OpenShift in 1h

Robert Bohne
SPECIALIST SOLUTION ARCHITECT | OPENSHIFT
Twitter: @RobertBohne

GENERAL DISTRIBUTION
Why Red Hat OpenShift

GENERAL DISTRIBUTION
CREATING VALUE DEPENDS ON YOUR ABILITY TO
DELIVER APPLICATIONS FASTER
Cloud-native AI & Machine Internet of Innovation
Analytics
Applications Learning Things Culture

Containers, Kubernetes, and hybrid cloud are key ingredients.

OpenShift is the best container platform to deliver innovative applications.

GENERAL DISTRIBUTION
OPENSHIFT IS GAINING MOMENTUM
MORE THAN 1,000 CUSTOMERS WORLDWIDE

FY

GENERAL DISTRIBUTION
WHY CUSTOMERS CHOOSE OPENSHIFT

TRUSTED
ONE PLATFORM EMPOWERING
ENTERPRISE
ANY CLOUD DEVELOPERS
KUBERNETES

OPEN SOURCE INNOVATION

GENERAL DISTRIBUTION
THE POWER OF THE OPENSHIFT ECOSYSTEM
IT’S ALL HERE—ON A CONSISTENT PLATFORM FOR DEVELOPERS & IT OPS

RED HAT PORTFOLIO ISV ECOSYSTEM CLOUD SERVICES

Optimized for Containers Certified Containers and Operations

RED HAT ENTERPRISE LINUX ECOSYSTEM

Hardware, Virtualization, Cloud and Service Provider Certifications

Bare metal, vSphere, OpenStack, AWS, Azure, GCP

GENERAL DISTRIBUTION
MORE THAN JUST A KUBERNETES PLATFORM

CONTAINER-NATIVE
VIRTUALIZATION*

Enterprise image registry with Container-optimized Single workflow for containers

geo-replication, time machine software-defined storage on and virtual machines running on
and security scanning OpenShift OpenShift

* coming soon

GENERAL DISTRIBUTION
Trusted enterprise Kubernetes
● Trusted Host, Content, Platform
● Full Stack Automated Install
● Over the Air Updates & Day 2 Mgt

A cloud-like experience, everywhere

● Hybrid, Multi-Cluster Management
● Operator Framework
● Operator Hub & Certified ISVs

Empowering developers to innovate

● OpenShift Service Mesh (Istio)
● OpenShift Serverless (Knative)
● CodeReady Workspaces (Che)

GENERAL DISTRIBUTION
Red Hat OpenShift in detail

GENERAL DISTRIBUTION
A CONSISTENT CONTAINER APPLICATION PLATFORM
FROM YOUR DATACENTER TO THE CLOUD

Automated Secure by Network Over-the-air Monitoring Pluggable

Multi-tenant
operations default traffic control updates & chargeback architecture

BARE METAL, VSPHERE, RHV, OPENSTACK, AWS, AZURE, GOOGLE

GENERAL DISTRIBUTION
WHAT ARE CONTAINERS?
CONTAINER BENEFITS FOR MULTIPLE TEAMS

CONTAINERS ● CLOUD-NATIVE APPS

DEVELOPERS ● SIMPLIFY PACKAGING
Container Container Container Container ● SIMPLIFY TESTING
App App App App

LINUX HOST (KERNEL)

● CONSISTENT APP DEPLOYS
● AUTOMATED APP DEPLOYS
CLOUD INFRASTRUCTURE
IT OPERATIONS ● IMPROVED APP PERFORMANCE
● MULTI-CLOUD CONSISTENCY
Package all app dependencies
Integrated in Linux OS
Fully Open Source ● ENABLE DEVOPS CULTURE
Secure Isolation of Applications BUSINESS ● ENABLE HYBRID CLOUD
Eliminates need for VM Hypervisor ● REDUCE VM LICENSING COSTS
Runs on Any Cloud Platform LEADERS
● ACCELERATE APP-DEV CYCLES

GENERAL DISTRIBUTION
CONTAINER INFRASTRUCTURE
WITH CONTAINERS, THE OS MATTERS MORE THAN EVER

CONTAINER CONTAINER CONTAINER

APP APP APP CONTAINERS ARE LINUX

LINUX O/S LINUX O/S LINUX O/S
DEPENDENCY DEPENDENCY DEPENDENCY
Red Hat
LINUX CONTAINER HOST (KERNEL)
Enterprise Linux
is a leader in paid
70%
CY2016 paid
Linux Linux share

