I would like to thank Nico Lamberti in particular for the great collaboration we’ve had over the last few months. With his help, we have succeeded in strengthening synergies between SUSE and dbi services in terms of technical know-how and sponsorship. The success of our Rancher & NeuVector technical webinar and community events hosted by dbi and powered by Sequotech, such as the Data Community Conference perfectly illustrate our partnership with SUSE. That’s just a few examples, there’s many more joint events to come …

For my first participation at SUSECON, the objective was not only to participate in the technical sessions, follow the keynotes for new announcements or visit the technology presentation booths to discover SUSE products and sponsor demonstrations…. but also to reinforce our partnership, meet new people and freely share ideas on Linux, Cloud Native, Edge and AI.

Through this blog post, I’ll try to summarize what I discovered and what I learned!
I hope you’ll enjoy reading it.

The keynotes announcements.

The recent acquisition of StackState by SUSE was presented to the audience, who applauded warmly the arrival of this Ultimate Cloud Native offering in SUSE portfolio. StackState provides end-to-end observability capabilities, impressively expanding the SUSE Ecosystem. The key consideration around StackState is that it stretches out observability to include database, endpoints, message queues, and more – not just the Kubernetes setup.

From the Linux distributions, to managing and handling container workloads with Rancher, to Zero-trust security tools adding attack detection and protection with NeuVector, to Harvester that handles VM workloads along with containers, StackState covers it all ! Its observability capabilities are purely impressive.

This StackState platform will most probably be integrated into Rancher Prime at first, and we truly hope that it will also be available as an Open Source solution later on.

Liberty Linux and SUSE AI were also presented during the Keynotes.

SUSE provides a complete ecosystem for running VM and containers workload in the Cloud or On-Prem as Open Source with the possibility to get extended support and capability through the PRIME offering !

The Keynote was focusing on the following 4 main axes:

• Linux
• Cloud Native
• Edge
• AI

During the last day of the keynote, we got an overview of the latest innovations on SUSE Linux : a new Linux kernel is being introduced.
Additionally, SUSE will extend its Linux support, thus becoming the vendor to propose the longest support period in the industry.

Harvester was also in front of the announcement : It does not intent to become a replacement of VMWare but an alternative for those who already did the choice to modernise their Platform, bridging Virtualisation and Cloud Native (Running VM along with containers workload is where Harvester is coming into the picture).

Few figures have been presented to us, SUSE ecosystem is impressive and it will continue to grow :

• SUSE’s 30 years of Open-Source Solution counts more than 50’000 active Rancher users
• more than 10 millions downloads of K3s monthly,
• 68% of Harvester YoY growth and download growth
• more than 125’000 Longhorn managed nodes

Latest updates and information about the Kubernetes Landscape and Rancher Prime 3.1 update :

Summary of the most interesting technical sessions I followed

The DEMOPALOOZA.

During the last session we followed before leaving, we could participate into a fun presentation on SUMA, Rancher, AI, Harvester, etc

It was presented in a playful way, with role play simulating crash and restoration of linux state, presenting capabilities of the SUSE AI solution and so on.

Really interesting way to conclude the SUSECON with a touch of humor.

Multi-tier management and observability of Edge clusters with Rancher

Edge clusters

During this session, the edge computing was explained and shoewed that the next challenge will be to manage very large scale infrastructures and observe more and more clusters, not only hundreds but it will soon become tenth of thousands of clusters.
The limits are pushed beyond what a single Rancher manager can currently handle. High quality and user experience must be kept in mind for maintaining clusters at large scale, focused on observability. For that purpose, Hub Rancher Cluster is a new feature that will allow to manage a set of spoke clusters where multiple downstream clusters will be attached. The Hub Rancher will receive aggregated information from each Spoke’s Downstream clusters and Grafana dashboard will allow to display overall information about the health of downstream clusters. A “drill down” capability is implemented to have a detailed overview of the whole edge platform of a company. Grafana Mimir is used to store all this data and present them in a consolidated dashboard view.

This feature is not yet available. It should be rolled out soon!

