NoOpsが目指す未来とコンテナ技術

•

8 likes•3,255 views

Hiromasa Oka

JAPAN CONTAINER DAYS V18.12 （セッション 2E5）の講演資料です。 https://containerdays.jp/

Technology

NoOps Japan
@yokawasa
Japan Container Days V18.12
NoOps Japan
@OkaHiromasa
NoOps

Ops …
NoOps =
No “Unconfortable” Ops
” ”

NoOps Meetup
https://www.slideshare.net/irix_jp/the-noops-strategy-and-tactics

Layer 1
Layer 2
Layer 3
Layer 4
Layer 5
Layer 6
Layer 7
: Gabe Monroy on Twitter: "Strata of the Container Ecosystem
https://twitter.com/gabrtv/status/539805332432637952
https://trends.google.co.jp/trends/explore?date=today%205-
y&q=Kubernetes,Mesosphere,Docker%20Swarm

2013
Docker
2008
LXC
2014 2015 2016 2017 2018
Google
k8s
CNCF
2013.3
2014.6
k8s1.0
2015.7
Docker
Swam
2014.12
Mesosphere
DC/OS
2016.4
Docker
k8s
2017.10
k8s1.10
2018.3
EKS, AKS
GA
2018.6
k8s
( Docker & Kubernetes )

CNCF (Cloud Native Computing Fundation)
•
• Container network interface (CNI)
• Container Storage interface (CSI)
• k8s Kubernetes

Pod Phase, restartPolicy
Liveness & Readiness Probe
Rolling Update
Horizontal Pod Autoscaler
Cluster Autoscaler

Open Service Broker• Rook
• NATS
• Operators
etcd, HPA, PVC, MySQL,
Postgres, Mongodb,
Redis, Jaeger, Envoy,
Kafka, Prometheus, etc.
StatefulSet
DaemonSet Service Catalog

• Helm
• Draft
• Skaffold
• Spinnaker
• Jenkins X

Container
Runtime
•
•
SAST/DAST
RBAC
CIS benchmarks
Namespace
RBAC
Pod Security Policy
Network Policy
Runtime
Runtime
• cri-o
• gVisor
• Kata containers
Orchestrator
Runtime Environment

Logging
Observability
Tracing Visualization
Monitoring
Observability

Service Mesh
Data Plane
Control Plane
Envoyproxy Blog: Service mesh data plane vs. control plane
https://blog.envoyproxy.io/service-mesh-data-plane-vs-control-plane-2774e720f7fc
Control Plane
Data Plane Mesh
Data Plane
① Control Plane Data Plane

• Pilot:
• Mixer:
• Citadel:
https://istio.io/docs/concepts/what-is-istio/

PodPodPod
https://docs.microsoft.com/ja-jp/dotnet/standard/microservices-
architecture/implement-resilient-applications/implement-circuit-breaker-pattern
PodPodPod
PodPodPod

PodPodPod
PodPodPod
PodPodPod
Service Breaker Destination Rule (Istio)
https://istio.io/docs/tasks/traffic-management/circuit-breaking/
Service Mesh

Discovery & Load Balancing
round robin, random, weighted least request
Traffic Splitting
A/B testing, canary rollouts, staged rollouts
Traffic Control
Handling Failures
circuit breakers, timeouts, and retries
Fault Injections
delays or abort
Rate Limiting
Distributed Tracing
Collecting Logs & Metrics
Service Graph
Authentication Policy
Mutual TLS Authentication
Istio RBAC
https://istio.io/docs/concepts/what-is-istio/

k8s Service Mesh
Knative - https://github.com/knative/docs

https://www.slideshare.net/CiscoSP360/introducing-application-engineered-routing-powered-by-segment-routing

https://www.slideshare.net/Templarad/141022-java-hot-spot-vm-gc#5 https://www.slideshare.net/hiromasaoka/noops-88082246

https://istio.io/docs/concepts/security/

Figure 1-1. Traditional network security architecture

• Zero Trust Control plane vs Data plane
• Zero Trust Control plane
• Zero Trust Data Plane: Control Plane

ü
ž (Resiliency) NoOps
ü
ž
ü
ž Firewall Zero Trust

ü
ž (Resiliency) NoOps
ü
ž
ü
ž Firewall Zero Trust
The Network is the Computer.