Linux OS host Linux is in

1 spans every every single 2
container container

GENERAL DISTRIBUTION
HOW OPENSHIFT ENABLES
DEVELOPER PRODUCTIVITY
BUILD TEST DEPLOY

Self-service Consistent Automated CI/CD Configuration App logs &

Provisioning environments build & deploy pipelines management metrics

CODE REVIEW MONITOR

SPRING & JAVA EE MICROSERVICES FUNCTIONS

LANGUAGES DATABASES APPLICATION SERVICES

LINUX WINDOWS*

* coming soon
GENERAL DISTRIBUTION
Demo
BUILD AND DEPLOY CONTAINER IMAGES

DEPLOY YOUR DEPLOY YOUR DEPLOY YOUR

SOURCE CODE APP BINARY CONTAINER IMAGE

15 OPENSHIFT TECHNICAL OVERVIEW

DEPLOY SOURCE CODE WITH
SOURCE-TO-IMAGE (S2I)
Git code

BUILD APP Repository

(OpenShift)
Developer

Source-to-Image
BUILD IMAGE (S2I)

(OpenShift) Builder Image

Image Registry

DEPLOY Application
Container
deploy

(OpenShift)

User/Tool Does OpenShift Does

16 OPENSHIFT TECHNICAL OVERVIEW

DEPLOY APP BINARY WITH
SOURCE-TO-IMAGE (S2I)
Application build
Binary
BUILD APP (e.g. WAR)

(Build Infra) Existing Build

Process

Source-to-Image
BUILD IMAGE (S2I)

(OpenShift) Builder Image

Image Registry

DEPLOY Application
Container
deploy

(OpenShift)

User/Tool Does OpenShift Does

17 OPENSHIFT TECHNICAL OVERVIEW

DEPLOY DOCKER IMAGE
build
Application
BUILD IMAGE Image

(Build Infra) Existing Image

Build Process

Image
PUSH Registry
(Build Infra)

DEPLOY Application
Container
deploy

(Openshift)

User/Tool Does OpenShift Does

18 OPENSHIFT TECHNICAL OVERVIEW

CONTINUOUS DELIVERY WITH CONTAINERS

physical

virtual

private cloud
dev source CI/CD container
repository engine

public cloud

19 OPENSHIFT TECHNICAL OVERVIEW

OPENSHIFT LOVES CI/CD

JENKINS-AS-A SERVICE HYBRID JENKINS INFRA EXISTING CI/CD

ON OPENSHIFT WITH OPENSHIFT DEPLOY TO OPENSHIFT

20 OPENSHIFT TECHNICAL OVERVIEW

OPENSHIFT CONCEPTS
OVERVIEW
A container is the smallest compute unit

CONTAINER

22 OPENSHIFT TECHNICAL OVERVIEW

containers are created from
container images

CONTAINER
CONTAINER
IMAGE

BINARY RUNTIME

23 OPENSHIFT TECHNICAL OVERVIEW

container images are stored in
an image registry

IMAGE REGISTRY

CONTAINER CONTAINER CONTAINER

IMAGE IMAGE IMAGE

CONTAINER

CONTAINER CONTAINER CONTAINER

IMAGE IMAGE IMAGE

24 OPENSHIFT TECHNICAL OVERVIEW

an image repository contains all versions of an
image in the image registry

IMAGE REGISTRY

myregistry/frontend myregistry/mongo

frontend:latest mongo:latest
frontend:2.0 mongo:3.7
frontend:1.1 CONTAINER mongo:3.6 CONTAINER
frontend:1.0 IMAGE
mongo:3.4 IMAGE

25 OPENSHIFT TECHNICAL OVERVIEW

containers are wrapped in pods which are
units of deployment and management

POD POD

CONTAINER CONTAINER CONTAINER

IP: 10.1.0.11 IP: 10.1.0.55

26 OPENSHIFT TECHNICAL OVERVIEW

pods configuration is defined
in a deployment

POD POD POD

image name
replicas
labels
cpu CONTAINER CONTAINER CONTAINER
memory
storage

DEPLOYMENT

27 OPENSHIFT TECHNICAL OVERVIEW

services provide internal load-balancing and
service discovery across pods
BACKEND SERVICE
172.30.170.110

