Kubernetes Meetup @ Config Management Camp

Hey kubernetics,

In the margins of Config Management Camp an extra edition of the meetup will be hosted.

Talks:

• 18.00: welcoming

• 18.30: Introduction to service mesh using Istio on Kubernetes by Alex Van Boxel
Now that you have micro-services you want to keep an eye on what happens between the services and make sure everything is secure. Istio provides an easy way to create a network of deployed services with load balancing, service-to-service authentication, monitoring, and more, without requiring any changes in service code. Istio is an open-source collaboration between Lift, Google and IBM with Lift's Envoy at the core.

You will get a detailed overview of all the benefits that Istio can bring to your micro-service architecture. The presentation will be accompanied with a live demo giving more insight of some of the concepts.

• 19.15: Exploring the service mesh ecosystem by George Miranda
The service mesh ecosystem has many new players and is generating a lot of excitement. But how do you know if you're ready for a service mesh? If you are ready, how do you know where to start navigating through different options available? This talk covers the service mesh landscape and examines the design philosophy and use cases for tools like Linkerd, Istio, Envoy, and Conduit. What should you be asking and how do you determine what's best for your environment? This talk provides practical tips to help you get started.

• 20.00: Kubernetes Admission Webhooks – and how to write your own by Stefan Schimanski
Admission is a central step in the Kubernetes API server HTTP handler implemention. Every request from the user, controllers or the kubelet goes through a chain of admission plugins. Those plugins can validate and reject requests or they can even mutate the sent objects before they are persisted to etcd. Since Kube 1.9 admission plugins can be added to the kube-apiserver via a webhook mechanism, i.e. it is no longer necessary to change the kube-apiserver Go code. This opens up the Kubernetes API to a new class of extensions, either from 3rdparties or from you as a cluster admin.

Istio is a famous example injecting side-car containers. For CRDs the webhooks can implement validation or defaulting. Cluster admins can react to security issues by forbidding malicious objects. In this talk we will discuss the admission mechanism, how it is configured in the apiserver and how you can build your own admission webhook in 200 lines of Go code and deploy to any 1.9 cluster.

• 20.30: networking - exchange

----------

Drinks and pizza are sponsored by Skyscrapers - skyscrapers.eu | @skyscrapers