Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GKE On-Prem Alpha

cloud.google.com

Post reply on HN
Print view View original

1–10 of 89 posts

Re: GKE On-Prem Alpha

#2

Post by wmf »

Hey GKE team, can you give any details about how this works? What does it assume/require from the underlying infrastructure?

Re: GKE On-Prem Alpha

#3

Post by nine_k »

> With GKE On-Prem, you get the Google Kubernetes Engine (GKE) experience directly in your data center. A quick and simple install and upgrade experience that’s validated and tested by Google. GKE On-Prem also registers your cluster with Google Cloud Console in order to have a single-pane-of-glass view for managing all your clusters.

That latter is an interesting way to mentally merge your local DC and Google Cloud.

Re: GKE On-Prem Alpha

#4

Post by eicnix »

nine_k wrote: post #3

> With GKE On-Prem, you get the Google Kubernetes Engine (GKE) experience directly in your data center. A quick and simple install and upgrade experience that’s validated and tested by Google. GKE On-Prem also registers your cluster with Google Cloud Console in order to have a single-pane-of-glass view for managing all your clusters. That latter is an interesting way to mentally merge your local DC and Google Cloud.

It will get even more interesting if you get decent federation support between your local GKE clusters and GCP GKE cluster allowing you to scale out to the cloud if you run out of capacity in your local cluster.

Re: GKE On-Prem Alpha

#6

Post by puzzle »

wmf wrote: post #2

Hey GKE team, can you give any details about how this works? What does it assume/require from the underlying infrastructure?

Exactly. As described, it sounds a bit like magic. Of course, it's not. Thus, one wonders about what happens in the lower layers of the stack, namely who gets to run them (GKE or the HW owners):

* DNS (not the Kubernetes in-cluster one like kube-dns)

* DHCP

* LDAP or equivalent

* SSH and its keys

* on-prem security of the cloud identities (does it require TPM? SGX?)

* bootloaders

* base OS image

* drivers for attached storage, GPUs, etc.

* firewall rules

* routing

Re: GKE On-Prem Alpha

#8

Post by swozey »

Will masters be on-prem or will the on-prem services communicate to masters at GKE over the master-authorized network?

Excited to check this out, completely came out of left field.

Re: GKE On-Prem Alpha

#9

Post by ninkendo »

puzzle wrote: post #6
wmf wrote: post #2

Hey GKE team, can you give any details about how this works? What does it assume/require from the underlying infrastructure?

Exactly. As described, it sounds a bit like magic. Of course, it's not. Thus, one wonders about what happens in the lower layers of the stack, namely who gets to run them (GKE or the HW owners): * DNS (not the Kubernetes in-cluster one like kube-dns) * DHCP * LDAP or equivalent * SSH and its keys * on-prem security of the cloud identities (does it require TPM? SGX?) * bootloaders * base OS image * drivers for attache…

Not to mention probably the hardest bit, which is how does it do persistent storage? Running k8s on the various cloud providers tends to use storage engines for those providers (ebs, etc)...

Does it ship with ceph out of the box? Some in-house block store? What happens when it breaks? Persistent volumes are IMO the very hardest thing to get right, and for me it's the big reason why I'd rather put my trust in a hosted solution in the first place.

If they solve this, and make it as seamless and easy as using cloud storage offerings, they've completely changed the game. Somehow I think they have a ways to go.

Post reply on HN