Introduction Background Operations & observability Outro Intro to Prometheus With a dash of operations & observability Richard Hartmann & Frederic Branczyk @TwitchiH & @fredbrancz 2018-12-12 Richard Frederic Branczyk @TwitchiH & @fredbrancz Intro to Prometheus Introduction Background Operations & observability Outro Who are we? Richard ”RichiH” Hartmann Swiss army chainsaw at SpaceNet Project lead for @fredbrancz Intro to Prometheus Introduction Background Operations & observability Outro Time split 1 1/3 Prometheus 2 1/3 Observability 3 1/3 Questions Richard Hartmann & Frederic Branczyk @TwitchiH

needed to manage version control, configuration management, Infrastructure as Code, CI/CD, and observability have drastically increased. This puts an additional burden on the developer as they now must and declared in your Git repo; then your GitOps system will create those for you. OBSERVABILITY Observability from a GitOps perspective is the ability to constantly have access to monitoring the and canary strategies can be also considered as various approaches to progressive delivery. OBSERVABILITY AS A DEPLOYMENT CATALYST An essential component of GitOps is feedback and control. But what is

principles of GitOps, • how your deployment strategy affects your GitOps plan, and • why observability is a critical part of GitOps and how it differs from monitoring Introduction | 04 3 KEY integration / continuous delivery (CI/CD), choosing between pull- or push-based architecture, and observability. Getting Started with GitOps Looking for an In-Depth Introduction to GitOps? Learn the differences mixture of Kubernetes and non-Kubernetes workloads can leverage a combination of both. Robust observability and reconciliation strategies must be thoroughly planned in this scenario, and built-in by design

multi-environment configurations 1.5. Auto-scaling and dynamic resources 1.6. GitOps rollbacks 1.7. Observability 1.8. Auditing 1.9. Running at scale 1.10. GitOps and Helm 1.11. Continuous Deployment management 2. A Vision of GitOps 2.0 2.1. Visibility into the whole software lifecycle 2.2. Observability and business metrics 2.3. Promotion among different environments 2.4. Achieving Continuous auto-scaling and dynamic resources 6. There is no standard practice for GitOps rollbacks 7. Observability for GitOps (and Git) is immature 8. Auditing is problematic despite having all information in

Orchestrators Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and eBPF to enable deep visibility into the communication Which services are performing the worst? What is the latency between two services? Security observability Which services had connections blocked due to network policy? What services have been accessed

confirm it provides what business requires ● Break, debug, pinpoint, and fix ● Security ● Observability ● Supportability etc. #IstioCon Goal of today Target Audience What to expect Istio Multicluster Second Demo What’s next? @rytswd #IstioCon What is NOT covered in the talk ● Multiclutser observability challenges ● Security considerations ● Secret management ● GitOps implementation details Target edge traffic localhost:32011 localhost:32012 Istio Ingress Gateway for Observability tools Istio Ingress Gateway for Observability tools #IstioCon Goal of demo Target Audience What to expect Istio Multicluster

is Hubble? Why Cilium & Hubble? Functionality Overview Getting Started Guides Installation Observability Network Policy Security Tutorials Advanced Networking Cluster Mesh Operations Istio Concepts Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and eBPF to enable deep visibility into the communication

is Hubble? Why Cilium & Hubble? Functionality Overview Getting Started Guides Installation Observability Network Policy Security Tutorials Advanced Networking Cluster Mesh Operations Istio Concepts Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and eBPF to enable deep visibility into the communication

and also resilience What do you need for operations? Power and cooling Network connectivity Observability, a.k.a. Monitoring The rest you can fix Richard Hartmann & Frederic Branczyk @TwitchiH & @fredbrancz 2.1 2.4 - 2.6 Beyond Outro OpenMetrics Bringing observability together OpenTracing already on board with this effort There will be an observability sidetrack Long-term goal is one common, modular,

container configuration. What is Hubble? Hubble is a fully distributed networking and security observability platform. It is built on top of Cilium and BPF to enable deep visibility into the communication Which services are performing the worst? What is the latency between two services? Security observability Which services had connections blocked due to network policy? What services have been accessed for integration with your existing dashboards. Hubble [https://github.com/cilium/hubble/]: An observability platform specifically written for Cilium. It provides service dependency maps, operational monitoring