C&CNR2019 - Containers Landscape Review
1 like•126 views
The document presents an overview of OpenShift, focusing on its architecture, the role of containers, and the differences between virtual machines and containers. It highlights the benefits of containerization, such as portability and efficient resource usage, while detailing OpenShift's orchestration, persistent storage frameworks, and integration with Red Hat technologies. Key components like pods, service discovery, and autoscaling are also discussed in the context of enabling cloud-native applications.
C&CNR2019 - Containers Landscape Review
- 1. CONTAINERS LANDSCAPE REVIEW Domenico Pastore, Cloud Engineer CONTAINERS & CLOUD-NATIVE ROADSHOW Milano, 4 Aprile 2019 | Roma, 9 Aprile 2019
- 2. OPENSHIFT TECHNICAL OVERVIEW2 Self-Service Multi- language Automation Collaboration Multi-tenant Standards-based Web-scale Open Source Enterprise Grade Secure
- 3. OPENSHIFT TECHNICAL OVERVIEW3 ● Introductions ● Linux Containers (review) ● OpenShift Architecture ● Container Native Storage / Gluster Architecture ● Labs Agenda
- 5. OPENSHIFT TECHNICAL OVERVIEW5 WHAT ARE CONTAINERS? It Depends Who You Ask ● Application processes on a shared kernel ● Simpler, lighter, and denser than VMs ● Portable across different environments ● Package apps with all dependencies ● Deploy to any environment in seconds ● Easily accessed and shared INFRASTRUCTURE APPLICATIONS
- 6. OPENSHIFT TECHNICAL OVERVIEW6 VIRTUAL MACHINES AND CONTAINERS VIRTUAL MACHINES CONTAINERS virtual machines are isolated apps are not containers are isolated so are the apps VM OS Dependencies Kernel Hypervisor Hardware App App App App Hardware Container Host (Kernel) Container App OS deps Container App OS deps Container App OS deps Container App OS deps
- 7. OPENSHIFT TECHNICAL OVERVIEW7 Container Host Container Application OS dependencies Virtual Machine Application OS dependencies Operating System VIRTUAL MACHINES AND CONTAINERS VM Isolation Complete OS Static Compute Static Memory High Resource Usage Container Isolation Shared Kernel Burstable Compute Burstable Memory Low Resource Usage
- 8. OPENSHIFT TECHNICAL OVERVIEW8 VIRTUAL MACHINES AND CONTAINERS Container Host Container Application OS dependencies Dev IT Ops Infrastructure Virtual Machine Application OS dependencies Operating System IT Ops (and Dev, sort of) Infrastructure Clear ownership boundary between Dev and IT Ops drives DevOps adoption and fosters agility Optimized for stability Optimized for agility
- 9. OPENSHIFT TECHNICAL OVERVIEW9 Virtual machines are NOT portable across hypervisor and do NOT provide portable packaging for applications APPLICATION PORTABILITY WITH VM VM Type X Application OS dependencies Operating System BARE METAL PRIVATE CLOUD PUBLIC CLOUDVIRTUALIZATIONLAPTOP Application OS dependencies Operating System VM Type Y Application OS dependencies Operating System VM Type Z Application OS dependencies Operating System Guest VM Application OS dependencies Operating System
- 10. OPENSHIFT TECHNICAL OVERVIEW10 APPLICATION PORTABILITY WITH CONTAINERS LAPTOP Container Application OS dependencies Guest VM RHEL BARE METAL Container Application OS dependencies RHEL VIRTUALIZATION Container Application OS dependencies Virtual Machine RHEL PRIVATE CLOUD Container Application OS dependencies Virtual Machine RHEL PUBLIC CLOUD Container Application OS dependencies Virtual Machine RHEL RHEL Containers + RHEL Host = Guaranteed Portability Across Any Infrastructure
- 11. OPENSHIFT TECHNICAL OVERVIEW11 Base Image Image Layer 1 Image Layer 2 Image Layer 3 Base RHEL OS Update Layer Java Runtime Layer Application Layer Container Image Layers Example Container Image RAPID SECURITY PATCHING USING CONTAINER IMAGE LAYERING
