Industry Use Cases with Demonstration on Kubernetes (Industry Experts Session)

  Before getting into industry, for sailing smoothly from academic to industry, it's very important have some knowledge about industry, how things works in industry, industrial use case.

Just because of Mr. Vimal Daga sir and Mrs. Preeti Daga ma'am, I got this opportunity. On 09th March 2021 , they arranged Industry Expert Practical Demo Session on kubernetes. Two of the best expert Redhatters of the industry Mr. Neeraj Bhat, Mr. Vijit  Kuntal and Rushil Sharma they taught and showed use cases and industrial need.

▪️Introduction to speakers for the session, they all are experts from the core industry :- 

➡️ The First One is :-

”Mr. Neeraj Bhatt” (Senior Technical Engineer- OpenShift, Redhat )

▪️"Neeraj is working in Redhat from more than 4 years now"

➡️ And The Second One is :-

”Mr. Vijit  Kuntal" (Consultant, Infosys Belgium)

▪️Vijit  is an experienced Senior System Engineer extremely skilled in DevOps, Jenkins.

➡️ And the Third one is- 

”Rushil Sharma” ( Customer Engineer Hybrid Cloud, Google)

▪️He has Experience in driving Financial institutions to optimise the Kubernetes workloads to leverage the optimum resources available without over committing the hardware.He has also worked at RedHat and contributed on Openshift 4.

Here's a brief summary what all was discussed in this session...

•  need of cvs git:

•  easy to create branches in git

•  git ui gives more clear picture of the repos

•  reast api implementation in git.

•  git is easy to reconcile.

•  code merges between the branches.

•  cvs works on a file level, whereas git works on a repo/module level.

•  there are two ways to do cvs conversion:

•  git provides git cvsimport [options][options]

•  cvs2git is a tool that is mostly used.

•  both of these tools are used to convert any type of centralized vs(cvs, svn) to distribute version control system(git)(hg)

•  integration of cvs with jenkins:

•  depends on the version of jenkins in use, jenkins jobs can be created.

•  pollers or git features(hooks)can be used to trigger the buildafetr every commit.

•  from commit to build, cqa, deplou, test is reduced to minus.

•  for use case of 2 availability zones az1 and az2,it is recommended to use repurse hardware from openshift cluster and start migration of workloads on k8s cluster for the least critical first and then critical bang services.

•  for the requirement of resource optimazation, it is recommended to use wide infrastructure service deployemnt using standardised resource allotment.

•  for the requirement of of monitoring cpu restarting pods and memory requests, it is recommended to implement elk stack along with grafana dashboards and prometheus.

•  for failover capacity and cluster level autoscaling, it is recommended to use microservicewhich will scale horizontly when required we can run out of resources.

•  for image security enhancement using notary server, it is advised to use docker notary to sign images.

•  custom ssc-->sample ssc

•  default capability = net admin

•  system"serviceaccount:custom:custom-sa-->>system account name:type:custom service/system service.

•  openshift.io is very specific kind of metadata inside verify scc.

•  capsh --print|grep net } used to check capability of network

•  oc create role capscc --verb=use--resource=scc--resource-name=cap-add -n captest } used to create a role.

•  to create roll binding:

• oc create rolebinding capscc-bind--role=capscc--serviceaccount=captest:default

WHAT ALL SCCs CAN CONTROL?

• Whether pod can run privileged containers.
• Container’s capability request.
• Use of host directories as volumes.
• SELinux context of the container.
• Container user ID.
• Use of host namespaces and networking.
• Allocation of an FSGroup that owns the pods volumes.
• Container requires the use of a read only root system or not.
• Usage of volume types.
• Configuration of allowable seccomp profiles.

Thanks to Vimal Daga sir and Preeti Chandak Ma’am for conducting such a great session.