What's hot

AWSでDockerを扱うためのベストプラクティスAmazon Web Services Japan

PostgreSQL 15 開発最新情報Masahiko Sawada

OpenStack入門 2016/06/27株式会社 NTTテクノクロス

Azure DevOps ハンズオン Vo.1 ~Azure Boards を用いたアジャイル計画とポートフォリオマネジメント~Takunori Minamisawa

レプリケーション遅延の監視について（第40回PostgreSQLアンカンファレンス@オンライン発表資料）NTT DATA Technology & Innovation

ZOZOTOWNのマルチクラウドへの挑戦と挫折、そして未来Hiromasa Oka

Dockerからcontainerdへの移行Akihiro Suda

JDK付属ツールにパッチを出しまくったワケYasumasa Suenaga

アーキテクチャから理解するPostgreSQLのレプリケーションMasahiko Sawada

Stargz Snapshotter: イメージのpullを省略しcontainerdでコンテナを高速に起動するKohei Tokunaga

PostgreSQLのバグとの付き合い方～バグの調査からコミュニティへの報告、修正パッチ投稿まで～（PostgreSQL Conference Japa...NTT DATA Technology & Innovation

入門！JenkinsShuntaro Saiba

世の中のPostgreSQLエンジニアのpsql設定（第34回PostgreSQLアンカンファレンス@オンライン発表資料）NTT DATA Technology & Innovation

Dockerfileを改善するためのBest Practice 2019年版Masahito Zembutsu

困らない程度のJDK入門Yohei Oda

OpenStack勉強会Yuki Obara

これからのJDK/JVM 何を選ぶ？どう選ぶ？Takahiro YAMADA

PostgreSQLレプリケーション10周年！徹底紹介！（PostgreSQL Conference Japan 2019講演資料）NTT DATA Technology & Innovation

分散ストレージ技術Cephの最新情報Emma Haruka Iwao

Amazon RDSを参考にしたとりまチューニングShunsuke Mihara

What's hot (20)

AWSでDockerを扱うためのベストプラクティス

PostgreSQL 15 開発最新情報

OpenStack入門 2016/06/27

Azure DevOps ハンズオン Vo.1 ~Azure Boards を用いたアジャイル計画とポートフォリオマネジメント~

レプリケーション遅延の監視について（第40回PostgreSQLアンカンファレンス@オンライン発表資料）

ZOZOTOWNのマルチクラウドへの挑戦と挫折、そして未来

Dockerからcontainerdへの移行

JDK付属ツールにパッチを出しまくったワケ

アーキテクチャから理解するPostgreSQLのレプリケーション

Stargz Snapshotter: イメージのpullを省略しcontainerdでコンテナを高速に起動する

PostgreSQLのバグとの付き合い方～バグの調査からコミュニティへの報告、修正パッチ投稿まで～（PostgreSQL Conference Japa...

