VMware / Contour Demos and Deep Dives

Starts at at 3:45. I'm joined by Steve Sloka of VMWare. We're talking about a set of #Kubernetes Operators that Steve maintains including Contour (Envoy Ingress) and Gimbal (multi-cluster ingress).

Support this show on Patreon! It's the #1 way to support me interviewing DevOps and container experts, and doing this Live Q&A. https://patreon.com/BretFisher

Show Notes:
https://projectcontour.io/
https://github.com/projectcontour/gimbal
https://github.com/operator-framework
https://operatorhub.io/
https://kubernetes.io/docs/concepts/extend-kubernetes/operator/
https://coreos.com/operators/
Talk on Contour/Gimbal from KubeCon https://youtu.be/-9U3bLPQDKk

You can get the best coupons for my Docker, Kubernetes, and Swarm courses at https://www.bretfisher.com/courses

Listen to my podcast of this show's past episodes at https://www.bretfisher.com/podcast

Signup for my newsletter to get short emails weekly full of useful things while learning and using containers
https://www.bretfisher.com/newsletter

No description provided.

Steve Sloka, core Contour maintainer, does a high-level overview of the Contour architecture, and answers questions from community members on Contour and its code base.

Steve Sloka shows how to use HTTPProxy, the evolution of IngressRoute, on Kubernetes with Envoy

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Contour is an open source Kubernetes ingress controller providing the control plane for the Envoy edge and service proxy.​ Contour supports dynamic configuration updates and multi-team ingress delegation out of the box while maintaining a lightweight profile.

Using Contour you can quickly deploy cloud-native applications, update Envoy configurations on the fly, and safely delegate ingress configuration to protect service access on multi-team Kubernetes clusters.

In this webinar, Steve Sloka, Sr. Member of Technical Staff at VMware, will share how to use Contour and Envoy efficiently in your Kubernetes clusters.

In this demo, Xiao Hu Gao is showing how to use Contour to configure Kubernetes Ingress in multiple different use cases.

Check out Contour here: https://projectcontour.io

This demo by Steve Sloka accompanies the blog post found at
https://projectcontour.io/kindly-running-contour

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

IngressRoute: A Path Towards a Better Ingress Object for Kubernetes - David Cheney, VMware

The limitations of the Kubernetes Ingress object have been papered over with annotations by the community for several years. Contour, the Ingress controller my team are building, introduced a new CRD which addresses the limitations of the incumbent Ingress object and unlocks the ability for teams and operators to utilise modern web application deployment practices in multi team and multi tenant Kubernetes clusters. In this talk I’ll explain, from the point of view of an Ingress controller implementor, the limitations of the ingress object, and how our IngressRoute CRD addresses the current shortcomings while making it possible for multiple teams to collaborate and delegate responsibility in multi tenant scenarios. A slide deck from an earlier version of this talk is available here: https://dave.cheney.net/paste/ingress-is-dead-long-live-ingressroute.pdf

https://sched.co/Nrn1

Contour is an ingress controller that configures Envoy based on Ingress and IngressRoute objects in a Kubernetes cluster. This post covers how contour supports advanced ingress functionality with its IngressRoute Custom Resource Definition (CRD). We'll explore some common ingress needs such as weighted load balancing and cover how multi-team ingress can be facilitated.

In this video, Steve Sloka explains how Contour makes Kubernetes Ingress easy to use, and how to enable blue/green deployments of your public facing apps.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Performance Testing Ingress for Internet-Scale Workloads - Alexander Brand, Heptio

Have you ever wondered how much ingress traffic a Kubernetes cluster could handle? How many nodes would it take to handle the traffic of an Alexa top-40 website? Understanding these numbers and how your ingress infrastructure scales is critical when it comes to deploying internet-accessible applications in production.    At Heptio, we needed to prove that our Envoy-based ingress projects, Contour and Gimbal, would scale to support millions of concurrent connections, thousands of backend services, and thousands of virtual hosts.    In this talk, we will explore the strategies and tools we used, the challenges we faced and the lessons we learned while running these tests. We will dive into kernel tuning, HTTP benchmarking, Envoy metrics, and more. We hope that talking about our experience will help when it comes to performance testing your cloud-native applications and infrastructure.

