Cloud Native Computing Foundation KCD Indonesia 2021, 18 Dec 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Sponsored Talk: Service Mesh in GCP - Angga Rahadian, Johanes Glenn

Description

Deploying Service Mesh in GCP with a managed control plane.

A

A

Seconds and later I will be accompanied by my friend Glenn, yes,. We both play the same role at Google at the Google Club.

A

Friends,, you already know that you've used it If Google fish, Kubernetes, Engine, Which Club,. If that's a magnet version of what is Kubernetes?.

A

Of course the Network texture is simpler and easier to deploy Advance traffic control and, secondly, we can also enhance Security and have it automatically encrypts data in transit with MTR Hello everyone when it's ice.

A

Safer road and reduced timer resolutions, electrode error, something wrong with.

B

A

And existing feces be'en telemetry well, if you're addicted, Why selfishness, why do you deer.

B

A

Canada is your source Why. Just now is actually an abstraction of a network distributed system from the application,, so everyone doesn't have to worry anymore about the network as a whole,. It's enough to know the local proxy,, but each proxy is in a separate conflict,. So the client service control is.

A

More. intelligence to service books, Subhanallah service flash, makes us think about pollution at the service level. No longer around the neck underline infrared Now. If SMD offers to simplify Daijiro the board, it becomes very easy to install to apply and we are easier in terms of upgrading Pacing, because the party is already in tag er with Google provider.

A

Then we'll talk more about this later I can expand a bad footprint to VMs that have never had rice, of course, other integrated The, Great, keji, kiflyf, Crown and also FC, but still use base istikharah with FPI standards, which stomach is developing following development from ovanstore itself,.

A

This is just an example of Yui from or serving smash,. You can see that here it's already out-of-the-box,, there's minus the teletype Ken,, there's a crazy Messi, in a moment. There's a minus control plane, of course,. If minus the control plane with SLE,, it's just better and more, what is it? What's, the name of being a jerk? I. Can sleep better knowing ADSL at diantos.

A

Security is SM, Maybe I'll talk to Asep and there is a combination with cloud IP or identity RR proxy,. So these two things allow us to apply. Zero trust, Network access, where all the communication has been encrypted in transit, and then there is a workload workload.

A

Communication can be made a role of etiquette, torays and also all autoticket workload dilocks with certificates, instead of paying tokens and also mdms, can minimize the risk of Hi, impersonation or privilege escalation with reply or man-in-the-middle text, and can define context by position for if access depends on pear request or Advan text, If For example,. If there is a service or skepticism, for example,, the service is the front end,, then BKN, for example, service, B BKN can only be accessed from Frogner,. There is an enter, of course, like that.

A

Certain estokeun So we offer an identity web proxy for competition, authorized authorization principle, user access, Reason, bjorn chord, can also use isotropic captions that already exist. Solutions that already exist are usually parked. Motorbikes. Of course,. What I mentioned above can be done without changing the Eco. Now this is the cool thing.

A

Hi Then, when we talked earlier I told you about field support Because now, even though it's still a public review, but later when everyone can try it anyway, but when it's big it will be easier for us to extend rich to the fmgm workload, which is still dvm, because we, you know in the course of a start-up or company because they haven't contrasted everything or, for example, most of them are still VMs or you are getting more massive. Who want everything in mas Now for this you can later.

A

Surely those who support have already loaned can try it right away. So we have a name on devito. There is a minus, install grub with controlled secondary,. The production has already been input into the VM,, so at the time of release,, maybe it's only Debian. Yes,. It will be supported. Later, there will be advanced sois that will be directly supported.

A

And also, what is the name Hybrid Cloud, also in the name on-premise now another control for multi- cluster multi-project each road each paste uses istiadi can also. If, for example, you want multiple Merry can support connecting Cluster ask cluster. That already has sourness lover Never mind high school, so you can also support like that.

A

Okay m Well, that's all about ASN! Actually, the Central parts will again talk. I got demoted a lot. Okay, I'll give it over Glenn Okay.

B

Thank you. Thank you. So much Mas Angga eating one of the most interesting things from this discussion is when we talk about servicing it like that,. So the book Hai medok from the side of the technology itself from Antasari smash, is light technology. We use the term so I think it's very interesting because Google's sweet Paddle means we can leverage a number of things so that Google is sweet instead of us, which is sweet but uses the same technology when we use OSS istio like that So, that's one.

