Kubernetes on Supporting $8 Trillion Card Payments in China
summary
Kubernetes is extended to carry UnionPay’s production traffic that amounts to $8 trillion in card payments per year, deploying a federated control cluster called Compass, a custom multi-tenant management layer mapped into OpenStack projects, and Keystone SSO integration for corporate auth. Engineering adds static VIPs, multiple registries with image syncing, TBP-based network isolation and traffic shaping, and host-network DNS glue; the platform runs in production since February and routes many live payments through Kubernetes.
AI-written summary · about
chapters (23)
- 0:00Intro
- 1:28The Banking Authority Seeking Help
- 2:29Do-or-Die in the Digital Transformation
- 3:31Crossing the Chasm
- 4:43You Know What's Good at...
- 5:05Out-of-Box Panacea?
- 6:44The Journey - Before Us
- 8:10The Journey - With Us
- 9:33Things Delivered So Far
- 12:34Lessons Learned
- 14:03Road Ahead
- 22:19Tenant - Concepts
- 24:08Tenant (System Admin)
- 25:14Tenant (Tenant Admins)
- 26:26Tenant - Summary
- 27:56Tenant - OpenStack Mapping
- 28:47Tenant - with OpenStack
- 29:54Network - Overview
- 30:49Network - Multi-planes
- 31:48Network - Service
- 33:53Network - DNS Deployment
- 34:41Multi-registries
- 35:20Registry HA
related talks
17mKeynote: Tencent: Kubernetes in the Billions
12mHow to Effectively Manage Kubernetes in a Regulated Environment
17mKeynote: Tencent: Kubernetes in the Billions – Yunong Xiao
35mBuilding a Bank with Kubernetes
28m03 Kubernetes Evolution, from the Hard Way to Managed Multi-cloud
32mMigrating to Service Mesh at Scale to Support Billions of $ Transactions
29mManaging a Multi-Tenanted Kubernetes Cluster in Production
40mCase Study: Kubernetes at Comcast