Upload
others
View
17
Download
0
Embed Size (px)
Citation preview
Azure Kubernetes Service
Introduction
Resources Product deep dive
AKSOverview
Introduction
Topscenarios
Customer stories
Open source culture
Azure Container TechnologiesAzure Container Service (AKS)
Azure Container Instances (ACI)
Azure Container Registry
Open Service Broker API (OSBA)
Release Automation Tools
IaaS
PaaS
Azure services
SQL Database
Redis Cache
CosmosDB
And more!
Partner services
OpenShift
Pivotal Cloud Foundry
Docker Enterprise Edition
Mesosphere
DC/OS
Azure
Azure Container Registry (ACR)
OSBA
Batch
Azure Container Instances (ACI)
Azure Virtual Machines
Virtual Machine Scale Sets (VMSS)
Service Fabric
Virtual kubelet
App Service
Azure Container Service (AKS)
ACS Engine
Kubernetes: the industry leading orchestrator
Portable
Public, private, hybrid,
multi-cloud
Extensible
Modular, pluggable,
hookable, composable
Self-healing
Auto-placement, auto-restart,
auto-replication, auto-scaling
AKS Overview
Resources Product deep dive
AKSOverview
Introduction
Topscenarios
Customer stories
Open source culture
AKS: Simplify the deployment, management,
and operations of Kubernetes
Deploy and manage
Kubernetes with ease
Scale and run applications
with confidence
Secure your Kubernetes
environment
Accelerate containerized
application development
Work how you want with
open-source tools & APIs
Set up CI/CD in a
few clicks
1. Kubernetes users communicate
with API server and apply desired
state
2. Master nodes actively enforce
desired state on worker nodes
3. Worker nodes support
communication between
containers
Kubernetes 101
Kubernetes
control
API server
replication, namespace,
serviceaccounts, etc.
-controller-
manager -scheduler
etcd
Master node
Worker node
kubelet kube-proxy
Docker
Prod Prod
Containers Containers
Worker node
kubelet kube-proxy
Docker
Prod Prod
Containers Containers
Internet
4. Worker nodes support
communication from the Internet
Customer VMs
How managed Kubernetes on Azure works
• Automated upgrades, patches
• High reliability, availability
• Easy, secure cluster scaling
• Self-healing
• API server monitoring
• At no charge
Kubernetes
API endpoint
App/
workload
definitionUser
Azure managed control plane
Docker
Pods
Docker
Pods
Docker
Pods
Docker
Pods
Docker
Pods
Schedule pods over
private tunnel
From infrastructure to innovation
Responsibilities DIY with Kubernetes Managed Kubernetes on Azure
Containerization
Application iteration,
debugging
CI/CD
Cluster hosting
Cluster upgrade
Patching
Scaling
Monitoring and logging
Customer
Microsoft
Managed Kubernetes
empowers you to do more
Focus on your containers
and code, not the plumbing
of them
Azure Kubernetes momentum
10xKubernetes on Azure
usage grew 10x
5xKubernetes on Azure
customers grew 5x
Last 12 months
Deploy and manage Kubernetes with ease
Task The old way With Azure
Create a cluster Provision network and VMs
Install dozens of system components including etcd
Create and install certificates
Register agent nodes with control plane
az aks create
Upgrade a cluster Upgrade your master nodes
Cordon/drain and upgrade worker nodes individually
az aks upgrade
Scale a cluster Provision new VMs
Install system components
Register nodes with API server
az aks scale
Azure makes Kubernetes easy
Database tier
AKS production cluster
Source
code control
Helm
chart
Inner loop
Test
Debug
Azure
DevSpaces
AKS dev
cluster
Azure
Container
Registry
CI/CD
Azure Pipelines/
DevOps Project
Auto-build
Business tier
Web tier
Azure
Monitor
AKS: Simplify the deployment, management,
and operations of Kubernetes
Deploy and manage
Kubernetes with ease
Scale and run applications
with confidence
Secure your Kubernetes
environment
Accelerate containerized
application development
Work how you want with
open-source tools & APIs
Set up CI/CD in a
few clicks
Control access through AAD
and RBAC
Safeguard keys and
secrets with Key Vault
Secure network
communications with
VNET and CNI
Compliant Kubernetes
service with
certifications covering
SOC, HIPAA, and PCI
Azure Container Registry
1. Developer/CI system
builds container image
