This document discusses Kubernetes cloud provider integration (CPI) with public clouds. It explains that Kubernetes can be deployed on public clouds using tools from cloud providers like Amazon EKS, Google GKE, and OpenStack Magnum. CPI allows Kubernetes to utilize storage, networking, load balancing, and other resources from the underlying cloud platform. Key aspects of CPI covered include in-tree and out-of-tree CPI drivers, static and dynamic volume provisioning, using load balancers and private networks, and other cloud resources like authentication, file storage and metadata services. The document concludes with a demo of Kubernetes CPI on an OpenStack cloud infrastructure.

1. Kubernetes on the Cloud
Practical aspects of Kubernetes Cloud Provider Integration
Michał Jura
Senior Software Engineer
mjura@suse.com

2. Being Cloud Engineer

3. What is this
presentation
about?

4. A software-defined, scalable, secure, agile
and highly reliable IT infrastructure.

6. To cloud or not to cloud ?
OPS

7. Kubernetes on Public Clouds

8. Let’s define

9. Is Kubernetes platform agnostic ?
OPS

10. How to deploy Kubernetes ?
• Upstream tools:
– Kubeadm, minikube, Kubefed
• Cloud providers:
– OpenStack Magnum, Amazon EKS, Google GKS
• Third-party tools:
– CaaSP, Rancher, Ansible

11. What is Kubernetes CPI?
OPS

12. Enable Cloud Provider Integration
• Provide --cloud-provider=openstack flag
– kube-controller-manager
– kube-apiserver
– kubelet
• Create cloud.conf file and enable --cloud-config=

13. Typical CPI configuration
[Global]
auth-url="https://example.keystone.net:5000/v3"
username="mjura"
password=******
tenant-name=”Project”
domain-name="Domain"
ca-file="/etc/ssl/ca-bundle.pem"
[LoadBalancer]
lb-version=v2
create-monitor=yes
monitor-timeout=30s
monitor-max-retries=3
[BlockStorage]
bs-version=v2

14. In-tree and out-tree CPI drivers
• In-tree cloud providers drivers develop in the
main Kubernetes repository
– OpenStack, AWS, GCE, Azure, VMware
• Out-tree cloud providers drivers provided and
develop by third-party
– Alibaba Cloud, Rackspace

15. Static and dynamic volume provisioning
●
Use storage resources from cloud platform
●
Allows storage volume to be created on-demand
●
Eliminates the need for cluster administrators to provision
storage
●
It automatically provisions storage when it is requested by
users

16. Use Load Balancer and private network
●
Create Load Balancer pool to expose user application
●
Support different Load Balancer drivers like HAproxy or Octavia
●
Uses cloud private networks and routers

17. Other resources
●
Authentication – OpenStack Keystone
●
File storage – OpenStack Manila
●
Metadata service – OpenStack Metadata

18. Future of Kubernetes CPI

19. Kubernetes CPI DEMO

20. Controller Compute ComputeCompute StorageNetworkCompute
OpenStack
Ceph
Kubernetes
Cluster
Physical SwitchAdmin
OpenStack Cloud Infrastructure

21. Summary