it has low tool coverage.

A

So maybe you need to tweak your pipeline or for each you use for the bonus. If you the community, manifest for deployment, you need a script to your deployment pipeline to use that or if you use him, you need to script. Your different map right.

A

The other problem that, if, if you go for more dryness it is it because very hard to debut any when you perform what follow me or add up the Sheedy K or in scripts who are generating my face? Okay, so coding, your infrastructure makes it very dry, but it's very hard how it affects you across. So this is the program it becomes hard to handle.

A

Failure if you run, could be control him or customer in the very end of your deployment pipeline you're, not sure we have to restart your paper on favor and debugging from hard okay. So the solution are we pretending here is that do detox and use a single tool for deployment and the templating for drive, but pretend templates for abuse do prepare your web UI for Palmer Inc to build deploy.

A

Do we never brought in dogs per builder, okay,.

A

A

Look like this, you have a purple and generate the coffee. Maybe it's kind of a gesture contain Cubans, manifests this year and approach it to be she your Jenkins or frogs okay. So it would look like this and the Kitab subsides are only the key tops controls able to deploy apps. So this reduces your attack surface to the crust.

A

It's very secure because it's credentials are exposed to the get-ups control only, for example, for you to install cruciate rubbish and public public stars to deployment pipeline, you need to explain your shake with the third party service. It's a kind of security nightmare, okay.

A

Finally, every changes, article didn't get to our edges, unloaded in key tops, module lets us create and bomb gotcha for embracing key tops. Is that called the repetition and to laguna stated hard so fractured her moped? Oh, who are reducing code revision that you can deploy her matured. We are frogs. The kid coming and our gazillion frogs have experimental config my new teammate province, and that are you two talking too fast and I've seen it customized build or hang fire him come on to generate too much manifest for priming?

A

Okay, that's the basics and today I'll be entering Brigade on my Brigade. Even today, when scripting for cruentus. It's a shame. She found books project and it's kind of a scripted workflow engine, so it has around node.js runtime inside that pod and gives it kind of JSON document Azhar event you use J's for scripting and node module for use.

A

If it says simply Komatsu, it can be said as a coupon co-sponsored you get published jobs where you were an easy detroit and extension framework for acrobats jobs. Okay, so this is a basic bridges kind of you, deployment pop and definition written in javascript.

A

The fast line you to the brigade even system, so here even some push, means that on average each commit made to your get repertory. You run this sympathy with JavaScript code in this in the third way you report him for conduit 0.83 points zero, and this is a docker image. You will be learning in your commanded spot and you'll be running this sequence of shell script manager and CB CD and it finally internal procurement, okay.

A

Finally, there is an extension to be gate and that is called the Brigid CD. This works like this. It watches custom research, it changes the consoles the custom resource with running Brigade jobs. Okay and finally, my home file is a decorative spec for hungry disease. It is a CRI, it doesn't have server, so it is very easy to install it has kind of an influx Cod too, so it can be compacted to telephone or telephone okay.

A

It is baseships optimized, but it can be used to get off to the point about it is that it has experimental support for customers and cumulative manifest as you mature.

A

It makes you rich by giving you these configurations in taxes. You can define a what repository you use in your department, and this is a kind of a chart recovery. What we do duties- and this is just in hammer- it is you'll- be in stirring to you across and helm default. There false arguments, positive, M and find environments. You'll, be you need to deploy production, environment, I'm, staging environment. While you maybe need a truly exist environment, you can define every environment and this environment section.

A

And you can also hemorrhoid temperate front templating, you deserved it so their last to see that's too right, it's very hard to do that. You see you can't go temperate expression in your to Jen to your Yama, okay and finally, it has my bill command for generating the final static, younger files from templates. So it is very easy to make.

A

Okay, so it can be say it's like TF telephone for perform, but for him so.

A

Hellfire bid looks like a telephone from him. Fire up right looks like telephone up right.

A

Mx connect same problem for installing any directory containing Cubans manifest and the customization other matured. So to use it- and you can just add X before in helm command and it just also detects conflict I'd, its remote or local chert. Electronic manifest do three customers on duty, so a Brandes ture concession, but you can just periodically hem for this and can fire up right. You get automated the concession good for any deployments. Writing comments manifest he matures customization.

