Episode 02 of "OpenShift in a nutshell" presentations in Iran OpenStack community group This episode is about different layers, architecture, security in OpenShift. I hope you will find it useful.

1. Presentation By:
Behnam Loghmani
Winter 2016
IRAN OpenStack Users Group
OPENSHIFT
IN A NUTSHELL
(Episode 02)
Architecture

2. IRAN Community| OpenStack.ir
Agenda:
●
Layers
●
What's is the OpenShift Architecture?
●
Security in OpenShift
●
Iran OpenStack Community
OpenShift Architecture

3. IRAN Community| OpenStack.ir
OpenShift Architecture
Layers

4. IRAN Community| OpenStack.ir
OpenShift Architecture
●
Docker
●
Kubernetes
OpenShift adds:
●
Source code management, builds, and deployments
●
Managing and promoting images
●
Application management at scale
●
Team and user tracking

5. IRAN Community| OpenStack.ir
OpenShift Architecture

6. IRAN Community| OpenStack.ir
OpenShift Architecture
What's the OpenShift Architecture

7. IRAN Community| OpenStack.ir
OpenShift Architecture
●
Microservices-based
●
Running on top of a Kubernetes cluster
●
Data about the objects stored in etcd

8. IRAN Community| OpenStack.ir
OpenShift Architecture
We have two functions
●
REST APIs, which expose each of the core objects.
●
Controllers, which read those APIs, apply changes to other objects, and report status
or write back to the object.

9. IRAN Community| OpenStack.ir
OpenShift Architecture
Calling the REST API to change the state of the system.
Controllers use the REST API to read the user’s desired state.
Controller try to bring the other parts of the system into sync.

10. IRAN Community| OpenStack.ir
OpenShift Architecture
Controller
●
Customization of builds and deployments.
●
"Business logic" of the system.
●
Sync view of the system with what users are doing.
●
Changes ripple out through the system very quickly and efficiently.
●
Confirm that everything is in the right state.

11. IRAN Community| OpenStack.ir
OpenShift Architecture
Security in OpenShift

12. IRAN Community| OpenStack.ir
OpenShift Architecture
●
Authenticate with credentials.
●
Authorize base on roles.

13. IRAN Community| OpenStack.ir
OpenShift Architecture
Authentication and Authorization in different parts
●
Clients (developers)
●
Nodes
●
Infrastructure components runs in containers

14. IRAN Community| OpenStack.ir
OpenShift Architecture

15. IRAN Community| OpenStack.ir
OpenShift Architecture
Authorization
●
Openshift policy engine
●
Defines actions
●
Different roles
●
Policy engine checks requests
●
secrets

16. IRAN Community| OpenStack.ir
OpenShift Architecture
Iran OpenStack Community

17. IRAN Community| OpenStack.ir
OpenShift Architecture
Stay in Touch and Join Us:
●
Home Page: OpenStack.ir
●
Meetup Page: Meetup.com/Iran-OpenStack
●
Mailing List: OpenStack-ir@Lists.OpenStack.org
●
Twitter: @OpenStackIR , #OpenStackIRAN
●
IRC Channel on FreeNode: #OpenStack-ir

18. Thank You
Behnam Loghmani
Iran OpenStack Community Member
Behnam.loghmani@OpenStack.ir
OpenStack.ir
We need to work together to build a better community