Getting started with VMware Kubernetes Engine [VKE]

-
Overview

VMware Kubernetes Engine [VKE] is a New SaaS-based Kubernetes-as-a-Service offering from VMware and Its a container orchestrator. VMware provider that as a clustered service. 
It runs on top of AWS (Amazon Web Services).
 
When people have access to VMware Kubernetes Engine. They are accessing a service that allows them to spin up clusters. Similar to how VMware cloud on AWS works VMware vSphere clusters.

VKE allows you to spin up Kubernetes cluster in public cloud.  For now, We are in 3 AWS regions US East1, US West2,  EU-West1 

Fully-Managed Kubernetes-as-a-service offering that runs on AWS providing a fully certified Kubernetes and docket runtime environment.

Key users of VKE are Developers and IT operators.

  • Developers who want to develop container applications and deploy them onto Kubernetes orchestrator platform.
  • IT operators who wants to offer Kubernetes service to their end customer in the public cloud.


VMware Kubernetes Engine Benefits for Developers.

Simple and easy to use Kubernetes

  1. Developers can create a cluster less than 90 seconds.
  2. Kubernetes cluster scale up and down based on application needs.
  3. VMware Smart Cluster instance type and size and continuously optimized to increase density and efficiency.
  4. Enter a credit card, Pay-for-what-you-use.


A broad selection of application building blocks.

  1. Native Kubernetes experience enabling a full ecosystem
  2. Seamless native integration with leading AWS services. If the customer already has AWS account and has services deployed in that account We can integrate with VPC peering 
  1. Global reach via primary AWS regions
  2. Compatibility with other VMware Cloud Services like Wavefront

Highly Secure by Default
 
  1. The Underlying operating system is VMware's Photon OS.
  2.  Encryption of data at rest and in transit
  3. Fully patched components
  4. High availability and logical network isolation
  5. Automated repair for cluster nodes

Multi-Cloud Ready

  1. Single Service endpoint enabling management of Kubernetes cluster distributed globally
  2. Runs natively on AWS with other public clouds to follow based on customer demand
  3. Maintains consistent Kubernetes compatibility across different VMware offerings.


For Developers, they have full access to API's and Kubectl control command line to have their smart cluster seamlessly integrate with AWS services. 




VMware Kubernetes Engine Benefits for IT Operators.

Easy to Manage at scale

  1. Single service endpoint with full lifecycle management. It means vke.cloud.vmware.com is globally available we use global server load balancing provides that endpoint both Europe and the United States initially
  2. Simple to use policy-based management across hundreds of clusters and thousands of users. With Kubernetes you manage very cluster individually.
  3. 24*7 health monitoring of Kubernetes cluster.

Highly Secure by default

  1. All Kubernetes clusters are security hardened using fully patched components. That means customers don’t have to do security patching, VMware takes care of all patching for the customers,  All that happens behind the scenes and the service continues to run.
  2. We are fully encrypted both at our data at rest as well as data in transit. For all Kubernetes key-value database that runs Kubernetes are completely encrypted. 
  3. Role-based access control across and within clusters
  4. Logical network isolation at the pod level.

Highly Available

  1. Highly available dial-tone service that just works
  2. Continuous checks on the health state of Kubernetes clusters automatically remediating issues
  3. Kubernetes and AWS best practices for availability and scale.
  4. Global reach across primary AWS regions.

Lower cost

  1. Grow and shrink compute resources, based on application requirements, to lower cost
  2. Monitor opportunities for more efficient and economical cloud resources
  3. Fully managed and simple to use without having to staff a team of Kubernetes or AWS experts.





We have two different types of clusters, The developer which is a non HA cluster, As we have a production cluster which is full HA and multi-AZ implementation.

Comments

Post a Comment

Popular posts from this blog

What is Microsoft SharePoint ?

-
Microsoft SharePoint is a web-based collaborative platform that integrates with Microsoft Office. It's primarily used for document management and storage but also offers a wide range of capabilities such as intranet, content management, workflow management, business intelligence, and enterprise search. SharePoint allows users to create sites where they can share documents, information, and ideas within their organization. These sites can be customized to fit specific needs, such as team collaboration, project management, or departmental portals. Some key features of SharePoint include: Document Management: Users can upload, store, organize, and share documents within SharePoint sites. Version control ensures that users are always working with the latest version of a document. Collaboration: SharePoint facilitates collaboration among team members through features like document co-authoring, discussion boards, calendars, and task lists. Intranet and Portals: SharePoint can be used...
Read more

General Cybersecurity

-
What is perimeter security?  Perimeter security, in the context of cybersecurity, refers to the measures and strategies implemented to protect an organization's internal network from external threats. It establishes a boundary, or perimeter, between the organization's internal network and the external environment, such as the internet. The goal of perimeter security is to prevent unauthorized access, attacks, and breaches from reaching the internal network and its resources. Here are some key components and concepts related to perimeter security: Firewalls: Firewalls are the cornerstone of perimeter security. They inspect incoming and outgoing network traffic based on predefined rules and policies. Firewalls can block or allow traffic based on factors such as IP addresses, port numbers, and protocols. Intrusion Detection and Prevention Systems (IDPS): IDPS solutions monitor network traffic for signs of malicious activity or known attack patterns. They can detect and prevent i...
Read more

Well-Architected Framework | Solution Architect

-
The Well-Architected Framework is a set of best practices and guidelines designed to help cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications. The framework is developed by AWS (Amazon Web Services), but similar principles can be applied to other cloud platforms. The Well-Architected Framework consists of five pillars, each addressing a key aspect of building well-designed and well-operated systems. These pillars are: Operational Excellence: Focuses on operational practices that ensure efficient and effective use of cloud resources. Key considerations include monitoring, incident response, automation, and overall operational health. Security: Emphasizes the importance of implementing robust security measures to protect data, systems, and assets. Covers data protection, identity and access management, and incident response, among other security aspects. Reliability: Aims to ensure a system's ability to recover from failures ...
Read more