Und was kann es? Was ist das eigentlich?

Was ist das eigentlich?Und was kann es?Sebastian DehnSolution Architect Partner Enablementsdehn@redhat.com

Wer bin ich?

Worüber reden wir heute?

Die Idee hinter OpenShiftWieso, weshalb warum…?

Lasst uns über Technik reden!Das wichtigste in Kürze

Proof it! Ein kurzer Einblick in die reale OpenShift Welt

Q&AIch beantworte eure Fragen. Habt ihr welche?

Wer kennt es nicht?

Bill - VP IT

Chris - VP AppDev

Steve - CEO

Parts Unlimited

Steve - die Kosten minimieren/Ressourcen effizient nutzen

Bill - Modernisierung Infrastruktur & Standardisierung der IT Prozesse

Chris - Modern AppDev & Innovative Technologien

Der Fokus

Automated operations

A consistent container application platform

Multi-tenant Networktraffic control

Over-the-airupdates

Bare metal, VMware vSphere, Red Hat Virtualization, Red Hat OpenStack Platform, Amazon Web Services, Microsoft Azure, Google, IBM Cloud

Pluggable architecture

Monitoring& chargeback

Secure by default

From your data center, to the cloud, to the edge

CONFIDENTIAL Designator

Zeit für Praxis!

Die TechnikWas sich unter der Haube versteckt

Empowering developers to innovate

Zeit für Innovationen!

OpenShift enables developer productivity

SPRING & JAVA™ EE MICROSERVICES FUNCTIONS

LANGUAGES DATABASES APPLICATION SERVICES

LINUX WINDOWS*

* coming soon

BUILD TEST DEPLOY

MONITORREVIEW

Self-service provisioning

Automatedbuild & deploy

CI/CDpipelines

Consistentenvironments

Configuration management

App logs & metrics

BUILD AND DEPLOY CONTAINER IMAGES

DEPLOY YOURSOURCE CODE

DEPLOY YOURCONTAINER IMAGE

DEPLOY YOURAPP BINARY

DEPLOY SOURCE CODE WITH SOURCE-TO-IMAGE (S2I)

GitRepositoryBUILD APP

(OpenShift)Developer

Source-to-Image(S2I)

Builder Image

ImageRegistry

BUILD IMAGE(OpenShift)

DEPLOY(OpenShift)

deployApplication Container

OpenShift DoesUser/Tool Does

DEPLOY APP BINARY WITH SOURCE-TO-IMAGE (S2I)Application

Binary(e.g. WAR)BUILD APP

(Build Infra) Existing Build Process

Source-to-Image(S2I)

Builder Image

ImageRegistry

BUILD IMAGE(OpenShift)

DEPLOY(OpenShift)

deployApplication Container

DEPLOY(Openshift)

DEPLOY DOCKER IMAGE

Application Container

deploy

Application Image

ImageRegistry

BUILD IMAGE (Build Infra) Existing Image

Build Process

PUSH(Build Infra)

BuildConfigSource

Dockerfile

Jenkinsfile

Builder Pod Base

App Image Registry

Registry

DeploymentConfig/Deployment

Deployer Pod

App Image

Build and Deploy Process

OpenShift 4 Architecture

Und so sieht die

Architektur der Plattform

OPENSHIFT CONTAINER PLATFORM | Architectural Overview

STORAGENETWORKCOMPUTE

your choice of infrastructure

WORKER

workers run workloads

MASTER

masters are the control plane

everything runs in pods

CONTAINERIMAGE

CONTAINER

10.140.4.44

MASTER

STORAGE

NETWORKCOMPUTE

state of everything

MASTER

STORAGE

Kubernetesservices

NETWORKCOMPUTE

core kubernetes components

KubernetesAPI server

Scheduler

Cluster Management

MASTER

OpenShiftservices

STORAGE

Kubernetesservices

NETWORKCOMPUTE

core OpenShift components

OpenShiftAPI server

Operator Lifecycle Management

Web Console

MASTER

OpenShift Services

STORAGE

Kubernetesservices

Infrastructureservices

NETWORKCOMPUTE

internal and support infrastructure services

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

Monitoring | Logging | Tuned

SDN | DNS | Kubelet

NETWORKCOMPUTE

WORKER

SDN | DNS | Kubelet

run on all hosts

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

WORKER

SDN | DNS | Kubelet

Registry

integrated image registry

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

Prometheus | Grafana Alertmanager

WORKER

SDN | DNS | Kubelet

Registry

cluster monitoring

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

Kibana | Elasticsearch

WORKER

SDN | DNS | Kubelet

Registry

log aggregation

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

Router

WORKER

SDN | DNS | Kubelet

Registry

Router

integrated routing

EXISTING AUTOMATION

TOOLSETS

SCM(GIT)

