Deploying windows containers with kubernetes

Deploying Windows Containers with

Kubernetes

@[email protected]

Deploying Windows Containers with

Kubernetes

@[email protected]

WH

O A

M I?

Learn via Interactive Browser-Based LabsKatacoda.com

Agenda

• Building Windows Containers

• Deploying Containers on Kubernetes

• Operating Kubernetes

> docker run -e 'ACCEPT_EULA=Y’ \

-e 'SA_PASSWORD=yourStrong133tPassword' \

-p 1433:1433 microsoft/mssql-server-linux

This is an evaluation version. There are [154] days left in the evaluation period.

2017-06-09 22:16:14.27 Server Setup step is copying system data file 'C:\templatedata\master.mdf' to '/var/opt/mssql/data/master.mdf'.

2017-06-09 22:16:14.36 Server Setup step is copying system data file 'C:\templatedata\mastlog.ldf' to '/var/opt/mssql/data/mastlog.ldf'.

2017-06-09 22:16:14.37 Server Setup step is copying system data file 'C:\templatedata\model.mdf' to '/var/opt/mssql/data/model.mdf'.

2017-06-09 22:16:14.40 Server Setup step is copying system data file 'C:\templatedata\modellog.ldf' to

'/var/opt/mssql/data/modellog.ldf'.

2017-06-09 22:16:14.42 Server Setup step is copying system data file 'C:\templatedata\msdbdata.mdf' to

'/var/opt/mssql/data/msdbdata.mdf'.

2017-06-09 22:16:14.45 Server Setup step is copying system data file 'C:\templatedata\msdblog.ldf' to '/var/opt/mssql/data/msdblog.ldf'.

2017-06-09 22:16:14.57 Server Microsoft SQL Server 2017 (CTP2.1) - 14.0.600.250 (X64)

May 10 2017 12:21:23

Copyright (C) 2017 Microsoft Corporation. All rights reserved.

Developer Edition (64-bit) on Linux (Ubuntu 16.04.2 LTS)

2017-06-09 22:16:14.58 Server UTC adjustment: 0:00

2017-06-09 22:16:14.58 Server (c) Microsoft Corporation.

2017-06-09 22:16:14.58 Server All rights reserved.

2017-06-09 22:16:14.58 Server Server process ID is 4116.

> docker run -it microsoft/azure-cli bashd5f51519a9b1:/# azure

info: _ _____ _ ___ ___

info: /_\ |_ / | | | _ \ __|

info: _ ___/ _ \__/ /| |_| | / _|___ _ _

info: (___ /_/ \_\/___|\___/|_|_\___| _____)

info: (_______ _ _) _ ______ _)_ _

info: (______________ _ ) (___ _ _)

info:

info: Microsoft Azure: Microsoft's Cloud Platform

info:

info: Tool version 0.10.11

Building ContainerisedASP.NET Core app

> cat Program.cs

namespace dotnetapp {

public class Program {

public static void Main(string[] args) {

var host = new WebHostBuilder()

.UseKestrel()

.UseContentRoot(Directory.GetCurrentDirectory())

.UseUrls("http://0.0.0.0:5000")

.UseIISIntegration()

.UseStartup<Startup>()

.Build();

host.Run();

}

}

}

> cat Startup.cs

namespace dotnetapp {

public class Startup {

public void Configure(IApplicationBuilderapp, IHostingEnvironment env, ILoggerFactoryloggerFactory) {

loggerFactory.AddConsole();

app.Run(async (context) => {

await context.Response.WriteAsync("Request processed by " + System.Environment.MachineName);

});

}

}

}

$ cat Dockerfile

FROM microsoft/dotnet:1.1.1-sdk

$ cat Dockerfile

FROM microsoft/dotnet:1.1.1-sdk

RUN mkdir /app

WORKDIR /app

COPY dotnetapp.csproj /app/

RUN dotnet restore

COPY . /app

RUN dotnet publish -c Release -o out

EXPOSE 5000/tcp

CMD ["dotnet", "out/dotnetapp.dll"]

$ docker build -t katacoda/dotnet-example:v1 .Sending build context to Docker daemon 137.7 kB

Step 1/11 : FROM microsoft/dotnet:1.1.1-sdk

Step 2/11 : RUN mkdir /build

Step 3/11 : WORKDIR /build

Step 4/11 : COPY dotnetapp.csproj .

