Part III of a Cloud☁️ Journey

“I’m learning to fly ✈️, around the clouds ☁️”

Hi All –

Happy National Mole Day! 👨‍🔬👩🏾‍🔬

“Open your eyes 👀, look up to the skies🌤 and see 👓”

As we have all learned, Cloud computing ☁️ empowers us all to focus our time 🕰 on dreaming 😴 up and creating the next great scalable ⚖️ applications. In addition, Cloud computing☁️ enables us less worry😨 time 🕰 about infrastructure, managing and maintaining deployment environments or agonizing😰 over security🔒. Google evangelizes these principals stronger💪 than any other company in the world 🌎.

Google’s strategy for cloud computing☁️ is differentiated by providing open source runtime systems and a high-quality developer experience where organizations could easily move workloads from one cloud☁️ provider to another.

Once again, this past week we continued our exploration with GCP by finishing the last two courses as part of Google Cloud Certified Associate Cloud Engineer Path on Pluralsight. Our ultimate goal was to have a better understanding of the various GCP services and features and be able to apply this knowledge, to better analyze requirements and evaluate numerous options available in GCP. Fortunately, we gained this knowledge and a whole lot more! 😊

Guiding us through another great introduction on Elastic Google Cloud Infrastructure: Scaling and Automation were well-known friends Phillip Maier and Mylene Biddle. Then taking us through the rest of the way through this amazing course was the always passionate Priyanka Vergadia.

Then finally taking us down the home stretch 🏇 with Architecting with Google Kubernetes Engine – Foundations (which was last of this amazing series of Google Goodness 😊) were famous Googlers Evan Jones and Brice Rice.  …And Just to put the finishing touches 👐 on this magical 🎩💫 mystery tour was Eoin Carrol who gave us in depth look at Google’s game changer in Modernizing existing applications and building cloud-native☁️ apps anywhere with Anthos.

After a familiar introduction by Philip and Mylene we began delving into the comprehensive and flexible 🧘‍♀️ infrastructure and platform services provided by GCP.

“Across the clouds☁️ I see my shadow fly✈️… Out of the corner of my watering💦 eye👁”

Interconnecting Networks – There are 5 ways of connecting your infrastructure to GCP:

1. Cloud VPN
2. Dedicated interconnect
3. Partner interconnect
4. Direct peering
5. Carrier peering

Cloud VPN – securely connects your on-premises network to your GCP VPC network. In order to connect to your on-premise network via Cloud VPN configure cloud VPN, VPN Gateway, and to repeat in tunnels.

• Useful for low-volume connections
• 99.9% SLA
• Supports:
  • Site-to-site VPN
  • Static routes
  • Dynamic routes (Cloud Router)
  • IKEv1 and IKEv2 ciphers

Please note: The maximum transmission unit or MTU for your on-premises VPN gateway cannot be greater than 1460 bytes.

$gcloud compute --project "qwiklabs-GCP -02-9474b560327d" target-vpn-gateways create "vpn-1" --region "us-central1" --network "vpn-network-1"

$gcloud compute --project "qwiklabs-GCP -02-9474b560327d" target-vpn-gateways create "vpn-1" --region "us-central1" --network "vpn-network-1"

$gcloud compute --project "qwiklabs-GCP -02-9474b560327d" forwarding-rules create "vpn-1-rule-esp" --region "us-central1" --address "35.192.18.39" --IP -protocol "ESP" --target-vpn-gateway "vpn-1"

$gcloud compute --project "qwiklabs-GCP -02-9474b560327d" forwarding-rules create "vpn-1-rule-udp500" --region "us-central1" --address "35.192.18.39" --IP -protocol "UDP" --ports "500" --target-vpn-gateway "vpn-1"

$gcloud compute --project "qwiklabs-GCP -02-9474b560327d" forwarding-rules create "vpn-1-rule-udp4500" --region "us-central1" --address "35.192.18.39" --IP -protocol "UDP" --ports "4500" --target-vpn-gateway "vpn-1"

$gcloud compute --project "qwiklabs-GCP -02-9474b560327d" vpn-tunnels create "tunnel1to2" --region "us-central1" --ike-version "2" --target-vpn-gateway "vpn-1"