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

RouterDevelopers

Admins

WORKER

SDN | DNS | Kubelet

Registry

Router

dev and ops via web, cli, API, and IDE

Red Hat Enterprise Linux CoreOS

Und was ist die Basis?

EXISTING AUTOMATION

TOOLSETS

SCM(GIT)

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

RouterDevelopers

Admins

WORKER

SDN | DNS | Kubelet

Registry

Router

Immutable Operating SystemOPENSHIFT PLATFORM

Red Hat Enterprise Linux CoreOS is versioned with OpenShiftCoreOS is tested and shipped in conjunction with the platform. Red Hat runs thousands of tests against these configurations.

Red Hat Enterprise Linux CoreOS is managed by the clusterThe Operating system is operated as part of the cluster, with the config for components managed by Machine Config Operator:● CRI-O config● Kubelet config● Authorized registries● SSH config

v4.1.6

RHEL CoreOS admins are responsible for:Nothing.

OpenShift Architecture

A lightweight, OCI-compliant container runtime

Minimal and Secure Architecture

Optimized for Kubernetes

Runs any OCI-compliant image

(including docker)

podman

A docker-compatible CLI for containers● Remote

management API via Varlink

● Image/container tagging

● Advanced namespace isolation

buildah

Secure & flexible OCI container builds

● Integrated into OCP build pods

● Performance improvements for knative enablement

● Image signing improvements

kubelet static containers scheduled containerssystemd-managed

native binaries

CoreOS “pod” architecture

kubelet CRI-O

kube-scheduler

kubecontroller-manager

kube-apiserver

coredns

openshift-apiserver

openshiftcontroller-manager

openshift-oauth

OpenShift Monitoring

Das allsehende Auge!

EXISTING AUTOMATION

TOOLSETS

SCM(GIT)

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

RouterDevelopers

Admins

WORKER

SDN | DNS | Kubelet

Registry

Router

OPENSHIFT MONITORING | Solution Overview

OpenShift Cluster Monitoring

Metrics collection and storage via Prometheus, an

open-source monitoring system time series database.

Metrics visualization via Grafana, the leading metrics

visualization technology.

Alerting/notification via Prometheus’ Alertmanager, an open-source tool that handles

alerts send by Prometheus.

OPENSHIFT MONITORING | Operator & Operand Relationships

cluster-monitoring-operator

prometheus-operator

Grafana

kube-state-metrics

node-exporter

openshift-state-metrics(4.2)

prometheus-adapter telemeter-client

Prometheus Alertmanager

OPENSHIFT MONITORING | Prometheus, Grafana and Alertmanager Wiring

Infra/Worker (“hardware”)

Grafana Prometheus Alertmanager

Node (kubelet)

node-exporter

kube-state-metrics

Worker (“hardware”)

Node (kubelet)

node-exporter

Control Plane (API)

OpenShift Logging

Ihr sucht, ihr findet!

EXISTING AUTOMATION

TOOLSETS

SCM(GIT)

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

RouterDevelopers

Admins

WORKER

SDN | DNS | Kubelet

Registry

Router

Observability via log exploration and corroboration with EFK

OPENSHIFT LOGGING | Solution Overview

Components

○ Elasticsearch: a search and analytics engine to store logs○ Fluentd: gathers logs and sends to Elasticsearch.○ Kibana: A web UI for Elasticsearch.

