06 - Spring Into Kubernetes - Paul Czarkowski

Spring into
Kubernetes
Paul Czarkowski
[email protected]
Twitter: @pczarkowski
© Copyright 2018 Pivotal Software, Inc. All rights Reserved.
Spring into
Kubernetes
Paul Czarkowski
[email protected]
Twitter: @pczarkowski
"Kubernetes is named after the
greek god of spending money on
cloud services" - @QuinnyPig
More Control Less Control
Less Efficiency More Efficiency
Build App Build App App → to the

?????
Artifact Container(s) Platform
Traditional Config Deployment CF API ??? API

Ticket Management Manifest
Based Application
PaaS Function
PaaS
Human Application Platform
Platform Application Platform
Platform
Infrastructure K8s API
Toil As
Code CaaS
Container
Container
Platform
Orchestrator
IaaS API
Infrastructure
Container Runtime
PXE boot ? Container Hosts
Platform
Hardware
IaaS
Platform
6
Containers
Saurabh Gupta. "Containers and Pivotal Cloud Foundry" 2016.
FROM maven:3.6-jdk-11-slim as BUILD
COPY . /src
WORKDIR /src
RUN mvn install -DskipTests
FROM openjdk:11.0.1-jre-slim-stretch
EXPOSE 8080
WORKDIR /app
ARG JAR=hello-0.0.1-SNAPSHOT.jar
COPY --from=BUILD /src/target/$JAR /app.jar

ENTRYPOINT ["java","-jar","/app.jar"]
$ docker build -t paulczar/hello .
$ docker push paulczar/hello
$ docker pull paulczar/hello
$ docker run -d -p 8080:8080 paulczar/hello

<plugin>
<groupId>com.google.cloud.tools</groupId>
<artifactId>jib-maven-plugin</artifactId>
<version>1.6.1</version>
<configuration>
<to>
<image>myimage</image>
</to>
</configuration>
</plugin>
Kubernetes
Users
Control Plane
API Controller
Server Manager
etcd
Cloud Ctrl
Scheduler
Manager
Master
Master
Master
Data Plane
Kubelet docker Kubelet docker Kubelet docker
kube-proxy Flannel kube-proxy Flannel kube-proxy Flannel
Worker Worker Worker

Controllers
Desired State
Actual State
Unix Philosophy:
Do one thing. Do it well.
$ kubectl
Imperative
$ kubectl run hello \

--image=paulczar/go-hello-world
$ kubectl scale hello \

--replicas=3
$ kubectl create service clusterip \

hello --tcp=80:80
Declarative
$ kubectl apply -f hello-world.yaml

Declarative
Vs
Imperative
manifests
apiVersion: v1
kind: Pod
metadata:
name: hello
spec:
containers:
- image: paulczar/go-hello-world
imagePullPolicy: Always
name: hello
Resources
● Pods
● Services
● Volumes
POD
one or more containers that share
a network and storage
the minimum scalable unit
of your application
$ kubectl
$ kubectl create deployment hello \
--image=paulczar/hello
● kubectl run created a deployment “deployments.apps/hello”
NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE

deployment.apps/hello 1 1 1 1 1m
● The deployment created a replicaset “replicaset.apps/hello-64f6bf9dd4”
NAME DESIRED CURRENT READY AGE

replicaset.apps/hello-64f6bf9dd4 1 1 1 1m
● Which created a pod “pod/hello-64f6bf9dd4-tq5dq”
NAME READY STATUS RESTARTS AGE

pod/hello-64f6bf9dd4-tq5dq 1/1 Running 0 2s
$ kubectl scale --replicas=3 \
deployment/hello
$ kubectl scale --replicas=3 deployment/hello
deployment.extensions/hello scaled
$ kubectl get all

pod/hello-64f6bf9dd4-2bndq 1/1 Running 0 15m
pod/hello-64f6bf9dd4-4kq9l 0/1 ContainerCreating 0 2s
pod/hello-64f6bf9dd4-8lkcs 1/1 Running 0 5s


