SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu LOCAL-PATH-PROVISIONER SETUP JWT AUTHENTICATION WITH KEYCLOAK GATEKEEPERSEE MORE ON

DOCS.SYSELEVEN.DE

SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Setup the original ingress object to use nginx.ingress.kubernetes.io/auth to point to the /oauth2 path. This path needs to be defined in a seperate ingress object (because this one does not have auth configured for itself). The second ingress objects defines the /oauth2 path under the same domain and points to the oauth2-proxy deployed aboved. SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SYSELEVEN SHARED SECRETS Share a Secret. This page allows you to share a secret through a secret sharing link. The secret is stored in the secret sharing link and not on the server. SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu LOCAL-PATH-PROVISIONER SETUP JWT AUTHENTICATION WITH KEYCLOAK GATEKEEPERSEE MORE ON

DOCS.SYSELEVEN.DE

SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Setup the original ingress object to use nginx.ingress.kubernetes.io/auth to point to the /oauth2 path. This path needs to be defined in a seperate ingress object (because this one does not have auth configured for itself). The second ingress objects defines the /oauth2 path under the same domain and points to the oauth2-proxy deployed aboved. SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SYSELEVEN SHARED SECRETS Share a Secret. This page allows you to share a secret through a secret sharing link. The secret is stored in the secret sharing link and not on the server. ABOUT US | SYSELEVEN GMBH | KUBERNETES MADE IN GERMANY Fiberoptic Made in Berlin. Fiberoptic made in Berlin: SysEleven commissions its own fiberoptic network and connects offices to the high-speed Internet. The network is one among few to be prepared for 100 G. SysEleven continues to expand its infrastructure in the following years and connects more and more data centers and buildings.

2013.

MANAGED KUBERNETES BY SYSELEVEN MetaKube Trial for 30 Days. Your services on our Kubernetes test account include: A voucher valued at €2,796. This includes 10 CPUs, 40 GB RAM, and 500 GB SSD storage in the first 30 days. All standard Kubernetes features, e.g. Monitoring, Backup, Load Balancing. Exclusive MetaKube Add-Ons, e.g. CERT Manager, Velero backups or

Ingress Controller.

DEVOPS AUTOMATION BY SYSELEVEN DevOps Automation is designed to develop procedures between software development and IT operations that sometimes enable testing and deployment without manual intervention. The resulting optimization of the CI/CD pipeline means that releases, updates and bug fixes can be carried out in smaller cycles. For DevOps this means a focus on the

core

SYSELEVEN STACK

OpenStack is the basis of the SysEleven Stack. The open source software is widely regarded as the standard for cloud computing. It is constantly being developed further by an enthusiastic community and promises a high degree of compatibility. For the SysEleven Stack, we have adapted OpenStack to offer our customers an improved platform for

more

SOFTWARE DEVELOPER

If that appeals to you, then you should get in touch with us! Jan Daniel Werth. Senior Recruiter. Tel.: +49 (0)30 233 2012 120. E-Mail:

jobs@syseleven.de.

SYSELEVEN KUBECON BOOTH RAFFLE 2021 We take care of the management of the Kubernetes master components for you. Get the chance to win 2,000 EUR for Kubernetes ressources. 1. Fill out the form below. 2. Tell us why you want to win. 3. Fingers crossed! // 2,000 EUR credit for your K8s Project.

OBJECT STORAGE ACLS

Object Storage ACLs Overview. In this tutorial we will use the Object Storage to create buckets and objects with and limit the access to these by applying ACLs. We will be using the s3cmd S3 client and the python library boto3 to manage our resources.. Prerequisites. You know the basics of using the OpenStack CLI-Tools.; Environment variables are set, like shown in the API-Access-Tutorial. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading METAKUBE | DOCUMENTATION SysEleven MetaKube is the managed Kubernetes service from SysEleven - a Berlin based managed hosting company.. MetaKube is a Certified Hosted Kubernetes Platform, which ensures that the Kubernetes clusters are fully standard compliant.The conformance test results are publicly available for all supported versions in the CNCF k8s-conformance

Github repository.