- 12. OPENSHIFT TECHNICAL OVERVIEW A lightweight, OCI-compliant container runtime 12 Available in OpenShift Online (soon) Tech Preview in OCP 3.7, GA in OCP 3.8 Optimized for Kubernetes Any OCI-compliant container from any OCI registry (including docker) Improve Security and Performance at scale
- 14. OPENSHIFT TECHNICAL OVERVIEW14 YOUR CHOICE OF INFRASTRUCTURE PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 15. OPENSHIFT TECHNICAL OVERVIEW NODES RHEL INSTANCES WHERE APPS RUN 15 RHEL NODE RHEL NODE RHEL NODE RHEL NODE RHEL NODE RHEL NODE PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 16. OPENSHIFT TECHNICAL OVERVIEW RHEL NODE c RHEL NODE RHEL NODE RHEL NODE RHEL NODE RHEL NODE C C C C C C C CC C APPS RUN IN CONTAINERS 16 Container Image Container Pod
- 17. OPENSHIFT TECHNICAL OVERVIEW17 PODS ARE THE UNIT OF ORCHESTRATION RHEL NODE c RHEL NODE RHEL NODE RHEL NODE RHEL NODE RHEL NODE C C C C C C C CC C
- 18. OPENSHIFT TECHNICAL OVERVIEW RHEL NODE RHEL NODE RHEL NODE RHEL NODE RHEL NODE RHEL NODE 18 MASTERS ARE THE CONTROL PLANE RED HAT ENTERPRISE LINUX MASTER PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 19. OPENSHIFT TECHNICAL OVERVIEW RHEL NODE RHEL NODE RHEL NODE 19 API AND AUTHENTICATION RHEL NODE RHEL NODE RHEL NODE RED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 20. OPENSHIFT TECHNICAL OVERVIEW RHEL NODE RHEL NODE RHEL NODE 20 DESIRED AND CURRENT STATE RHEL NODE RHEL NODE RHEL NODE PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID RED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 21. OPENSHIFT TECHNICAL OVERVIEW21 INTEGRATED CONTAINER REGISTRY RHEL NODE RHEL NODE RHEL RHEL NODE RHEL NODE RHEL RHEL NODE PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID RED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE NODE REGISTRY RHEL
- 22. OPENSHIFT TECHNICAL OVERVIEW22 ORCHESTRATION AND SCHEDULING RHEL NODE RHEL NODE RHEL RHEL NODE RHEL NODE RHEL RHEL NODE PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID RED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE SCHEDULER NODE REGISTRY RHEL
- 23. OPENSHIFT TECHNICAL OVERVIEW23 PLACEMENT BY POLICY RHEL NODE RHEL NODE RHEL NODE PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID RED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE SCHEDULER REGISTRY RHEL NODE RHEL NODE C C RHEL NODE c C C
- 24. OPENSHIFT TECHNICAL OVERVIEW RHEL NODE RHEL NODE RHEL NODE RHEL NODE RHEL NODE C C RHEL NODE c C C 24 AUTOSCALING PODS PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID RED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE SCHEDULER REGISTRY HEALTH/SCALING
- 25. OPENSHIFT TECHNICAL OVERVIEW25 SERVICE DISCOVERY SERVICE LAYER REGISTRY RHEL NODE C C RHEL NODE C C RHEL NODE c C C RHEL NODE C C RHEL NODE C RHEL NODE CRED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE SCHEDULER HEALTH/SCALING PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 26. OPENSHIFT TECHNICAL OVERVIEW26 PERSISTENT DATA IN CONTAINERS SERVICE LAYER PERSISTENT STORAGE REGISTRY RHEL NODE C C RHEL NODE C C RHEL NODE c C C RHEL NODE C C RHEL NODE C RHEL NODE CRED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE SCHEDULER HEALTH/SCALING PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 27. OPENSHIFT TECHNICAL OVERVIEW27 ROUTING AND LOAD-BALANCING SERVICE LAYER ROUTING LAYER PERSISTENT STORAGE REGISTRY RHEL NODE C C RHEL NODE C C RHEL NODE c C C RHEL NODE C C RHEL NODE C RHEL NODE CRED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE SCHEDULER HEALTH/SCALING PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 28. OPENSHIFT TECHNICAL OVERVIEW28 ACCESS VIA WEB, CLI, IDE AND API EXISTING AUTOMATION TOOLSETS SCM (GIT) CI/CD SERVICE LAYER ROUTING LAYER PERSISTENT STORAGE REGISTRY RHEL NODE C C RHEL NODE C C RHEL NODE c C C RHEL NODE C C RHEL NODE C RHEL NODE CRED HAT ENTERPRISE LINUX MASTER API/AUTHENTICATION DATA STORE SCHEDULER HEALTH/SCALING PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
