Hardened Kubernetes and Edge Computing for Field-Deployable Applications
Case Study: Real-World DevSecOps Brought to Life for Everyone
In the realm of software development, particularly when we’re talking about DevSecOps—which blends development, security, and operations—theoretical concepts can often seem abstract and intangible.
This is where our prototype field-deployable compute cluster comes into play. It serves as a physical manifestation of BrainGu’s Structsure™ DevSecOps platform, effectively demonstrating DevSecOps and Internal Developer Platform capabilities in a real-world setting. This prototype was developed to be fully compliant with the DoD DevSecOps Reference Design, and not only adheres to the highest standards of security and efficiency but also brings the sophistication of the Structsure platform. It is accessible, understandable, and demonstrates how integrating robust security practices from the outset can lead to powerful, efficient, and secure software solutions.
The Core: Demonstrating Structsure's Principles through the Prototype
This field-deployable cluster prototype is a living embodiment of the principles that drive Structsure. Each element of the prototype illustrates what we refer to as the “(rs)^2 principles” (Resiliency, Scalability, Reliability, and Security), which are central to DevSecOps and align with the stringent standards of the DoD.
Resiliency
The cluster’s design allows hot swapping of compute nodes, which ensures that operations continue running smoothly, even in the event of hardware malfunctions. This capability reflects our deep understanding that resilience is essential in dynamic computing environments.
Scalability
The modular nature of this prototype exemplifies Structsure's adaptability and how systems can evolve in response to changing demands, easily scaling up or down, not only based on workload requirements, but also based on physical constraints, such as size, weight, power consumption (SWaP), and portability considerations, a hallmark of agile and responsive technology.
Reliability
From earlier versions to the current iteration, the prototype reflects Structsure's commitment to reliability, evolving through real-world testing and enhancements to ensure performance and reliability in a variety of conditions.
Security
Compliant with the DoD DevSecOps Reference Design, the prototype is a testament to Structsure's emphasis on security. Its architecture showcases how Structsure protects data and operations, crucial in both defense and commercial applications.
Evolution: From Concept to Perfection
V1: The Foundation Phase
Our journey commenced in November 2022 with the first iteration of the field-deployable compute cluster, a pioneering step in portable edge computing. This initial prototype, featuring three Lattepanda 864s boards as worker nodes and a Dell Optiplex 7050 Micro workstation as the control plane, laid the groundwork for our revolutionary approach in demonstrating DevSecOps. Encased in a Pelican Storm IM2300, complemented by 3D printed and laser-cut acrylic components, this prototype was our first foray into blending functionality with feasibility, setting the stage for the innovations that Structsure would embody.
We quickly recognized that we needed to improve the design before the next show, KubeCon + CloudNativeCon EU 2023.
V2: Refinement and Evolution
Leveraging insights from our initial model, the second-generation prototype marked a significant design evolution. We maintained the robust Pelican Storm IM2300 housing but introduced critical changes: replacing the Dell workstation with three additional Lattepanda 864s boards, bringing the total to six. This not only allowed for the creation of a highly available control plane but also optimized resource distribution, reflecting Structsure's principle of a balanced and efficient system architecture. The physical design underwent a comprehensive overhaul, enhancing precision and durability—a testament to our commitment to continuous improvement in our DevSecOps journey.
Showcased at KubeCon + CloudNativeCon Europe 2023 in Amsterdam: The v2 prototype featuring two Valve Steam Decks integrated as additional worker nodes.
On the cluster, we were running the chaos engineering game, Kubedoom, where in-game actions would dynamically impact Kubernetes pods and resources, displaying Structsure's resilience and reliability through seamless recovery.
Spence11:11
We’re going to need something better for KubeCon North America.
Tim11:22
I’ve got just the thing!
V3: A Technological Marvel
The third-generation prototype brings us to the zenith of our innovation. This version showcases a paradigm shift not only in design but materials, as well.
The cluster is now composed of six identical Lattepanda SIGMA 32GB compute nodes and features a skeleton composed of aluminum extrusion—an aerospace-grade material known for its strength and lightness. The structural components, laser-cut from 1/4" thick acrylic, provide a perfect balance of stability and weight. Introducing polycarbonate 3D printed parts adds a touch of resilience, ensuring durability in demanding scenarios. The entire ensemble is now elegantly enclosed within a sleek and durable Pelican Air 1535 case.
A Symphony of Innovation: Merging Hardware with Structsure's Software
The evolution from our initial prototype to the current state is not just a tale of technological advancements, it's a narrative of pushing boundaries in design and materials, intertwined with the sophisticated orchestration of Structsure's software capabilities.
The synergy between the hardware's robust composition and Structsure’s resilient architecture creates a harmonious blend. Each aspect of the hardware—from its aluminum framework to its computational power—is meticulously aligned with Structsure's core principles of resilience, scalability, reliability, and security.
Resilience in Integration: The hardware’s durable design complements Structsure’s resilient architecture, ensuring uninterrupted service delivery and maintaining system integrity in the face of hardware challenges.
Scalability through Synergy: The system’s modularity and computational resources, paired with Structsure's dynamic scaling capabilities, offer an adaptable environment that can scale up, or down, to efficiently handle virtually any workload.
Reliability by Partnership: The combination of the cluster’s reliable hardware and Structsure’s consistent runtime environment results in an established infrastructure for seamless operation of critical applications.
Security from the Foundation: Both hardware and software share a commitment to security. The cluster’s compliance with the DoD DevSecOps Reference Design, coupled with Structsure’s Zero Trust Architecture and continuous security protocols, forms a comprehensive defense strategy, vital in both commercial and defense applications.
The Intersection of Innovation and Practical Deployment with Structsure
The fusion of the field-deployable edge computing cluster and Structsure’s DevSecOps platform symbolizes the union of innovative technology with practical deployment considerations.
Structsure's focus on creating a developer-friendly, scalable, and secure environment ensures that our prototype functions not only with computational efficiency, but also with the intelligent and strategic application that modern DevSecOps necessitates. As we continue to evolve and redefine the landscape of edge computing, our prototype stands as a testament to the successful integration of cutting-edge technology and thoughtful design, embodying the core values and capabilities of Structsure.
Stay connected to keep up on our latest innovations and experience Structsure's dynamic capabilities firsthand. If you’re lucky, you can grab a hands-on demo of this edge-deployable prototype, and who knows, you might even catch us throwing it out of an airplane!
Follow BrainGu on LinkedIn or explore Our Events to find out where we'll be in 2024. Join us on this exciting journey into the future of DevSecOps!
This article explores when stepping to the edge, what should be the primary considerations. Edge deployments provide increased freedom to develop for latency-sensitive applications, reduce cloud costs by offloading processing, and help reduce operational overhead.
An authentic user experience goes far beyond giving customers what they say they want. So we go deeper and research the underlying wants and needs of the end-user. To provide a high-quality user experience, we have to be seamless in our disciplines, which we discuss in detail.