IMAGES | DOCUMENTATION Overview. SysEleven provides and maintains a set of images in the SysEleven Stack. As soon as vendors publish new images, we will verify their origin, test them and publish them automatically. SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the

SOFTWARE DEVELOPER

If that appeals to you, then you should get in touch with us! Jan Daniel Werth. Senior Recruiter. Tel.: +49 (0)30 233 2012 120. E-Mail:

jobs@syseleven.de.

MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading SETUP JWT AUTHENTICATION WITH KEYCLOAK GATEKEEPERSEE MORE ON

DOCS.SYSELEVEN.DE

SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Overview. You can configure any ingress object to use keycloak as auth backend. This can be a substitute for auth basic or any other frontend you want protected by an auth mechanism. SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Setup the original ingress object to use nginx.ingress.kubernetes.io/auth to point to the /oauth2 path. This path needs to be defined in a seperate ingress object (because this one does not have auth configured for itself). The second ingress objects defines the /oauth2 path under the same domain and points to the oauth2-proxy deployed aboved. INSTALL OPENSTACK CLI SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the

SOFTWARE DEVELOPER

If that appeals to you, then you should get in touch with us! Jan Daniel Werth. Senior Recruiter. Tel.: +49 (0)30 233 2012 120. E-Mail:

jobs@syseleven.de.

MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading SETUP JWT AUTHENTICATION WITH KEYCLOAK GATEKEEPERSEE MORE ON

DOCS.SYSELEVEN.DE

SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Overview. You can configure any ingress object to use keycloak as auth backend. This can be a substitute for auth basic or any other frontend you want protected by an auth mechanism. SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Setup the original ingress object to use nginx.ingress.kubernetes.io/auth to point to the /oauth2 path. This path needs to be defined in a seperate ingress object (because this one does not have auth configured for itself). The second ingress objects defines the /oauth2 path under the same domain and points to the oauth2-proxy deployed aboved. INSTALL OPENSTACK CLI SYSELEVEN | MANAGED KUBERNETES Everything From One Source. You benefit from the integration of the SysEleven service layer! From the network, cloud infrastructure to container orchestration based on Kubernetes and turnkey Cloud Native building blocks, we offer you everything from a single source and thus

create a

MANAGED CLOUD BY SYSELEVEN Full Managed Hosting at SysEleven offers you: Experienced project management team. Works with you to set goals and plans for the project. It coordinates all appointments with you and is committed to a smooth start. Trained administrators. Carry out the installation and organisation of the setups. They are there for your technical

questions.

MANAGED KUBERNETES BY SYSELEVEN MetaKube Trial for 30 Days. Your services on our Kubernetes test account include: A voucher valued at €2,796. This includes 10 CPUs, 40 GB RAM, and 500 GB SSD storage in the first 30 days. All standard Kubernetes features, e.g. Monitoring, Backup, Load Balancing. Exclusive MetaKube Add-Ons, e.g. CERT Manager, Velero backups or

Ingress Controller.

SOFTWARE DEVELOPER

If that appeals to you, then you should get in touch with us! Jan Daniel Werth. Senior Recruiter. Tel.: +49 (0)30 233 2012 120. E-Mail:

jobs@syseleven.de.

OBJECT STORAGE ACLS

Object Storage ACLs Overview. In this tutorial we will use the Object Storage to create buckets and objects with and limit the access to these by applying ACLs. We will be using the s3cmd S3 client and the python library boto3 to manage our resources.. Prerequisites. You know the basics of using the OpenStack CLI-Tools.; Environment variables are set, like shown in the API-Access-Tutorial. ON DEMAND: WHAT IF YOU CAN'T USE HYPERSCALER TECHNOLOGY SysEleven was founded in 2007 by Marc Korthaus and currently employs more than 100 people. SysEleven provides a vertical technology stack. This includes Managed Cloud Services, an OpenStack Public Cloud, and Kubernetes as a Service, as well as network and carrier services. If desired, these are also exclusively provided in German data centers SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu SETTING UP EXTERNALDNS Creating DNS zones. Before setting up ExternalDNS you will need to setup API access to OpenStack and create a DNS Zone. All domain names that ExternalDNS is going to create must belong to one of DNS zones created in advance. Here is an example of how to create example.com DNS zone: openstack zone create --email dnsmaster@example.com

example.com.

SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the

SOFTWARE DEVELOPER

If that appeals to you, then you should get in touch with us! Jan Daniel Werth. Senior Recruiter. Tel.: +49 (0)30 233 2012 120. E-Mail:

jobs@syseleven.de.

MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SETUP JWT AUTHENTICATION WITH KEYCLOAK GATEKEEPERSEE MORE ON

DOCS.SYSELEVEN.DE

SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Setup the original ingress object to use nginx.ingress.kubernetes.io/auth to point to the /oauth2 path. This path needs to be defined in a seperate ingress object (because this one does not have auth configured for itself). The second ingress objects defines the /oauth2 path under the same domain and points to the oauth2-proxy deployed aboved. SYSELEVEN SHARED SECRETS Share a Secret. This page allows you to share a secret through a secret sharing link. The secret is stored in the secret sharing link and not on the server. SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the

SOFTWARE DEVELOPER

If that appeals to you, then you should get in touch with us! Jan Daniel Werth. Senior Recruiter. Tel.: +49 (0)30 233 2012 120. E-Mail:

jobs@syseleven.de.

MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SETUP JWT AUTHENTICATION WITH KEYCLOAK GATEKEEPERSEE MORE ON

DOCS.SYSELEVEN.DE

SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Setup the original ingress object to use nginx.ingress.kubernetes.io/auth to point to the /oauth2 path. This path needs to be defined in a seperate ingress object (because this one does not have auth configured for itself). The second ingress objects defines the /oauth2 path under the same domain and points to the oauth2-proxy deployed aboved. SYSELEVEN SHARED SECRETS Share a Secret. This page allows you to share a secret through a secret sharing link. The secret is stored in the secret sharing link and not on the server.

SOFTWARE DEVELOPER

If that appeals to you, then you should get in touch with us! Jan Daniel Werth. Senior Recruiter. Tel.: +49 (0)30 233 2012 120. E-Mail:

jobs@syseleven.de.

SYSELEVEN STACK

OpenStack is the basis of the SysEleven Stack. The open source software is widely regarded as the standard for cloud computing. It is constantly being developed further by an enthusiastic community and promises a high degree of compatibility. For the SysEleven Stack, we have adapted OpenStack to offer our customers an improved platform for

more

MANAGED KUBERNETES BY SYSELEVEN MetaKube Trial for 30 Days. Your services on our Kubernetes test account include: A voucher valued at €2,796. This includes 10 CPUs, 40 GB RAM, and 500 GB SSD storage in the first 30 days. All standard Kubernetes features, e.g. Monitoring, Backup, Load Balancing. Exclusive MetaKube Add-Ons, e.g. CERT Manager, Velero backups or

Ingress Controller.

METAKUBE | DOCUMENTATION SysEleven MetaKube is the managed Kubernetes service from SysEleven - a Berlin based managed hosting company.. MetaKube is a Certified Hosted Kubernetes Platform, which ensures that the Kubernetes clusters are fully standard compliant.The conformance test results are publicly available for all supported versions in the CNCF k8s-conformance

Github repository.

SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. IMAGES | DOCUMENTATION Overview. SysEleven provides and maintains a set of images in the SysEleven Stack. As soon as vendors publish new images, we will verify their origin, test them and publish them automatically. KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu INSTALL OPENSTACK CLI OpenStack Client. Install the OpenStack CLI client and recommended plugins, to be able to communicate with the corresponding OpenStack APIs: pip install python-openstackclient python-barbicanclient python-cinderclient python-designateclient python-glanceclient python-heatclient python-neutronclient python-novaclient python-octaviaclient SECRETS | DOCUMENTATION Overview. SysEleven Stack uses the OpenStack component Barbican for secret storage. We introduced the Barbican secret storage first of all to provide a safe way to store SSL certificates and private keys for Octavia Load balancer as a Service. SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. SYSELEVEN PRODUCTS & SERVICES SysEleven Products and Services. With MetaKube you get Managed Kubernetes including powerful, essential add-ons - made & managed by SysEleven. Build your desired data center in a short time without turning a screw – with our SysEleven Stack. In cooperation with technology providers and agencies, we use best practices to design the