Step 5/11 : RUN dotnet restore

Step 6/11 : COPY . .

Step 7/11 : RUN dotnet publish -c Release -o out

---> Running in fcde25425eee

Microsoft (R) Build Engine version 15.1.548.43366

Copyright (C) Microsoft Corporation. All rights reserved.

dotnetapp -> /build/bin/Release/netcoreapp1.1/dotnetapp.dll

Step 8/11 : FROM microsoft/dotnet:1.1.1-runtime

Step 9/11 : WORKDIR /app

Step 10/11 : CMD dotnet dotnetapp.dll

Step 11/11 : COPY --from=0 /build/out /app/

Successfully built 1dbec44d4150

Successfully tagged katacoda/dotnet-example:v1.1

$ docker run -d \

-t -p 5000:5000 \

--name app \

katacoda/dotnet-example:v1

$ curl dockerhost:5000

Request processed by zb8gh24wva

# First StageFROM microsoft/dotnet:1.1.1-sdkWORKDIR /appCOPY dotnetapp.csproj /app/RUN dotnet restoreCOPY . /app/RUN dotnet publish -c Release -o out

# Second StageFROM microsoft/dotnet:1.1.1-runtimeWORKDIR /appCMD ["dotnet", "dotnetapp.dll”]COPY --from=build out /app/

Optimised Image

REPOSITORY TAG IMAGE ID CREATED SIZE

katacoda/dotnet-example v1 d69cf725c406

5 seconds ago 266.3 MB

katacoda/dotnet-example v1 b8f8b523d3ca

6 minutes ago 894.7 MB

http://windows-wallpapers.net/wp-content/uploads/images/1c/windows-98.png

Windows Server Core

Windows Nano

Windows Containers

Windows Hyper-V

Containers

Windows Containers

Windows Kernel

Windows Server 2016

SQL Server

MSMQIIS /

ASP.NET

Docker Engine

Windows Hyper-V Containers

Windows Kernel

Windows Server 2016

SQL Server

MSMQIIS /

ASP.NET

Windows Kernel

Windows Utility VM

Hyper-V

Docker Engine

Windows Server Core

• Nearly Win32 Compatible

• Same behaviour of Windows

• Install all of the same tooling

Windows Nano

• Stripped down

• Smallest footprint

• 1/20th the size of Windows Server Core

• Only essential components

– Hyper-V, Clustering, Networking, Storage, .Net, Core CLR

Windows Server Core => Ubuntu Linux

Windows Nano => Alpine Linux

Windows Server Core => Legacy Apps?

Windows Nano => Modern Apps?

What does this mean for us?

Dockerfile

> type Dockerfile

FROM microsoft/windowsservercore:10.0.14393.693

RUN powershell.exe Install-WindowsFeature web-server

> docker build –t iis .

> type Dockerfile

FROM microsoft/iis:windowsservercore-10.0.14393.693

SHELL ["powershell", "-command“]

> type Dockerfile


SHELL ["powershell", "-command"]

RUN Install-WindowsFeature NET-Framework-45-ASPNET; Install-

WindowsFeature Web-Asp-Net45

> type Dockerfile



RUN Install-WindowsFeature NET-Framework-45-ASPNET; Install-

WindowsFeature Web-Asp-Net45

RUN Remove-Website -Name 'Default Web Site'; \

mkdir c:\NerdDinner; \

New-Website -Name 'nerd-dinner' \

-Port 80 -PhysicalPath 'c:\NerdDinner' \

-ApplicationPool '.NET v4.5‘

> type Dockerfile



RUN Install-WindowsFeature NET-Framework-45-ASPNET; Install-WindowsFeature Web-Asp-Net45






EXPOSE 80

> type Dockerfile



RUN Install-WindowsFeature NET-Framework-45-ASPNET; Install-WindowsFeature Web-Asp-Net45






EXPOSE 80

COPY NerdDinner c:\NerdDinner

PS C:\> docker build –t nerddinner .

