An OpenShift Migration: From 3.9 to 4.5

1. An OpenShift Migration
From 3.9 to 4.5

2. Intro
● Everett Toews
● etoews (GitHub, Twitter, LinkedIn, Blog)
● Senior Specialist Lead @ Deloitte
● Wearer of Many Hats @ Education Payroll
● 🇳🇿 via 🇨🇦

3. Agenda
● OpenShift 4
● The Plan
● Rough Water
● Smooth Sailing
● Looking Forward

4. OpenShift 4

5. OpenShift 4: Motivation
● Upgradability
● Better Day 2 Ops Experience
● Metrics

6. OpenShift 4: Diff
● Installation
● Architecture
● Immutable hosts
● Operators
● UI

12. The Plan

13. The Plan
● Proof of Concept (PoC)
● Build
● Comms & Collab
● Cutover
● Validation
● Decommission

14. The Plan: PoC
● aka sandbox/sandpit/dev
● Installation
● Architecture
● VMware vSphere 6.0
● Bare metal install mode 🐻🤟
● github.com/RedHatOfficial/ocp4-helpernode

16. The Plan: Build
● PoC > Non-Prod > Prod
● Build OCP 4 clusters alongside OCP 3
● Build images on OCP 4
● Rough Water
● Smooth Sailing

17. The Plan: Comms & Collab
● Dev, Test, IT, Mgmt, Business, End Users
● Notifications over email and chat
● Visibility during org-wide meetings
● Workshops (Bookmarks)
● Change management
● Release moratorium 😕

18. The Plan: Cutover
OCP 3 OCP 4
F5

19. The Plan: Cutover
OCP 3 OCP 4
F5

20. The Reality: Cutover
OCP 3 OCP 4
F5

21. The Reality: Cutover
OCP 3 OCP 4
F5

22. The Plan: Validation
● Functional (UI) Test
● API Test
● Performance Test
● Pre and Post Cutover

24. The Plan: Time and Team
● Calendar: 6-8 months
○ VMware, Networking, PoC, DR,
Lockdown, Staff availability, Priorities
● Effort: 7-8 weeks
○ From non-prod resources to prod cutover
● Team: 2-4 people

25. Rough
Water

26. Rough Water
● VMware vSphere 6.0
● VMware resources
○ Read-Only, Console,
Snapshots, Reboots
● Network resources
● Typing in kernel parameters

27. Rough Water
● Logging via Logstash
● Supporting SNMP on RHCOS
● NTP server switch in 4.5
● KubeletTooManyPods
○ (KubeletTooManyLOLs)

28. Rough Water
● API Priority and Fairness
● Ingress managed differently
● api/api-int/oauth routes must be pass-
through TLS
● Cluster signed certs exposed to end users
● New UI adjustments

29. Smooth
Sailing

30. Smooth Sailing
● Bare metal install mode 🐻🤟
● Upgrades
● Monitoring
● Ansible k8s module
● Custom left-hand nav in 4.5

31. Smooth Sailing
● Minimal stateful workloads
● Minor changes to apps and deployments
● No changes to Jenkins pipelines
● No changes to GitOps
● Cloud Native on-prem
● App upgrade the following week

33. Smooth Sailing
● All worth it because …
● End users didn’t notice a thing

34. Looking
Forward

35. Looking Forward
● Upgrades
● Tekton
● CodeReady Workspaces
● Service Mesh

36. The End
Q & A