Cloud-Native Software Virtual Machines

I really liked this session as it was about Software Virtual Machine such as the JVM, the eBPF program and WebAssembly. The speaker explained what’s really behind this concept, its origins, and describing eBPF, WebAssembly and Edge applications at a high level. This really shows the evolution of the Software Virtual Machine since the beginning till today, showing that eBPF and WebAssembly will be the perfect match.

Deep Dive into the SUSE Customer Centre, RMT and SUSE Registry

The last technical session I followed was about the value of subscribing to SUSE, the key take aways were the following:

• Trusted open-source supply chain
• Linux, infrastructure and container management
• Maintenance and security updates
• Documentation & knowledge base
• Technical support

The trusted official SUSE container image provides several benefits:

• Easy discovery
• Rich information
• Vulnerability reports
• Image documentation
• Search and filtering
• Access exclusive subscriber-only content

A self-hosted, supported container image and OCI artifact repository can also be deployed On-Prem without external access requirements when pulling image from a Kubernetes cluster.

The benefits of this private registry are:

• Designed to work with the entire SUSE portfolio
• Host official SUSE images and helm charts, as well as your own
• Role-based access control
• Vulnerability scans

Thanks to the organiser of the event as well as the SUSE employees. I had the chance to discuss with some of them outside, during the party or when taking break between the sessions !

L’article The SUSECON 2024 in Berlin est apparu en premier sur dbi Blog.

For my 2nd time at the KubeCon & CloudNativeCon Europe – the right place to be for all the Kubernetes & CloudNative technical sessions, showcases, networking and to have fun – the event took place in Paris. Our travel from Basel to Paris was fast, 3 hours of TGV is appreciated compared to Amsterdam where we had to take the flight. And Paris is more practical as they are also speaking french even that the commodities was quite better in Amsterdam (food, biscuits, coffee machines were everywhere). Let me also mention that we didn’t get any foods at Midday during the 1st day this year. It was not included. It was only for the people with the all-access pass. There was also no croissant the morning as well as no biscuits the afternoon to accompany the coffee – it’s was embarrassing for my colleague who attend the KubeCon for the first time. Let see tomorrow !

By the way, it’s always a pleasure to attend such event. Thanks dbi services for this opportunity.

During the 1st day, as there was CNCF-hosted Co-located Events there was only one mainstream. It was for people who purchase the KubeCon + CloudNativeCon Only Pass as us. This was a stream dedicated to the project lightning talks. The concept of the lightning talks was introduce this year. The concept is quite interesting as it’s a 10 min presentation where the speaker present the project, its status, its roadmap as well as the next interesting features that would be release in a futur version.

I discovered new CNCF projects such as

• Strimzi
• CloudEvents
• PipeCD
• Konveyor
• SlimToolkit
• K8gb
• WasmCloud

Just to give you a brief overview of the mass of information we get today, here is the list of the lightning talks that I followed :

• Strimzi: Toward a ZooKeeper-less Future
• CloudEvents – Don’t Call Us, We’ll Call You
• Monitoring Kubernetes and Cloud Spend with OpenCost
• Client-side Feature Flagging with OpenFeature
• The State of K8sGPT: Your Troubleshooting Companion
• CNCF Storage TAG and the Cloud Native Storage Landscape
• Porter: Project vs Maintainer – A Race Against the Execution
• Effective centric CD pipeline: Toward PipeCD v1.0
• Backstage’s new auth system – avoiding foot-guns and config overload
• Container Builds at Scale with Buildpacks
• The Carvel Way: Packaging APIs stitching together sharp Unix-like tools
• Dapr: APIs for building secure and reliable microservices
• Accelerate Your Modernization Journey with Konveyor!
• Growing Better Together: Argo’s Community-Driven Development
• Flux: Secure and Scalable GitOps
• What’s New in Kuma: Advanced Service Mesh Capabilities
• Future of Service Mesh is Sidecar-less with Istio Ambient Mesh
• SlimToolkit: Improving Developer Experience with Containers: Making it Easy to Understand, Optimize, and Troubleshoot Your Containers
• Kyverno Top 10: Automate Kubernetes Security With Policy as Code
• OpenTelemetry for OSS!
• Achieving Balance Between Security and Performance in Falco
• K8gb: Reliable Global Service Load Balancing without vendor lock-in
• Kubernetes-style APIs for SaaS-like Control Planes with kcp
• How Crossplane is Accelerating Your Cloud Native Control Plane Journey
• Advanced Multi Cluster Scheduling with Open Cluster Management
• wasmCloud: Declarative WebAssembly Orchestration for Cloud Native Applications

