Given at Red Hat Forum 2015 with Samuel Terburg

1. Accelerate at DevOps Speed
With Openshift v3
Alessandro Vozza & Samuel Terburg
Red Hat

2. IT (R)Evolution

3. Red Hat Brings It All Together

4. What is Kubernetes ● Open source container cluster manager
○ Inspired by the technology that runs
Google
● RUns anywhere:
○ Public cloud
○ Private cloud
○ Bare metal
● Strong ecosystem
○ Partners: Red Hat, VMware,
CoreOS..
○ Community: clients, integration

5. Benefits for developers

6. OpenShift
Technical Architecture

7. openshift.com

8. openshift.com
OpenShift runs on your choice of infrastructure

9. openshift.com
Nodes are instances of RHEL where apps will run

10. openshift.com
App services run in docker containers on each node

11. openshift.com
Pods run one or more docker containers as a unit

12. openshift.com
Registries are where application images are stored

13. openshift.com
Masters leverage kubernetes to orchestrate nodes / apps

14. openshift.com
Master provides authenticated API for users & clients

15. openshift.com
Master uses etcd key-value data store for persistence

16. openshift.com
Master provides scheduler for pod placement on nodes

17. openshift.com
Pod placement is determined based on defined policy

18. openshift.com
Services allow related pods to connect to each other

19. openshift.com
Management/Replication controller manages the pod lifecycle

20. openshift.com
What if a pod goes down?

21. openshift.com
OpenShift automatically recovers and deploys a new Pod

22. openshift.com
Pods can attach to shared storage for stateful services

23. openshift.com
Routing layer routes external app requests to pods

24. openshift.com
Developers access OpenShift via Web, CLI or IDE

25. Kubernetes Cluster
Architecture
Registry
DeployBuild
Master
Node
config config
Storage
Pod
Volume
Node
Service
Pod
Pod
Route

26. Agile

27. Faster: From Idea to Production
Cycle time is defined as the time it takes from starting to code a new feature to the time it takes to deploy
that feature into production. The goal of any business should be to reduce this cycle time without compromising
on quality.
OPENSHIFT
CONTINUOUS DELIVERY
CYCLE TIME
Self
provisioning
Environment
standardization
Auto
scaling
Centralized
Management
Product
managers
Developers Test
engineers
Operations
personnel
IDE
Configuration
management
Continuous
integration Monitoring
DEV PRODQA UAT
Idea Production
feature

28. DevOps experience

29. Developer provides git repo
$> oc new-app --code=http://github.com/mycompany/myapp.git

30. Providing the Builder image
$> oc new-app --code=... --image-stream=wildfly-8-centos
auto detect
Java JEE
PHP
Ruby
NodeJS
Docker
: pom.xml
: index.php
: Rakefile / Gemfile
: app.jon / package.json
: Dockerfile
scripts
- assemble
- run
- save-artifact

31. Layer is applied to image
$> oc start-build my-build

32. Layer is added back to registry
my-app:latest

33. Image is deployed
ImageChange Triggers "Deployment"
$> oc deploy my-app --latest
my-app:latest

34. Trigger a new Build
WebHook
Base
ImageChange

35. Updated image is added back to the registry
my-app:latest
WebHook

36. New image is deployed as rolling update
App.1 App.2
App.1
App.1
App.1 App.2
App.1 App.2
App.1 App.2
App.2
App.2App.1
App.1
App.1App.2
App.2
App.2
Replica:3
WebHook
step 1 step 2 step 3

37. Continuous Integration Pipeline example
Source Build Deploy
:test
Store
:test
Deploy
test-fw
Test Tag
:uat
Deploy
:uat
commit webhook registry ImageChange
registry
ImageChange
Approve Tag
:prod
Deploy
:prod
registry
ImageChange
ITIL

38. OpenShift
Demo

39. WebUI and CLI & IDE
$> oc build openshift/hello-world

40. openshift.com
Logging
● Elasticsearch, Fluentd, and
Kibana
● Full build, deploy, docker (std
error/out) log consolidation
for admins
● Developer gets real-time logs
to console

41. openshift.com
Metrics
● Heapster
● Connect it to Hawkular (and therefore Cassandra)
● Container metrics from cgroups (via the Heapster data model)
● Java app metrics from JAdvisor/Jolokia attributes*
* still under active development