$gcloud compute --project "qwiklabs-GCP -02-9474b560327d" vpn-tunnels create "vpn-1-tunnel-2" --region "us-central1" --peer-address "34.78.144.99" --shared-secret "GCP  rocks" --ike-version "2" --local-traffic-selector "0.0.0.0/0" --target-vpn-gateway "vpn-1"

Cloud Interconnect and Peering

Dedicated connections provide a direct connection to Google’s network while shared connections provide a connection to Google’s network through a partner

Comparison of Interconnect Options

• IPsec VPN Tunnel – Encrypted tunnel to VPC networks through the public internet
  • Capacity 1.5-3 Gbps/Tunnel
  • Requirements VPN Gateway
  • Access Type – Internal IP Addresses
• Cloud Interconnect – Dedicated interconnect provides direct physical connections
  • Capacity 10 Gbps/Link -100 Gbps/ link
  • Requirements – connection in colocation facility
  • Access Type– Internal IP Addresses
• Partner Interconnect– provides connectivity through a supported service provider
  • 50 Mbps -10 Gbps/connection
  • Requirements – Service provider
  • Access Type– Internal IP Addresses

Peering

Direct Peering provides a direct connection between your business network and Google.

• Broad-reaching edge network locations
• Capacity 10 Gbps/link
• Exchange BGP routes
• Reach all of Google’s services
• Peering requirement (Connection in GCP PoPs)
• Access Type: Public IP Addresses

Carrier Peering provides connectivity through a supported partner

• Carrier Peering partner
• Capacity varies based on parent offering
• Reach all of Google’s services
• Partner requirements
• No SLA
• Access Type: Public IP Addresses

Choosing the right connection – Decision Tree 🌳

Shared VPC and VPC Peering

Shared VPC allows an organization to connect Resource is from multiple projects to a common VPC network.

VPC Peering is a decentralized or distributed approach to multi project networking because each VPC network may remain under the control of separate administrator groups and maintains its own global firewall and routing tables.

Load Balancing 🏋️‍♂️ and Autoscaling

Cloud Load Balancing 🏋️‍♂️ – distributes user traffic 🚦across multiple instances of your applications. By spreading the load, load balancing 🏋️‍♂️ reduces the risk that your applications experience performance issues. There are 2 basic categories of Load balancers:  Global load balancing 🏋️‍♂️ and Regional load balancing 🏋️‍♂️.

Global load balancers – when workloads are distributed across the world 🌎 Global load balancers route traffic🚦 to a backend service in the region closest to the user, to reduce latency.

They are software defined distributed systems using Google Front End (GFE) reside in Google’s PoPs are distributed globally

Types of Global Load Balancers

• External HTTP and HTTPS (Layer 7)
• SSL Proxy (Layer 4)
• TCP Proxy (Layer 4)

Regional load balancers – when all workloads are in the same region

• Regional load balancing 🏋️‍♂️ route traffic🚦within a given region.
• Regional Load balancing 🏋️‍♂️ uses internal and network load balancers.

Internal load balancers are software defined distributed systems (using Andromeda) and network load balancers which use  Maglev distributed system.

Types of Global Load Balancers

• Internal TCP/UDP (Layer 4)
• Internal HTTP and HTTPS (Layer 7)
• TCP/UDP Network (Layer 4)

Managed instance groups – is a collection off identical virtual machine instances that you control as a single entity. (Same as creating a VM but applying specific rules to an Instance group)

• Deploy identical instances based on instance template
• Instance group can be resized
• Manager ensures all instances are Running
• Typically used with autoscaling ⚖️
• Can be single zone or regional

Regional managed instance groups are usually recommended over zonal managed instance groups because this allow you to spread the application’s load across multiple zones through replication and protect against zonal failures.

