Date

18 Nov 2019

Minutes

• Fawad Shaikh, Sr Solutions Architect at Juniper
• Deploying TF on k8s with Helm
  • Example of how IBM rolled it out for their IBM Cloud Private (ICP)
• Basic overview of TF with k8s
• ICP
  • Currently use Calico by default as the CNI in the ICP
  • Some customers wanted namespace isolation and analytics → enter TF
  • TF integration with ICP went surprisingly smoothly
  • Their private cloud market is growing because of compliance, security, support, and services
    • Step toward hybrid and multi cloud
• ICP heavily relies on Helm to manage k8s or things that run on k8s
  • So you need Helm up and running to get the apps up & running → do on host network so you don't have to wait for CNI
  • After that, use Helm to bring up the CNI, followed by platform tools (databases, logging, etc), then apps
• Use cases of what they were trying to achieve
  • Control and security for k8s is painful
  • Using the tags for TF makes things a lot better
  • Can isolate pods to segment & have better security
  • Reuse of policies was very useful
• Demo time!
  • Video already on the TF YouTube channel: 
    • 
  • The CNI comes up in 1 minute (and it's only that slow because it has to get the Docker containers)

Action items

• Type your task here. Use "@" to assign a user and "//" to select a due date.