For me, the concept of lightning Talk is quite great as this give the opportunity to the maintainers of the project to provide information to all the attendee and also try to catch new volunteer to join their community. The topics have been carefully selected by the CNCF to present the most relevant projects. Fast but with enough information to know the current states of the selected projects.

We complete the day by going to the party “PaaS Forward feat. DJ KUNGS Hosted by OVHcloud + Rancher by SUSE”. They announced a partnership between OVHcloud & Rancher by SUSE for the OVH managed Kubernetes service.

L’article KubeCon & CloudNativeCon 2024 in Paris – The Lightning Talks est apparu en premier sur dbi Blog.

The Welcome and Event Introduction was held by Sylvan Merli, Sales Manager from Red Hat. Thanks to him for the welcome and the introduction. All was well organized, and it was great to be able to discuss and socialize with other Ansible fanatics.

The goal of this blog is to share some interesting information I learned. Have you ever heard of Event Driven Ansible and the Ansible Lightspeed?

The Event Driven Ansible:

The Event Driven Ansible is the way of executing actions (tasks) triggered by listening to a source event, where decision is made based on defined rules. The Ansible Rulebook is now available for that purpose.

As a use case, I am just summarizing what was explained during the session:

Let’s think about a mission-critical system with piquet over the night. IT support people need to wake up almost every night to resolve an incident at 2 am by only restarting a service/server. The time the root cause of the problem is found, why not having something that can detect the incident from a source, determines which decision need to be taken depending on the rule and execute actions to perform automation task such as restarting the failing service/server without human intervention. That would be great, no? That’s were come in the Event Driven Ansible. You can now then breathe and have automated tasks listening to defined source events where the system will decide by himself if a restart of the failing service/server needs to be performed.

There are a lot of use cases behind this new capability. 

The main objective behind this concept is to add observability and remediation by using Ansible. In my opinion, that’s something that was missing in Ansible and which might be a very useful feature. Ansible is now able to do predication and execute tasks on his own. That’s a cool feature, isn’t it?

If you’re wondering what could be the source defined in the Ansible Rulebooks:  

There are partner source plugins in roadmap.

• AppDynamics
• Dynatrace
• Splunk
• IBM Instana
• LogicMonitor
• Sumologic
• GCP Pub/Sub
• AWS EventBridge

There is Ansible maintained event source plugins like:

• Kafka
• Webhooks
• Prometheus/Alertmanager
• Azure Service Bus
• Watchdog on file system
• url_check
• aso…

I’m encouraging you to check the official documentation on the Red Hat website here

If you are enthusiastic and already want to “play” with it like I did, there is an interactive lab available.

The Ansible Lightspeed.

The next piece of information I would like to share is the Ansible Lightspeed.

As you must probably saw in the previous screenshot, it relates to generative AI such as chatGPT but directly when you are coding Ansible tasks.

Ansible lightspeed uses the power of IBM Watsonx Code Assistant to provide suggestions on code snippet when developing your playbooks. This will reduce the time needed to write Ansible tasks and will improve the your code quality. The result provided by Lightspeed is the most suitable code to be used, following standard and best practices suggested by the IBM Watsonx generative AI tools.

For more detailed information, visit official source here and also here

The easiest to understand the possibility offered by this tool is to try it by yourself. In a couple of minutes, by simply following the official overview, I was able to use it and to be honest it was quite interesting. You will increase your productivity and ease your work as there is plenty of available modules in Ansible, each of them with a lot of options. Of course, you cannot know by heart all the possibilities. Most of the time, you will have to search for a sample using Google. That’s over, welcome to the future! You can now, when creating the tasks, have suggestions based on what you add in the name of the task such as “- name: Download kubeadm 1.24 for rhel9” + enter.