A

Okay with that, you can be the see ups to cry. Okay, it's to God home fired. If they approved a quest, you merge it and Hellfire apprise it.

A

If you find any issue after deployment, you can submit the answer to the quest for you, but okay. So if you get ups pipeline with Sanford you, the process. Look like this. You put using a permit to request. The CI pipeline runs a home fire, build it commits resulting from five young into future branch. You prove the cast the feature branch home file give on CIA gives you the differences between the current state as it adjusted reviewing that you marched progressed and the final handful apply the desired state. That is.

A

Any sheer she Department system to implement this, but if you using Brigade for bid in this pipeline brigade appears in several places we use and part to request and we get round him for bill and it commits and to see the gate commit another Prodicus triggers on the brigade, job that run hemorrhoid. If and if you much eat frogs detects a new get commit, it creates a new customer associate object-- indeed, and it vans are the bridge a job.

A

So what I'll say- and she is that you can enhance detox by police brigade Hellfire this half a temperate for dryness and Brigid for web away. You have all ages operational cost for instructors, structure, increase the British Ishida papering, GG crowd, creative virtual machines. You can have reduce infrastructure cost, deploying your Co city on kubernetes for leveraging qubits primitives like charge pseudo kindness and chance to build a set volume container podiums. You can have extra speed or speed on your deployment paper.

A

A

Finally, done home fire built for decorative innocently ability, the bring your incredibly her she she for limiting credit and sir access to only to your infrastructure, not third-party services. Like stack, you see next extra, safe, so I'm finishing my talk, but if you very curious about how D tops and for this pipe on box, you can start by reading great blog post from V box. We have to write about key tops and anti patterns patterns, including co-op.

A

Very detailed explanation for the difference between she, a CD, CD, okay, so I talked about state-of-the-art booty, tops with him it's a bit scary, but he tops pass drawing ass and brass too.

A

What I want to say in this presidential? Well just four points, so you can do see ups better by using my on see I. Will you a choice anyway, using Jenkins or circus? Your Travis young, your pipeline? Okay? So you can just start using my on your CI system of choose choice to make your deployment very dry and also label.

A

If you want make your co-parent movable and you can migrate to detox, you can start simple, get up spy brain with frogs and you can make it a little more dry with her mo betta products, you may be yeah what I'm suggesting that you can use frogs bill, get a handful all three for extra Baba return to dryness: I'm, not forcing you, but I, can recommend a really good for a shared infrastructure for both shared a CD. You can also try him fire for common to for Cindy.

A

So if you are using only ham charts for your department, you can maybe you are maybe happy with just running a bunch of him up with install commands in your script. But if you have a more complex infrastructure, you need to build. Many environments in your cognitive process you'll be happy using my okay, so my goal today was a number here to build ago, all good in a ship's, a bit of spy brain. So I give you ideas, options and examples.

A

So did you I, never use that so I recommend you to give it a try, just easy to to us for home fire brigade and also frogs. You can also try my demo hostel and github most Brigade home fire demo. You can ask me anything truck channel in crowd, process, Juventus and reworks rocks Janice. Thank you.

A

Do I have some time for you, Christian.

A

Okay, frogs watches, Paquito get repertory and apprise custom resources specifically made for your deployment, so you basically write hem file, more content in customer resource, frogs, duplicates home farm content from get reported to provide custom resource object. And, finally, you can write Q operator, like a British City I've, been to two concert: the customer resources into your home five deployments. So you you watch, you watch detox the concise cross estate in cross.

A

The brigade pipeline, the conscious by watching the intermediate State studying traumatic, roster and finite, creates tremendous primitive strike, odds deployments everything else by learning home a Pokemon.

A

Maybe you can ask me anything in text so that I can pay tax rate.

A

Okay, okay, so how do you explain and so the first product request can be made to temperate repertory and that contains the temperate of your infrastructure, just including your application repertory.

A

So you you need an other git repository for just contain exact code. Is the static configuration file to describe your processor so that you can hold it and able every exact changes made to your trust.

A

Maybe you'll be including individual chart and the helm file template in the application or temporal data stream. You will generate the final static gamma files in the config repository that is sending just second quickest.

A

Anything yes, okay, thank you for coming.