right

THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the ÜBER UNS | SYSELEVEN GMBH | KUBERNETES MADE IN …TRANSLATE THIS PAGE Glasfaser made in Berlin: SysEleven nimmt sein eigenes Glasfasernetz in Betrieb und schließt Büros ans Highspeed Internet an. Das Netz ist als eines der wenigen auf 100 G vorbereitet. SysEleven baut in den folgenden Jahren seine Infrastruktur weiter aus und verbindet MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SYSELEVEN SHARED SECRETS Share a Secret. This page allows you to share a secret through a secret sharing link. The secret is stored in the secret sharing link and not on the server. INSTALL OPENSTACK CLI SYSELEVEN | MANAGED KUBERNETESTRANSLATE THIS PAGE Als Managed Kubernetes und Cloud Service Provider verantwortet SysEleven performante Plattformen, die auch bei unerwarteten Lastspitzen stabil laufen. SYSELEVEN PRODUCTS & SERVICES SysEleven Products and Services. With MetaKube you get Managed Kubernetes including powerful, essential add-ons - made & managed by SysEleven. Build your desired data center in a short time without turning a screw – with our SysEleven Stack. In cooperation with technology providers and agencies, we use best practices to design the

right

THE HISTORY OF KUBERNETES The story of Kubernetes began at Google: like no other, the company needed a huge infrastructure to make its search engine and the associated advertising available to all people.The planned, enormous growth was a challenge for which various ideas arose. Virtualization of hardware, site reliability engineering and container technologies represent three essential pillars which are vital for the ÜBER UNS | SYSELEVEN GMBH | KUBERNETES MADE IN …TRANSLATE THIS PAGE Glasfaser made in Berlin: SysEleven nimmt sein eigenes Glasfasernetz in Betrieb und schließt Büros ans Highspeed Internet an. Das Netz ist als eines der wenigen auf 100 G vorbereitet. SysEleven baut in den folgenden Jahren seine Infrastruktur weiter aus und verbindet MANAGED KUBERNETES 101: RUNTIME In unserem ersten Beitrag der Blogreihe “Managed Kubernetes 101: Der Einstieg” haben wir aufgezeigt, was Kubernetes eigentlich ist. Nun ist es an der Zeit, einmal aufzuzeigen, welche Basis-Komponenten es benötigt. Dieser Artikel erklärt Euch die Komponenten aus dem CNCF-Layer “Runtime”, die die Grundlage für das bekannte Container-Orchestrierungs-Tool bilden. SYSELEVEN CONTAINER REGISTRY SysEleven Container Registry Loading KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu SHARING VOLUMES BETWEEN PODS We will create a test file on the deployment pod and see that we can access and modifiy data on the same volume at the same time. (Your pod names will be different because the suffix is automatically generated.) You can see that your pods are all being spawned on the same compute node: $ kubectl get pod,job -o wide NAME READY STATUS

RESTARTS

SYSELEVEN SHARED SECRETS Share a Secret. This page allows you to share a secret through a secret sharing link. The secret is stored in the secret sharing link and not on the server. INSTALL OPENSTACK CLI SYSELEVEN PRODUCTS & SERVICES SysEleven Products and Services. With MetaKube you get Managed Kubernetes including powerful, essential add-ons - made & managed by SysEleven. Build your desired data center in a short time without turning a screw – with our SysEleven Stack. In cooperation with technology providers and agencies, we use best practices to design the

right

MANAGED CLOUD BY SYSELEVEN Full Managed Hosting at SysEleven offers you: Experienced project management team. Works with you to set goals and plans for the project. It coordinates all appointments with you and is committed to a smooth start. Trained administrators. Carry out the installation and organisation of the setups. They are there for your technical

questions.

MANAGED KUBERNETES BY SYSELEVEN MetaKube Trial for 30 Days. Your services on our Kubernetes test account include: A voucher valued at €2,796. This includes 10 CPUs, 40 GB RAM, and 500 GB SSD storage in the first 30 days. All standard Kubernetes features, e.g. Monitoring, Backup, Load Balancing. Exclusive MetaKube Add-Ons, e.g. CERT Manager, Velero backups or

Ingress Controller.

