Cloud Native Computing Foundation KubeCon + CloudNativeCon North America 2019 (San Diego), 22 Nov 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Release the Kraken: Bring Sidecar Containers to Next Level - Di Xu & Xiaoyu Zhang

Description

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Release the Kraken: Bring Sidecar Containers to Next Level - Di Xu, Ant Financial & Xiaoyu Zhang, Alibaba

Sidecar containers are well accepted and widely used nowadays. Sidecars are coupled with normal containers by sharing the same lifecycle and provide accessory features. This is a good pattern to enable applications to be composed of heterogeneous components and technologies by reducing coupling. The demands of using sidecar containers in production environments are rapidly increasing, although sidecars have not formally identified. More issues and discussions have cropped up in Kubernetes community and slack channels. Thus, we need a fine-grained way to manage the sidecars, including the starting/terminating order, the lifecycle of sidecars, etc. Also pre and post steps are introduced to better control the sidecars. Moreover, we will introduce some use scenarios on how we maximize the power of sidecars at a large scale in Alibaba Group and Ant Financial.

https://sched.co/UacW

A

Thank you. This is the last session of the last day of Kubik on North American. It's not easy here. We have our G idea and the pressures that are your not heartily you and I come here to attend this topic, how's that you can enjoy it and get a something useful and we.

B

Will try to finish it as soon as possible, so you guys can still have some time to say. Yes,.

A

First of all, it has to introduce hours. He/She is the worst part and the interest of the real engineering and financial here work past solution based on kubernetes, and he is the eminent open-source contributor Nowra. He is the top 50 contributor in the coronaries report city. My name is shortened. It's hard to pronounce it for non Chinese. Speaker self, get it.

A

It just call him deep, I'm working Alibaba clowder, which is the core and a Guercio cloud provider. Just like ah I thought. Yes and the air. Ok here you can remember it. Maybe you will use it now, I'm in charge of all communities, release and their ability, and some new features, research and enhancement in Alibaba, Crowder I'm, also a kubernetes community member, which proves that I did some contribution to the community. So, let's start our topic.

B

Firstly, I will go through what sidecar is and the second layer I will show some typical yardage in Alibaba and on financial.

B

Then we will try to show show you that how it circles as challenges in on financial and Alibaba cloud. Last but not least, there are still some remaining issues to be addressed, so we need all your heart to help to protect the Sun cast to next level.

B

Actually, sadqa' is not a new phase kind of design pattern. So if you are familiar with stocks for members at Chaco and pasture is kind of design, it's kind of sad cos so sad cos. Yuri used to assess races the carpet and from the various containers look at the below graph. Here is the size.

B

There are two containers running on two hosts: why is the consumer? The other is a service provider, so they're coupled and the network is hot linked, so it's very easy to so switch to another Redis instance. If you change the regional service done so, if you add various ambassador here so easily become where easier to switch into another instance and by adding a pen stir. This also allows you to transparently move the ready service for another different and another to house from the consumer.

B

So actually cars can do another sense, not only just serving as a pastor or proxy server. You can use that cast to forward their logs to another host. This is exactly what the flinty is doing right now, so also sto and link deals and cards to harvard simplify the traffic management, resources, security and monitoring, exaggerated cetera. Also, you can use such cards to to some other Assessor assist like carbon files, downloaded files from the inspect or stuff other stuff.

B

Actually, this side capella enabled applications to be composed, who had a junior, the general generous components and the technologies by producing coupling this pattern is best used to is, there are create difference between the primary contender and as a secondary toxic that need to be done for it. Also, the demands for using such great contenders in product Aramis are rapidly increasing. This is better challenges that we met in Alibaba and a financial. Also such good content has not formally identified.

B

So there are more Englishman is, has many issues and it scattered discussions should be talked about. I will show you some use cases. There are. Those are some typical use cases not only on financial but all over the world, so other bride is a normal post back. We can say there are three containers here. Just omit some only useful information here, so it has folks on the on manpower.

B

The three containers are proxy service and my single client, the mobile client here, is Manny used to connected to a remote, my single cluster, so and also in post local service to to the service container. So the sixth canto just use a local service of the micelle cluster, and the proxy container here is Mary used to set up the network connectivity, so the so that is, the Mexico client can connect directly to the remote a massive cluster. So we can say there is a hierarchy of the order of size of the containers.

B

The progress the proxy container should be started first, as then other two normal containers.