The suggestion comes directly, and you can accept it by using the “tab” keyboard.

It seems funny, but will we really use it during the daily coding of Ansible code? Let’s see.

I thanks again the organisers of the event, let’s meet them again next year

L’article Ansible Automates – Event Driven & Lightspeed est apparu en premier sur dbi Blog.

The last day keynotes were interesting. There was a talk from Veritas about Data protection and application Recovery. Petter Sveum presented the Veritas Kubernetes Data Platform Management as more and more customers are moving critical enterprise application on Kubernetes architecture. There is a real need of integrated, automated and elastic data protection and disaster recovery in cloud and Kubernetes that should meet compliance and SLA requirements. There was also another talk from Frederick Kautz around security and zero-trust – interesting. The next one was from Denise Shannon from Rancher by Suse, presenting the beginning of Rancher when it supports not only Kubernetes but also docker, swarm and cattle. It’s now only supporting Kubernetes. She presented as well the next features of Rancher. The next talk was about enabling Real-Time Media in Kubernetes presented by Giles Heron from Cisco. He presented the Media Streaming Mesh that supports real-time applications. He explained that nowadays, there is always delay when watching a football match if this is directly in the TV or using other providers. You can be aware of a goal when marked before other people. This is depending on the media you choose to watch the football match. The aim of the Media Streaming Mesh is to answer this problematic – more information here. There was also another talk from Huawei where Bill Ren presented the Cloud Native 2.0. He presented the Huawei product. The last and preferred keynote session was given by Aparna Subramanian who provided significant information in the scope of “Is Kubernetes Delivering on its Promise ? A Platform Engineering Perspective”. She presented the Shopify use case where before they used an Infrastructure platform with split layer. She then presented the platform they built at Shopify using Kubernetes. She also gave information about the effort required to build a complex Kubernetes platform. At the end we all agree, including me that Platform Team love Kubernetes. Here are some photos

Before going to lunch, I attended a tutorial session : “Create and Deploy a Lightweight Microservice in WebAssembly. We go through the main concept of the WASM, the needs compared to traditional other programming language and how it is supposed to be the standard in a near future. I was able to deploy and use my 1st WASM project.

It’s the lunch time and as the day before we take time to write the blogs. The planning will be short to attend the last session and go to the airport so I will not have time to describe the afternoon session but I think you saw all the interesting session and I would encourage you to contribute to any CNCF project and at least attend a next event organised by the CNCF – You can find the complete list here.

Thanks again to the organiser and hope that someone from my team will have the opportunity to be a speaker during next CNCF event or the next KubeCon & CloudNativeCon in Paris in 2023.

L’article The last day in Amsterdam for the KubeCon & CloudNativeCon 2023 est apparu en premier sur dbi Blog.

The 2nd day for the KubeCon was another amazing day with interesting sessions where I continue to learn a lot.

Again, thanks to dbi services for this great opportunity to travel and see maintainers of such amazing open source projects talking about the most future advanced technologies – CloudNative, Kubernetes, KataContainer, GitOps. That’s the current trend and I’ve seen with involved and experienced people how it evolves and how it should continue to evolve.

The day begin as usual with 7 sessions for the Keynote – everybody were in the same huge room to hear some news such as the progression around the OpenSSF (The Open Source Security Foundation) and why they migrated all the container images from k8s.gcr.io to registry.k8s.io. We can easily search on google for the why – faster, cheaper but it’s mainly to spreads the load across multiple cloud providers like a CDN for Kubernetes container images. They also explained that Cloud Native evolves to not only be used for stateless micro services but it’s widely used for any type of applications including databases.

We also received update on the following CNCF projects :

• Backstage
• Cert manager / Trust-manager
• Cilium 
• Cloud Custodian 
• CloudEvents 
• CRI-O – introduction of Evented PLEG
• Dapr 
• Dragonfly
• Emissary-ingress 
• Falco (2 new releases since the last event)
• gRPC 
• In-Toto 
• Istio focused to make it work without sidecar container
• Knative
• Longhorn
• NATS 
• SPIFFE/SPIRE for Mtls

OpenClarity has been also quickly introduced. If you search and google it, it’s a set of Open Source tools for Cloud Native security and observability. APIClarity, KubeClarity and VMClarity. Tools that I would need to install and test to see what they would bring. So much tools, and no time, I would have to delegate.