SYSELEVEN PARTNER DE-CIX Easy Interconnection. Anywhere. DE-CIX ist ein weltweit führender Betreiber von Internetknoten. 1995 in Betrieb genommen, ist der DE-CIX in Frankfurt am Main mit über 6,7 Terabit pro Sekunde (Tbps) der Internet Exchange (IX) mit dem weltweit höchsten Datendurchsatz in

Spitzenzeiten.

METAKUBE | DOCUMENTATION SysEleven MetaKube is the managed Kubernetes service from SysEleven - a Berlin based managed hosting company.. MetaKube is a Certified Hosted Kubernetes Platform, which ensures that the Kubernetes clusters are fully standard compliant.The conformance test results are publicly available for all supported versions in the CNCF k8s-conformance

Github repository.

IMAGES | DOCUMENTATION Overview. SysEleven provides and maintains a set of images in the SysEleven Stack. As soon as vendors publish new images, we will verify their origin, test them and publish them automatically.

DNS | DOCUMENTATION

Nodelocal DNS Cache. Due to the way service discovery in Kubernetes works, the internal DNS resolution is a critical part of the cluster. To increase DNS performance and prevent DNS timeouts within the cluster we also provide a node-local-dns cache pod on every cluster node. These pods also run CoreDNS as the DNS KUBERNETES EINFACH ERKLÄRT: ANTWORTEN VOM TECHIE …TRANSLATE THIS

PAGE

Kubernetes einfach erklärt: Antworten vom Techie für den Noobie. Unser SysEleven MetaKube Team erklärt auf internationalen Konferenzen oder bei unseren Kubernetes Dive-In Workshops Techies, wie Sie am besten Kubernetes nutzen können. Jetzt haben wir sie um die nächste große Herausforderung gebeten: Kubernetes für Nicht-Techniker zu SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Overview. You can configure any ingress object to use keycloak as auth backend. This can be a substitute for auth basic or any other frontend you want protected by an auth mechanism. SETUP INGRESS AUTH TO USE KEYCLOAK OAUTH Setup the original ingress object to use nginx.ingress.kubernetes.io/auth to point to the /oauth2 path. This path needs to be defined in a seperate ingress object (because this one does not have auth configured for itself). The second ingress objects defines the /oauth2 path under the same domain and points to the oauth2-proxy deployed aboved. * __ +49 30 233 2012 0 * __ info@syseleven.de

Facebook-f __

Twitter __

Linkedin __

Instagram __

Youtube __

* Products__

* MetaKube | Managed Kubernetes__ * MetaKube Accelerator

* MetaKube Operator

* SysEleven Private Container Registry * SysEleven OpenStack Cloud

* Managed Cloud__

* Managed Services

* Service Management * Network & Carrier__ * Highspeed Internet Access

* DDoS Protection

* Solutions__

* Availability and Performance * Business Application

* Cloud Transition

* Container Orchestration

* DevOps Automation

* E-Commerce

* Kubernetes

* OpenStack

* Secure IT Operations

* Websites

* Partner__

* Become Partner

* Find partner

* About us__

* Career__

* Application Process

* Career Overview

* Development at SysEleven * Teams at SysEleven

* Events

* Our data centers

* Press Releases

* Resource Center

* Green Facts

* Support

* __

*

*

__ Menu

* Products__

* MetaKube | Managed Kubernetes__ * MetaKube Accelerator

* MetaKube Operator

* SysEleven Private Container Registry * SysEleven OpenStack Cloud

* Managed Cloud__

* Managed Services

* Service Management * Network & Carrier__ * Highspeed Internet Access

* DDoS Protection

* Solutions__

* Availability and Performance * Business Application

* Cloud Transition

* Container Orchestration

* DevOps Automation

* E-Commerce

* Kubernetes

* OpenStack

* Secure IT Operations

* Websites

* Partner__

* Become Partner

* Find partner

* About us__

* Career__

* Application Process

* Career Overview

* Development at SysEleven * Teams at SysEleven

* Events

* Our data centers

* Press Releases

* Resource Center

* Green Facts

* Support

* __

*

*

MetaKube Trial

// New Era in Managed Hosting MANAGED KUBERNETES WITH QUICKSTART APPLICATION TEMPLATES

Register Now

// Why SysEleven

MASTERING CLOUD. ACCELERATING BUSINESS. YOUR PARTNER FOR CLOUD SERVICES – MADE IN GERMANY! For more than 13 years, we take responsibility and stand for security, reliability, and scalability in the operation of your business-critical applications in Germany. We provide you with secure cloud and network infrastructure – made in Germany, consulting as well as efficient operating models.

