SEPTEMBER 2022 GitOps for Kubernetes Essentials to Applications Hosted in Cloud-Native Ecosystems NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used version control system, with more than 80 percent of its market share in today’s software industry running in Kubernetes. In this Refcard, we will dive into what GitOps means in the Kubernetes world, key principles, and the advantages for cloud-native ecosystems. ABOUT GITOPS FOR KUBERNETES Thanks

North-South Load Balancing of Kubernetes Services with eBPF/XDP Martynas Pumputis (Isovalent) October 28, 2020 10.0.0.1 10.0.0.2 10.0.0.3 httpd httpd “httpd” service 10.0.0.1:30000 10.0.0.2:30000 KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT -A KUBE-FORWARD -s 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod source rule" --ctstate RELATED,ESTABLISHED -j ACCEPT -A KUBE-FORWARD -d 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod destination rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

Contents 05 Foreword 07 Introduction 08 Chapter 1–What is GitOps? Origins in DevOps Kubernetes and containers Cloud-Native DevOps A DevOps Operating Model GitOps Principles Tools PipeCD Keptn Pulumi Kubernetes Operator Summary 18 Chapter 3–Templating Everything in Git Kustomize Helm Operators Combining Tools Summary The Path Structures Repositories Reflecting an Organizational Boundary Kubernetes Platform Administrator Kubernetes Application Developer Other Boundaries GitOps Repo Example

was officially named as ​“GitOps” in 2017​ by Weaveworks and has since become very popular for Kubernetes deployments. The concepts behind GitOps are quite straight-forward: ● Infrastructure as perform a Git operation such as creating a commit or opening a pull request Specifically for Kubernetes, GitOps says that you must not use `kubectl` to change the cluster state in an ad hoc manner. that it matches your Git state. Git hashes and commits however are only useful to developers and operators. Business stakeholders have no interest in which Git hash is now deployed at the cluster.

pull-requests” GitOps Benefits 5 GitOps is for Everyone Developers Operations Kubernetes Cluster Node 1 Kubernetes (K8s) is an open-source system for automating deployment, scaling, and management It is a resource scheduler KUBERNETES 101 6 Node Node Node Node Node Node Node Node 1 1 2 2 2 2 3 3 3 4 4 Applications OpenShift 4 - A Smarter Kubernetes Platform Automated, full-stack full-stack installation from the container host to application services Seamless Kubernetes deployment to any cloud or on-premises environment Autoscaling of cloud resources One-click updates for platform

运行以下命令，将现有节点标记为基础架构： 2. 编辑 GitOpsService 自定义资源(CR)以添加基础架构节点选择器： $ oc label node node-role.kubernetes.io/infra= 第 第 1 章 章 在基 在基础 础架 架构节 构节点上 点上运 运行 行 GITOPS CONTROL PLANE 工作 工作负载 负载 3 3. 在 GitOpsService GitopsService metadata: name: cluster spec: runOnInfra: true $ oc adm taint nodes -l node-role.kubernetes.io/infra infra=reserved:NoSchedule infra=reserved:NoExecute spec: runOnInfra: true tolerations: - effect: NoExecute key: infra value: reserved $ oc label node node-role.kubernetes.io/infra= 1 Red Hat OpenShift GitOps 1.13 基 基础 础架 架构节 构节点上的 点上的 GitOps 工作 工作负载 负载 4 1 1 2

What you have (current state) CD Why GitOps? Reliably and consistently configure multiple Kubernetes clusters and deployment 6 Capturing and tracing any change to clusters through Git history Application Delivery Model 8 Source Git Repository Config Git Repository Image Registry Kubernetes CI CD The GitOps Application Delivery Model Pull Request Push Pull Push Pull Pull Request Repository Image Registry CI The GitOps Application Delivery Model Config Git Repository Kubernetes Deploy Monitor Detect drift Take action CD Continuous Integration & Continuous Delivery

modern, cloud-native technologies. They need a way to confidently and securely deploy changes to Kubernetes that doesn’t require them to become experts in the orchestration tool. That’s where GitOps comes Change Lead Time Change Failure Rate MTTR vs. MTTF (mean time to recover/fail) P.3 Simplify Kubernetes operations using developer tools GitOps helps DevOps teams be more autonomous and productive GitOps is a standardized workflow for how to deploy, configure, monitor, update, and manage Kubernetes, it components, and all the applications that run on it. In GitOps, a Git repository contains

language Zabbix Prometheus preprocessing query language now supports two additional label matching operators: • != -- select labels that are not equal to the provided string; • !~ -- select labels that do monitoring. Kubernetes • Kubernetes nodes by HTTP • Kubernetes cluster state by HTTP • Kubernetes API server by HTTP • Kubernetes Controller manager by HTTP • Kubernetes Scheduler by HTTP • Kubernetes kubelet kubelet by HTTP To enable Kubernetes monitoring, you need to use the new tool Zabbix Helm Chart, which installs Zabbix proxy and Zabbix agents in the Kubernetes cluster. To learn more about configuring

declaratively. The term GitOps was confined by Weaveworks in 2017 and was primarily aimed at managing Kubernetes deployments. However, now it has evolved into supporting other infrastructure management solutions middleman for facilitating communications between them. There are multiple available operators such as: Kubernetes Operator Terraform Cloud Operator Azure Service Operator Etc. GitOps workflow Now, Bitbucket: What’s The Difference & How To Choose How To Use Elastic Enterprise Search with GitHub Kubernetes Guide, a tutorial series Automation In DevOps: Why & How To Automate DevOps Practices What Is Cloud