role: backend

POD POD POD POD

CONTAINER CONTAINER CONTAINER CONTAINER

10.140.4.44 10.110.1.11 10.120.2.22 10.130.3.33

role: frontend role: backend role: backend role: backend

28 OPENSHIFT TECHNICAL OVERVIEW

apps can talk to each other via services

Invoke
Backend API BACKEND SERVICE
172.30.170.110

role: backend

POD POD POD POD

CONTAINER CONTAINER CONTAINER CONTAINER

10.140.4.44 10.110.1.11 10.120.2.22 10.130.3.33

role: frontend role: backend role: backend role: backend

29 OPENSHIFT TECHNICAL OVERVIEW

routes add services to the external load-balancer and
provide readable urls for the app

ROUTE
app-prod.mycompany.com
> curl http://app-prod.mycompany.com
BACKEND SERVICE

POD POD POD

CONTAINER CONTAINER CONTAINER

30 OPENSHIFT TECHNICAL OVERVIEW

projects isolate apps across environments,
teams, groups and departments
PAYMENT DEV CATALOG

POD POD POD POD POD POD

❌
C C C C C C

PAYMENT PROD INVENTORY

POD POD POD POD POD POD

❌ ❌
C C C C C C

31 OPENSHIFT TECHNICAL OVERVIEW

OPENSHIFT ARCHITECTURE
YOUR CHOICE OF INFRASTRUCTURE

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

33 OPENSHIFT TECHNICAL OVERVIEW

NODES RHEL INSTANCES WHERE APPS RUN

NODE NODE NODE

RHEL RHEL RHEL

NODE NODE NODE

RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

34 OPENSHIFT TECHNICAL OVERVIEW

APPS RUN IN CONTAINERS

NODE NODE NODE

Container
C Cc
Image
C C C

RHEL RHEL RHEL

Container
NODE NODE NODE

C C C C

Pod C

RHEL RHEL RHEL

35 OPENSHIFT TECHNICAL OVERVIEW

PODS ARE THE UNIT OF ORCHESTRATION

NODE NODE NODE

C C
c

C C C

RHEL RHEL RHEL

NODE NODE NODE

C C C C

RHEL RHEL RHEL

36 OPENSHIFT TECHNICAL OVERVIEW

MASTERS ARE THE CONTROL PLANE

NODE NODE NODE

MASTER

RHEL RHEL RHEL

NODE NODE NODE

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

37 OPENSHIFT TECHNICAL OVERVIEW

API AND AUTHENTICATION

NODE NODE NODE

MASTER

API/AUTHENTICATION

RHEL RHEL RHEL

NODE NODE NODE

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

38 OPENSHIFT TECHNICAL OVERVIEW

DESIRED AND CURRENT STATE

NODE NODE NODE

MASTER

API/AUTHENTICATION

DATA STORE
RHEL RHEL RHEL

NODE NODE NODE

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL
PHYSICAL
VIRTUALVIRTUAL
PRIVATEPRIVATEPUBLIC PUBLICHYBRID HYBRID

39 OPENSHIFT TECHNICAL OVERVIEW

INTEGRATED CONTAINER REGISTRY

NODE NODE NODE

MASTER

API/AUTHENTICATION

DATA STORE
RHEL RHEL RHEL

NODE NODE NODE REGISTRY

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

40 OPENSHIFT TECHNICAL OVERVIEW

ORCHESTRATION AND SCHEDULING

NODE NODE NODE

MASTER

API/AUTHENTICATION

DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE REGISTRY

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

41 OPENSHIFT TECHNICAL OVERVIEW

PLACEMENT BY POLICY

NODE NODE NODE

MASTER
C Cc
API/AUTHENTICATION

C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE REGISTRY

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

42 OPENSHIFT TECHNICAL OVERVIEW

AUTOSCALING PODS

NODE NODE NODE

MASTER
C Cc
API/AUTHENTICATION

C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE REGISTRY

HEALTH/SCALING

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

43 OPENSHIFT TECHNICAL OVERVIEW

SERVICE DISCOVERY

SERVICE LAYER

NODE NODE NODE

MASTER
C Cc
API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE REGISTRY

HEALTH/SCALING C C C C

C
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

44 OPENSHIFT TECHNICAL OVERVIEW

PERSISTENT DATA IN CONTAINERS

SERVICE LAYER

NODE NODE NODE PERSISTENT

MASTER STORAGE
C Cc
API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE REGISTRY

