Cloud Native Computing Foundation KCD Indonesia 2021, 18 Dec 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Breakout Session: KinK: Kubernetes-in-Kubernetes, an Inception - Anthony Rusdi & Fajar Ramdhani

Description

Ketika testing untuk deployment kubernetes object atau helm charts dilakukan, umumnya deployment tersebut dilakukan didalam sebuah temporary namespace yang dengan mudah di-create-delete dalam hitungan detik. Bagaimana dengan deployment yang melibatkan cluster-wide objects seperti cluster-role, CRDs, admission validation webhook ?

Kubernetes-in-Kubernetes (KinK) adalah sebuah methode menjalankan cluster kubernetes baru diatas kubernetes yang sudah ada yang bisa digunakan untuk testing kubernetes application yang melibatkan object dari namespaced scope sampai cluster-wide scope.

A

A

We from Bukalapak will make Ok, the theme of the team, I will be efficient communities in section,, okay, ah,, the world,. Then we will continue on to the famous money.

B

Sorry,, the sound is clear,.

A

B

Good afternoon,, my friends. Introducing, my name is Anthony. Rusty. I worked at Bukalapak as a system engineer, before then I changed to Chinese development and now I'm in infrastructure..

B

And nobelen vorstek ah Hi everything related to copperheados cop download balancer, including England or Cloud Lancer, be responsible for my work and the team Then. We I also implemented Ia automation, which ah hi using cuttings, gitlabs, II surrender, pom, helm and others. Aside from that I also often devops technology skills and next to some.

B

Hi community and Training Center hi Before, actually I, was mostly related to Linux as a big and everything there Then please get to know. Mas Fajar, t-shirt.

A

Oh yeah, okay, havenshop masonic eh wrong. Next is a bit biography about me. Huh So. You can also be active for now as a gender developer at Bukalapak. For my responsibility now Family's journeys pastors then bae implement export infrastructure for no minus Xiaomi. Spec infrastructure is at Bukalapak now whether it's provisioning accents world level management.

A

Then now it's no longer active to help my friends in product engineering to migrate service from pot poter, one other peculiarity, my god, before migrating clowns from on-premise informants to sport ah ah ah before I was on the coast of sport. I entered as a database engineer myself. The main task group was medley, making optimization for Steven's revision,, upgrade maintenance and so on, before Bukalapak 16 also tried several lenov0s like the front-end had tried using ripple and 4000 for mobile.

A

Then Tekken used texts like laravel, JYJ and Flash, which made python then the the longest actually recorded was more than 114. So one poster admin tweeted using the diesel air by then for hi. Oh, so that disappeared too, so made an extract of the transform loading script for the industry on average. Tel then times have also been realistic.

A

Then edited educational technology too. Ok, maybe this first from the Geographic speaker, we will go into our Agenda today, so we have 3D the main agenda in this store that I will present throughout thaksin. Always my partner, Mas Antoni will take us to the implementation and demo for this project is Hi Get new, if Mulia Jaya Hai. Thank you friends, good afternoon, everyone, ah,. Let's start with this first, I'll be the next object,.

A

So, as we know, Oh, Copernicus is a container of perfection,. It has various types of objects in it,, each of which has a role. And/Or use Monday,. So we for example, we can go further. Here,. There is a roll,. There is a resultset,. There is English,, there is a cellphone,.

A

What is sterol and so on,. There are quite a lot of them and eh eh Hi,. We can infox the creation of this object through orders from other clubs,. Then we are specific to the 45th,. Now we have these objects: floppy disk to a spanish married Hahaha In. This case you guys hi, oh no, ever Hi object or club logo that we will type also breathe. This can be various A. So later we will have a lot of e-mail manifestation files that we have to play with hi.

A

Then Yes Yes I've gone on to at least Hi,. This is an example of the structure of the manifest file.

A

In general, one service,. The actors have each of the following files,. It is claimed that the NVL Secret Service account, Abraham,, the types of pesticides, discusses artists and so on,. So when we go to the Playstore service,, this is the average.. We have to be able to haha before us I'm sincerely hypnotized by us Hi, but the problem is this is new. Maybe Masterpiece is just my example, but generally Eh it can be organizations when they adopt the microservice architecture. It can be the turboprop workload they have.

