Introduction to Red Hat OpenShift 4
- 1. Introduction to Red Hat OpenShift 4 A hybrid cloud, enterprise Kubernetes application platform Mark Qu
- 2. Agenda ´ About Red Hat ´ IBM and Red Hat ´ Story of Jim Whitehurst ´ Prerequisites before talking about OpenShift ´ What is OpenShift ´ OpenShift vs Kubernetes ´ Features in OpenShift 4 ´ How to get started with OpenShift 4
- 3. About Red Hat ´ Founded in 1993 by Bob Young after a merger with Marc Ewing’s company Red Hat Linux ´ Headquarter: Raleigh, NC ´ Started with Linux (Red Hat Linux) ´ Open-source business model: one of the most notable successes in the history of open source business ´ All Red Hat products are based on open source software ´ Red Hat sells subscriptions for support, training, and integration services ´ Second largest corporate contributor to Linux kernel after Intel ´ Second largest corporate contributor to Kubernetes after Google ´ Major products ´ Red Hat Enterprise Linux (RHEL) ´ Red Hat OpenShift Container Platform (RHCOP) ´ JBoss ´ Revenue ´ $500 million at beginning of 2008 when Jim Whitehurst became Red Hat’s CEO ´ $1.13 billion in 2012 (1st one-billion dollar open-source company) ´ $3.4 billion in 2018
- 4. IBM + Red Hat ´ Red Hat was acquired by IBM for $34 billion on Jul 9, 2019 ´ Lotus: $3.5 billion, 1995 ´ Informix: $1 billion, 2001 ´ PWC Consulting: $3.5 billion, 2002 ´ Rational: $2.1 billion, 2003 ´ Ascential: $1.1 billion, 2005 ´ FileNet: $1.6 billion, 2006 ´ Internet Security Systems: $1.3 billion, 2006 ´ Cognos: $5 billion, 2008 ´ SPSS: $1.2 billion, 2009 ´ Sterling Commerce: $1.4 billion, 2010 ´ Netezza: $1.7 billion, 2010 ´ Kenexa: $1.4 billion, 2012 ´ SoftLayer: $2 billion, 2013 ´ Trusteer: $1 billion, 2013 ´ Merge Healthcare: $1 billion, 2015 ´ Clearsafe: $1.3 billion, 2015 ´ Truven Health Analytics: $2.6 billion, 2016
- 5. IBM + Red Hat ´ Since the acquisition, Red Hat remains a separate entity from IBM, to large extent ´ Red Hat has its own CEO, HR, back office, development, sales, etc. ´ According to Red Hat CEO Paul Cormier, Red Hat has to stay separate to preserve its ecosystem (and culture) ´ What IBM get from the acquisition (personal opinion*) ´ RHEL ´ Generally believed RHEL has at least 2/3 market share in (paid) enterprise server OS ´ OpenShift
- 6. Story of Jim Whitehurst ´ Apr 2020 - Present: Present at IBM and chair of board at Red Hat ´ COVID-19 pandemic ´ Why? He gets culture ´ Why not IBM CEO? ´ 2008-2020: CEO at Red Hat ´ Financial crisis ´ Revenue growth: $500 mil 2008 -> $1.13 bil 2012 -> $3.4 bil 2018 ´ Named one of the World’s best CEOs by Barron’s in 2018 ´ Red Hat: personification of the free-wheeling modern tech industry ´ 2002-2007: SVP and COO at Delta Air Lines ´ Dot-com bubble crash ´ Oversaw Delta’s bankruptcy and recovery ´ “Keep Delta My Delta” ´ Delta: manifestation of classic corporate America ´ 1989-2001: VP and Director of Boston Consulting Group
- 7. Prerequisites ´ Container basics ´ https://www.youtube.com/watch?v=z_ace9c97PE ´ Kubernetes basics (container orchestration) ´ https://www.ibm.com/cloud/architecture/content/course/kubernetes-101
- 8. What is OpenShift ´ A leading hybrid cloud, enterprise Kubernetes application platform trusted by 1,700+ organizations ´ Vendor-neutral Kubernetes platform (AWS, Azure, GCP, VMware vSphere, IBM Cloud, OpenStack, bare metal, etc.) ´ AWS first J ´ Azure next ´ Tags for OpenShift ´ Red Hat ´ Kubernetes ´ Container ´ Cloud ´ PaaS
- 9. What is OpenShift – 30-second video (https://www.youtube.com/watch?v=xEofcsd6HGg)
- 12. Releases of OpenShift 4 Version General availability Life cycle phase 4.4 May 5, 2020 Full support 4.3 Jan 23, 2020 Maintenance support 4.2 Oct 16, 2019 Maintenance support 4.1 Jun 4, 2019 End of life
- 13. OpenShift vs Kubernetes: What’s the Difference? ´ Some analogies ´ Car vs Engine ´ Kubernetes is the engine (framework, project) that drives OpenShift ´ OpenShift is the complete car (product) that gets you where you want to ´ Linux kernel vs Linux distribution ´ Kubernetes is the ‘kernel’ of distributed systems ´ OpenShift is the distribution that focuses on the experience of both developers and administrators ´ Kubernetes plus many other upstream projects => project OKD, upstream of OpenShift ´ OKD plus some other projects and RH support => product OpenShift