Today, I followed several sessions

• Kubernetes Database Operators Landscape
• Container Is the New VM: The Paradigm Change No One Explained to You
• Telepresence Case Studies: From First Experience to Fast Feedback at Scale
• Building a Successful Business in Cloud Native
• Mission-Critical PostgreSQL Databases on Kubernetes
• Disaster Recovery: Bringing Back Production from Scratch in Under 1 Hour Using KOps, ArgoCD and Velero

I get interesting information that would be useful at dbi services. I saw that database on Kubernetes is really emerging and begin to be a trendy topic. There is already a lot of Kubernetes database operators available in the community. The only problem is to know if they are providing a good quality. The aims is to operate things automatically, managing the day-to-day operation as a virtual dba, starting from database creation, self tuning, self healing such as automatic index creation, backup and restore, database monitoring, storage management, high availability and upgrade. Most of them have the same purpose as why we run an application in Kubernetes. Why not use Kubernetes to leverage them ? Main challenges is to really trust the operator in term of security and data continuity.

There is already an Open Community that is working on that topic called the Data on Kubernetes Community (DoKC). As per the main page here, it was founded to lead discussions and share best practices about running stateful workloads on Kubernetes. At the moment there is no real guidance for the Kubernetes database operator developper, there is no scalability workload model, testing and success criteria. The experts advise would be to re-engineer the database model for cloud native model (host base access control – hba in postgres do not make sense on Kubernetes)

That’s all for today, we will go and enjoy the night in Amsterdam, the last night / day is at the corner.

L’article The 2nd day in Amsterdam for the KubeCon & CloudNativeCon 2023 est apparu en premier sur dbi Blog.

There is now CNCF-hosted Co-located events adding more topics and interesting sessions. This is community-driven, vendor-neutral events hosted and managed by the CNCF. ArgoCD, Cilium, Linkerd have now their own conference. Here is the list of CNCF-hosted Co-located events.

Unfortunately, all the above events were already sold out when we decided to come at the KubeCon.

During the 1^st day Keynote, Chris Aniszczyk CTO of the CNCF mentioned that for this year, the increase of the number of participants was just amazing reaching more than 10’000 people. The number of CNCF projects also increased a lot. I feel that the main message of this Keynote is that there is a real need for contributors to help maintainers – more projects but seems less contributors.

The keynote was interesting, I learned that there are new certifications available in the CNFC cert path.

I also learned that GitLab choose flux for the GitOps capabilities. It’s already documented in the GitLab documentation here. See as well this blog announcement.

I noticed a project that I would like to follow: The scalable, reliable, MySQL-compatible, cloud-native database. I’m quite sure my database colleagues Elisa Usai & Saïd Mendi would love to do a presentation during our next dbi xChange event. I would encourage them to have a look at vitess.io.

After the keynotes I participated to the following sessions

• Learn the Helm Code Base and PR Review Process
• Emissary-Ingress: Self-Service APIs and the Kubernetes Gateway API
• Argo CD Core – A Pure GitOps Agent for Kubernetes
• How to Turn Release Management from Duty to Fun: Lessons Learned Building the Cluster API Release Team
• Highly Available Routing with Multi Cluster Gateways

Following some information about the sessions.

Learn the Helm Code Base and PR Review Process.

Scott Rigby, Andrew Block & Karena Angell were holding the session and explained rapidly what helm is. They focus the session on drawing attention to the need for contributors. Anybody could help not only by developing but also in doing review, documentation, bugs triage and other stuff that may not require high level of expertise. We explored the git repository with the composed directory explaining each of them. How the source code of the helm tool is composed. It was interesting but to be honest, I was thinking that we would have to describe which new features are in the pipe or other cool stuff around the futur of helm. It seems that maintainer are already overloaded and except maintaining the code there is no real new features or at least it was not covered during this session.