         Steps to create a Managed Instance Group:

1. Need to decide the location and whether instance group will be Single or multi-zones
2. Choose ports that are going allow load balancing🏋️‍♂️ across.
3. Select Instance template
4. Decide Autoscaling ⚖️ and criteria for use
5. Creatine a health ⛑ check to determine instance health and how traffic🚦should route

Autoscaling and health checks

Managed instance groups offer autoscaling ⚖️ capabilities

• Dynamically add/remove instances
  • Increases in load
  • Decrease in load
• Autoscaling policy
  • CPU Utilization
  • Load balancing 🏋️‍♂️capacity
  • Monitoring 🎛 metrics
  • Queue-based workload

HTTP/HTTPs load balancing

• Target HTTP/HTTPS proxy
• One singed SSL certificate installed (minimum)
• Client SSL session terminates at the load balancer 🏋️‍♂️
• Support the QUIC transport layer protocol

• Global load balancing🏋️‍♂️
• Anycast IP address
• HTTP or port 80 or 8080
• HTTPs on port 443
• IPv4 or IP6
• Autoscaling⚖️
• URL maps 🗺

Backend Services

• Health ⛑ check
• Session affinity (Optional)
• Time out setting (30-sec default)
• One or more backends
  • An instance group (managed or unmanaged)
  • A balancing mode (CPU utilization or RPS)
  • A capacity scaler ⚖️ (ceiling % of CPU/Rate targets)

SSL certificates

• Required for HTTP/HTTPS load balancing 🏋️‍♂️
• Up to 10 SSL certificates /target proxy
• Create an SSL certificate resource 

SSL proxy load balancing – global 🌎 load balancing service for encrypted non-http traffic.

• Global 🌎 load balancing for encrypted non-HTTP traffic 🚦
• Terminate SSL session at load balancing🏋️‍♂️ Layer
• IPv4 or IPv6 clients
• Benefits:
  • Intelligent routing
  • Certificate management
  • Security🔒 patching
  • SSL policies

TCP proxy load balancing – a global load balancing service for unencrypted non http traffic.

• Global load balancing for encrypted non-HTTP traffic 🚦
• Terminates TCP session at load balancing🏋️‍♂️ Layer
• IPv4 or IPv6 clients
• Benefits:
  • Intelligent routing
  • Security🔒 patching

Network load balancing – is a regional non-proxy load balancing service.

• Regional, non-proxied load balancer
• Forwarding rules (IP protocol data)
• Traffic:
  • UDP
  • TCP/SSL ports
• Backends:
  • Instance group
  • Target pool🏊‍♂️ resources – define a group of instances that receive incoming traffic 🚦from forwarding rules:
    • Forwarding rules (TCP and UDP)
    • Up to 50 per project
    • One health check
    • Instances must be in the same region

Internal load balancing – is a regional private load balancing service for TCP and UDP based traffic🚦

• Regional, private load balancing 🏋️‍♂️
  • VM instances in same region
  • RFC 1918 IP address
• TCP/UDP traffic 🚦
  • Reduced latency, simpler configuration
  • Software-defined, fully distributed load balancing (is not based on a device or a virtual machine.)

“..clouds☁️ roll by reeling is what they say … or is it just my way?”

Infrastructure Automation – Infrastructure as code (IaC)

Automate repeatable tasks like provisioning, configuration, and deployments for one machine or millions.

Deployment Manager -is an infrastructure deployment service that automates the creation and management of GCP. By defining templates, you only have to specify the resources once and then you can reuse them whenever you want.

• Deployment Manager is an infrastructure automation tool🛠
• Declarative Language (allows you to specify what the configuration should be and let the system figure out the steps to take)
• Focus on the application
• Parallel deployment
• Template-driven

Deployment manager creates all the resources in parallel.

Additional infrastructure as code tools🛠 for GCP

• Terraform 🌱
• Chef 👨‍🍳
• Puppet
• Ansible
• Packer 📦

It’s recommended that you provisioned and managed resource is on GCP with the tools🛠 you are already familiar with

GCP Marketplace 🛒 – lets you quickly deploy functional software packages that run 🏃‍♂️ on GCP.

• Deploy production-grade solutions
• Single bill for GCP and third-party services
• Manage solutions using Deployment Manager
• Notification 📩 when a security update is available
• Direct access to partner support

“… Must be the clouds☁️☁️ in my eyes 👀”

Managed Services – automates common activities, such as change requests, monitoring 🎛, patch management, security🔒, and backup services, and provides full lifecycle 🔄 services to provision, run🏃‍♂️, and support your infrastructure.