- 30. OPENSHIFT TECHNICAL OVERVIEW30 OPENSHIFT PERSISTENT STORAGE FRAMEWORK
- 31. OPENSHIFT TECHNICAL OVERVIEW31 OPENSHIFT PERSISTENT STORAGE FRAMEWORK “A request for storage” Provider: ABC Capacity: 10 GiB Features: XYZ PersistentVolumeClaim “submits”
- 32. OPENSHIFT TECHNICAL OVERVIEW32 OPENSHIFT PERSISTENT STORAGE FRAMEWORK “A request for storage” Provider: ABC Capacity: 10 GiB Features: XYZ PersistentVolumeClaim “A provider of storage” Provider URL: … Credentials: … Options: ... StorageClass “sets up” “submits” “submitted to”
- 33. OPENSHIFT TECHNICAL OVERVIEW33 OPENSHIFT PERSISTENT STORAGE FRAMEWORK “A request for storage” Provider: ABC Capacity: 10 GiB Features: XYZ PersistentVolumeClaim “A provider of storage” Provider URL: … Credentials: … Options: ... StorageClass “sets up” “submits” “submitted to” Storage Backend “instructs”
- 34. OPENSHIFT TECHNICAL OVERVIEW34 OPENSHIFT PERSISTENT STORAGE FRAMEWORK “A request for storage” Provider: ABC Capacity: 10 GiB Features: XYZ PersistentVolumeClaim “A provider of storage” Provider URL: … Credentials: … Options: ... StorageClass “Provisioned Storage” Name: … Size: … AccessMode: ... PersistentVolume “sets up” “submits” “submitted to” “creates” Storage Backend “instructs” “provisions”
- 35. OPENSHIFT TECHNICAL OVERVIEW35 OPENSHIFT PERSISTENT STORAGE FRAMEWORK “A request for storage” Provider: ABC Capacity: 10 GiB Features: XYZ PersistentVolumeClaim “A provider of storage” Provider URL: … Credentials: … Options: ... StorageClass “Provisioned Storage” Name: … Size: … AccessMode: ... PersistentVolume APPLICATION POD(S) “sets up” “submits” “submitted to” “creates” Storage Backend “instructs” “provisions ” “mounted by” “Bound to”
- 36. OPENSHIFT TECHNICAL OVERVIEW36 GLUSTERFS - DISTRIBUTED FILE STORAGE Scale Out Performance, Capacity & Availability ScaleUpCapacity RED HAT GLUSTER STORAGE FOR ON-PREMISE SERVER (CPU/MEM) SERVER (CPU/MEM) SERVER (CPU/MEM) Single, Global namespace Deploys on Red Hat-supported servers and underlying storage: DAS, JBOD Scale-out linearly Replicate synchronously and asynchronous
- 37. OPENSHIFT TECHNICAL OVERVIEW37 FEDERATING LOCAL STORAGE FILE 1 FILE 2 BRICK BRICK CLIENT MOUNT server1:/exp1 server2:/exp2 GLUSTERFS VOLUME FILE 1 FILE 2
- 38. OPENSHIFT TECHNICAL OVERVIEW38 CONTAINER-NATIVE STORAGE ON OPENSHIFT POD CONTAINERIZED RED HAT GLUSTER STORAGE RHEL HOST OS RED HAT GLUSTER POD GLUSTER VOLUMES PHYSICAL DISKHOST NETWORK
- 39. OPENSHIFT TECHNICAL OVERVIEW39 CONTAINER-NATIVE STORAGE ON OPENSHIFT POD RHGS POD RHGS POD RHGS POD RHGS POD INFRA POD INFRA HEKETI RESTFUL GLUSTERFS MANAGEMENT RED HAT HEKETI POD REST API GLUSTERFS PODS
- 40. OPENSHIFT TECHNICAL OVERVIEW40 CONTAINER NATIVE STORAGE ON OPENSHIFT POD RHGS POD RHGS POD RHGS POD RHGS POD INFRA POD INFRA
- 41. OPENSHIFT TECHNICAL OVERVIEW41 CONTAINER NATIVE STORAGE ON OPENSHIFT POD RHGS POD RHGS POD RHGS POD RHGS POD INFRA POD INFRA PERSISTENT VOLUME CLAIM 1.)
- 42. OPENSHIFT TECHNICAL OVERVIEW42 CONTAINER NATIVE STORAGE ON OPENSHIFT POD RHGS POD RHGS POD RHGS POD RHGS POD INFRA POD INFRA PERSISTENT VOLUME CLAIM 2.) 1.)
- 43. OPENSHIFT TECHNICAL OVERVIEW43 CONTAINER NATIVE STORAGE ON OPENSHIFT POD RHGS POD RHGS POD RHGS POD RHGS POD INFRA POD INFRA GLUSTER VOLUME PERSISTENT VOLUME CLAIM 2.) 3.) 1.)
- 44. OPENSHIFT TECHNICAL OVERVIEW44 CONTAINER NATIVE STORAGE ON OPENSHIFT POD RHGS POD RHGS POD RHGS POD RHGS POD INFRA POD INFRA GLUSTER VOLUME PERSISTENT VOLUME CLAIM PERSISTENT VOLUME PERSISTENT VOLUME 4.) 2.) 3.) 4.) 1.)
- 45. OPENSHIFT TECHNICAL OVERVIEW45 CONTAINER NATIVE STORAGE ON OPENSHIFT
- 46. OPENSHIFT TECHNICAL OVERVIEW46 CONTAINER NATIVE STORAGE ON OPENSHIFT AVAILABILITY ZONE A AVAILABILITY ZONE B AVAILABILITY ZONE C Node Node Node Node Node Node