A

It can vary, ah maybe five or a dozen or 50/100 or 200, depending on the business to the pile of business. It becomes a problem if, for example, Saturday the service has 4/5 drinks the object of this meditation where for organizations, if previously there were more than 100 services and so on, make sure it will pile up. Hi then Ah can't enter to the next section,, our cellphones, when Hendro made various harmonizations for tea,, so yes,. Because of that volume, there were a lot of them,.

A

Hi, yup, they were scattered everywhere,. So there was a buildup for the sake of the spread of Fals,, which really couldn't be controlled because of the.

C

A

Of objects, in this case, geometric object, acrysion, right?

A

put forward the business needs,, so there will be more and more new services, the more applications we will have the boy,. So there will be more manifest files that we have to define,. So watch.

A

Manchester Township Come on,, we have Memories of defense dimensions like the original RD was a success, of course, since the countrow and so on, and the object squeaked on its own, then, because employing this tends to duck,.

A

It tends to give room to terrorize when we seethe, define a bulldoze, for example, for labeling according to the ownership of a service or a booklet, allegedly in the cassette, yess or Veloz's gift for the story of quotas, hai hai hai, then ah the last one can be boring or maybe burdensome or affects the developer experience by an organization naha How. Can we overcome these problems, introduce it in the basement. hahaha Hi Ma'am, Hi, Can you adopt.

A

The use of those helmets is PKS Manager ah for various kinds of two clubs that run on thin graves Hi, like NPM or your Nature composer or the tip booklet that we defined earlier Eh. We can make a template and make it in order. Wuku can later function as a vendor library that we can immediately share into clusters.

A

Hi Helm itself,. The function is almost the same, well, ubegebe l,, so we range through a faneric client, expert from this calendar. We can give commands and arguments, such as full install,, uninstall, irritated and so on to the destination Cluster nah ah What's, the difference between helmets and conventional manifests like this Hi,. So the structure.

A

Hi Novi the helmets work using a packaging format called my girlfriend's stamp, is a set of files that describe a series of Resort by British hi. Why is that? Let's look at the above Well. It's diluted, there is Tibet well. This is that before it manifested the community objects that we design hi. Then we Hi Can abstract Oh. Yes, we can use helm check to abstract a pop. Then we can give theking for our workload helmets that we stubborn use the card helmet. Then we can Husqvarna. So there is control from the female versioning there.

A

ah ah Then after we delete it to Berastagi sriyatno, we can see the playpoker with a simple use. The helmet install comment: Hi Keh you when this helmet makes it easier. We are to abstract a book club that we are Menteng, but in the biper hell there are various new problems,. Now among these,, let's enter the Challenge section.

A

So ah, because it depends on Badriah's business goals,. What permissions do we want to give to the helmet paint ? Is it sufficient for the class? Should, we name Sweep or the web cluster,. It depends on what we are going to do with the service. We are going to diploid.

A

Hi,, the challenge is: having a helmet choose a font, type. delivery of the helmet Ah,. How can we ensure that a claimed helmet can run in the Cluster without causing Beijing changers to other points,? Then Ah,? Maybe the solution is one of the solutions,, one of which is to provide a separate environment or reinforcement, origin, Hi,, which is specifically enabled to maybe test claimed on helmet cap we patented, but, as we know together for the 18th bootstrapping it burned faster, it's not simple. uh Then it seems to provide plaster community only for the test.

A

It's a little Overkill and tends not to post edition hi. Then what are the alternatives to solve these two problems? Kwak for the next time, my colleague will explain in detail the implementation of the method that we use.

A

Hi Check, the results will be masonic.

B

Hi. Thank you. It's normal next. Next.

B

I make as explained by Fajar earlier Come on.

