How to Operate Kubernetes CI/CD Pipelines at Scale
Download as PPTX, PDF0 likes457 views
Kubernetes is viewed as an ideal platform for CI/CD deployments, offering benefits like real-time deployment status and simplified monitoring, but managing it at enterprise scale poses significant operational challenges such as talent scarcity and the need for day-2 operations. Platform9 provides a managed service that streamlines Kubernetes management across various infrastructures, ensuring high availability and compliance while reducing complexity and operational costs. Additionally, tools like Xray enhance security by performing deep component scanning and continuous impact analysis for vulnerabilities.
How to Operate Kubernetes CI/CD Pipelines at Scale
- 1. 1
- 3. Opportunities and Challenges with Kubernetes for CI/CD deployments
- 4. KubeCon Barcelona Survey: CI/CD is the top use case
- 5. Why Kubernetes is ideal for CI/CD ● Centralized configuration ● Centralized multi-cloud deployment ● Multiple teams, multi-tenancy, independent codebases ● Real-time deployment status and unlimited history ● Built-in health checks ● Rolling updates and rollbacks ● Simplified monitoring (with prometheus) ● Simplified Service Discovery
- 6. Running Kubernetes at enterprise scale is a huge operational challenge High caliber cloud talent is scarce and hard to hire and retain for enterprise Cloud technologies are built by open-source, don’t solve for day-2 operations Need to manage across several data-centers and public cloud environments New cloud technologies like Kubernetes are constantly evolving Multi-Cloud Ever-Changing Landscape Day-2 Operations Talent Scarcity
- 7. Platform9 delivers Kubernetes as a SaaS- managed service 7 Traditional Data Centers Public Clouds Web-scale automation across any infrastructure Edge Platform9 Admin Developer
- 8. Eliminate complexity of Day 2 operations • Guaranteed 99.9% uptime SLA • Round the clock real-time monitoring and anomaly detection • High availability • Automated diagnostics, alerts and troubleshooting • Zero-touch upgrades and security patches • Access to Certified Kubernetes Experts for 24x7 remediation • Multi-cluster management Eliminate Operational Complexity!
- 9. Centralized Management across from bare-metal to public clouds • Centralized management, visibility, control over public, private, and at the edge • Ensure compliance and control across all infrastructure • Reduce cloud costs and improve utilization • Eliminate shadow IT Paris New York Tokyo Sunnyvale Public CloudPrivate Cloud
- 10. Application catalog: All of your DevOps automation tools in one place for single-click deployment to any cloud • Hundreds of pre-built applications from the Kubernetes community with one click deployment • Increase developer productivity • Streamlines operations and ensures compliance and security
- 11. DevOps CI/CD Automation: From Code to Production
- 12. Copyright @ 2019 JFrog - All rights reserved. o Immutable Dependencies ■ A repeatable process requires repeatable inputs o Lost Dependencies ■ Remember leftpad? o Trust ■ Do you trust all the code you see on the internet? In software, Immutable and repeatable are really important Copyright @ 2019 JFrog - All rights reserved.
- 13. Copyright @ 2019 JFrog - All rights reserved. A Pipeline to Containers Copyright @ 2019 JFrog - All rights reserved. Do we have an existing pattern? 0 0 1 1 0 1 0 1 P I P E L I N E
- 14. Copyright @ 2019 JFrog - All rights reserved. Planning your pipelines Copyright @ 2019 JFrog - All rights reserved. Version Control System Build Deploy Test Measure & Validate Trace - Reproduce - Analyze
- 27. Copyright @ 2019 JFrog - All rights reserved. Xray = Security SECURITY
- 28. Copyright @ 2019 JFrog - All rights reserved.Copyright @ 2019 JFrog - All rights reserved. How Does Xray Protect You? o Deep Recursive Scanning: recursively drills down and analyzes even the smallest binary component that affects your software o Continuous Impact Analysis: continuously scans and analyzes existing components, even those long since deployed to production, and provides alerts and notifications for just-discovered vulnerabilities. o Custom API-Driven Automated Analysis: Add custom automated analyses through an open REST API
- 29. Copyright @ 2019 JFrog - All rights reserved. Promotion Copyright @ 2019 JFrog - All rights reserved. No extra disk space consumed by Artifactory
- 30. Demo
- 31. Copyright @ 2019 JFrog - All rights reserved.Copyright @ 2019 JFrog - All rights reserved. 5 Step Cloud Native Example
- 32. Q&A