- 15. OpenShift vs Kubernetes: Major OpenShift 4 benefits ´ Trusted OS foundation: RHEL CoreOS or RHEL ´ OpenShift 4 control panel can only be deployed on Red Hat CoreOS (RHCOS) – immutable, lower footprint, optimized for running containers and managing Kubernetes clusters at scale ´ Workers can be deployed on RHCOS or RHEL ´ RHEL CoreOS and RHEL make the perfect foundation for OpenShift to run anywhere from bare-metal to private and public clouds with the same experience ´ Automated operations ´ Automated installation and day-2 Operations which makes it easier to administrate, upgrade, and provide an enterprise container platform ´ Ubiquitous usage of operators to make all possible ´ Built-in Operator Lifecyle Manager (OLM) and rich ecosystem of operators
- 16. OpenShift vs Kubernetes: Major OpenShift 4 benefits ´ Cluster services ´ Centralized logs: EFK (ELK) stack ´ Metrics and Monitoring: Prometheus, Grafana ´ Built-in OAuth provider ´ Strict security model, integral RBAC ´ Application services ´ Support microservices and serverless architectures ´ OpenShift Service Mesh provides Istio, Kiali, and Jaeger out-of-the-box to support microservices adoption ´ OpenShift Serverless includes Knative and Keda (for Azure functions) ´ Allow to migrate legacy VMs to OpenShift by using Container Native Virtualization (tech preview)
- 17. OpenShift vs Kubernetes: Major OpenShift 4 benefits ´ Developer services ´ Built-in OperatorHub which offers a catalog of over 180 services delivered through Operators ´ Developer perspective of web console dedicated to developers ´ Allow easy application deployment from different sources (git source, binary, external registry, Dockerfile, …) ´ Application topology view ´ CodeReady Containers: OpenShift 4 running on laptop ´ Out-of-the-box CI/CD features: Jenkens, Tekton ´ Deep expertise Red Hat has in Kubernetes ecosystem ´ Comprehensive QA process in OpenShift release cycle ´ Professional support ´ Critical bugs fixed earlier than Kubernetes and supported/patched on much longer time frame
- 19. More Detailed Comparison between OpenShift and Kubernetes OpenShift Kubernetes Product or project Product with paid support Open-source project Supported OS RHCOS and RHEL Any Linux Installation Simply installation by dedicated operator (OpenShift 4) The tool of your choice Security Very strict, built-in authentication and authorization model, integral RBAC for long Less strict Service provisioning Operator, templates Helm Deployment approach DeploymentConfig and Deployment Deployment Router vs Ingress Router (and support Ingress to Router translation) Ingress
- 20. More Detailed Comparison between OpenShift and Kubernetes OpenShift Kubernetes Container image management ImageStream Integrated CI/CD Jenkins, Tekton (tech preview), source-to-image (S2I) Project vs namespace Projects are Kubernetes namespaces with additional features Namespace User experience – CLI oc (kubectl plus some convenient features) kubectl User experience – web intreface Nice-looking web console with admin and developer perspectives, supporting SSO to access external services Primitive dashboard UI Networking Native networking solution Some components require 3rd party plugins
- 21. Operators ´ Infrastructure as Code (IaC) ´ Probably the most important benefit Kubernetes has enabled ´ Each Kubernetes resource (pod, service, deployment, etc.) is described in machine readable YAML format (a.k.a., desired status) ´ When the YAML is ‘applied’ to Kubernetes cluster, Kubernetes will ‘make it happen’ (actual status) ´ If the ‘desired’ status is updated, Kubernetes will make the ‘actual’ status matched ´ YAML files can be source-controlled as application artifacts ´ Resources described in YAML format can be easily moved from one place to the other
- 22. Operators ´ Introduced by CoreOS in 2016 ´ Operators are powerful extension of Kubernetes’ IaC enablement ´ Innovative approach to automate infrastructure and application management tasks using Kubernetes as the automation engine ´ Kubernetes Operator ´ Kubernetes-native application ´ Puts all operational knowledge into Kubernetes primitives ´ Administrators, shell scripts, automation software (e.g. Ansible®) now in Kubernetes pods ´ Integrates natively with Kubernetes concepts and APIs ´ Are pods with operator code that interact with Kubernetes API server ´ Run "reconciliation loops" to check on application service ´ Make sure user-specified state of objects is achieved ´ Manage all deployed resources and your application ´ Act as application-specific controllers ´ Extend Kubernetes API with Custom Resource Definition (CRD)
- 23. Operators: My Understanding Operator Manifest CRD Operator YAML API Server Scheduler CRD CR CR Pod OLM OLM Operator Catalog Operator Operator Pod CR Pod Install operator Create CR CR
