This document summarizes how Kubernetes can be used on OpenStack. It discusses integrating Kubernetes with OpenStack services for networking (Neutron), identity and access management (Keystone), storage (Cinder and Swift), cluster setup/management, and container registry. For each area, it provides an overview of the current integration and potential future enhancements.

1. Kubernetes on Openstack
@
Ashwin Raveendran
eBay Cloud Engineering

2. What is Kubernetes
A lean, portable, extensible platform for managing
cloud native applications
- container packaged
- dynamically scheduled
- declarative state
- microservices oriented

4. neutron keystone cinder nova swift

5. work streams
Networking
IAM
Storage
Cluster setup and Management
Container Registry

6. Networking
• Leverage cloud native networking solution
Pods needs cluster wide routable IPs
Each node requires a CIDR block
Performance and Manageability
• Neutron private networks within cluster
• Assign one neutron network/subnet per node

8. Networking: future
• Pure Layer 3 networking with BGP
• Policy based distributed firewall
• IPV6

9. Kube APIs requires identity and access
management
• Leverage keystone as the IAM service
• map keystone projects == kube namespaces
• use keystone authentication and RBAC
IAM

11. ABAC policy based plugin
Integrate keystone into kubectl cli flow for
tokens
Offer a native IAM service for cloud native
applications
IAM: future

12. Storage
Stateful workload needs high performance
persistent storage
• leverage openstack cinder
• Storage plugin manages pod volume lifecycle
automatically

14. Storage: future
• Native distributed storage
• Swift based storage sidecars

15. Cluster Setup and Management
• openstack apis, custom scripts, cloud-init, salt
stack
• disk-image-builder based pipeline for building
compute images for minions
• swift for storing non-dockerized build artifacts

16. Cluster Setup and Mgmt: future
• multi cloud-provider cluster setup and
management using declarative state
• federated cluster management for hybrid
clouds patterns (cluster federation)

17. Container Registry
Container registry needs access control
• Keystone for ACLs
Container registry needs dependable storage
• Swift as backing storage

18. Container Registry: future
• Notary support
• Scale

19. thank you