$ kubectl set env deployment/hello \
--env “MESSAGE=Hello Krakow”
$ kubectl get all

pod/hello-5c75b546c7-4lwnn 1/1 Running 0 1m
pod/hello-5c75b546c7-bwxxq 1/1 Running 0 1m
pod/hello-5c75b546c7-sl2pg 1/1 Running 0 1m


replicaset.apps/hello-5c75b546c7 3 3 3 1m
$ kubectl get deployment hello \
-o yaml
$ kubectl port-forward deployment/hello 8080
Forwarding from 127.0.0.1:8080 -> 8080
$ curl localhost:8080
<html><head><title>HELLO I LOVE YOU!!!!</title></head><body>HELLO I LOVE
YOU!!!!!</body></html>
Service
$ kubectl expose deployment \
hello --type=LoadBalancer \
--port 80 --target-port 8080
kubectl expose deployment hello
● creates a service with a ClusterIP that acts as an internal loadbalancer to all

pods in the “hello” deployment
--type=LoadBalancer
● Creates a NodePort
● Configures a LoadBalancer to access the pods via the NodePort
$ kubectl get services

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
hello LoadBalancer 10.39.248.123 35.184.17.129 80:30468/TCP 5m
$ curl 35.184.17.129
<html><head><title>HELLO I LOVE YOU!!!!</title></head><body>HELLO I LOVE
YOU!!!!!</body></html>
Service
app=bacon 10.3.55.7 Service

track Pods based on metadata and provides
connectivity and service discovery (DNS, Env
app=bacon app=bacon variables) for them.
Container Container Type
ClusterIP (default) exposes service on a

cluster-internal IP.
Container Container
Pod Pod
192.168.0.5:4530 192.168.0.6:4530
K8s Worker K8s Worker

Service
Service track Pods based on metadata and provides
connectivity and service discovery (DNS, Env
app=bacon 10.3.55.7 variables) for them.
Type
app=bacon app=bacon
NodePort extends ClusterIP to expose services on
Container Container
each node’s IP via a static port.
Container Container
Pod Pod
33.6.5.22:80
Load Balancer
192.168.0.5:4530 192.168.0.6:4530
K8s Worker K8s Worker Service

track Pods based on metadata and provides
Service connectivity and service discovery (DNS, Env
variables) for them.
app=bacon 10.3.55.7
Type
app=bacon app=bacon LoadBalancer extends NodePort to configure a cloud

provider’s load balancer using the
Container Container
cloud-controller-manager.
Container Container
Pod Pod
https://example.com
Ingress Ingress
a controller that manages an external entity to provide
/bacon /eggs load balancing, SSL termination and name-based
virtual hosting to services based on a set of rules.
Service Service
app=bacon app=eggs
Volume
Volume
Is [effectively] a Directory, possibly with data in it,
available to all containers in a Pod.
Usually Shares lifecycle of a Pod (Created when Pod

Container is created, destroyed when Pod is destroyed).
Persistent Volumes outlive Pods.
Container Can be mounted from local disk, or from a network

storage device such as a EBS volume, iscsi, NFS, etc.
Pod
Config Map / Secret
$ kubectl create configmap hello \
--from-literal=’message=Hello S1T’
kubectl create configmap hello --from-file=index.html
● creates a configmap called “hello” containing the contents index.html
$ kubectl get configmap hello -o yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: hello
data:
index.html: "<html>\n<head>\n\t<title>Hello to my
friends</title>\n</head>\n<body>\n\tHello
to my friends\n</body>\n</html>\n\n"
kubectl create secret generic hello --from-file=index.html
● creates a secret called “hello” containing a base64 hash of contents index.html
$ kubectl get secret hello -o yaml
apiVersion: v1
kind: Secret
metadata:
name: hello
data:
index.html:
PGh0bWw+CjxoZWFkPgoJPHRpdGxlPkhlbGxvIHRvIG15IGZyaWVuZHM8L3RpdGxlPgo8L2hlYWQ+Cjxib2R5
PgoJSGVsbG8gdG8gbXkgZnJpZW5kcwo8L2JvZHk+CjwvaHRtbD4KCg==
ConﬁgMaps/Secrets (user-data)
Provides key-value pairs to be injected into a pod much like user-data is injected into a Virtual
Machine in the cloud.
Allows you to do last minute configuration of applications running on Kubernetes such as

setting a database host, or a admin password.
ConfigMaps store values as strings, Secrets store them as byte arrays (serialized as base64
encoded strings).
Secrets are [currently] not encrypted by default. This is likely to change.
Can be injected as files in a Volume, or as Environment Variables.

