SEPTEMBER 2022 GitOps for Kubernetes Essentials to Applications Hosted in Cloud-Native Ecosystems NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used version control system, with more than 80 percent of its market share in today’s software industry running in Kubernetes. In this Refcard, we will dive into what GitOps means in the Kubernetes world, key principles, and the advantages for cloud-native ecosystems. ABOUT GITOPS FOR KUBERNETES Thanks

North-South Load Balancing of Kubernetes Services with eBPF/XDP Martynas Pumputis (Isovalent) October 28, 2020 10.0.0.1 10.0.0.2 10.0.0.3 httpd httpd “httpd” service 10.0.0.1:30000 10.0.0.2:30000 KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT -A KUBE-FORWARD -s 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod source rule" --ctstate RELATED,ESTABLISHED -j ACCEPT -A KUBE-FORWARD -d 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod destination rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

Separation of Privileges 03 04 05 06 07 10 GitOps Hands On Tutorial Part 1: Spin up a Kubernetes Cluster Part 2: Fork the Sock Shop Repository Part 3: Setup CI and Connect a Container Registry your team can make changes and updates safely and securely to complex applications running in Kubernetes. Freedom of choice Because there is no single tool that can do everything required in your pipeline ship features. eBook 4 The Principles of GitOps The entire system is described declaratively. Kubernetes is just one example of many modern cloud native tools that are “declarative” and that can be treated

scalability to your datacentre, public or private. Whether you want to deploy an OpenStack cloud, a Kubernetes cluster or a 50,000-node render farm, Ubuntu Server delivers the best value scale-out performance esm-infra yes enabled Expanded Security Maintenance for Infrastructure livepatch yes enabled Canonical Livepatch service realtime-kernel yes disabled Ubuntu kernel with PREEMPT_RT patches integrated 0-42-generic s390x) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/pro System information as of Wed Jun 3 17:32:10 UTC 2020 System

was officially named as ​“GitOps” in 2017​ by Weaveworks and has since become very popular for Kubernetes deployments. The concepts behind GitOps are quite straight-forward: ● Infrastructure as perform a Git operation such as creating a commit or opening a pull request Specifically for Kubernetes, GitOps says that you must not use `kubectl` to change the cluster state in an ad hoc manner. quickly breaks down when it comes to advanced deployments adopted by big organizations. The canonical example of mixing CI and CD is with smoke testing. Let’s say that you want to run some smoke tests

Contents 05 Foreword 07 Introduction 08 Chapter 1–What is GitOps? Origins in DevOps Kubernetes and containers Cloud-Native DevOps A DevOps Operating Model GitOps Principles Flux Open Cluster Management Other GitOps Tools PipeCD Keptn Pulumi Kubernetes Operator Summary 18 Chapter 3–Templating Everything in Git Kustomize Helm Structures Repositories Reflecting an Organizational Boundary Kubernetes Platform Administrator Kubernetes Application Developer Other Boundaries GitOps Repo Example

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Ubuntu Desktop Training Ubuntu Desktop Course Copyright © 2009 Canonical Limited Ubuntu Desktop Training Written by and attributed to Canonical Ltd. and the Ubuntu Training community 2008-2009. This license to: http://creativecommons.org/licenses/by-nc-sa/3.0/legalcode Student Guide Copyright © 2009 Canonical Limited Table of Contents Course Overview .............................................. vii ..................... 155 iv Ubuntu Desktop Training Ubuntu Desktop Course Copyright © 2009 Canonical Limited 4.7.1. GnuCash Accounting .............. 155 4.8. Lesson Summary ....................