Infrastructure as Code Containers Change the Game Argo CD Flux Open Cluster Management Other GitOps Tools PipeCD Keptn Pulumi Kubernetes Operator Summary 7–Handling Secrets Common Patterns Storing Encrypted Secrets Sealed Secrets Challenges of Storing Encrypted Secrets Storing Secret References External Secrets Challenges Storing Secret References Conclusion 41 Chapter 8–Other Considerations Multicluster Management Non-Declarative Infrastructure Security Base Image Selection Everything as

Auditing 1.9. Running at scale 1.10. GitOps and Helm 1.11. Continuous Deployment 1.12. Secrets management 2. A Vision of GitOps 2.0 2.1. Visibility into the whole software lifecycle 2.2. Observability Achieving Continuous deployment and full Git automation 2.5. Built-in handling for rollbacks and secrets 2.6. Running GitOps at scale 2.7. Making the vision for GitOps 2.0 a reality 3. GitOps 2 automated process ● Deployments, tests, and rollbacks controlled through Git flow ● Integration with secrets providers ● No hand-rolled deployments: If you want to change the state you need to perform a

Cluster Node 1 Kubernetes (K8s) is an open-source system for automating deployment, scaling, and management of containerized applications. TLDR; It is a resource scheduler KUBERNETES 101 6 Node Node Repo structure for manifests: ○ Monorepo; or ○ Separate repos for base/environments ● Managing secrets ● Order dependent deployments ● Non-declarative requirements ● Integrating with CI/CD tools (Jenkins yaml └── 08-routes └── github-webhook-event-listener.yaml Argo CD - Managing Secrets How do I store Kubernetes secrets securely in git when a secret is not encrypted and is only base64? ● Externalize

NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used few years, the number of tools and systems needed to manage version control, configuration management, Infrastructure as Code, CI/CD, and observability have drastically increased. This puts an additional tenets: DECLARATIVE DESCRIPTION Thanks to modern Infrastructure as Code (IaC) and configuration management tools like Terraform, you can define, configure, and spin up your entire application declaratively

as an internal service provider, the platform team must take a strategic approach to resource management. “The challenge is not in the technology itself, or the tools... The challenge is mainly building changing for the industry. It is a replicable, automated, immutable construct where your change management, everything happens in Git…. Everything is founded on that infrastructure as GitOps mindset where rollback specific changes if necessary. This kind of precise control over deployments and change management is a hallmark of the platform approach to software delivery. Thanks to GitOps, MediaMarktSaturn

command or script in a container ● Kubernetes container spec ○ Env vars ○ Volumes ○ Config maps ○ Secrets - name: build image: maven:3.6.0-jdk-8-slim command: [“mvn”] args: [“install”] - name: deployments in the OpenShift Console Automated Argo CD install and upgrade Multi-cluster config management Opinionated GitOps bootstrapping Deployments and environments insights OPENSHIFT GITOPS

at managing the underlying infrastructure of an application. It utilizes Git as the source code management tool for managing the infrastructure code. In other words, GitOps is an evaluation of infrastructure infrastructure management solutions such as Terraform. The goal of GitOps is to simplify and streamline the development process. This leads to building reproducible infrastructure with proper state management, which which both: Increases the overall visibility Reduces the management overhead of the application infrastructure GitOps allows developers or the Ops team to declare their infrastructure as code and version

in the talk ● Istio multicluster installation and setup ● All configurations in files ● Traffic management offerings in action ● GitOps and declarative setup ● Multicluster challenges Target Audience What covered in the talk ● Multiclutser observability challenges ● Security considerations ● Secret management ● GitOps implementation details Target Audience What to expect Istio Multicluster First Demo About UPSIDER currently has 4 clusters with Istio multicluster setup. Benefits are: ● Separate cluster management for better control and audit ● Redundancy and High Availability But it does (did) pose challenges

（Gateway）才能互通。但这样的划分在某些情况下显得并不十分灵活。 为此 IP 网络还允许划分成更小的网络，称为子网（Subnet）。 ITSM 全称 IT Service and Management，是诸多大中型企业采用的 IT 变更请 求管理工具，用于 IT 部门面向应用业务开发测试、业务部门以及 IT 部门内 部成员提交 IT 服务请求，流程管理、流程审批，派发，沟通反馈操作结果 Terminal 方案，交互界面美观、用户体验好。采纳分布式架构，支持多机 房跨区域部署，支持横向扩展，无资产数量及并发限制。 CMDB 全称为配置管理数据库，Configuration Management Database, 用于保 存构筑企业 IT 及应用的资源信息、资源归属信息、应用系统应用信息、以 及资源与资源关系信息，为 IT 系统运维、运营、管理，应用开发测试运维 提供准确、 配置云管服务器 hosts 文件 docker-compose.yml 文件（management-center 和 vm-service 配置部分）： management-center: image: xxx.xxx.xxx.xxx/management-center container_name: management-center environment: HOST_HOSTNAME:

automate the deployment and management of applications and infrastructure using Git as the single source of truth. It simplifies and standardizes the deployment and management of complex systems, improves workloads. The Philosophy of GitOps GitOps automates application code deployments and infrastructure management. Adhere to best practices by creating separate repos for your application code, and configs deployment environment. Git Repo 1 Git Repo 2 CI/CD Infrastructure as Code Application Config Management Application Code | 06 3 KEY ELEMENTS FOR YOUR GITOPS STRATEGY Copyright 2024 Akamai Technologies