HEALTH/SCALING C C C C

C
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

45 OPENSHIFT TECHNICAL OVERVIEW

ROUTING AND LOAD-BALANCING
ROUTING LAYER

SERVICE LAYER

NODE NODE NODE PERSISTENT

MASTER STORAGE
C Cc
API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE REGISTRY

HEALTH/SCALING C C C C

C
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

46 OPENSHIFT TECHNICAL OVERVIEW

ACCESS VIA WEB, CLI, IDE AND API
ROUTING LAYER

SERVICE LAYER

NODE NODE NODE PERSISTENT

SCM
MASTER STORAGE
(GIT)
C Cc
API/AUTHENTICATION

C C C
CI/CD DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE REGISTRY

EXISTING C C C C
HEALTH/SCALING
AUTOMATION
TOOLSETS

C
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

47 OPENSHIFT TECHNICAL OVERVIEW

MONITORING
APPLICATION HEALTH
AUTO-HEALING FAILED PODS
NODE NODE NODE
MASTER

API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE

C C
HEALTH/SCALING c

RED HAT
ENTERPRISE LINUX RHEL RHEL RHEL

49 OPENSHIFT TECHNICAL OVERVIEW

AUTO-HEALING FAILED CONTAINERS
NODE NODE NODE
MASTER

API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE

C C
HEALTH/SCALING c

RED HAT
ENTERPRISE LINUX RHEL RHEL RHEL

50 OPENSHIFT TECHNICAL OVERVIEW

AUTO-HEALING FAILED CONTAINERS
NODE NODE NODE
MASTER

API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE

C C
HEALTH/SCALING c

RED HAT
ENTERPRISE LINUX RHEL RHEL RHEL

51 OPENSHIFT TECHNICAL OVERVIEW

AUTO-HEALING FAILED CONTAINERS
NODE NODE NODE
MASTER

API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE NODE

C C
HEALTH/SCALING c

RED HAT
ENTERPRISE LINUX RHEL RHEL RHEL

52 OPENSHIFT TECHNICAL OVERVIEW

AUTO-HEALING FAILED CONTAINERS
NODE NODE NODE
MASTER

c c

API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER NODE NODE

C C
HEALTH/SCALING

RED HAT
ENTERPRISE LINUX RHEL RHEL

53 OPENSHIFT TECHNICAL OVERVIEW

PERSISTENT STORAGE
PERSISTENT STORAGE
● Persistent Volume (PV) is tied to a piece of network storage
● Provisioned by an administrator (static or dynamically)
● Allows admins to describe storage and users to request storage
● Assigned to pods based on the requested size, access mode, labels and type

NFS OpenStack Cinder iSCSI Azure Disk AWS EBS FlexVolume

GCE Persistent VMWare

GlusterFS Ceph RBD Fiber Channel Azure File
Disk vSphere VMDK

Container Storage
NetApp Trident*
Interface (CSI)**
* Shipped and supported by NetApp via TSANet
** Tech Preview

55 OPENSHIFT TECHNICAL OVERVIEW

PERSISTENT STORAGE

POOL OF PERSISTENT VOLUMES

register PV Ceph
iSCSI GlusterFS NFSP NFSP NFSP
RBD
PV PV V V V
PV

Admin

PROJECT Pod Pod Pod

create claim

claim claim claim

User

56 OPENSHIFT TECHNICAL OVERVIEW

DYNAMIC VOLUME PROVISIONING

Slow Azure
Azure-Disk Provisioner

define StorageClass AWS

Fast
AWS-SSD Provisioner

provision
Admin Fastest NetApp
PV
NetApp-Flash Provisioner

Pod

create claim: Fastest OpenShift

PV Controller
bound
claim
User

57 OPENSHIFT TECHNICAL OVERVIEW

OPENSHIFT CONTAINER STORAGE
● Containerized Red Hat Gluster Storage
● Native integration with OpenShift
● Unified Orchestration using Kubernetes for
applications and storage APPLICATION APPLICATION APPLICATION
CONTAINER CONTAINER CONTAINER
● Greater control & ease of use for developers
STORAGE STORAGE STORAGE
● Lower TCO through convergence CONTAINER CONTAINER CONTAINER

● Single vendor Support DISTRIBUTED, SECURE, SCALE-OUT STORAGE

CLUSTER

58 OPENSHIFT TECHNICAL OVERVIEW