入門！Jenkins

世の中のPostgreSQLエンジニアのpsql設定（第34回PostgreSQLアンカンファレンス@オンライン発表資料）

Dockerfileを改善するためのBest Practice 2019年版

困らない程度のJDK入門

OpenStack勉強会

これからのJDK/JVM 何を選ぶ？どう選ぶ？

PostgreSQLレプリケーション10周年！徹底紹介！（PostgreSQL Conference Japan 2019講演資料）

分散ストレージ技術Cephの最新情報

Amazon RDSを参考にしたとりまチューニング

Similar to NoOpsが目指す未来とコンテナ技術

Java in the Age of Containers and ServerlessMarkus Eisele

Rocking the microservice world with Helidon-LAOUCTour2023.pdfAlberto Salazar

Java in the age of containers - JUG Frankfurt/MMarkus Eisele

From Zero to GitOps HeroesWeaveworks

Apache Mesos at Twitter (Texas LinuxFest 2014)Chris Aniszczyk

SpringOne Platform recap 정윤진VMware Tanzu Korea

State of Akka 2017 - The best is yet to comeKonrad Malawski

DEVBCN_Jakarta EE! The future of enterprise application behind the myths. _Al...Alberto Salazar

Cross-platform UI Engines Rendering PerformanceIgalia

From Java Monoliths to K8sVMware Tanzu

From Monolith to K8s - Spring One 2020Mauricio (Salaboy) Salatino

LorraineJUG - WildFlyAlexis Hassler

Deploy Python apps in 5 min with a PaaSAppsembler

9 steps to awesome with kubernetesBaraniBuuny

$Mvvm is like born fraction$ $Mvvm is like born fraction$

Mvvm is like born fractionKen Haneda

Daniel Steigerwald - Este.js - konec velkého SchizmaDevelcz

Upgrading JavaScript to ES6 and using TypeScript as a shortcutChristian Heilmann

Full Stack Reactive with React and Spring WebFlux - Switzerland JUG 2020Matt Raible

Making ES6 available to all with ChakraCore and TypescriptChristian Heilmann

Orchestrating MicroservicesMauricio (Salaboy) Salatino

Similar to NoOpsが目指す未来とコンテナ技術 (20)

Java in the Age of Containers and Serverless

Rocking the microservice world with Helidon-LAOUCTour2023.pdf

Java in the age of containers - JUG Frankfurt/M

From Zero to GitOps Heroes

Apache Mesos at Twitter (Texas LinuxFest 2014)

SpringOne Platform recap 정윤진

State of Akka 2017 - The best is yet to come

DEVBCN_Jakarta EE! The future of enterprise application behind the myths. _Al...

Cross-platform UI Engines Rendering Performance

From Java Monoliths to K8s

From Monolith to K8s - Spring One 2020

LorraineJUG - WildFly

Deploy Python apps in 5 min with a PaaS

9 steps to awesome with kubernetes

$Mvvm is like born fraction$ $Mvvm is like born fraction$

Mvvm is like born fraction

Daniel Steigerwald - Este.js - konec velkého Schizma

Upgrading JavaScript to ES6 and using TypeScript as a shortcut

Full Stack Reactive with React and Spring WebFlux - Switzerland JUG 2020

Making ES6 available to all with ChakraCore and Typescript

Orchestrating Microservices

Recently uploaded

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...DianaGray10

Why Teams call analytics are critical to your entire businesspanagenda

FWD Group - Insurer Innovation Award 2024The Digital Insurer

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...apidays

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoffsammart93

CNIC Information System with Pakdata Cf In Pakistandanishmna97

MINDCTI Revenue Release Quarter One 2024MIND CTI

Architecting Cloud Native ApplicationsWSO2

Platformless Horizons for Digital AdaptabilityWSO2

Exploring Multimodal Embeddings with MilvusZilliz

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...apidays

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

presentation ICT roal in 21st century educationjfdjdjcjdnsjd

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Jeffrey Haguewood

DEV meet-up UiPath Document Understanding May 7 2024 AmsterdamUiPathCommunity

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWERMadyBayot

Vector Search -An Introduction in Oracle Database 23ai.pptxRemote DBA Services

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdfOrbitshub

Recently uploaded (20)

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Why Teams call analytics are critical to your entire business

FWD Group - Insurer Innovation Award 2024

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...

