Infrastructure as Code Containers Change the Game Argo CD Flux Open Cluster Management Other GitOps Tools PipeCD Keptn Pulumi Kubernetes Operator Summary Storing Secret References Conclusion 41 Chapter 8–Other Considerations Multicluster Management Non-Declarative Infrastructure Security Base Image Selection Everything as where I wanted things to head: “To me, GitOps is the holy grail of software and infrastructure management.” At the time, someone was trying to do better: A small, scrappy startup called Weaveworks. They’re

NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used few years, the number of tools and systems needed to manage version control, configuration management, Infrastructure as Code, CI/CD, and observability have drastically increased. This puts an additional tenets: DECLARATIVE DESCRIPTION Thanks to modern Infrastructure as Code (IaC) and configuration management tools like Terraform, you can define, configure, and spin up your entire application declaratively

Auditing 1.9. Running at scale 1.10. GitOps and Helm 1.11. Continuous Deployment 1.12. Secrets management 2. A Vision of GitOps 2.0 2.1. Visibility into the whole software lifecycle 2.2. Observability the whole idea of having your cluster state the same as Git is not true anymore. Secrets management is one of those areas where each company does their own thing, so at the very least I would expect anything else regarding the software lifecycle. Even if this was true, I consider secret management and automatic rollbacks an integral part of the deployment process. Unfortunately, both areas

腾讯云 Serverless 产品架构师 核心诉求 Application Application Architecture 开发工具 DevOps 日志 监控告警 Lifecycle Management 网络 计算 存储 数据库 System Resource Monolithic Sprint Cloud Coding VScode EFK Prometheus Serverless Complex Scaling 稳定安全 Reliability, Security 只关注核心业务 核心业务逻辑 Core Business Code 数据库读写，文件存储 DB & Storage THANKS ServerlessCloudNative 用户Q群：537539545

deployments in the OpenShift Console Automated Argo CD install and upgrade Multi-cluster config management Opinionated GitOps bootstrapping Deployments and environments insights OPENSHIFT GITOPS Application Scoped (Pull) Cluster Scoped (Pull) OpenShift OpenShift Auth Registry Networking Storage Install Operators Namespaces ... OpenShift App A NS NS NS App A App B NS NS NS App B

访问，给访问带来麻烦，因此需要预留固定的公网 IP 地址，绑定给特 定的虚拟机使用，使得重启后，通过固定的 IP 地址仍然能够访问。 对象存储 是公有云提供的一种新型的存储服务，英文是 Object-based Storage。不 同的云厂商对它有不同的英文缩写命名。例如阿里云把自家的对象存储服 务叫做 OSS，华为云叫 OBS，腾讯云叫 COS。与传统块存储不同的是， 第一，操作对象上是对象（Object），而不是文本文件中文本；第二，存 （Gateway）才能互通。但这样的划分在某些情况下显得并不十分灵活。 为此 IP 网络还允许划分成更小的网络，称为子网（Subnet）。 ITSM 全称 IT Service and Management，是诸多大中型企业采用的 IT 变更请 求管理工具，用于 IT 部门面向应用业务开发测试、业务部门以及 IT 部门内 部成员提交 IT 服务请求，流程管理、流程审批，派发，沟通反馈操作结果 Terminal 方案，交互界面美观、用户体验好。采纳分布式架构，支持多机 房跨区域部署，支持横向扩展，无资产数量及并发限制。 CMDB 全称为配置管理数据库，Configuration Management Database, 用于保 存构筑企业 IT 及应用的资源信息、资源归属信息、应用系统应用信息、以 及资源与资源关系信息，为 IT 系统运维、运营、管理，应用开发测试运维 提供准确、

at managing the underlying infrastructure of an application. It utilizes Git as the source code management tool for managing the infrastructure code. In other words, GitOps is an evaluation of infrastructure infrastructure management solutions such as Terraform. The goal of GitOps is to simplify and streamline the development process. This leads to building reproducible infrastructure with proper state management, which which both: Increases the overall visibility Reduces the management overhead of the application infrastructure GitOps allows developers or the Ops team to declare their infrastructure as code and version

in the talk ● Istio multicluster installation and setup ● All configurations in files ● Traffic management offerings in action ● GitOps and declarative setup ● Multicluster challenges Target Audience What covered in the talk ● Multiclutser observability challenges ● Security considerations ● Secret management ● GitOps implementation details Target Audience What to expect Istio Multicluster First Demo About UPSIDER currently has 4 clusters with Istio multicluster setup. Benefits are: ● Separate cluster management for better control and audit ● Redundancy and High Availability But it does (did) pose challenges

as an internal service provider, the platform team must take a strategic approach to resource management. “The challenge is not in the technology itself, or the tools... The challenge is mainly building changing for the industry. It is a replicable, automated, immutable construct where your change management, everything happens in Git…. Everything is founded on that infrastructure as GitOps mindset where rollback specific changes if necessary. This kind of precise control over deployments and change management is a hallmark of the platform approach to software delivery. Thanks to GitOps, MediaMarktSaturn

automate the deployment and management of applications and infrastructure using Git as the single source of truth. It simplifies and standardizes the deployment and management of complex systems, improves workloads. The Philosophy of GitOps GitOps automates application code deployments and infrastructure management. Adhere to best practices by creating separate repos for your application code, and configs deployment environment. Git Repo 1 Git Repo 2 CI/CD Infrastructure as Code Application Config Management Application Code | 06 3 KEY ELEMENTS FOR YOUR GITOPS STRATEGY Copyright 2024 Akamai Technologies