Deploying to Microk8s with Anthos Config Management

Anthos Config Management enables you to automate policy and security at scale for your hybrid and multi-cloud Kubernetes deployments. At a high level, you commit your Kubernetes code to a central Git repository and Anthos Config Management deploys the code to all of the registered clusters. In short, Anthos Config Management allows you to bring GitOps practices to the world of multi-cloud container management.

Anthos Config Management is supported on GKE-based clusters and also on Anthos attached clusters, a deployment option that extends Anthos’ reach into Kubernetes clusters running in other cloud environments. While I normally work with GKE clusters, I decided to experiment with attaching a Microk8s cluster to Anthos. Microk8s is a Kubernetes platform that is seen in IoT and edge environments. While Microk8s itself is not an officially supported Anthos platform, you can, however, experiment with MicroK8s to learn more about Anthos Config Management and see how it can benefit organizations.

This project uses the the following Google Cloud services:

• Compute Engine provides an Ubuntu instance for a single-node Microk8s cluster. Ubuntu will use cloud-init to install Microk8s and generate shell scripts and other files to save time.
• Cloud Source Repositories will provide the Git-based repository to which we will commit our workload.
• Anthos Config Management will perform the deployment from the repository to the Microk8s cluster.

Let’s start with a picture

Here’s a diagram of how these components fit together.

• A workstation instance is created from which Terraform is used to deploy four things: (1) an IAM service account, (2) a Google Compute Engine Instance with Microk8s using permissions provided by the service account, (3) a Kubernetes configuration repo provided by Cloud Source Repositories, and (4) a public/private key pair.
• The GCE instance will use the service account key to register the Microk8s cluster with the GKE Hub. Even though we will be using Microk8s rather than GKE for this walkthrough, the GKE Hub serves as a registration point for making clusters available to Anthos.
• The public key from the public/private key pair will be registered to the repository while the private key will be registered with the Microk8s cluster.
• Anthos Config Management will be configured to point to the repository and branch to poll for updates.
• When a Kubernetes YAML document is pushed to the appropriate branch of the repository, Anthos Config Management will use the private key to connect to the repository, detect that a commit has been made against the branch, fetch the files and apply the document to the Microk8s cluster.

If you would like to learn more, check out this repository. You will find instructions on how to build out the infrastructure shown above and deploy an application to Microk8s using Anthos Config Management.

A few closing words

Anthos Config Management enables you to deploy code from a Git repository to Kubernetes clusters that have been registered with Anthos. Google Cloud currently supports GKE, AKS, and EKS clusters, but you can experiment with other conformant clusters including Microk8s as well.

This example shows how to register a single Microk8s cluster to receive deployments from a repository provided by Cloud Source Repositories. You can scale this to larger numbers of clusters all of which can receive updates from commitments to the repository. In short, Anthos Config Management allows you to bring Git-ops practices to the world of Kubernetes deployments.