Infrastructure as Code Containers Change the Game Argo CD Flux Open Cluster Management Other GitOps Tools PipeCD Keptn Pulumi Kubernetes Operator Summary Storing Secret References Conclusion 41 Chapter 8–Other Considerations Multicluster Management Non-Declarative Infrastructure Security Base Image Selection Everything as where I wanted things to head: “To me, GitOps is the holy grail of software and infrastructure management.” At the time, someone was trying to do better: A small, scrappy startup called Weaveworks. They’re

at managing the underlying infrastructure of an application. It utilizes Git as the source code management tool for managing the infrastructure code. In other words, GitOps is an evaluation of infrastructure infrastructure management solutions such as Terraform. The goal of GitOps is to simplify and streamline the development process. This leads to building reproducible infrastructure with proper state management, which which both: Increases the overall visibility Reduces the management overhead of the application infrastructure GitOps allows developers or the Ops team to declare their infrastructure as code and version

NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used few years, the number of tools and systems needed to manage version control, configuration management, Infrastructure as Code, CI/CD, and observability have drastically increased. This puts an additional tenets: DECLARATIVE DESCRIPTION Thanks to modern Infrastructure as Code (IaC) and configuration management tools like Terraform, you can define, configure, and spin up your entire application declaratively

（Gateway）才能互通。但这样的划分在某些情况下显得并不十分灵活。 为此 IP 网络还允许划分成更小的网络，称为子网（Subnet）。 ITSM 全称 IT Service and Management，是诸多大中型企业采用的 IT 变更请 求管理工具，用于 IT 部门面向应用业务开发测试、业务部门以及 IT 部门内 部成员提交 IT 服务请求，流程管理、流程审批，派发，沟通反馈操作结果 Terminal 方案，交互界面美观、用户体验好。采纳分布式架构，支持多机 房跨区域部署，支持横向扩展，无资产数量及并发限制。 CMDB 全称为配置管理数据库，Configuration Management Database, 用于保 存构筑企业 IT 及应用的资源信息、资源归属信息、应用系统应用信息、以 及资源与资源关系信息，为 IT 系统运维、运营、管理，应用开发测试运维 提供准确、 配置云管服务器 hosts 文件 docker-compose.yml 文件（management-center 和 vm-service 配置部分）： management-center: image: xxx.xxx.xxx.xxx/management-center container_name: management-center environment: HOST_HOSTNAME:

automate the deployment and management of applications and infrastructure using Git as the single source of truth. It simplifies and standardizes the deployment and management of complex systems, improves workloads. The Philosophy of GitOps GitOps automates application code deployments and infrastructure management. Adhere to best practices by creating separate repos for your application code, and configs deployment environment. Git Repo 1 Git Repo 2 CI/CD Infrastructure as Code Application Config Management Application Code | 06 3 KEY ELEMENTS FOR YOUR GITOPS STRATEGY Copyright 2024 Akamai Technologies

in the talk ● Istio multicluster installation and setup ● All configurations in files ● Traffic management offerings in action ● GitOps and declarative setup ● Multicluster challenges Target Audience What covered in the talk ● Multiclutser observability challenges ● Security considerations ● Secret management ● GitOps implementation details Target Audience What to expect Istio Multicluster First Demo About UPSIDER currently has 4 clusters with Istio multicluster setup. Benefits are: ● Separate cluster management for better control and audit ● Redundancy and High Availability But it does (did) pose challenges

role as an internal service provider, the platform team must take a strategic approach to resource management. “The challenge is not in the technology itself, or the tools... The challenge is mainly changing for the industry. It is a replicable, automated, immutable construct where your change management, everything happens in Git…. Everything is founded on that infrastructure as GitOps mindset where rollback specific changes if necessary. This kind of precise control over deployments and change management is a hallmark of the platform approach to software delivery. Thanks to GitOps, MediaMarktSaturn

开发工具 DevOps 日志 监控告警 Lifecycle Management 网络 计算 存储 数据库 System Resource Monolithic Sprint Cloud Coding VScode EFK Prometheus Serverless Tencent Serverless System Resource Mysql Ceph Docker KVM 业务运维 Function IBM Open Wisk Tencent Cloud SCF Ali Cloud FC Firebase Serverless：云计算新趋势 … System Resource Serverless 介绍 什么是 Serverless Application ❑ 无服务器：不代表真的不需要服务器，只不过服务器由云厂商维护 ❑ 是一种软件系统架构思想和方法，不是软件框架、类库或者工具 是一种软件系统架构思想和方法，不是软件框架、类库或者工具 ❑ 核心思想：无须关注底层资源，比如：CPU、内存和数据库等，只 需关注业务开发 用户运维 Cloud Vendor System Resource Serverless 化 / Serverless … CaaS (Compute as a Service) … BaaS (Backend as a Service) Serverless ≈ CaaS

Auditing 1.9. Running at scale 1.10. GitOps and Helm 1.11. Continuous Deployment 1.12. Secrets management 2. A Vision of GitOps 2.0 2.1. Visibility into the whole software lifecycle 2.2. Observability classic examples are: ● The replica count if you have an autoscaler in your cluster ● The resource limits if you have an optimizer in your cluster ● Several other extra properties added by external the whole idea of having your cluster state the same as Git is not true anymore. Secrets management is one of those areas where each company does their own thing, so at the very least I would expect

is an open-source system for automating deployment, scaling, and management of containerized applications. TLDR; It is a resource scheduler KUBERNETES 101 6 Node Node Node Node Node Node Node syncPolicy: automated: prune: false selfHeal: false ● Argo CD Application is a Custom Resource (CR) that defines the app in a declarative manner ● Application definition includes: ○ Name leverage kubernetes primitives where possible: ○ Init containers ○ Jobs ○ Operators ● Argo CD Resource Hooks ○ Hooks are ways to run scripts before, during, and after a Sync operation ○ Hooks can