B

Also there are. This is the stake in the use case, such cam management actor is currently Nam. Containers ethical contenders are coupled closely, so their share is the same lifecycle of the powder, so it is very not convenient to. It is another convenient to manage a circle container separately, such as upgrading, tzadikin and images. So have you ever user about service mesh HT, all link, D, oh yeah, quite a few, so actually suppose that we have already running injected proxies containers.

B

So if you want to upgrade from the order image to a new one, so what do we do? So? The official guide just suggest us just to entry inject the stopcock containers to the poll. But what if we have hundreds of deployments- hundreds thousands of deployments, so you really want to do it manually, of course not, and also there is another part, another issue. So how can we upgrade our departments step by step? That means we might just want to upgrade partial sidecars of the deployment. How can we do it.

A

So, let's show this question program intrudes comedian. Now we will see some static assets and persist on committee Sarika, circa and the keepy-uppy. Our approach and implement is Merton. Our thanks for your Joseph Aaron for his such a courtesan in our and he defied a filter in the protest. Specter laughs occur, which is useful, identify which is self-centered container and which is the static our container and the proquest is under another.

A

An another poor Crestor is ongoing. This is the modified the couplet and is under review. Now, after its merger, we use the level of circular table to Mac, which is a selca container and impart as no, we know is not enough to own. The father, which is Sarkar.

A

There are lots of logical business to discuss, ended, develop the first decisions. I want to Lisa is the said: Apple sequence of circus and the Seneca surrender container, so Jimmy and I wanted to do it the further. So we send another pair to and more option for laughs inaudible. Those are pearls, Attica and the processor. Can those are your options and could help you mock that up?

A

Whole sequence of circa and the sender- and the container here are really used case in Alibaba- could issue that, while those options are fermented and really reserved, some big problem here is a UCS example: Sarkar Santa, Cruz container continued Bastad up or shut down before or after no more container, and the other does verb matter in our producer environment.

A

As to some application, pure container cure another open source project released by Alibaba Group cloud and which is which is distributed, ki ng vo catch system, the container of tier, should be started before a commercial container and do some preparation for the standard container.

A

This is the word Merck good example to prove the San. Apple sequence is very important. Of course. We also have some other use case of some post static, sadaqa cassandra d'etre decoupling, mister. We separated a application into the true path, a normal dinner which, if, across our logic or business posture, sadaqa container, which is the in charge of a configure and configuration data, uris us to continue Sharon were l'm and the processor curve.

A

We updated update data and the repressor Moda for all our out officer normal calendar, so the sequence is very, very important there for us.

A

Though we have not made more complicated cases which demanded each year for continuance that are poor sequences, so but it's possible to heaven with more and more complicated the application run Cornelis. We will send more issues and peer to discuss, and it has this this feature gradually and discreetly.

A

So before the sadqa' enhancement and the KP release in upstream or kubernetes community. We found some new solutions for Sarkar, and this is the open source, projector open course.

A

What's a open open cross over cross is the set of country and controllers, which is tender and compliment of criminals to call controllers on workload. Manager currently has already work, loader Steph, said, son, sorry cos theta and the broadcaster said: Berg has the job, it will interview to have a user application liver. So everybody could download, download this image and have a try on the tutorials so and.

B

Sex likely for having a try and open cross and congratulation to Lakeland for winning the contributor a word of to 2019.

B

So actually such cars are less controlled and the trade I crave is normal. Containers actually turns out. They have different life cycles, so this is what the upstream community lacks, and this is what static set does with more diverse scenario. Coming current cell cars cannot meet our requirements anymore.

B

This is how we solve it by using that cassette, we need a fine grid controlling, and this is a common spec of cycle set. You can say we have defined a new type name, the sadqa' container, which is exactly the same with a coal container, incriminates IPS. So we can use it. You know just copy the original definition from the coal containers. We have already defined up of that strategy. How to upgrade our circle. Containers I can also set our variable number of sidecar cassettes circle containers.

B

This is a sad cast back, so we use selectors to strike all the matching ports that we want to upgrade and you search out the sadqa' circle, container images and volumes. So if we were to impress circle continuity upgrade mounting such columns exactly Exeter best, basically saga said: decouple. Sadqa' container lifecycle management from the bank container.

A

Here the road map of the cross projector, we can, you can pick up a static, has information, accordionist description. Some enhancement has been done, such as parallel upgrade the static help, SATA ports and supports our car or worms, and some under some features like other partition. Support of frozen car is in process and not not low, not longer selector of apparatus. Our car is I'm scared, so we can do modded here, so we can so.

A

The user can get more details about the features and remember from the cross official website and discuss and understand some issues to ask you some more features.