C

B

C

B

Kubra disambiguation or helm chart into a Cluster. That is some of the objects in his grave. There are not uh Scope new Space. As we know, some of the objects are fastroad g-shock Like, for example, cholesterol or pending cholesterol, or maybe even Ardi, Or other objects that are Master white's nature.

B

Imagine in a repository, helmet paint or dropper manifest where each one of those apps hi use objects that are special moments: Noah You're, just a new Splash. We can developer stream, deploy on a nerves. Once it's done, we can Delete what the speakers say, but it's a mess Cluster with scrub Hi,. While the repository is casting it could be More than one sack, and maybe the object is Hi.. The name is the same. Type. The same seems to be the same,, so there will be a conflict.

B

But the next problem is: how fast can we make the new poster 2next yo yo Hi nah? As we know, it's as dying as it is Huh the concept of Dilinux is that there are distros or grave distributions that already have several distributions that are owned by wafers the shape is there Google, quiet and azuracast, then, in the on-premise area there is usually an object or it could be immune. Ace, Hardware solutions to the diet, whether it's to the provider or mp3the Rock is not suitable.

B

If we take dead segmentation plus for a workload, testing maneuver that.

C

You have been into the opposite direction.

B

Recently was interesting some time ago there was a google.ro event where one of the.

B

Things that is quite significant in determining the winner is: how long can we bust a Cluster, even though in general we can make a Cluster within the club four to five minutes will, but when it has to be done on a blog, where there can be a lot of cones. Because, the census happens, everything has to be tested for the coefficients,. Of course, it can't be done in a free concept,, even if we use small factor clusters or yes, the ephemeral ones or the ones that are cheaper.

B

Non-Muslims,, we won't be able to do it, because the shoes are so complex that the first netizen Harvey buried, it. Although. It can indeed help us to understand more deeply how the cover community works,, but in this context, great cluster CDs for club providers or and blemishes are not suitable. For. The last.

C

Zodiac, in.

B

Recent years, flight white. Open ethos,, one of which has emerged,, one of which is the existence of a doctor,, then Ranger,. One of the auto mission providers, also made a governor test,, which is a sea web k3s,. Then Miranti himself also recently released the special Heroes and the canonical Ubuntu released micro. Why are Nes. Some of these solutions currently included in our m, is the governor of East Java and reset lk3s for microcarpa Nes, because it's specific on ubuntu so use snap, and so on or Hi kubernetes indoker.

B

It's not suitable to do when you have to make a Gunners infidel enough just white next.

B

Hi hi hi Governor, spoon, basically one of Kubernetes Saidi Project, is exactly the same as dripping in general. It's full-blown kenesleather, it's just that it's made in such a way as to recommend it above the doctor, while he himself the octopus merchant uses. The doctor's chain container.

B

Also different from k3sd is a project from Lancer in which he strips some functions that are not needed that are not relaxed with the light, for example, Cloud provider driver, then things that are Alpha, then negation, and so on Then to keep the mission they use sgp-live, even though some conditions.

B

Hi informants in the episode area to be used in Hi, Ho, Hi Well, with k3s or the Governor of the 3D lift test,, namely k3sc in the doctor,. We can make a discover requirement above or container.exe hi hi.

B

Hi, this is Lancer's climax,, so we don't have to bother to make it yourself by you. Actually, the three are quite simple to run, because the other comments are quite easy and not a lot of settings are needed, but to make it easier for us to do our job further sad and provide the next image doctor Hi Ho Hi Well, if we can run a kubernetes, Sis above Hi,, of course, when we can also use kubernetes above kubernetes out, because the pot itself is actually a component of a container.

B

This is very possible because basically, what Miko hatcher above for success needs to mostly is admin. Privileges in doctoring usually translates to privilege or root, buy it sysadmin1.

B

Hi That way we can run kubernetes in in this case, k3s on a container where the concert is a member of the Governor test report text.

B

ah ah Because of the simple context of the container in the pot, then the example in the picture here is the ribbon mechanism for make a kubernetes on top of componentes. Of course, the original dropper is Ariel. Drip can use online community or kubernetes club in the pot. We are strong, Divine container where the energy used is k3s, then we set varicose limit and it should And. The most important thing is a secure context. It sits it's the same with oranges, because indeed, some things that are in k3s in the container require.

