Infrastructure as Code Containers Change the Game Argo CD Flux Open Cluster Management Other GitOps Tools PipeCD Keptn Pulumi Kubernetes Operator Summary Storing Secret References Conclusion 41 Chapter 8–Other Considerations Multicluster Management Non-Declarative Infrastructure Security Base Image Selection Everything as where I wanted things to head: “To me, GitOps is the holy grail of software and infrastructure management.” At the time, someone was trying to do better: A small, scrappy startup called Weaveworks. They’re

evolved further by incorporating microservices-based architectures and even databases in the form of database DevOps. Now there’s a new kind of Ops. GitOps is rapidly gaining popularity to extend the scope at managing the underlying infrastructure of an application. It utilizes Git as the source code management tool for managing the infrastructure code. In other words, GitOps is an evaluation of infrastructure infrastructure management solutions such as Terraform. The goal of GitOps is to simplify and streamline the development process. This leads to building reproducible infrastructure with proper state management, which

腾讯云 Serverless 产品架构师 核心诉求 Application Application Architecture 开发工具 DevOps 日志 监控告警 Lifecycle Management 网络 计算 存储 数据库 System Resource Monolithic Sprint Cloud Coding VScode EFK Prometheus Serverless 需要运维实现故障恢复逻辑 ❑ 如果没有故障恢复逻辑，需要运维介入 • 响应慢 有风险 ❑ 自动回复，秒 级 ❑ 每次请求都是一个新的实例 虚拟机 容器 Serverless 性能调优 Database Linux OS 虚拟机 Database Tomcat Network Runtime Serverless vs. IaaS 运维能力 安全保障 Serverless vs. IaaS 运维能力

模块名称 描述 IdP / SSO（系统中服务） IdP 和 SSO 单点登录 Gateway（gateway） 平台微服务网关 首页（dashboard） 自定义的信息门户 管理中心（management-center） 用户和租户管理、权限管理、系统配置 账单中心（billing-center） 按组织及工作空间的计 工单中心（ticket-center） 工单系统量计费 虚拟机服务（vm-service） 容器云服务日志 │ ├── dashboard # 首页日志 │ ├── gateway # 网关日志 │ ├── jumpserver-connector # 堡垒机同步日志 │ ├── management-center # 管理中心日志 │ ├── operation-analytics # 运营分析日志 │ ├── orchestrator │ ├── rabbitmq # RabbitMQ 1）进入备份目录解压：gunzip fit2cloud_$date.sql.gz 2）登录数据库后新建数据库并导入数据 mysql -uroot -pPassword123@mysql CREATE DATABASE fit2cloud_01 /*!40100 DEFAULT CHARACTER SET utf8mb4 */; use fit2cloud_01; source /backup/mysq

（Gateway）才能互通。但这样的划分在某些情况下显得并不十分灵活。 为此 IP 网络还允许划分成更小的网络，称为子网（Subnet）。 ITSM 全称 IT Service and Management，是诸多大中型企业采用的 IT 变更请 求管理工具，用于 IT 部门面向应用业务开发测试、业务部门以及 IT 部门内 部成员提交 IT 服务请求，流程管理、流程审批，派发，沟通反馈操作结果 Terminal 方案，交互界面美观、用户体验好。采纳分布式架构，支持多机 房跨区域部署，支持横向扩展，无资产数量及并发限制。 CMDB 全称为配置管理数据库，Configuration Management Database, 用于保 存构筑企业 IT 及应用的资源信息、资源归属信息、应用系统应用信息、以 及资源与资源关系信息，为 IT 系统运维、运营、管理，应用开发测试运维 提供准确、一致的数据 配置云管服务器 hosts 文件 docker-compose.yml 文件（management-center 和 vm-service 配置部分）： management-center: image: xxx.xxx.xxx.xxx/management-center container_name: management-center environment: HOST_HOSTNAME:

NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used few years, the number of tools and systems needed to manage version control, configuration management, Infrastructure as Code, CI/CD, and observability have drastically increased. This puts an additional tenets: DECLARATIVE DESCRIPTION Thanks to modern Infrastructure as Code (IaC) and configuration management tools like Terraform, you can define, configure, and spin up your entire application declaratively

in the talk ● Istio multicluster installation and setup ● All configurations in files ● Traffic management offerings in action ● GitOps and declarative setup ● Multicluster challenges Target Audience What covered in the talk ● Multiclutser observability challenges ● Security considerations ● Secret management ● GitOps implementation details Target Audience What to expect Istio Multicluster First Demo About UPSIDER currently has 4 clusters with Istio multicluster setup. Benefits are: ● Separate cluster management for better control and audit ● Redundancy and High Availability But it does (did) pose challenges

as an internal service provider, the platform team must take a strategic approach to resource management. “The challenge is not in the technology itself, or the tools... The challenge is mainly building changing for the industry. It is a replicable, automated, immutable construct where your change management, everything happens in Git…. Everything is founded on that infrastructure as GitOps mindset where rollback specific changes if necessary. This kind of precise control over deployments and change management is a hallmark of the platform approach to software delivery. Thanks to GitOps, MediaMarktSaturn

Auditing 1.9. Running at scale 1.10. GitOps and Helm 1.11. Continuous Deployment 1.12. Secrets management 2. A Vision of GitOps 2.0 2.1. Visibility into the whole software lifecycle 2.2. Observability the whole idea of having your cluster state the same as Git is not true anymore. Secrets management is one of those areas where each company does their own thing, so at the very least I would expect anything else regarding the software lifecycle. Even if this was true, I consider secret management and automatic rollbacks an integral part of the deployment process. Unfortunately, both areas

automate the deployment and management of applications and infrastructure using Git as the single source of truth. It simplifies and standardizes the deployment and management of complex systems, improves workloads. The Philosophy of GitOps GitOps automates application code deployments and infrastructure management. Adhere to best practices by creating separate repos for your application code, and configs deployment environment. Git Repo 1 Git Repo 2 CI/CD Infrastructure as Code Application Config Management Application Code | 06 3 KEY ELEMENTS FOR YOUR GITOPS STRATEGY Copyright 2024 Akamai Technologies