BigQuery is GCP serverless, highly scalable⚖️, and cost-effective cloud Data warehouse

• Fully managed
• Petabyte scale
• SQL interface
• Very fast🏃‍♂️
• Free usage tier

Cloud Dataflow🚰 executes a wide variety of data processing patterns

• Server-less, fully managed data processing
• Batch and stream processing with autoscale ⚖️
• Open source programming using Apache beam 🎇
• Intelligently scale to millions of QPS

Cloud Dataprep – visually explore, clean, and prepare data for analysis and machine learning

• Serverless, works at any scale⚖️
• Suggest ideal analysis
• Integrated partner service operated by Trifacta

Cloud Dataproc – is a service for running Apache Spark 💥 and Apache Hadoop 🐘 clusters

• Low cost (per-second, preemptible)
• Super-fast🏃‍♂️ to start, scale ⚖️, and shut down
• Integrated with GCP
• Managed Service
• Simple and familiar

“Captain Jack will get you by tonight 🌃… Just a little push, and you’ll be smilin’😊 “

Architecting with Google Kubernetes Engine – Foundations

After Steller🌟 job by was Priyanka taking us through the load balancing 🏋️‍♂️ options, infrastructure as code and some of the managed service options in GCP it was time to take the helm⛵️ and get our K8s ☸️ hat 🧢 on.

Cloud Computing and Google Cloud

Just to wet our appetite 😋 for Cloud Computing ☁️and Evan takes through 5 fundamental attributes:

1. On-demand self-services (No🚫 human intervention needed to get resources)
2. Broad network access (Access from anywhere)
3. Resource Pooling🏊‍♂️ (Provider shares resources to customers)
4. Rapid Elasticity 🧘‍♀️ (Get more resources quickly as needed)
5. Measured 📏Service (Pay only for what you consume)

Next, Evan introduced some of GCP Services under Compute like Compute Engine, Google Kubernetes Engine (GKE), App Engine, Cloud Functions. He then discussed some Google’s managed services with Storage, Big Data, Machine Learning Services.

Resource Management

Network

• GCP provides resource is in multi-regions, regions and zones.
• GCP divides the world 🌎 up into 3 multi-regional areas the Americas, Europe and Asia Pacific.
• 3 multi regional areas are divided into regions which are independent geographic areas on the same continent.
• Regions are divided into zones (like a data center) which are deployment areas for GCP resources.

The network interconnect with the public internet at more than 90 internet exchanges and more than 100 points of presence worldwide🌎 (and growing)

• Zonal resources operate exclusively in a single zone
• Regional resources span multiple zones
• Global resources could be managed across multiple regions.

• Resources have hierarchy
  • Organization is the root node of a GCP resource hierarchy
  • Folders reflect their hierarchy of your enterprise
  • Projects are identified by unique Project ID and Project Number
• Cloud Identity Access Management (IAM) allows you to fine tune access controls on all resources in GCP.

Billing

• Billing account pay for project resources
• A billing account in linked to one or more projects
• Charged automatically or invoiced every month or at threshold limit
• Subaccounts can be used for separate billing for projects

How to keep billing under control

1. Budgets and alerts 🔔
2. Billing export 🧾
3. Reports 📊
   • Quotas are helpful limits
     • Quotas apply at the level of GCP Project
     • There two types of quotas
       • Rate quotas reset after a specific time 🕰
       • Allocation quotas govern the number of resources in projects

GCP implements quotas which limit unforeseen extra billing charges. Quotas error designed to prevent the over consumption of resources because of an error or a malicious attack 👿.

Interacting with GCP -There are 4 ways to interact with GCP:

1. Cloud Console

• Web-based GUI to manage all Google Cloud resources
• Executes common task using simple mouse clicks
• Provides visibility into GCP projects and resources

2. SDK

3. Cloud Shell

• gcloud
• kubectl
• gsutil
• bq
• bt

• Temporary Compute Engine VM
• Command-line access to the instance through a browser
• 5 GB of persistent disk storage ($HOME dir)
• Preinstalled Cloud SDK and other tools🛠
  • gcloud: for working with Compute Engine, Google Kubernetes Engine (GKE) and many Google Cloud services
  • gsutil: for working with Cloud Storage
  • kubectl: for working with GKE and Kubernetes
  • bq: for working with BigQuery

• Language support for Java ☕️Go, Python 🐍 , Node.js, PHP, and Ruby♦️
• Web 🕸preview functionality
• Built-in authorization for access to resources and instances

4. Console mobile App

“Cloud☁️ hands🤲 reaching from a rainbow🌈 tapping at the window, touch your hair”

Introduction to Containers

Next Evan took us through a history of computing. First starting with deploying applications on its physical servers. This solution wasted resources and took a lot of time to deploy maintaining scale. It also wasn’t very portable. It all applications were built for a specific operating system, and sometimes even for specific hardware as well.