2. Image pushed to Azure
Container Registry
3. Azure Container Registry
quarantines image until
scanning passes
Azure Container registry
4. Azure Container Registry
scans content leveraging Aqua,
Twistlock
5. Azure Container Registry
publishes the image to the
repository
Developer
Container
image
Fails Aqua and Twistlock
container security
Passes
Repository
Secure network communications with VNET and CNI
AKS subnet
Backend
services subnet
Azure VNet A
On-premises
infrastructure
Enterprise
system
Other peered VNets
VNet B
VNet peering
Azure
Express
Route
AKS cluster SQL Server
1. Uses Azure subnet for both your
containers and cluster VMs
2. Allows for connectivity to existing
Azure services, Express Route to
on-premises infrastructure or
other peered VNets
AKS VNet integration works
seamlessly with your existing
network infrastructure
Identity and access management through AAD and RBAC
1. The client application
authenticates to the AAD token
issuance endpoint and requests
an access token
2. The AAD token issuance
endpoint issues the access token
Azure delivers a streamlined identity
and access management solution
with Azure Active Directory (AAD)
and Azure Container Services (AKS)
AKS
Azure Active
Directory
Client
application
Token
Token
3. The access token is used to
authenticate to the secured
resource
4. Data from the secured resource is
returned to the web application
Scale and run with confidence
Built-in
auto scaling
Global
data center
Geo-replicated
container registry
Elastically burst
using ACI
Browser
Traffic
manager
Geo-replicated
container registry
AKS clusters
ACI connector
Azure Container Instances
Pod Pod
Pod Pod
Pod Pod
Top scenarios
Resources Product deep dive
AKSOverview
Introduction
Topscenarios
Customer stories
Open source culture
Performance
Low latency
processing
Machine learning
Portability
Build once, run
anywhere
IoT
Agility
Faster application
development
Microservices
Top scenarios for Kubernetes on Azure
Cost saving
without refactoring
your app
Lift and shift to containers
Open source culture
Resources Product deep dive
AKSOverview
Introduction
Topscenarios
Customer stories
Open source culture
AKS: Simplify the deployment, management,
and operations of Kubernetes
Deploy and manage
Kubernetes with ease
Scale and run applications
with confidence
Secure your Kubernetes
environment
Accelerate containerized
application development
Work how you want with
open-source tools & APIs
Set up CI/CD in a
few clicks
Development DevOps Monitoring Networking Storage Security
Take advantage of
services and tools
in the Kubernetes
ecosystem
…or…
Leverage growing
Azure support
RBAC
VS Code
Azure
DevOps
ARM
Azure Monitor Azure VNET Azure Storage
Azure Container Registry
AAD
Key Vault
Work how you want with opensource tools and APIs
• Easily connect to SLA-backed
Azure services with OSBA
Work how you want with opensource tools and APIs
OSBA
Azure services
AKS
ACS Engine
SQL
Database
Event
Hubs
Redis
Cache
MySQL
Database
Cosmos
DB
PosgreSQL
Database
Service
Bus
Azure
Storage
Azure is
a strong
platform for
Open Source
“Microsoft Joins Cloud Native Computing Foundation as Platinum Member”
Linux VMs are
growing at ~2
times Windows
VMs today
Microsoft
announced
GitHub
acquisition
1 in 3 VMs on
Azure are Linux
~60% of 3rd
party Azure
Marketplace
images are
open source Partnerships
Azure + open source momentum
#2 overall
individual
contributor to
Kubernetes
(Brendan Burns)
#4 overall individual
contributor to Docker
(John Howard)
#1-3 overall
individual
contributors to
Helm
70 Microsoft
employees have
made
contributions to
Kubernetes
Microsoft contributes open source containers
Resources
Resources Product deep dive
AKSOverview
Introduction
Topscenarios
Customer stories
Open source culture
• Azure Kubernetes Service (AKS)
• Containers on Azure pitch deck
• Smart Hotel 360 Demo
• Documentation resources
• Ebook for distributed systems
• Distributed system HoL
• AKS HoL
Sign up for a free Azure account
Hone your skills with Azure training
Check out the Azure container videos page
Get the code from GitHub
AKS resources