B

Hi some privileges,, especially those related to networking for self-creating farmers using rationing. So even though it's Hi What's the name, he believes above the pot content tends to be quite small and quite khor rather than the doctor himself. So nested containers tend not to feel heavy Hi get next.

B

B

B

Hi it's off on the ngopo pot Oh. Maybe I can share short story scripts.

A

Okay, hai hai.

A

A

B

E-Books Hi Ho Hi Ho, no comments, hai hai.

B

Hai, okay, Ah, friends,. You can also come to gitlab.com flash in Indonesia sales. 2021,. The game is finished, uh,, it's public,. The phone is for rent, I'll, find out how.

B

Hi, Kubernetes browsing is used in the context of testing a hot-site modification,, so I'll be demonstrating making a branch Hi,. Where am I going to make changes to the paint there,.

B

B

Hi, in this paint, there are some samples that I took from the extreme,, namely Interaction,, crazy, traffic,, clubs,.

C

B

This map, I will make a few changes.

B

Hi, the sample here is just the trigger for Fadlan,, so I'm going to deploy.

C

B

Ah, England likes the depth of the English Space snake game.

B

To go to the design governor of kubernetes resources, while the game below is correctly used as the Venus of the helmet chart itself. In this case, it is for England, ndx I will just change the species Neng so just to change what triggers the ad.

B

B

Hi hi hi hi, hi hi.

B

B

From this committee, I will make a Mercury Quest in Tebet Hi, where to check this wes later it will trigger the existing alloys. Now, because there isn't too much time. The rest is cool.

B

Hi Like showing the public that has been running hi Before, so this Maybe the process takes some time about four to five minutes from creating a group, k3s Master, then making a k3s note and deploying the changed paint into these components. Then a Brain result, sir.

A

A

Peho, it seems there is a technical problem. Yes, the watching suddenly cut off new websites.

A

Hi I've come to understand in terms of.

D

C

C

D

He could steal.

C

D

Mosque of Kediri, joked about automation, testing,. He wanted a HAM crusher cone,.

D

C

D

Wanted a road update,, a lemon, or the ounce object was defeated by FC.

A

D

B

Oh yes, I'm sorry, I'm, sorry for the internet,.

D

I'll, send it later, we'll end it first, OK, in Aceh,.

D

B

Okay, ah ah, hi,: this is a sample, hi,, the tables that are already running and those that are currently running,. Basically, the existing state is Wow,. Then the film changes to that, then here I will agree that Kubernetes will answer the objection above Hi,. Then the next state is deploying the helmet.

B

Hi, and the last one, ah, Clean Up needs in an existing community, because if you don't claim it,, of course it will be a lot of trash,. Okay, if.

C

You look here, the.

B

Status is quite simple: he should only take changes to what is there. Then. If there is a governor and the previous Governor delete, then he will make the price of the fb dropper the mask. Then after Hai club.

B

C

B

B

Cladem will bomb first. The changes then deploy. If there is none problem, then we can march on the Master and then.

B

Hi the result wants to be banned based on the existing manifest based on the existing paint helmet. After that.

B

The last state is even if things happen outside.

B

A

Kehna, maybe now it's bad. Ah If it happens, things that are out of context, maybe thighs Hi there Hi there Long steroid skeletons get in the way of sure it usually fails. Am patented itself has provided various types of The Sigit doctor Hi, so that for Jobs the removal of the article continues Hi Rif Rif later I will try to share. But yes.

C

The lounge hi hi hi hi.

A

A

Kwong, to be precise, it's finished always.

A

Hi hi hi I'll try to see next Ok ready, Hi closed Cepi, Clean Up, the Hai, so no after the priest at the producer above is a hassle running in kubernetes, namely the boarding house will be arranged so it doesn't meet tomorrow afternoon. There is who now adi been to various kinds of boklep in the class more about Hi. Sad like that, sir about.

A

The rich promise of Life.