To learn more: https://sched.co/HChv

Come hang out with Joe Beda as he does a bit of hands on exploration of Kubernetes and related topics. Some of this will be Joe talking about the things he knows well. Some of this will be Joe exploring something new with the audience. Ask questions, comment and help decide where things go.

Heptio Contour is an "ingress controller" that uses Kubernetes objects to configure Envoy. With Contour v0.6 and v0.7, it has introduced a new CRD called the "IngressRoute". We are going to dig into what this is, how it works and why Contour went this direction.

Show notes: https://github.com/heptio/tgik/tree/master/episodes/056

Partial index:
- 00:22 Load Balancers and Ingress
- Network traffic comes the user, goes to a software load balancer, say ELB.
- ELB routes into a software load balancer in your cluster, say nginx.
- 00:34 Question from the audience: Is there a performance hit? In AWS the NLB is transparent to the network.
- nginx picks a service in a cluster to route traffic to. If you say foo.com, go to service 1. That service is considered the _upstream_. It's very confusing. "Down is upstream"
- 00:29 Limitations in Ingress protecting namespaces from stepping on each other
- 00:31 Clarifying what we mean by upstream
- 00:34 Installing Contour
- [Deploying on AWS with NLB](https://github.com/heptio/contour/blob/master/docs/deploy-aws-nlb.md)
- [Documentation](https://github.com/heptio/contour/tree/master/docs)
- 00:37 Investigating the yaml we use to install Contour
- Pro tip to new listeners: Joe will typically spend time going through yaml files before deployment to see exactly what something does on your cluster before applying. Good habit to get in to!
- 00:50 We're up and running!

We take a look at how you can use Contour to deliver multi-team ingress.

* https://blog.heptio.com/improving-the-multi-team-kubernetes-ingress-experience-with-heptio-contour-0-6-55ae0c0cadef
* https://github.com/heptio/contour/blob/master/docs/ingressroute.md

Ground up setup of Kubernetes ingress with heptio contour and IngressRoute.

https://github.com/heptio/contour/

Come hang out with Joe Beda as he does a bit of hands on exploration of Kubernetes and related topics. Some of this will be Joe talking about the things he knows well. Some of this will be Joe exploring something new with the audience. Ask questions, comment and help decide where things go.

This week we will be exploring a new project from Heptio: Contour! This is a new Kubernetes Ingress controller based on Envoy written by Dave Cheney.

Links:
* Contour: https://github.com/heptio/contour
* Envoy: https://www.envoyproxy.io/
* Envoy v2 API: https://github.com/envoyproxy/data-plane-api
* Kris and Justin's Cloud Native Infrastructure book: https://www.amazon.com/Cloud-Native-Infrastructure-Applications-Environment/dp/1491984309
* Weaveworks Flux: https://github.com/weaveworks/flux. Haven't played with it yet but it looks interesting.
* Zalando ALB controller: https://github.com/zalando-incubator/kube-ingress-aws-controller
* Glowforge: https://glowforge.com/
* My paperjs program for the slinky: https://j.hept.io/k8s-slinky

Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018 (http://bit.ly/KCCNCNA18) or in Shanghai, November 14-15 (http://bit.ly/kccncchina18)

How We Built Contour, and What You Can Learn From Our Experience - Dave Cheney, Heptio (Any Skill Level)

In 2017 Heptio launched Contour, a Kubernetes Ingress controller built using the Envoy proxy project from Lyft. This session will cover: - Why we chose Envoy as the data plane for our ingress controller. - How Contour works as a translator from Kubernetes to Envoy objects. The parts that were a good match, the parts that weren't, and how we dealt with it. - Traps, pitfalls, and ambiguities in the Ingress spec. - Specific patterns we developed to reliably watching many different kinds of API resources at the same time. The presentation will also give real world advice on the traps involved in the components that make up a management server, the k8s Go client, gRPC, and concurrency issues.

About Dave
You can talk to me about Go, Kubernetes, and Contour.
Join us for KubeCon + CloudNativeCon in Barcelona May 20 - 23, Shanghai June 24 - 26, and San Diego November 18 - 21! Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.