B

That is quite interesting in my opinion and the second. Usually. When we talk about Smash services, as before Mas Angga said apart from features apart from their uses and how we can communicate between our microservices. You two are what we are used to. What we need is from you in the end,, that's it. So. Apart from the Meme service, as the smash service,, we also got Yui,, which we can use directly,, so friends, you can see here,. This is from the UI that we can use for the one side of Smash,, so friends,.

B

You can immediately get an overview of Anto's own machine service and here and see here we can see what services are in our Cluster service,, so we can see the list of services, meaning the PC is getting old in which Cluster and we get the golden signal from these services. We get from the pas seconds or Ride Suzuki presentation, presentation c, and apart from that, we can also get it from the topology side,.

B

This is probably one that is quite interesting too, because if we talk about microservices, of course, we are getting it's a lot, big, right? And. Sometimes we need something that can visualize that. How. Can our services interact with each other,, so this topology is also quite helpful..

B

We explain, we can see the objects in the service. For example, we have a single claimed novran and in single jennovere we have a single port of ramen, so we demonstrated this during the day. We will try. If we have the service Smash, then we have me conversion. The story is the developer. Has the second version and we want to deploy sutaji, especially those of us who are on a walnut diet. How? Can we do this and what can trifles be? Like then service, this machine?

B

So if we come back to the actual table view, this is an overview, and if we want to focus to one of the existing services, we can enter into floem.

B

And when we enter into friend it means we will focus on Floren as our center of attention. So we can see here friend as the main service, and we can see how other services can interacting with phonemes meaning communication, which is Otong-playing in nature and then the matrices that are happening there. We can see all of that And. One thing that is interesting is because, if we talk about smash services, of course, we will talk about multiple Services.

B

It means that there is one thing that we also want to be sweet, is how can we monitor and do learning,? How can we train Solo, later?.

B

Com,, we are Devina,, it's our fault for this service. Maybe. We can use an example, at this point,. We can use the extension,. Then we can do a backpass base ad for the methodological side,.

B

Then from the SLE side,, we have indefiniteness, how many quests?.

B

2 pressures from stress send want, and from the complaint period side we can choose. Maybe the Day calendar and comments I want 99% performance from the original side. If everything is okay, then we can be creative, Solo and automatically. We will get a lead or monitor the XL that we have for, but not only because if we have multiple Services and in a single Service, we have multiple Solos. We need good enough learning so that we can monitor moments more easily, so we can be travelers here and in this sense we use our revolutionary brand.

B

So later there will be separate documentation for an explanation of how we can see Bernad selling. Basically, if we have Herbert so how quickly the rubber is burned or used. That will bring up the error. Side.

B

There is a calculation of how many percent branded occurs within a certain period of time, so to speed up the demo. Today I want to eat one minute and pc1. Then we can creative our channel, so we can use email or other things or if friends want to use multiple notification channels, we can design your own. In this section of the marketing channel, we can many,. There are always several options, such as originating Services, Ashley, books,, email or SMS watsap.

B

-Based we can put it here, so if an alerting occurs, we have one quick information that we can hold any taider engineers who can do the workroom than Kyuhyun happens, Kadek a celebrity that happens, we save it and it means here we have one already available for us to use Then. There is some other information, such as the connected services matrix and for today's demo you can focus on one thing,, namely traffic hunting,.

B

Today we want to talk about strategy and performance, documents. Yes. So. If we talk about the current situation,, we have one service called front-end and Dylan 12 service harvest. Like this, we have one version of ramen harvested, then we try What. If we want to do the Kennedy comment, we have the second version of GTA, so let me move to, but this is a step from the futsal side.

B

So it's quite an interesting moment is because earlier we you are different than the technology is the term SS means we can configure, rather than istio to do sexting and maybe the same means we have to create a new default The second version, so I have two files that I have. The current motive is the first thing with the first default. I have the first version version 030 for Lake Santos rumored to be able to find a little customary rights, the name crooked Santos.

B

To do testing then I will click on the second default for the second fashion trend and I put the image in the active registry in ccpg this happens,. The assumption is that the second version of the engine is doing the design,.

B

Okay, from the service side,, we want the same service, and from the fragment side, we will do uh, claimed n.

B

Series, from the impress trait,, we will replace it from the existing triple service configuration. fruit destinations. There is the first version with 70% W and the second version with 30w. We are about Destination Wow, but unfortunately, I want to deploy the virtual service file using the slider like that. So later, when I will talk, Why I use, the blender service filter is to add, fix the diley to the service leader to change from the side.

