automation/scripting, declarative environment minimizes or eliminates this need ● Declarations are yaml files which are easily stored and managed in git OpenShift GitOps Principles ● Separate application source not a CI tool What is an Argo CD Application? apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name: product-catalog-dev namespace: argocd spec: destination: namespace: argocd server: yaml everywhere? Kustomize - What is it? Kustomize lets you customize raw, template-free YAML files for multiple purposes, leaving the original YAML untouched and usable as is. ● Kustomize is a patching

has fostered a whole new way of thinking about application deployment, because con- figuration files are used to declare the creation of container instances and dictate how the platform goes on to deploy software infrastructure at a datacenter using configuration files that are both ma- chine-readable and human-readable. The configuration files are machine-readable in a structured format (usually YAML) maintain them easily and immediately understand what they define. You can think of configuration files as the “code” for the infrastructure. Thus, Infrastructure as code lets administrators leave behind

│ ├── ingress.yaml │ ├── prometheusrule.yaml │ ├── deployment.yaml │ └── service.yaml ├── files ## templates 依赖的各种文件 │ ├── http-probe.sh │ ├── offline 有了这样的模板，是否能直接apply使用 呢？ GitOps最佳实践 第三部分 ArgoCD的设计 什么是GitOps apiVersion: apps/v1 kind: Deployment metadata: name: demo spec: replicas: 3 ... GitOps in Horizon Horizon作为面向用户的统一界面，用户不感知 gitlab 和 argo

image OpenShift Builds Application image GENERAL DISTRIBUTION OpenShift Builds 15 kind: Build metadata: name: myapp-buildpack spec: source: url: https://github.com/myorg/myapp strategy: image: paketobuildpacks/builder:full output: image: quay.io/myorg/myapp:v1 kind: Build metadata: name: myapp-s2i spec: source: url: https://github.com/myorg/myapp strategy: name: source-to-image python3 ... OPENSHIFT PIPELINES Tekton Concepts: Task 23 OPENSHIFT PIPELINES kind: Task metadata: name: buildah spec: params: - name: IMAGE steps: - name: build image: quay.io/b

gitopsservice -n openshift-gitops apiVersion: pipelines.openshift.io/v1alpha1 kind: GitopsService metadata: name: cluster spec: runOnInfra: true $ oc adm taint nodes -l node-role.kubernetes.io/infra subscription openshift-gitops-operator apiVersion: operators.coreos.com/v1alpha1 kind: Subscription metadata: name: openshift-gitops-operator namespace: openshift-gitops-operator spec: config: nodeSelector:

CONFIGURATION DRIFT DETECTION A GitOps approach suggests that your declarative configuration files and application code should be stored together in the Git repository. This is what we call the and SRE teams are adopting GitOps so that you can store all your infrastructure configuration files as code. GitOps innately has Infrastructure as code as one of its characteristics. STRONGER below: HELM Helm is based on the parameterized templating approach where all resource definition files of applications are templated to make them customizable based on the requirement. Nowadays, it is

microservice repo and in that repo, you bundle your application code along with deployment YAML manifest files or a Helm chart that define how your application will run in your cluster. When you push that code com/microservices-demo/microservices-demo - This is the repo that stores the Kubernetes configuration files for the application. The Weave Cloud deployment agent automatically updates the front- end YAML manifest ssh URL with the path to the YAML files for the microservices-demo: SSH URL: git@github.com:/microservices-demo Path to YAML files: deploy/kubernetes/manifests

Target audience ✅ If you want to ... ● play with Istio offerings ● see the actual configuration files ● understand how Istio can be used / installed with other services ● know what multicluster challenges detail with ready-to-be-used configuration files. #IstioCon What is covered in the talk ● Istio multicluster installation and setup ● All configurations in files ● Traffic management offerings in action

staging- api, testing-api, pre-prod-api, Prod-api) 6 解決辦法? •寫5份deployment 的yaml 嗎？ •需要維護5份yaml files •一份deployment yaml在用sed replace嗎? •容易出錯 •把他打包成Helm chart嗎？在帶入variable 嗎？ •複雜度過高 7 Kustomize

GitOps is based on the declarative nature of Kubernetes and its automatic deployment of committed files. GitOps leverages these attributes according to the four following principles: Kubernetes is just