Remote Control Planes With Konnectivity; What, Why And How?
Talkat KubeCon + CloudNativeCon North America 2022 · on Thursday, 2022-10-27· at 11:55· 252 AB, Huntington Place: 1 Washington Blvd·
summary
Claim: Kubernetes control planes run remotely in a different datacenter while worker nodes stay local, using Konnectivity as the reference implementation of the egress selector/CAP-1281 model. Mechanism: a connectivity server plus agents create gRPC reverse tunnels over TLS so the API server proxies calls back into cluster networks (kubectl exec/logs, admission webhooks). Real deployments in Kubermatic and k0s handle hundreds to thousands of clusters in production. Tradeoffs: HA is an M×N complexity, debugging is harder, migration from VPNs requires machine replacement, and documentation is sparse.
AI-written summary · about
chapters (10)
- 0:00Introduction to remote control
- 2:43Challenges of remote clusters
- 5:48Use cases for remote planes
- 10:05API server communication issues
- 12:07The egress selector solution
- 17:18Connectivity component design
- 19:54Real world implementation
- 25:32K0s integration
- 27:22Challenges and debugging
- 29:09Q&A and closing thoughts
related talks
27mEfficiency and Innovation in Kubernetes with Hosted Control Planes (HCP)
06mKubernetes as the Control Plane for the Hybrid Cloud
40mKubernetes is Your Cloud Control Plane
40mMay the Control Plane be with you: Kamaji and the rise of Kubernetes at scale
26mKubernetes - The Universal Control Plane
37mKubernetesception: How to run a 1000 control planes
41mHosted Control Plane on Kubernetes (HPC)
34mScaling Kubernetes up to 1,000 Control Planes - Dario Tranchitella