B

So later there will be a delay or latency that will impress the existing front and service, because it's quite tired of client Services but genie Sorry. There was an error. I tried to replace this with one of the other demos with permission to change using a nice tank. That's curious, Hi,. My name is version 5.0,. So this is what will do. What's quite interesting is to do this deployment,. We can do it in many ways,, especially with our other CD4s. Then. There's a sister.

B

Ask yourself,, but now I will be assisted using the Antos configurationmanager, where Isim will scan our iPhone guitar to do deployment according to what's in our Kipo. So we get a single point of Failure,. That's it.

B

Do that I only have to do.

C

C

1000Px non-asn.

B

Ready, we hurt the folder.

B

Okay What: we need to do because I already made changes to both files, so we do comet. Since it's just for experimentation, so I beg it will be faster. Jetol get comet.

C

Ad-Art still Lesley Alucard touchscreen Holcim.

B

C

C

Cce stupid.

B

Ciekek, assuming we let go of the Japanese.

C

B

Jatibening2 there's a change there Sorry there's an error in the existing demo So. If we make changes there I'll test the contents once again we'll test Am I in a different place, okay,.

C

B

Bro, a change has occurred because I was trying to browse in a different way,.

B

C

B

Okay,, let me first copy the file I want until. Finally, this error is given when I'm on a live, demo,.

B

Ok, and configure the second one, and one of them is quite interesting- is that if we use it, we want a configuration like this if we have Atlantis itself to do rendering, instead of paleo. So we don't have to do this manually like that, but today I'm showing it manually Because for acceleration than we use different clothes. There is.

C

A Hong Kong, kit,, Ek, Veri texturing.

C

Rigging screen.

C

B

Okay,, so if we push the wrinkled Nikita configuration that we have configured,, so if we go to Anto here,, we have one according to his name, configure, Manager I, hope, We're still visible, but okay,. The hotel will see here so SCM will always scan instead of G30S use UC on the Beast Master, then the design will see if there are any sweet changes. If there are any changes, he will harvest them to the cluster that we have in my file. So maybe we will prospect first, whether it has changed.

B

Okay,, so if it's cold, Space dingo vantos, friends,, you can see here,, it was just 21 seconds ago,, so there was a change that happened because we changed the manifest on Get Rich,, which I used scn88 dimensions according to these changes, and we'll wait a while until everything is running. yes, epithelial scanning should be. If we go here, the bank account franchise business. So if friends want to eat Well, we can see now there is a second version of the serial. So this is the second version, and this is the first reverse.

B

So I think there is a financial Kennedy with white. There are certain things we can do, of course,. There are lots of features that have terms that we can't design one by one here,, but what's quite interesting, is the second thing, okay? We'll, see from the Thai side. Has. It changed, because we need a little time for the telemetry to change.

B

? Hi, but there's quite an interesting thing, is when we look from here, so let me go back to Thailand to an overview of the dashboard.

B

If we look at it from the topology side, we can see that there have been changes that have occurred. So add friend is converted. Two there is a converted phoneme. There is the first one one more thing: why is there one pot this one, because we got spam 11th of the way So before there was the old Diva mint The old Depot? So it's still visible here. So if we want later, we can Navigate to the lites of the Let's Ski state.

B

So we can see the changes- changes occur from the existing overview and if we go back to our ROM or, for example, here there is warming, right?.

B

Look here and later play the tension, rope percentage- maybe you can't see it because we need the latest telemetry right. We can be here artist from your side, the temperature where he creates traffic from us. There is a significant change Why because basically we add three second blinds with full injection, rather than the ristio feature returns the slider and the Khalifa Pot slider body with the leader-paytren, which causes the Twitter login to be high in terms of the license.

B

And finally, we can see from here we can see that the LED is already a GTA file. So allow me, if I have received the tool.

B

We will we will get by like this, so we will get OK brownbreath. We have reached the password Please check up before something happens that causes stress. We either credit our Roots Leaves, so we want to eat yet interface the situation to prevent this from impacting our production, so maybe friends, friends so far for the demo eating that's all from ask@ivg.co.id Thanks guys for listening, even though this is a barrier between lunch breaks, n. So from me, Glenn, maybe from the past I, don't want to add something.

A

Three already passed: Try it, thanks friends, -ption friends and.