Next transitioning to Virtualization. Virtualization made it possible to run multiple virtual servers and operating systems on the same physical computer. A hypervisor is the software layer that removes the dependencies of an operating system with its underlying hardware. It allows several virtual machines to share that same hardware.

• Hypervisors creates and manages virtual machines
• Running multiple apps on a single VM
• VM-centric way to solve this problem (run a dedicated virtual machine for each application.)

Finally, Evan introduced us to containers as they solve a lot of the short comings of Virtualization like:

• Applications that share dependencies are not isolated from each other
• Resource requirements from one application can starve out another application
• A dependency upgrade for one application might cause another to simply stop working

Containers are isolated user spaces for running application code. Containers are lightweight as they don’t carry a full operating system. They could be scheduled or packed 📦tightly onto the underlying system, which makes them very efficient.

Containerization is the next step in the evolution of managing code.

Benefits of Containers:

• Containers appeal to developers 👩🏽‍💻
• Deliver high performing and scalable ⚖️ applications.
• Containers run the same anywhere
• Containers make it easier to build applications that use Microservices design pattern
  • Microservices
    • Highly maintainable and testable.
    • Loosely coupled. Independently deployable. Organized around business capabilities.

Containers and Container Images

An Image is an application and its dependencies

A container is simply a running 🏃‍♂️ instance image.

Docker 🐳 is an open source technology that allows you to create and run 🏃‍♂️ applications and containers, but it doesn’t offer away to orchestrate those applications at scale ⚖️

• Containers use a varied set of Linux technologies
  • Containers use Linux name spaces to control what an application can see
  • Containers used Linux C groups to control what an application can use.
  • Containers use union file systems to efficiently encapsulate applications and their dependencies into a set of clean, minimal layers.
• Containers are structured in layers
  • Container manifest is tool🛠 you used to build the image reads instructions from a file
  • Docker 🐳 file is a formatted container image
    • Each instruction in the Docker file specifies a layer (Read Only) inside the container image.
    • Readable ephemeral top layer

• Containers promote smaller shared images

How to get containers?

• Download containerized software from a container registry gcr.io
• Docker 🐳 – Build your own container using the open-source docker 🐳 command
• Build your own container using Cloud Build
  • Cloud Build is a service that executes your builds on GCP.
  • Cloud Build can import source code from
    • Google Cloud Storage
    • Cloud Source Repositories
    • GitHub,
    • Bitbucket

Introduction to Kubernetes ☸️

Kubernetes ☸️ is an open source platform that helps you orchestrate and manage your container infrastructure on premises or in the cloud☁️.

It’s a container centric management environment. Google originated it and then donated it to the open source community.

K8s ☸️ automates the deployment, scaling ⚖️, load balancing🏋️‍♂️, logging, monitoring 🎛 and other management features of containerized applications.

• Facilitates the features of an infrastructure as a service
• Supports Declarative configurations.
• Allows Imperative configuration
• Open Source

K8s ☸️ features:

• Supports both stateful and stateless applications
• Autoscaling⚖️
• Resource limits
• Extensibility

Kubernetes also supports workload portability across on premises or multiple cloud service providers. This allows Kubernetes to be deployed anywhere. You could move Kubernetes ☸️ workloads freely without vendor lock🔒 in

Google Kubernetes Engine (GKE)

GKE easily deploys, manages and scales⚖️ Kubernetes environments for your containerized applications on GCP.