Emissary-Ingress: Self-Service APIs and the Kubernetes Gateway API

Lance Austin and Flynn Buoyant provides update on the emissary-ingress, including new features since the time it was introduced in Detroit. They also explained the needs of having a self-service, developer centric configuration tools for APIs.

Argo CD Core – A Pure GitOps Agent for Kubernetes

The speakers, specially the co-creator of Argo provides description of the Argo CD component architecture, showing the internal layer saying that the core is decoupled from the UI. The core can be easily used by Kubernetes Administrator to deploy several applications along to multi-cluster. A demonstration was done to show how Kube Admin could use Argo CD as a pure GitOps Agent.

I think you now have an overview of the session I’ve followed today, it’s a complete program during the KubeCon & CloudNativeCon. I had to choose between several streams as there were interesting other sessions in parallel. I’m really happy to be part of this event but now it’s time to take a bier with my colleague Benoît and see what will do tonight – visiting Amsterdam most probably.

L’article The 1st Day at KubeCon & CloudNativeCon 2023 in Amsterdam est apparu en premier sur dbi Blog.

I’m pasting below the website main page with the countdown as it was a pretty great design with Barcelona city by night in the background.

The 1st day at the DevOps Barcelona was quite intensive, 4 sessions the morning with the welcome speech and 4 sessions the afternoon. There was only 1 stream, but it was enough as would like to attend each of them. For one time you don’t have to choose between plenty of sessions.

The main stage:

Please find the agenda of the sessions I attend.

• The 1st session was given by Kris Buytaert with the title “Over a decade of #devops, what have we learned.”
• The 2nd session was given by Hooman Beheshti with the title “Why you should be expecting more from the network edge”

Then it was the break. You can see that a lot of people were attending the event…

The main stage was full.

After the break, I attended the following sessions

• The 3rd session was given by Hila Fish with the title “Open-Source: Open Choice – A DevOps Guide for OSS Adoption”
• The 4th session was given by my friend Viktor Farcic, with the title “DevOps Is All About Building Internal Developer Platform (IDP)”. That’s good to say that’s for him that I insisted to come with my colleagues in Barcelona. I wanted to see Viktor’s show. I was happy to see him on stage.

It was then the time of the lunch. With Nicolas and Donovan we decided to quickly take a taxi and we went in Barceloneta Beach to eat the famous Paella with a glass of Sangria.

We breathed a bit the Ocean air …

Love Barcelona

After this relaxing lunch, we went back to the event to attend the following sessions

• The 5^th session was given by Anton Babenko. “How to build, scale, and maintain 45 public Terraform modules with over 100 million provisions”
• The 6^th session was given by Nerea Luis. Artificial Intelligence seen from the software development lifecycle perspective

• The 7^th session was given by Peter Murray. How Github uses GitHub to develop GitHub
• The 8^th and last session of the day was given by Armon Dadgar with the title Zero Trust Security.

I really like the last session from Armon Dadgar, HashiCorp founder and CTO. He had no slide, nothing else than a pencil and whiteboard to show us the Zero Trust Security and how Hashicorp product are covering all the security need in the context of managing multiple cloud provider with private and direct to on-premise infrastructure.

If you want to learn more on the DevOps Barcelona 2022, I recommend that you read the blogs from my 2 colleagues. They seem really concentrated to write their blog, aren’t they?

L’article DevOps Barcelona 2022 – the 1st day est apparu en premier sur dbi Blog.

For this second edition, around 300 peoples were attending the event. Thanks to the organizers

During the 1st day, I attended a workshop “Terraform best practices with examples and arguments” given by Anton Babenko. Anton is AWS community Hero and is specialized in Infrastructure as Code. Do no hesitate to have a look on his web site dedicated to best practices

https://www.terraform-best-practices.com

Next to the workshop, I went to the interesting comparison of the git repository organization mechanism, the monorepo and polyrepo support.

Maria Guseva, provides examples, give advantages and drawbacks of each and show us how they are managing source code monorepo at Yandex

Another session that took my attention was the one provided by Paolo Kreth “Persistence layers for microservices – the converge database approach”. It began very well with well structured introduction. I was exited and he was providing information about how to architecture application with persistence layer and microservices.

