SEPTEMBER 2022 GitOps for Kubernetes Essentials to Applications Hosted in Cloud-Native Ecosystems NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used version control system, with more than 80 percent of its market share in today’s software industry running in Kubernetes. In this Refcard, we will dive into what GitOps means in the Kubernetes world, key principles, and the advantages for cloud-native ecosystems. ABOUT GITOPS FOR KUBERNETES Thanks

What you have (current state) CD Why GitOps? Reliably and consistently configure multiple Kubernetes clusters and deployment 6 Capturing and tracing any change to clusters through Git history Application Delivery Model 8 Source Git Repository Config Git Repository Image Registry Kubernetes CI CD The GitOps Application Delivery Model Pull Request Push Pull Push Pull Pull Request Repository Image Registry CI The GitOps Application Delivery Model Config Git Repository Kubernetes Deploy Monitor Detect drift Take action CD Continuous Integration & Continuous Delivery

云+社区技术沙龙 Serverless Ops 孔令飞 腾讯云架构师 个人简介 2013 Red Hat： 虚拟化技术 Xen、KVM 的测试 2015 联想云： KVM 研发 2016 加入腾讯：容器平台 (docker + k8s) & 微服务的架构和研发 2019 腾讯云 Serverless 产品架构师 核心诉求 Application Application Architecture Prometheus Serverless Tencent Serverless System Resource Mysql Ceph Docker KVM 业务运维 平台运维 系统运维 Serverless 介绍 什么是 Serverless、Serverless 提供的运维能力 Serverless 业务运维能力 & 系统运维能力 Serverless 和 虚拟机 2 种形态下运维能力对比 种形态下运维能力对比 Serverless vs. IaaS 运维能力对比 Serverless 和 虚拟机 2 种形态下运维能力对比 Serverless 运维案例 腾讯相册微信小程序运维案例 目录 Serverless 介绍 2014 2016 2017 AWS lambda Azure Function GCP Cloud Function IBM Open Wisk

Contents 05 Foreword 07 Introduction 08 Chapter 1–What is GitOps? Origins in DevOps Kubernetes and containers Cloud-Native DevOps A DevOps Operating Model GitOps Principles Flux Open Cluster Management Other GitOps Tools PipeCD Keptn Pulumi Kubernetes Operator Summary 18 Chapter 3–Templating Everything in Git Kustomize Helm Structures Repositories Reflecting an Organizational Boundary Kubernetes Platform Administrator Kubernetes Application Developer Other Boundaries GitOps Repo Example

Separation of Privileges 03 04 05 06 07 10 GitOps Hands On Tutorial Part 1: Spin up a Kubernetes Cluster Part 2: Fork the Sock Shop Repository Part 3: Setup CI and Connect a Container Registry your team can make changes and updates safely and securely to complex applications running in Kubernetes. Freedom of choice Because there is no single tool that can do everything required in your pipeline ship features. eBook 4 The Principles of GitOps The entire system is described declaratively. Kubernetes is just one example of many modern cloud native tools that are “declarative” and that can be treated

modern, cloud-native technologies. They need a way to confidently and securely deploy changes to Kubernetes that doesn’t require them to become experts in the orchestration tool. That’s where GitOps comes Change Lead Time Change Failure Rate MTTR vs. MTTF (mean time to recover/fail) P.3 Simplify Kubernetes operations using developer tools GitOps helps DevOps teams be more autonomous and productive GitOps is a standardized workflow for how to deploy, configure, monitor, update, and manage Kubernetes, it components, and all the applications that run on it. In GitOps, a Git repository contains

pull-requests” GitOps Benefits 5 GitOps is for Everyone Developers Operations Kubernetes Cluster Node 1 Kubernetes (K8s) is an open-source system for automating deployment, scaling, and management It is a resource scheduler KUBERNETES 101 6 Node Node Node Node Node Node Node Node 1 1 2 2 2 2 3 3 3 4 4 Applications OpenShift 4 - A Smarter Kubernetes Platform Automated, full-stack full-stack installation from the container host to application services Seamless Kubernetes deployment to any cloud or on-premises environment Autoscaling of cloud resources One-click updates for platform

to the performance of engineering teams. Technology, in particular cloud native technology like Kubernetes and its ecosystem of projects, is now a core competency for organizations in all industries, from GITOPS? GitOps is a set of best practices and an operational model that reduces the complexity of Kubernetes and makes it easier to deliver on the promise of DevOps. More than a simple evolution of DevOps security guarantees with full audit trails. Another key concept behind GitOps is the fact that Kubernetes and its ecosystem of cloud native tools are declarative, as opposed to imperative, which allows

OpenShift GitOps 2 第 1 章 什么是 GITOPS？ GitOps 是为云原生应用程序实施持续部署的一种声明方式。您可以使用 GitOps 创建可重复进程，用于在 多集群 Kubernetes 环境间管理 OpenShift Container Platform 集群和应用程序。GitOps 以快速的速度处 理和自动化复杂部署，节省部署和发行周期期间的时间。 GitOps 工作 Argo CD 作为声明性 GitOps 引擎的 Operator。它启用了多集群 OpenShift 和 Kubernetes 基础架构的 GitOps 工作流。使用 Red Hat OpenShift GitOps，管理员可以在 集群和开发生命周期中一致地配置和部署基于 Kubernetes 的基础架构和应用程序。Red Hat OpenShift GitOps 基于开源项目 Argo CD，为 ApplicationSet Controller (Argo CD ApplicationSet Controller) Argo CD 中存在并处理 ApplicationSet CR 的自定义 Kubernetes 控制器。此控制器会根据 ApplicationSet CR 的内容自动创建、更新和删除 Argo CD 应用程序。 AppProject CRD CRD 代表项目内应用程序的逻辑分组

was officially named as ​“GitOps” in 2017​ by Weaveworks and has since become very popular for Kubernetes deployments. The concepts behind GitOps are quite straight-forward: ● Infrastructure as perform a Git operation such as creating a commit or opening a pull request Specifically for Kubernetes, GitOps says that you must not use `kubectl` to change the cluster state in an ad hoc manner. (instead of using shared configuration). For example, if you have 20 git repositories with Kubernetes manifests and you need to make a central change (e.g. adding a new company-wide label on each