GKE Features:

• Fully managed
  • Cluster represent your containerized applications all run on top of a cluster in GKE.
  • Nodes are the virtual machines that host your containers inside of a GKE app cluster
• Container-optimized OS
• Auto upgrade
• Auto repair🛠
• Cluster Scaling⚖️
• Seamless Integration
• Identity and access management (IAM)
• Integrated logging and monitoring (Stack Driver)
• Integrated networking
• Cloud Console

Compute Options Detail

 Computer Engine

• Fully customizable virtual machines
• Persistent disks and optional local SSDs
• Global load balancing and autoscaling⚖️
• Per-second billing

                  Use Cases

• Complete control over the OS and virtual hardware
  • Well Suited for lift-and shift migrations to the cloud
  • Most flexible 🧘‍♀️ compute solution, often used when a managed solution is too restrictive

  App Engine

• Provides a fully managed code-first platform
• Streamlines application deployment and scalability⚖️
• Provides support for popular programming language and application runtimes
• Supports integrated monitoring 🎛, logging and diagnostics.

Use Cases

• Websites
  • Mobile app📱 and gaming backends
  • Restful APIs

Google Kubernetes Engine

• Fully managed Kubernetes Platform
• Supports cluster scaling ⚖️, persistent disk, automated upgrades, and auto node repairs
• Built-in integration with GCP
• Portability across multiple environments
  • Hybrid computing
  • Multi-cloud computing

Use Cases

• Containerized applications
  • Cloud-native distributed systems
  • Hybrid applications

Cloud Run

• Enable stateless containers
• Abstracts away infrastructure management
• Automatically scales ⚖️ up⬆️ and down⬇️
• Open API and runtime environment

Use Cases

• Deploy stateless containers that listen for requests or events
  • Build applications in any language using any frameworks and tool🛠

Cloud Functions

• Event-driven, serverless compute services
• Automatic scaling with highly available and fault-tolerant design
• Charges apply only when your code runs 🏃‍♂️
• Triggered based on events in GCP, HTTP endpoints, and Firebase

Use Cases

• Supporting microservice architecture
  • Serverless application backends
    • Mobile and IoT backends
    • Integrate with third-party services and APIs
  • Intelligent applications
    • Virtual assistant and chat bots
    • Video and image analysis

Kubernetes ☸️ Architecture

There are two related concepts in understanding K8s ☸️ works object model and principle of declarative management

Pods – the basic building block of K8s ☸️

• Smallest deployable object.
• Containers in a Pod share resources
• Pods are not self-healing

Principle of declarative management – Declare some objects to represent those in generic containers.

• K8s ☸️ creates and maintains one or more objects.
• K8s ☸️ compares the desired state to the current state.

The Kubernetes ☸️Control Plane ✈️ – continuously monitor the state of the cluster, endlessly comparing reality to what has been declared and remedying the state has needed.

K8s ☸️ Cluster consists of a Master and Nodes

Master is to coordinate the entire cluster.

• View or change the state of the cluster including launching pods.
• kube-API server – the single component that interacts with the Cluster
  • kubectl server interacts with the database on behalf of the rest of the system
• etcd – key-value store for the most critical data of a distributed system
• kube-scheduler – assigns Pods to Nodes
• kube-cloud-manager – embeds cloud-specific control logic.
• Kube-controller-manager- daemon that embeds the core control loops

Nodes runs run pods.

• kubelet is the primary “node agent” that runs on each node.
• kube-proxy is a network proxy that runs on each node in your cluster

Google Kubernetes ☸️ Engine Concepts

GKE makes administration of K8s ☸️ much simpler

• Master
  • GKE manages all the control plane components
  • GKE provisions and manages all the master infrastructure

• Nodes
  • GKE manages this by deploying and registering Compute Engine instances as Nodes
  • Use node pools to manage different kinds of nodes
    • node pool (using nodemon) is a subset of nodes within a cluster that share a configuration, such as their amount of memory or their CPU generation.
    • nodemon is GKE specific feature
      • enable automatic node upgrades
      • automatic node repairs 🛠
      • cluster auto scaling ⚖️

Zonal Cluster – has a single control plane in a single zone.

• single-zone cluster has a single control plane running in one zone
• multi-zonal cluster has a single replica of the control plane running in a single zone, and has nodes running in multiple zones.

Regional Cluster – has multiple replicas of the control plane, running in multiple zones within a given region.