PS C:\> docker run -d -p 80:80 \

nerddinner

Container Orchestration

Kubernetes is an open-

source system for

automating deployment,

scaling, and management

of containerized

applications.

http://queue.acm.org/detail.cfm?id=2898444

Kubernetes

Automatic binpacking

Self-healing

Horizontal scaling

Service discovery and load balancing

Automated rollouts

Secret and configuration management

Batch execution

Role based access control

Auditing

API and Extension Hooks

http://www.ofbizian.com/2017/05/bet-on-cloud-native-ecosystem.html

Services Define Communication

• NodePort – Hardcoded Port

• ClusterIP – Cluster Assigned IP

• LoadBalancer – Public IP Assigned by Cloud

https://www.slideshare.net/weaveworks/orchestrating-microservices-with-kubernetes

Infrastructure as CodeapiVersion: extensions/v1beta1

kind: Deployment

metadata:

name: frontend-web

spec:

replicas: 1

template:

metadata:

labels:

app: frontend

spec:

containers:

- name: http-server

image: katacoda/docker-http-server:latest

ports:

- containerPort: 80

Infrastructure as Code

apiVersion: v1

kind: Service

metadata:

name: frontend-svc

labels:

app: frontend

spec:

type: NodePort

ports:

- port: 80

nodePort: 30080

selector:

app: frontend

apiVersion: v1

kind: Deployment

metadata:

labels:

name: nerddinner

name: nerddinner

namespace: default

spec:

containers:

- image: benhall/nerddinner:v2.0

imagePullPolicy: Always

name: nerddinner

ports:

- containerPort: 80

nodeSelector:

beta.kubernetes.io/os: windows

Creating Kubernetes Cluster

htt

ps:

//tw

itte

r.co

m/k

ub

ern

etes

on

arm

Master === Linux OnlyNodes === Linux, Windows, Arm

Linux Containers on Windows

Kubeadmmaster$ kubeadm init

linuxnode01$ kubeadm join --discovery-token abcdef.1234567890abcdef 1.2.3.4:6443

windowsnode01$ .\kubeadm.exe join --discovery-token abcdef.1234567890abcdef 1.2.3.4:6443

kubectlmaster$ kubectl get nodes

NAME STATUS AGE VERSION

master Ready 9m v1.9.0

linuxnode01 Ready 9m v1.9.0

windowsnode01 Ready 9m v1.9.0

Creating AKS Service

$ kubectl expose deployments dotnetapp \

--port=80 --target-port=5000 \

--type=LoadBalancerservice "dotnetapp" exposed

$ kubectl get svcNAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE

dotnetapp 10.0.47.252 <pending> 80:31078/TCP 8s

kubernetes 10.0.0.1 <none> 443/TCP 15m

$ kubectl expose deployments dotnetapp --port=80 --target-port=5000 --type=LoadBalancer

service "dotnetapp" exposed

$ kubectl get svc

NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE

dotnetapp 10.0.47.252 <pending> 80:31078/TCP 8s

kubernetes 10.0.0.1 <none> 443/TCP 15m

wait for Kubernetes to configure Azure LB

$ kubectl get svc

NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE

dotnetapp 10.0.47.252 40.118.100.56 80:31078/TCP 5m

curl 40.118.100.56

> curl 40.118.100.56

Request processed by dotnetapp-2582115574-b59rg

> curl 40.118.100.56


> curl 40.118.100.56


> curl 40.118.100.56


$ kubectl scale --replicas=3 deployment/dotnetappdeployment "dotnetapp" scaled

$ kubectl get deployments

NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE

dotnetapp 3 3 3 3 6m

$ kubectl get pods

NAME READY STATUS RESTARTS AGE

dotnetapp-2582115574-0l028 1/1 Running 0 1m

dotnetapp-2582115574-b59rg 1/1 Running 0 7m

dotnetapp-2582115574-hdbc6 1/1 Running 0 1m

> curl 40.118.100.56

Request processed by dotnetapp-2582115574-0l028

> curl 40.118.100.56


> curl 40.118.100.56

Request processed by dotnetapp-2582115574-hdbc6

> curl 40.118.100.56


Deploy new versions?

$ kubectl set image \

deployment/dotnetapp=katacoda/dotnet-example:v1.1> curl 40.118.100.56

[v1.1] Request processed by dotnetapp-2582115574-0l028

> curl 40.118.100.56


> curl 40.118.100.56

Request processed by dotnetapp-2582115574-hdbc6

> curl 40.118.100.56

[v1.1] Request processed by dotnetapp-2582115574-b59rg

$ kubectl apply –f mydeployment.yaml

What about Private Registries?