42. OpenShift
Integrations

43. Authentication
● RBAC
● LDAP
● HTPasswd
● GitHub / Google / OpenID
● SSO - Request Header (eg “X-Remote-User”)
● Tokens
Trust
● Trusted Red Hat Registry

44. openshift.com
JBoss Developer Studio and Eclipse Plugin
● You can:
- Create new Project
- Create new App
- Use Templates
● Import existing OpenShift app
● Local docker tools, deploy image
● Connect to your application via port forwarding
● Build and Runtime logs

45. openshift.com
OpenShift On OpenStack
A True Open Hybrid Cloud
● Deploy OpenShift on OpenStack via Heat
● Integrate Apps with OpenStack services
● Manage it all with CloudForms
● Get it all at once with Red Hat Cloud Suite
45

46. openshift.com
Administration & Container Mgt. with CloudForms
● Red Hat CloudForms 4 adds
new providers for OpenShift and
Containers (Dec 2015)
● Monitor containers running in
OpenShift Enterprise
● Docker and Kubernetes aware
(containers, pods, services...)
● OpenShift provider adds even
more features (projects, users,
registries, images)
● Included with OSE subscriptions

47. Available in 3 flavors
● docker run openshift/origin

48. Q & A

49. CASE DESCRIPTION
● IT Challenges
● Proposes solutions
● How did we do it
● How did the solution solved the issues

50. LESSONS LEARNED
● What worked well?
● What needs to be improved

51. NEXT STEPS
● Tell something about the future of IT in your company in relation to this project

52. by52/62
Build automation
Developer Dockerfile Build Image Deploy to App
Developer Code Build Layer Image Deploy to App
Source-to-Image builds
Integrated Docker builds

53. openshift.com
OpenShift Product Roadmap
3.0 - June 2015
●Docker container runtime & image packaging
format
●Kubernetes orchestration & mgt.
●Source-to-Image & Docker builds
●JBoss EAP 6.4, JWS 3.0, A-MQ 6.2
●SCL images (Node, Python, PHP, Ruby...)
●Shared storage volumes for stateful apps
●Projects & team collaboration
●OAuth & enterprise auth integration (LDAP)
●Enhanced Web, CLI and IDE interfaces
●Manual scaling
3.0.x - Q3CY2015
●Auto-scaling basic
●F5 and External Routing Examples
●Reference architectures
●Bug fixes
●Additional storage plugins
●Networking enhancements
●Enhanced logging / ELK
●CPU/Memory Overcommit
●Better Master HA
●Job Controller
●LDAP teams integration
●Better CI integration
●Atomic Host
3.2 - 1HCY16
●Mobile Service / FeedHenry
●Idling
●Expanded Fabric8 Integration
●Non-SNI / non-HTTP routing
●Git hosting
●OpenStack Network Integrations
●CloudForms Active Management
●Pipelines
●Service Registry
3.1 - Q4CY15
●Metric-driven autoscaling
●Integration Service / Fuse 6.x
●Decision Service / BRMS
●Cache Service / JDG
●Eclipse IDE completion
●Web/CLI UX enhancements
●SCL 2 image updates
●External service bridge/registry
●CloudForms OSE Provider

54. openshift.com
● Streamlined app creation flows
● Streamlined overview page
● Ability to delete projects
● Access to pod logs
● 3rd party extensions API for pluggability
● Trigger deployments and rollbacks
● Cancel builds
Web Console Updates

55. openshift.com
Notes

56. openshift.com
Change vs. Immutability
Finding the Developer Comfort Zone
Time to Production
Inception Production
ChangeLevel
High Iterations
$ oc sync
CDK
IDE port forwarding
Hot deploy
Git Branches
S2I
Jenkins
S2I
Binary Deploy
via Assembly

57. by57/62
Deployment automation
Manual change Code change Config change Image change

58. openshift.com
● Immediate builds triggered after app creation
● Build and deploy performance improvements
● Security improvements for source to image builds
● Jenkins image available to run within OpenShift
● Git - additional authentication methods
● Eclipse / JBoss Developer Tools
● Hot deploy
● Offline / Local (CDK) : Vagrant, Docker
Developer Experience