Scaling a Multi-Tenant k8s Cluster in a Telco Pablo Moncada October 28, 2020 About MasMovil group ● 4th telecom company in Spain ● Provides voice and broadband services to +12M customers ● Several

to help. Creating a Sandbox environment Getting Started Using Minikube Getting Started Using MicroK8s Getting Started Using K3s Getting Started Using Kind Getting Started Using Minikube This guide uses Pending 0 8s cilium-s8w5m 0/1 PodInitializing 0 7s coredns-86c58d9df4-4g7dd 0/1 ContainerCreating 0 8m57s coredns-86c58d9df4-4l6b2 ContainerCreating 0 8m57s It may take a couple of minutes for all components to come up: cilium-operator-cb4578bc5-q52qk 1/1 Running 0 4m13s cilium-s8w5m

kind Install kind >= v0.7.0 per kind documentation: Installation and Usage [https://kind.sigs.k8s.io/#installation-and-usage] curl -LO https://raw.githubusercontent.com/cilium/cilium/v1.10/Documentatio print something like this: ♻ Restarted unmanaged pod kube-system/event-exporter-gke-564fb97f9- rv8hg ♻ Restarted unmanaged pod kube-system/kube-dns-6465f78586-hlcrz ♻ Restarted unmanaged pod kub -7fd66b8b88- qqhh5 ♻ Restarted unmanaged pod kube-system/metrics-server-v0.3.6- 7b5cdbcbb8-kjl65 ♻ Restarted unmanaged pod kube-system/stackdriver-metadata-agent- cluster-level-6cc964cddf-8n2rt This

to help. Creating a Sandbox environment Getting Started Using Minikube Getting Started Using MicroK8s Getting Started Using K3s Getting Started Using Kind Getting Started Using Minikube This guide uses load-balancing issues, then set [https://minikube.sigs.k8s.io/docs/commands/config/] any other driver from the supported list [https://minikube.sigs.k8s.io/docs/drivers/]. minikube start --cni=cilium --memory=4096 Pending 0 8s cilium-s8w5m 0/1 PodInitializing 0 7s coredns-86c58d9df4-4g7dd 0/1 ContainerCreating 0 8m57s coredns-86c58d9df4-4l6b2

to help. Creating a Sandbox environment Getting Started Using Minikube Getting Started Using MicroK8s Getting Started Using K3s Getting Started Using Kind Getting Started Using Minikube This guide uses Pending 0 8s cilium-s8w5m 0/1 PodInitializing 0 7s coredns-86c58d9df4-4g7dd 0/1 ContainerCreating 0 8m57s coredns-86c58d9df4-4l6b2 ContainerCreating 0 8m57s It may take a couple of minutes for all components to come up: cilium-operator-cb4578bc5-q52qk 1/1 Running 0 4m13s cilium-s8w5m

to help. Creating a Sandbox environment Getting Started Using Minikube Getting Started Using MicroK8s Getting Started Using Minikube This guide uses minikube [https://kubernetes.io/docs/getting-star Pending 0 8s cilium-s8w5m 0/1 PodInitializing 0 7s coredns-86c58d9df4-4g7dd 0/1 ContainerCreating 0 8m57s coredns-86c58d9df4-4l6b2 ContainerCreating 0 8m57s It may take a couple of minutes for all components to come up: cilium-operator-cb4578bc5-q52qk 1/1 Running 0 4m13s cilium-s8w5m

kind Install kind >= v0.7.0 per kind documentation: Installation and Usage [https://kind.sigs.k8s.io/#installation-and-usage] curl -LO https://raw.githubusercontent.com/cilium/cilium/v1.11/Documentatio print something like this: ♻ Restarted unmanaged pod kube-system/event-exporter-gke-564fb97f9- rv8hg ♻ Restarted unmanaged pod kube-system/kube-dns-6465f78586-hlcrz ♻ Restarted unmanaged pod kub -7fd66b8b88- qqhh5 ♻ Restarted unmanaged pod kube-system/metrics-server-v0.3.6- 7b5cdbcbb8-kjl65 ♻ Restarted unmanaged pod kube-system/stackdriver-metadata-agent- cluster-level-6cc964cddf-8n2rt This

basic concepts and mo�va�on. Installation Ge�ng Started Using Minikube Ge�ng Started Using MicroK8s Self-Managed Kubernetes Managed Kubernetes Installer Integra�ons Security Tutorials HTTP/REST API The DaemonSet will automa�cally install itself as Kubernetes CNI plugin. K8s 1.15 K8s 1.14 K8s 1.13 K8s 1.12 K8s 1.11 K8s 1.10 kubectl create -f https://raw.githubusercontent.com/cilium/cilium/v1 Started Using MicroK8s This guide uses microk8s [h�ps://microk8s.io/] to demonstrate deployment and opera�on of Cilium in a single-node Kubernetes cluster. To run Cilium inside microk8s, a GNU/Linux distribu�on

from source to deploy in one click, on any language or stack ● Every developer gets to their own k8s namespace About Okteto A few months ago... GCP was not thrilled Open Source to the rescue! ● Installed automatically reload falco on rule changes ● Rules: monitor well known IPs, binary names, forbidden k8s actions ● Action: Notify to slack for human banhammer ● Use Ubuntu instead of ContainerOS Current

storage 3 Compute node 3 CPU Network Storage node Flash 16-lane PCIe, 16GB/s 64 SSDs, 128GB/s 8x throughput gap https://cacm.acm.org/magazines/2019/6/237002-programmable-solid-state-stora ge-in- Storage node Flash eBPF and DoS 7 Compute node CPU Network Storage node Flash DoS eBPF and DoS 8 Compute node CPU Network Storage node Flash DoS DoS in reverse! 9 Compute node CPU Network