01

__

MANAGED KUBERNETES

Run(s) everywhere. Get all the benefits of Kubernetes on AWS, Azure or the SysEleven OpenStack Cloud. __ METAKUBE

02

__

OPENSTACK CLOUD

Highest flexibility for your cloud projects. Create an entire setup quickly and cost-effectively via the command line. __ OPENSTACK CLOUD

03

__

NETWORK SERVICES

From high speed fiber connections to the SysEleven DDoS guard - for your high requirements. __ NETWORK SERVICES // SysEleven Portfolio EVERYTHING FROM ONE SOURCE You benefit from the integration of the SysEleven service layer! From the network, cloud infrastructure to container orchestration based on Kubernetes and turnkey Cloud Native building blocks, we offer you everything from a single source and thus create a fast “time to value” for you your project. We support you in the cloud-native transition with workshops and tutorials in addition to the platforms and services.

More Information

SYSELEVEN NEO-METHOD

NAVIGATE

Our experts will navigate you through the ocean of possibilities: Together, we define the requirements for your enterprise solution and how best to implement it. Considering all components. For this purpose we provide you with a team of our consultants, with which you can successfully manage your Cloud Native transformation.

EDUCATE

Technology alone does not create added value. — getting an edge in know-how does. Our experts expand or deepen your team's know-how — from the theory to the application. By the way: Learning from each other is part of working with us. Our engineers will proactively explain what IT solutions you should use for your next step.

OPERATE

Our focus is on a smooth and secure operations and optimization of your Web application(s). In the sense of a modern SRE-idea, we reflect on occurring problems and learn from them in order to constantly improve. We offer you 24/7 support, 365 days a year, from our experienced experts. // Data Sovereignty

* 1

FOR A MORE SOVEREIGN EUROPE: SYSELEVEN IS A GAIA-X MEMBER As a day1 member, we actively support the European GAIA-X project. Everyone who uses cloud technology knows that data should be treated securely and responsibly. It is also important to ensure that users do not become dependent on individual cloud providers or the economic or political interests of individual countries.

More About GAIA-X

WE ARE A PROUD MEMBER OF

__ Previous

__ Next

// We are by your side GET IN TOUCH WITH US

__

CALL OUR EXPERTS

+49 (0)30 233 2012 20

__

SEND US A MESSAGE

sales@syseleven.de

30 Days MetaKube Trial - Seeing is believing

MANAGED KUBERNETES

30 Days Trial

Demo

PRODUCTS

* __ MetaKube | Managed Kubernetes * __ OpenStack Cloud

* __ Managed Cloud

* __ Managed Services * __ Highspeed Internet Access

GOOD TO KNOW

* __ Events

* __ Career

* __ Resources

* __ Contact

LEGAL

* __ GTC / SLA Managed Hosting * __ GTC / SLA OpenStack Cloud * __ GTC / SLA Object Storage * __ GTC / SLA MetaKube * __ GTC / SLA Carrier

* __ Privacy Policy

* __ Imprint

SERVICE LINKS

* __ Support

* __ Customer Dashboard * __ Ticketing System * __ SysEleven Status

Proud Member of

� All rights reserved | Copyright 2021 SysEleven GmbH | Boxhagener Straße 80 | 10245 Berlin

__

We us Cookies

Here you can find an overview of all cookies used. You can give your consent to entire categories or view more information and thus select only certain cookies.

* Essential

* Statistics

* Marketing

* External Media

Accept all

Save

Individual privacy settings Cookie details Privacy Policy

Imprint

We us Cookies

Here you can find an overview of all cookies used. You can give your consent to entire categories or view more information and thus select only certain cookies.

Accept all Save

Back

Essential (3)

Essential cookies enable basic functions and are necessary for the proper functioning of the website. Show cookie information Hide cookie information

NAME

Borlabs Cookie

PROVIDER

Owner of this website

FUNCTION

Stores the settings of the visitors selected in the Cookie Box of

Borlabs Cookie.