B

So, actually, we have open issue for checking our latest status. So if you guys are interested how the upstream I mean the plenaries upstream, that cars can just subscribe our issue here and all your comments you can all comes to our issue and in contributions that are also overcome.

B

What's next, there are still some of the many challenges that we need. It should be addressed, so it is worse to pair to a passion to the first is resource allocations. So the question is: should the resource consumption of SATA cars it should be cabinet should be calculated into the whole boat? I mean you, gotta see the right graph.

B

We have a regional port which we will have two containers. Why is the standard crown and all normal containers? The other is the sadqa' containers and, through the static content, are consumed where needle very, very few cpu and memories. But this is the total sea by the total resource of the poll is calculated right, but actually all but actually most of the. In most cases, surgical content consume very few resources comparing to other containers. So so should we really want to calculate the statical container resources into the portal level?

B

So actually we have a different ID years so and as I also try quite aware ease, you can think well, it's a normal. The Asarco container should be calculated, but for us sadiq account and I wanted to net accessory jobs. They only need to so a quiet, very few resources, so we just the so in another way, which is a non-native way. So we don't want to put their answers here. So you guys want to have more discussions and feel free to talk to us.

B

Yeah and another question: is it is very hard to define the executive resource consumptions, so you can allocate a large number of resources or you can adjust a feel. So it's your own options, 235u. How you want how you want to do is circle containers.

B

Another another challenge is how to maintain the failure. Terrorists actually know that article contains only two accessory jobs right so that this accessory jobs should not be effective with thermal containers, so upgrading the static accountant images should we pack the powder down off area. Actually, the answer it depends. So this is another challenge that we should be considered and it should be talked discussed already read: eating tips.

A

So, have you been to visitor meat, meat of an aircraft and the first day we come to us and they go and we visit the USS Midway aquifer aircraft and we are met that there are too many buttons and switches.

A

You cannot imagine how difficult to handle this big ship at least Canaries not easy to handle, because with the help of a community and as more contribution from the other people and you can handle community and communities to Chris and cruise with easily a second pick rear is a different for by me and he was pretty impertinent. You operators, the hem of the Midway aircraft, sure for his Carriger.

A

So if you, if you have any questions and uncle nays Alabama cloud and Samsung IRAs open cross for the Labour results, quarter, please free and preferring to keep in touch with us. Yes, where to contact us, you can pay us our slack github by using our handler tissues and the my are shown here.

A

B

Progress and we try to affinity that so and possible. So you guys cast you out some town stages and we still have a lot um to discuss our containers. So if you guys have any questions, feel free to raise your hands.

A

C

Yeah I just want to make sure I was understanding it correctly so with the the sidecar set. Would that be its own? Independent deployment object outside of your primary application and then it's just injected to the pod. Alongside your app.

B

Actually, you just need to create a young, normal port and the static are being injected in the ApS civil. There will be a mutation web hook, controller that will try to inject its anchor content into our pod. So so don't even worry about. How do you inject the containers telling you to deploy a normal boat.

C

So would you be able to just update that singular object and then it would just inject in the new version of the sidecar. So in your example, if sto had a version update, you would just be able to update that singular sidecar set yeah.

B

Of course, like I, said we're trying to inject with the same container with the same name, and you have already defy the latest version of the statical containers, so we just try to inject the newbies to static content into your regional board. Actually, if you have deployed izalco cell, you turn it to deploy in it and I need to deploy another web whole container will mute. I, remember hook, and the South cousin sciatica says were to everything for your judgement you to to deploy suspect into the API server. Stop simple support.

A

A

More questions, I.

C

Won't want to leave.

D

Hey thank you for the talk. A challenge we face frequently is: we have tens of thousands of pods and all of them are running our service mesh sidecar. Yes, now, if you want to update the image, we need to bounce all of our pods. Obviously,.

C

D

All of our pots across.

C

D

Of our clusters does sidecar set Psalter problem, yeah.

B

Of course, normally you try to if you want to update this article content image, it's already boys support all right. You need to do that. Oppose the development control. We try to create a new port for you right. Yes, this is quite easy. Not very handy so oh you'd want to do is a fine great away. It is vodka Santa's sack aside. We will try to curl her partial update the set of cars. Also, you ever try to inject other containers. You can just make manager. Other circles says sidecars into another, separate workload.

B

This is different from the normal positive circle.

A

As you said, the saticons should be unique or armed with standard container, so it has its open type for think. Oh right, yeah.

B

There were two different content of cycles.

B

So if you guys have got any questions, feel free to talk to me, I will be staying here for several minutes Oh an hour any.

A

A

Okay, that's fun! That was cute Connor. Thank you for coming.