How to Troubleshoot Apps for the Modern Connected Worker

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

CNIC Information System with Pakdata Cf In Pakistan

MINDCTI Revenue Release Quarter One 2024

Architecting Cloud Native Applications

Platformless Horizons for Digital Adaptability

Exploring Multimodal Embeddings with Milvus

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

presentation ICT roal in 21st century education

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

Vector Search -An Introduction in Oracle Database 23ai.pptx

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

NoOpsが目指す未来とコンテナ技術

1. NoOps Japan @yokawasa Japan Container Days V18.12 NoOps Japan @OkaHiromasa NoOps

6. Ops …

7. Ops … NoOps = No “Unconfortable” Ops ” ”

9. NoOps Meetup https://www.slideshare.net/irix_jp/the-noops-strategy-and-tactics

10.

11. SRE

12.

13.

14.

15.

16.

17.

18. NoOps Failure

19. (Resiliency) (VM)

20. (Resiliency) (VM)

21.

22.

23.

24. Layer 1 Layer 2 Layer 3 Layer 4 Layer 5 Layer 6 Layer 7 : Gabe Monroy on Twitter: "Strata of the Container Ecosystem https://twitter.com/gabrtv/status/539805332432637952 https://trends.google.co.jp/trends/explore?date=today%205- y&q=Kubernetes,Mesosphere,Docker%20Swarm

25. 2013 Docker 2008 LXC 2014 2015 2016 2017 2018 Google k8s CNCF 2013.3 2014.6 k8s1.0 2015.7 Docker Swam 2014.12 Mesosphere DC/OS 2016.4 Docker k8s 2017.10 k8s1.10 2018.3 EKS, AKS GA 2018.6 k8s ( Docker & Kubernetes )

26. CNCF (Cloud Native Computing Fundation) • • Container network interface (CNI) • Container Storage interface (CSI) • k8s Kubernetes

27.

28. Pod Phase, restartPolicy Liveness & Readiness Probe Rolling Update Horizontal Pod Autoscaler Cluster Autoscaler

29. Open Service Broker• Rook • NATS • Operators etcd, HPA, PVC, MySQL, Postgres, Mongodb, Redis, Jaeger, Envoy, Kafka, Prometheus, etc. StatefulSet DaemonSet Service Catalog

30. • Helm • Draft • Skaffold • Spinnaker • Jenkins X

31. Container Runtime • • SAST/DAST RBAC CIS benchmarks Namespace RBAC Pod Security Policy Network Policy Runtime Runtime • cri-o • gVisor • Kata containers Orchestrator Runtime Environment

32. Logging Observability Tracing Visualization Monitoring Observability

33.

34.

35.

36. Service Mesh Data Plane Control Plane Envoyproxy Blog: Service mesh data plane vs. control plane https://blog.envoyproxy.io/service-mesh-data-plane-vs-control-plane-2774e720f7fc Control Plane Data Plane Mesh Data Plane ① Control Plane Data Plane

37. • Pilot: • Mixer: • Citadel: https://istio.io/docs/concepts/what-is-istio/

38. Service Mesh ②

39. PodPodPod https://docs.microsoft.com/ja-jp/dotnet/standard/microservices- architecture/implement-resilient-applications/implement-circuit-breaker-pattern PodPodPod PodPodPod

40. PodPodPod PodPodPod PodPodPod Service Breaker Destination Rule (Istio) https://istio.io/docs/tasks/traffic-management/circuit-breaking/ Service Mesh

41. Discovery & Load Balancing round robin, random, weighted least request Traffic Splitting A/B testing, canary rollouts, staged rollouts Traffic Control Handling Failures circuit breakers, timeouts, and retries Fault Injections delays or abort Rate Limiting Distributed Tracing Collecting Logs & Metrics Service Graph Authentication Policy Mutual TLS Authentication Istio RBAC https://istio.io/docs/concepts/what-is-istio/

42. k8s Service Mesh Knative - https://github.com/knative/docs

43. NoOps

44. NoOps

45.

46.

47.

48.

49.

50. Ops

51.

52.

53. The Network is the computer.