COOKIE NAME

borlabs-cookie

COOKIE RUNTIME

1 Jahr

NAME

Google Tag Manager

PROVIDER

Google LLC

FUNCTION

Cookie from Google to control advanced script and event handling.

PRIVACY POLICY

https://policies.google.com/privacy?hl=de

COOKIE NAME

_uetvid

COOKIE RUNTIME

2 Jahre

NAME

HubSpot

PROVIDER

HubSpot Inc.

FUNCTION

HubSpot is a user database management service provided by HubSpot, Inc. We use HubSpot on this website for our online marketing

activities.

PRIVACY POLICY

https://legal.hubspot.com/privacy-policy

HOST(S)

*.hubspot.com, hubspot-avatars.s3.amazonaws.com, hubspot-realtime.ably.io, hubspot-rest.ably.io, js.hs-scripts.com

COOKIE NAME

__hs_opt_out, __hs_d_not_track, hs_ab_test, hs-messages-is-open, hs-messages-hide-welcome-message, __hstc, hubspotutk, __hssc, __hssrc, messagesUtk, li_ignored

COOKIE RUNTIME

Session / 30 minutes / 1 day / 1 year / 13 months

Statistics (5)

Statistics Cookies collect information anonymously. This information helps us understand how our visitors use our website. Show cookie information Hide cookie information

ACCEPT

NAME

Google Analytics

PROVIDER

Google LLC

FUNCTION

Cookie from Google for website analytics. Generates statistical data about how the visitor uses the website.

PRIVACY POLICY

https://policies.google.com/privacy?hl=de

COOKIE NAME

_ga,_gid, _dc_gtm_UA-4634575-3

COOKIE RUNTIME

2 Jahre

ACCEPT

NAME

Google Optimize

PROVIDER

Google

FUNCTION

Used to determine a user's inclusion in an experiment and the expiry of experiments a user has been included in.

PRIVACY POLICY

https://policies.google.com/privacy

ACCEPT

NAME

Hotjar

PROVIDER

Hotjar Ltd

FUNCTION

We use Hotjar to better understand the needs of our users and to optimize the offering and experience on this website.

PRIVACY POLICY

https://www.hotjar.com/legal/policies/privacy/

COOKIE NAME

_hjClosedSurveyInvites, _hjDonePolls, _hjMinimizedPolls, _hjDoneTestersWidgets, _hjIncludedInSample, _hjShownFeedbackMessage, _hjid, _hjRecordingLastActivity, hjTLDTest, _hjUserAttributesHash, _hjCachedUserAttributes, _hjLocalStorageTest, _hjptid

ACCEPT

NAME

Salesviewer

PROVIDER

SalesViewer® GmbH

FUNCTION

Technology for collecting company-related data and the corresponding website usage.

PRIVACY POLICY

https://www.salesviewer.com/en/privacy-policy

ACCEPT

NAME

Polylang

PROVIDER

Owner of this website

FUNCTION

Saves current language

COOKIE NAME

pll_language

COOKIE RUNTIME

1 Jahr

Marketing (7)

Marketing cookies are used by third-party vendors or publishers to display personalized advertisements. They do this by tracking visitors

across websites.

Show cookie information Hide cookie information

ACCEPT

NAME

Google Ads Conversion-Tracking

PROVIDER

Google LLC.

FUNCTION

The Google Ads Conversion Cookie contains information about which ad was clicked, so that successes achieved, such as contact requests, can be assigned to the ad.

PRIVACY POLICY

https://policies.google.com/technologies/ads

COOKIE NAME

IDE

COOKIE RUNTIME

14 Monate

ACCEPT

NAME

Google Ads (Remarketing)

PROVIDER

Google LLC

FUNCTION

The Google Ads Remarketing Cookie is used to deliver personalized ads and free product listings.

PRIVACY POLICY

https://policies.google.com/technologies/ads

COOKIE NAME

ga-remarketing

ACCEPT

NAME

Google Conversion Tracking

PROVIDER

Google LLC

FUNCTION

The Google Conversion Tracking Cookie is used to measure defined successes, e.g. a contact request on the website

PRIVACY POLICY

https://policies.google.com/privacy

COOKIE NAME

_gcl_au

ACCEPT

NAME

LinkedIn Insight Tag

PROVIDER

LinkedIn Ireland Unlimited Company

FUNCTION

The LinkedIn Insight Tag is used to track conversions and enable

retargeting.