Access control

○ Cluster administrators can view all logs○ Users can only view logs for their projects

Ability to forward logs elsewhere

○ External elasticsearch, Splunk, etc

OPENSHIFT LOGGING | Operator & Operand Relationships

ElasticSearchOperator

Cluster LoggingOperator

ElasticSearchCluster

Kibana

Fluentd(per node)

Curator CronJob

Curator

FluentdNode

Fluentd

Log data flow in OpenShift

OPENSHIFT LOGGING | Architecture

Fluentd

Elasticsearch Kibana

Application Logs

TLSTLS

Node (OS)

Log data flow in OpenShift

OPENSHIFT LOGGING | Architecture

Elasticsearch

stdoutstderr

OS DISK

Fluentd

kubelet

journald

Persistent Storage

Connecting real-world

storage to your

containers to enable

stateful applications

EXISTING AUTOMATION

TOOLSETS

SCM(GIT)

WORKERMASTER

OpenShift Services

STORAGE

Kubernetesservices

SDN | DNS | Kubelet

NETWORKCOMPUTE

Registry

RouterDevelopers

Admins

WORKER

SDN | DNS | Kubelet

Registry

Router

A broad spectrum ofstatic and dynamic storage endpoints

OPENSHIFT CONTAINER PLATFORM | Persistent Storage

GlusterFS

OpenStack Cinder

Ceph RBD

AWS EBS

GCE Persistent Disk

Fiber Channel

Azure Disk

Azure File

FlexVolume

VMWare vSphere VMDK

Container Storage Interface (CSI)**NetApp Trident*

PV Consumption

CONTAINER

ClaimZ

apiVersion: v1kind: Podmetadata: name: mypodspec: containers: - name: myfrontend image: nginx volumeMounts: - mountPath: "/var/www/html" name: mypd volumes: - name: mypd persistentVolumeClaim: claimName: z

Kubelet

Storage

/foo/bar

iSCSIPV

iSCSIPVNFS

Static Storage Provisioning

AdminPersistentVolumes

iSCSIPV ...

ClaimZ

2Gi RWX

CONTAINER

...VolumeMount: Z

Pod Definition

Define/Map

2Gi NFS

Dynamic Storage Provisioning

StorageClass

ClaimZ

2Gi RWXGood

...VolumeMount: Z

Pod Definition

MountFast

NetApp Flash

BlockVMware VMDK

GoodNetApp SSD

Master

NetApp SSD

2Gi NFS

CONTAINER

Eure Fragen!

Nützliches

OpenShift Blog

Lerne OpenShift

Mein YouTube Channel

linkedin.com/company/red-hat

youtube.com/user/RedHatVideos

facebook.com/redhatinc

twitter.com/RedHat

Danke!

Und was kann es? Was ist das eigentlich?

Documents

Transcript of Und was kann es? Was ist das eigentlich?

Biogas – was ist das eigentlich???

Was arbeitest DU eigentlich?

Was sind eigentlich Customer Touchpoints?

WEB 2.0 was ist das eigentlich?

Was ist eigentlich LaTeX?

Bist du Terrorist? Staatliche Überwachung Wie sieht so etwas aus? Was machen die da eigentlich? Wie kann ich mich davor schützen?

was ist eigentlich entropia?

Was ist Leader eigentlich? Eine Band?. Was ist eigentlich LEADER? Bitte was? Eine Band? Eine Sendung? Was Kulturelles? Ich kenn Lidl, aber mehr auch nicht!

WAS IST EIGENTLICH WAHR?

Was ist eigentlich Farbe?

Zwei Jahre Jugendparlament - Leipzig...Zwei Jahre Arbeit auf sechs Seiten zum Nachlesen. Zwei Jahre Jugendparlament Was bringt uns eigentlich ein Jugendparlament und was kann es bewirken?

Was ist eigentlich TEDxStuttgart?

GS1 Innovation Was kann Blockchain wirklich? · 3 Was kann Blockchain wirklich? Warum eigentlich der Palettenschein? Der offene Palettentausch ist für Handel, Logistik und Industrie

Anspruch und Wirklichkeit: Kann das Pariser Klimaabkommen ... · Artikel 6 ist zwar davon die Rede, dass es »voluntary co operation« zwischen den Ländern geben kann, was aber eigentlich

Ahne - Was war eigentlich morgen

was ist bedeutet eigentlich ??? crew - pack - six.

Was ist eigentlich Blut?

Was machen eigentlich selbstständige Chemiker?

RELIGION – WAS IST DAS EIGENTLICH?!

Was ist eigentlich in-Step RED?