Spring
Cloud
Kubernetes
● Discovery
● Ribbon Discovery
● Dynamic Config
● Profile Autoconfiguration
● Istio Awareness
● Pod Health Indicators
Service Discovery
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-kubernetes</artifactId>
</dependency>
---
@SpringBootApplication
@EnableDiscoveryClient
public class Application {
public static void main(String[] args) {
SpringApplication.run(Application.class, args);
}
}
---
@Autowired
private DiscoveryClient discoveryClient;
spring-cloud-kubernetes-ribbon
<dependency>
<artifactId>spring-cloud-starter-gateway</artifactId>
</dependency>
<dependency>
<artifactId>spring-cloud-starter-kubernetes-ribbon</artifactId>
</dependency>
spring-cloud-kubernetes-ribbon
@SpringBootApplication
@EnableDiscoveryClient
@EnableWebFlux
public class EdgeServiceApplication {
public static void main(String[] args) {

SpringApplication.run(EdgeServiceApplication.class, args);
}
@Bean
@LoadBalanced
public RestTemplate restTemplate() {
return new RestTemplate();
}
}
Native Service Discovery
spring-cloud-kubernetes-config
<dependencies>

<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-actuator</artifactId>
</dependency>

<dependency>
<artifactId>spring-cloud-starter-kubernetes-config</artifactId>
</dependency>
</dependencies>
spring-cloud-kubernetes-config
spring:
application:
name: cloud-k8s-app
cloud:
kubernetes:
config:
name: default-name
namespace: default-namespace
sources:
- name: c1
- namespace: n2
- namespace: n3
name: c3
oh and automatic prometheus
metrics
<dependency>
<groupId>io.micrometer</groupId>
<artifactId>micrometer-registry-prometheus</artifactId>
</dependency>
Transforming How The World Builds Software
@pczarkowski

06 - Spring Into Kubernetes - Paul Czarkowski

Uploaded by

Copyright:

Available Formats

06 - Spring Into Kubernetes - Paul Czarkowski

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

06 - Spring Into Kubernetes - Paul Czarkowski

Uploaded by

Copyright:

Available Formats

Spring into

Build App Build App App → to the

Traditional Config Deployment CF API ??? API

COPY --from=BUILD /src/target/$JAR /app.jar

$ docker push paulczar/hello

$ docker pull paulczar/hello

$ docker run -d -p 8080:8080 paulczar/hello

Kubelet docker Kubelet docker Kubelet docker

kube-proxy Flannel kube-proxy Flannel kube-proxy Flannel

Worker Worker Worker

$ kubectl run hello \

$ kubectl scale hello \

$ kubectl create service clusterip \

$ kubectl apply -f hello-world.yaml

NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE

● The deployment created a replicaset “replicaset.apps/hello-64f6bf9dd4”

NAME DESIRED CURRENT READY AGE

● Which created a pod “pod/hello-64f6bf9dd4-tq5dq”

NAME READY STATUS RESTARTS AGE

$ kubectl get all

NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE

NAME DESIRED CURRENT READY AGE

NAME READY STATUS RESTARTS AGE

NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE

NAME DESIRED CURRENT READY AGE

● creates a service with a ClusterIP that acts as an internal loadbalancer to all

$ kubectl get services

app=bacon 10.3.55.7 Service

Container Container Type

ClusterIP (default) exposes service on a

K8s Worker K8s Worker

K8s Worker K8s Worker Service

app=bacon app=bacon LoadBalancer extends NodePort to configure a cloud

Usually Shares lifecycle of a Pod (Created when Pod

Persistent Volumes outlive Pods.

Container Can be mounted from local disk, or from a network

● creates a configmap called “hello” containing the contents index.html

$ kubectl get configmap hello -o yaml

● creates a secret called “hello” containing a base64 hash of contents index.html

$ kubectl get secret hello -o yaml

Allows you to do last minute configuration of applications running on Kubernetes such as

Secrets are [currently] not encrypted by default. This is likely to change.

Can be injected as files in a Volume, or as Environment Variables.

public static void main(String[] args) {

© Copyright 2019 Pivotal Software, Inc. All rights Reserved.

You might also like