PRIVACY POLICY

https://www.linkedin.com/legal/privacy-policy

COOKIE NAME

linkedin

ACCEPT

NAME

Microsoft Bing Ads

PROVIDER

Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399,

„Microsoft“)

FUNCTION

If you have reached our website via a Microsoft Bing ad, Microsoft Bing Ads can use the cookie to recognize that someone has clicked on an ad, been redirected to our website and reached a previously determined target page.

PRIVACY POLICY

https://privacy.microsoft.com/de-de/privacystatement

COOKIE NAME

_uetsid

ACCEPT

NAME

Outbrain Pixel

PROVIDER

Outbrain Inc.

FUNCTION

We use Outbrain to provide content recommendations. When you first visit the website, Outbrain sets cookies to generate a unique user ID. This unique user identifier is tied to the device used. With this user ID, Outbrain tracks the content consumed across the Outbrain network, which consists of different websites from different providers, in order to recommend comparable content to this user ID.

PRIVACY POLICY

https://www.outbrain.com/legal/privacy

COOKIE NAME

outbrain_cid_fetch

ACCEPT

NAME

Taboola Pixel

PROVIDER

Taboola, Inc.

FUNCTION

Taboola automatically collects user information when content is displayed by Taboola. The user information Taboola collects includes, but is not limited to, information about a user's device and operating system, IP addresses, the pages viewed on the website, the link a user used to get to the website, the date and time a user viewed a website, event information (e.g., system crashes), and general location information (e.g., city and country).

PRIVACY POLICY

https://www.taboola.com/de/policies/datenschutzerklaerung

COOKIE NAME

taboola

External Media (7)

Content from video platforms and social media platforms is blocked by default. If cookies from external media are accepted, access to this content no longer requires manual consent. Show cookie information Hide cookie information

ACCEPT

NAME

Facebook

PROVIDER

Facebook

FUNCTION

Used to unlock Facebook content.

PRIVACY POLICY

https://www.facebook.com/privacy/explanation

HOST(S)

.facebook.com

ACCEPT

NAME

Google Maps

PROVIDER

Google

FUNCTION

Used to unlock Google Maps content.

PRIVACY POLICY

https://policies.google.com/privacy

HOST(S)

.google.com

COOKIE NAME

NID

COOKIE RUNTIME

6 Monate

ACCEPT

NAME

Instagram

PROVIDER

Facebook

FUNCTION

Used to unlock Instagram content.

PRIVACY POLICY

https://www.instagram.com/legal/privacy/

HOST(S)

.instagram.com

COOKIE NAME

pigeon_state

COOKIE RUNTIME

Sitzung

ACCEPT

NAME

OpenStreetMap

PROVIDER

OpenStreetMap Foundation

FUNCTION

Used to unlock OpenStreetMap content.

PRIVACY POLICY

https://wiki.osmfoundation.org/wiki/Privacy_Policy

HOST(S)

.openstreetmap.org

COOKIE NAME

_osm_location, _osm_session, _osm_totp_token, _osm_welcome, _pk_id., _pk_ref., _pk_ses., qos_token

COOKIE RUNTIME

1-10 Jahre

ACCEPT

NAME

Twitter

PROVIDER

Twitter

FUNCTION

Used to unlock Twitter content.

PRIVACY POLICY

https://twitter.com/privacy

HOST(S)

.twimg.com, .twitter.com

COOKIE NAME

__widgetsettings, local_storage_support_test

COOKIE RUNTIME

Unbegrenzt

ACCEPT

NAME

Vimeo

PROVIDER

Vimeo

FUNCTION

Used to unlock Vimeo content.

PRIVACY POLICY

https://vimeo.com/privacy

HOST(S)

player.vimeo.com

COOKIE NAME

vuid

COOKIE RUNTIME

2 Jahre

ACCEPT

NAME

YouTube

PROVIDER

YouTube

FUNCTION

Used to unlock YouTube content.

PRIVACY POLICY

https://policies.google.com/privacy

HOST(S)

google.com

COOKIE NAME

NID

COOKIE RUNTIME

6 Monate

powered by Borlabs Cookie Privacy Policy Imprint

X