Then, even after putting a disclaimer that his presentation is not for marketing purpose, he totally changed and talked a lot about the Oracle Database Product. Mainly saying that with latest versions “from 12c”, the Pluggable Database is comparable to the container “the container database” where we could easily patch, upgrade without near zero downtime. Adding that with the autonomous features, there is less stuff to take care about compared to PostgreSQL for example. The speech was concentrated to compare a previous job failed POC made at Mobiliar. As an Oracle employee, we can understand.

By the way, he also remind  the  updated  licensing  model as of  December 5th 2019 the machine learning and the spatial & Graph features option do no longer require a specific license. These are included in all editions of the Oracle Database “EE and SE2”

Let me share a screenshot of the speech that I mostly appreciate… It was done by “Jan De Vries”, Becoming antifragile is more important than ever in disruptive times

I enjoyed this two days and thanks again to the organiser.

L’article DevOpsDays 2020 at HEG in Geneva est apparu en premier sur dbi Blog.

It was “sympa”, with music, foods, drinks and so on.

But yeah, it was not the only things, let’s come back to the second DevOps Jenkins World day which began with the keynotes. I really loved it. It was animated with SuperHeroes in small cartoon between each speech of the speaker. We were informed about the creation of the cd.foundation. A collaboration initiated by Jenkins X (Cloudbees), Spinnaker (Netflix), Tekton (Google) and others (full landscape).

During the keynotes, the collaboration with google has been announced for the new SaaS SDM solutions fully based on Jenkins X CI/CD pipelines using Tekton, Kubernetes (OKE) in Google Cloud. It’s currently in the preview state.

After the keynotes, the sessions began. I attended the following

• Introduction to Jenkins X
• DevOps Patterns & Anti-Patterns for Continuous Software Update
• Value Stream Management and the Next Decade of DevOps
• Are Open Source Developers Security’s New Front Line ?
• Supercharging Your Docker Builds with Skaffold and Kaniko
• Cultivating DevOps

The outcome of the day exceeded my expectations

1- I get a new book signed by the Author

2- I saw the new Jenkins X GUI and I tested it in the kubernetes cluster created yesterday on GKE

To install the Jenkins X GUI

abe@Arnauds-MacBook-Pro:~$ jx add app jx-app-ui --version=0.1.26 --namespace=cd

As it’s the first time, the output of the command was quite surprising :

Preparing questions to configure jx-app-ui. If this is the first time you have installed the app, this may take a couple of minutes.
Questions prepared.
Installing UI in single-user mode

What’s the preparing questions process ? I don’t want to go to deep now but when checking current pods, I saw a new pods for “values-preprocessor”.

abe@Arnauds-MacBook-Pro:~$ kubectl get pods | grep values
values-preprocessor-b7c31a2f-119d-4c95-a2ca-c7c9f7e3b24f   0/1     ContainerCreating   0          78s

Great, after few minutes, the completion message appeared

Successfully installed jx-app-ui 0.1.26

I can’t wait, let’s launch the webUI

abe@Arnauds-MacBook-Pro:~$ jx ui -p 9845
UI not configured to run with TLS - The UI will open in read-only mode with port-forwarding only for the current user
Waiting for the UI to be ready on http://localhost:9845...
.
.
Opening the UI in the browser...
Jenkins X UI: http://localhost:9845

This directly opened the browser displaying the UI

Great to see the UI but where are my projects ? Strange as the jx get pipelines shows some project no ? Why aren’t they displayed ? To be checked later.

3- I understand now how to efficiently use Skaffold for local kubernetes development (build, tag, test and run). What I would like to test as soon as possible is the container-structure-test that will test and validate the result of the build. Skaffold is also able to watch source code for changes and redeploy it.

By the way, what’s important for current project it’s to overrides the jx pipeline to add buildArgs variables in Kaniko. The sample provided is the following with loop variables

4- I get more knowledge about DevOps Patterns and Anti Pattern regarding the Continuous Updates Tenets

• Easy Rollbacks
• Automate Everything
• Observability
• Canary Releases
• Automated Deployment
• Frequent
• Zero downtime updates

5- I get clear information about possible threat create by developers when downloading and integrating java libraries as well as NPM libraries installation (Can we trust them ? What about their dependencies ? What about dependencies of dependencies ? …)

Much more interesting things during this great day…

L’article DevOps World – Jenkins World – Next Days – Keynote, Sessions & SuperParty est apparu en premier sur dbi Blog.