> kubectl create secret docker-registry myregistrykey \

--docker-server=katacodademoreg1.azurecr.io \

--docker-username=katacodademoreg1 \

--docker-password=<REMOVE> \

--docker-email [email protected]

secret "myregistrykey" created.

apiVersion: extensions/v1beta1

kind: Deployment

metadata:

labels:

run: dotnetapp

spec:

replicas: 6

strategy:

rollingUpdate:

maxSurge: 1

maxUnavailable: 1

type: RollingUpdate

template:

spec:

containers:

- image: katacodademoreg1.azurecr.io/katacoda/dotnet-example:v1.1

imagePullSecrets:

- name: myregistrykey

metadata:

labels:

run: dotnetapp

Storage

> cat sqlserver.yaml

apiVersion: v1

kind: Secret

metadata:

name: azure-secret

type: Opaque

data:

azurestorageaccountname: <name>

azurestorageaccountkey: <key>

---

apiVersion: v1

kind: Pod

metadata:

labels:

name: mssql

role: master

name: mssql

spec:

containers:

- env:

- name: ACCEPT_EULA

value: "Y"

- name: SA_PASSWORD

value: yourStrong133tPassword

image: microsoft/mssql-server-linux

volumeMounts:

- mountPath: /var/opt/mssql/data

name: azure

volumes:

- azureFile:

readOnly: false

secretName: azure-secret

shareName: k8stest

name: azure

apiVersion: apps/v1

kind: StatefulSet

metadata:

name: web

spec:

serviceName: "nginx"

replicas: 2

selector:

matchLabels:

app: nginx

template:

metadata:

labels:

app: nginx

spec:

containers:

- name: nginx

image: k8s.gcr.io/nginx-slim:0.8

ports:

- containerPort: 80

name: web

volumeMounts:

- name: www

mountPath: /usr/share/nginx/html

volumeClaimTemplates:

- metadata:

name: www

spec:

accessModes: [ "ReadWriteOnce" ]

resources:

requests:

storage: 1Gi

Kubernetes Operators

• An Operator represents human operational knowledge in software to reliably manage an application.

• https://coreos.com/operators/

OperatorsapiVersion: extensions/v1beta1

kind: Deployment

metadata:

name: etcd-operator

spec:

replicas: 1

template:

metadata:

labels:

name: etcd-operator

spec:

containers:

- name: etcd-operator

image: quay.io/coreos/etcd-operator:v0.8.1

command:

- etcd-operator

env:

- name: MY_POD_NAMESPACE

valueFrom:

fieldRef:

https://raw.githubusercontent.com/coreos/etcd-operator/master/example/deployment.yaml

OperatorsapiVersion: "etcd.database.coreos.com/v1beta2"

kind: "EtcdCluster"

metadata:

name: "example-etcd-cluster"

spec:

size: 3

version: "3.2.13"

https://github.com/coreos/etcd-operator/blob/master/example/example-etcd-cluster.yaml

Is it still up?

Monitoring with Prometheus and Kubernetes

apiVersion: extensions/v1beta1

kind: DaemonSet

metadata:

name: node-exporter

spec:

template:

metadata:

labels:

app: node-exporter

name: node-exporter

spec:

containers:

- image: prom/node-exporter

name: node-exporter

ports:

- containerPort: 9100

hostPort: 9100

name: scrape

DaemonSet? When new nodes are deployed, automatically schedule

workload

What should we monitor?

apiVersion: v1

kind: Service

metadata:

annotations:

prometheus.io/scrape: 'true'

labels:

app: node-exporter

name: node-exporter

name: node-exporter

spec:

clusterIP: None

ports:

- name: scrape

port: 9100

protocol: TCP

selector:

app: node-exporter

type: ClusterIP

The Future?

SQL Server as a Container

Visual Studio as a Container?

Everything as a Container

Deploy Anywhere

www.katacoda.com

Online Kubernetes

Training for Companies

at Katacoda.com

@Ben_Hall

[email protected]

Blog.BenHall.me.uk

www.Katacoda.com

Technology

Deploying windows containers with kubernetes