Private Cluster – provides the ability to isolate nodes from having inbound and outbound connectivity to the public internet.

Kubernetes ☸️ Object Management – identified by a unique name and a unique identifier.

• Objects are defined in a YAML file
• Objects are identified by a name
• Objects are assigned a unique identifier (UID) by K8s ☸️

• Labels 🏷 are key value pairs that tag your objects during or after their creation.
• Labels 🏷 help you identify and organize objects and subsets of objects.
• Labels 🏷 can be matched by label selectors

Pods and Controller Objects

Pods have a life cycle🔄

• Controller Object types
  • Deployment – ensure that sets of Pods are running
    • To perform the upgrade, the Deployment object will create a second ReplicaSet object, and then increase the number of (upgraded) Pods in the second ReplicaSet while it decreases the number in the first ReplicaSet
  • StatefulSet
  • DaemonSet
  • Job
• Allocating resource quotas
• Namespaces – provide scope for naming resources (pods, deployments and controllers.)

There are 3 initializer spaces in the cluster.

1. Default name space for objects with no other name space defined.
2. Kube-system named Space for objects created by the Kubernetes system itself.
3. Kube-Public name space for objects that are publicly readable to all users.

Best practice tip: namespace neutral YAML

• Apply name spaces at the command line level which makes YAML files more flexible🧘‍♀️.

Advanced K8s ☸️ Objects

Services

• set of Pods and assigns a policy by which you can access those pods
  • Services provide load-balanced 🏋️‍♂️ access to specified Pods. There are three primary types of Services:
    • ClusterIP: Exposes the service on an IP address that is only accessible from within this cluster. This is the default type.
    • NodePort: Exposes the service on the IP address of each node in the cluster, at a specific port number.
    • LoadBalancer 🏋️‍♂️: Exposes the service externally, using a load balancing 🏋️‍♂️ service provided by a cloud☁️ provider.

Volume

• A directory that is accessible to all containers in a Pod
  • Requirements of the volume can be specified using Pod specification
  • You must mount these volumes specifically on each container within a Pod
  • Set up Volumes using external storage outside of your Pods to provide durable storage

Controller Objects

• ReplicaSets – ensures that a population of Pods
  • Deployments
    • Provides declarative updates to ReplicaSets and Pods
    • Create, update, roll back, and scale⚖️ Pods, using ReplicaSets
    • Replication Controllers – perform a similar role to the combination of ReplicaSets and Deployments, but their use is no longer recommended.
  • StatefulSets – similar to a Deployment, Pods use the same container specs
  • DaemonSets – ensures that a Pod is running on all or some subset of the nodes.
  • Jobs – creates one or more Pods required to run a task

“Can I get an encore; do you want more?”

Migrate for Anthos – tool🛠 for getting workloads into containerized deployments on GCP

• Automated process that moves your existing applications into a K8s ☸️ environment.

Migrate for Anthos moves VMs to containers

• Move and convert workloads into containers
• Workloads can start as physical servers or VMs
• Moves workload compute to container immediately (<10 min)
• Data can be migrated all at once or “streamed” to the cloud☁️ until the app is live in the cloud☁️

Migrate for Anthos Architecture

• A migration requires an architecture to be built
• A migration is a multi-step process
• Configure processing cluster
• Add migration source
• Generate and review plan
• Generate artifacts
• Test
• Deploy

Migrate for Anthos Installation -requires a processing cluster

         Installing Migrate for Anthos uses migctl

$migctl setup install

         Adding a source enables migration from a specific environment

$migctl source create cd my-ce-src –project my-project –zone zone

         Creating a migration generates a migration plan

$migctl migration create test-migration –source my-ce-src –vm- id my-id –intent image

         Executing a migration generates resource and artifacts

$migctl migration generate-artifacts my-migration

         Deployment files typically need modification

$migctl migration get-artifacts test-migration

Apply the configuration to deploy the workload

$Kubectl apply -f deployment_sepc.yaml

“And we’ll bask 🌞 in the shadow of yesterday’s triumph🏆… And sail⛵️ on the steel breeze🌬”

Below are some of the destinations I am considering for my travels for next week:

• Google Certified Associate Cloud Engineer 2020

Thanks –

–MCS