The workshop was really complete with clear explanation in guidance and hands-on exercises. In few words, we begin to create a Kubernetes cluster using “jx create cluster gke” using my GCP Free Tier.

Before create the cluster, I decided to update my jx cli. So easy that a simple “jx version” allow you to upgrade the cli

abe@Arnauds-MacBook-Pro:~$ jx version

NAME               VERSION
jx                 2.0.1045
jenkins x platform 2.0.1707
Kubernetes cluster v1.13.11-gke.14
kubectl            v1.15.0
helm client        Client: v2.14.3+g0e7f3b6
git                2.21.0 (Apple Git-122.2)
Operating System   Mac OS X 10.14.6 build 18G95

verifying packages
? A local Jenkins X versions repository already exists, pulling the latest: Yes

WARNING: jx version 2.0.1047 is available in the version stream. We highly recommend you upgrade to it.

? Would you like to upgrade to the jx version? Yes

Downloading https://github.com/jenkins-x/jx/releases/download/v2.0.1047/jx-darwin-amd64.tar.gz to /usr/local/Cellar/jx/2.0.1007/bin/jx.tmp...

The time I wrote this blog, 2 version was already promoted to production and available for download. Viktor informed that around 6-7 versions are pushed every day (amazing isn’t it).

Once jx cli was properly upgraded, it was the time to create the GKE cluster using and including Jenkins X

Preparation:

abe@Arnauds-MacBook-Pro:~$ NAMESPACE=cd
abe@Arnauds-MacBook-Pro:~$ echo "nexus:
  enabled: false
" | tee myvalues.yaml
abe@Arnauds-MacBook-Pro:~$ PROJECT=jenkins-testing-249008
abe@Arnauds-MacBook-Pro:~$ gcloud auth login

Create the GKE cluster:

abe@Arnauds-MacBook-Pro:~$ jx create cluster gke -n jx-rocks -p $PROJECT -r us-east1 \
-m n1-standard-2 --min-num-nodes 1 --max-num-nodes 2 \
--default-admin-password=admin \
--default-environment-prefix jx-rocks --git-provider-kind github \
--namespace $NAMESPACE --prow --tekton --skip-login

In less than 20 minutes the Google Kubernetes Engines cluster was up and running with Jenkins X installed and configured in the specified “cd” namespace.Real Continuous Fun during the 1st day, isn’t it ?

After covering all the 14 workshop sections, I can be really proud of the team I worked with during the last months as we did a real great job for the customer. Without prior knowledge on Kubernetes and Jenkins X, we were able to fully install Kubernetes cluster on Premise, create Jenkins X Pipelines, customize BuildPacks, create QuickStart projects and understand the jx Import utility while applying the GitOps Principle in the right manner and direction. In fact we concluded with my colleagues, Mehdi Bada, that we followed most of the workshop sections concept during customer activities.

• Section 1: Installing jx
• Section 2: Creating A CD Cluster
• Section 3: Creating A Quickstart Project
• Section 4: Importing Existing Projects Into Jenkins X
• Section 5: Applying GitOps Principles
• Section 6: Working With Pull Requests And Preview Environments
• Section 7: Promoting To Production
• Section 8: Versioning Releases
• Section 9: Implementing ChatOps
• Section 10: Using The Pipeline Extension Model
• Section 11: Extending Jenkins X Pipelines
• Section 12: Defining And Running Serverless Deployments
• Section 13: Choosing The Right Deployment Strategy
• Section 14: Managing Third-Party Applications

By the way, we get clear inputs on important jx concepts such as jx environments, the promotion between environments, pull requests and so on and so forth

Thanks to organizer and I’m really excited for the next 2 days

L’article DevOps World – Jenkins World – The Workshop On Day One est apparu en premier sur dbi Blog.