- 24. Operators: Custom Resource Definition (CRD) ´ A CRD extends Kubernetes API by defining the schema of a new custom resource (CR) ´ Kubernetes API server then has new endpoints for the CR apiVersion: apiextensions.k8s.io/v1beta1 kind: CustomResourceDefinition metadata: creationTimestamp: null name: tomcats.tomcat.apache.org spec: group: tomcat.apache.org names: kind: Tomcat listKind: TomcatList plural: tomcats singular: tomcat scope: Namespaced subresources: status: {} validation: openAPIV3Schema: properties: apiVersion: type: string kind: type: string metadata: type: object spec: type: object status: type: object version: v1alpha1 versions: - name: v1alpha1 served: true storage: true
- 25. Operators: Custom Resource (CR) ´ Custom Resources (CRs) can be created based on CRD ´ Operator watches for creation of CR and reacts by creating all resources CR represents apiVersion: tomcat.apache.org/v1alpha1 kind: Tomcat metadata: name: mytomcat spec: replicas: 2 image: tomcat:latest imagePullPolicy: IfNotPresent webArchiveImage: sampleapp/webarchive:1.0 deployDirectory: /usr/local/tomcat/webapps
- 26. Operators: Custom Resource Creation and Management ´ Create CR in OpenShift ´ oc create –f mytomcat.yaml ´ Manipulate and examine CR ´ oc get tomcats ´ oc describe tomcat mytomcat ´ Delete CR ´ oc delete tomcat mytomcat
- 27. Operators in OpenShift 4 are Ubiquitous ´ Installation of OpenShift 4 itself ´ Cluster configuration ´ Cluster upgrade (components, host OS) ´ Cluster autoscaling by provisioning or destroying nodes ´ OLM ´ OperatorHub ´ “Everything as Code”
- 28. Operators ´ Operator Framework ´ Operator SDK ´ Developers build, package, test operator ´ No knowledge of Kubernetes API complexities required ´ Operator Lifecycle Manager (OLM) ´ Helps install, update, manage life cycle of all operators in cluster ´ Operator Metering ´ Usage reporting for Operators and resources within Kubernetes
- 29. Operators ´ OperatorHub.io ´ Kubernetes Internet community for sharing Operators ´ Works for any Kubernetes environment ´ Packages Operators for easy deployment and management ´ Publicizes Operators and enables adoption ´ Uses OLM to install, manage, update Operators
- 31. CLI (oc vs kubectl) ´ OpenShift CLI tool ‘oc’ is command compatible with ‘kubectl’ ´ ‘oc’ offers extra features and simplicity ´ ‘oc’ has support of logging in to OpenShift cluster (oc login) ´ ‘oc’ lets you switch your context between projects/namespaces (oc project myproject) ´ ‘oc’ allows you to list out your namespaces easily (oc projects) ´ ‘oc’ creates default RoleBindings alongside with a new project (oc new-project myproject) ´ ‘oc’ allows you to build container images and deploy applications from source code or binaries (a.k.a., S2I) with one single command (oc new-app)
- 32. Web Console ´ Two perspectives ´ Administrator ´ Developer ´ Run as pods
- 33. Web Console ´ Topology view ´ Application-centric ´ Shows components and status, routes, source code ´ Drag arrows to create relationship ´ Add components to applications easily
- 34. Web Console ´ Project details
- 37. Build and Deploy Container Images in OpenShift ´ Deploy source code ´ Deploy application binary ´ Deploy container image
- 38. Deploy Source Code with S2I
- 39. Deploy App Binary with S2I
- 41. How to Get Started with OpenShift 4 ´ Interactive Learning Portal: http://learn.openshift.com/ ´ Get started with OpenShift: https://www.openshift.com/try ´ CodeReady Containers (CRC): https://developers.redhat.com/blog/2019/09/05/red-hat-openshift-4-on- your-laptop-introducing-red-hat-codeready-containers/ ´ Red Hat Online Partner Enablement Network (OPEN): https://connect.redhat.com/en/training
- 42. References ´ Red Hat: https://en.wikipedia.org/wiki/Red_Hat ´ List of mergers and acquisitions by IBM: https://en.wikipedia.org/wiki/List_of_mergers_and_acquisitions_by_IBM ´ Red Hat CEO Paul Cormier Talks about IBM and His Vision for the Future: https://www.datacenterknowledge.com/open-source/red-hat-ceo-paul- cormier-talks-about-ibm-and-his-vision-future ´ Jim Whitehurst: https://en.wikipedia.org/wiki/Jim_Whitehurst ´ James Whitehurst: https://www.redhat.com/en/about/company/management/james-whitehurst ´ Jim Whitehurst Becomes President of IBM. Why? He Gets Culture. https://www.forbes.com/sites/jonobacon/2020/01/31/jim-whitehurst-becomes- president-of-ibm-why-he-gets-culture/#253469c36394 ´ Why IBM Choosing Arvind Krishna Over Jim Whitehurst Was Wise: https://www.itprotoday.com/linux/why-ibm-choosing-arvind-krishna-over-jim- whitehurst-was-wise
- 43. References ´ What is OpenShift: https://www.openshift.com/learn/what-is-openshift ´ What is Red Hat OpenShift? (31-second video) https://www.openshift.com/blog/what-is-red-hat-openshift ´ OpenShift: https://en.wikipedia.org/wiki/OpenShift ´ OpenShift success stories: https://www.openshift.com/learn/success-stories/ ´ A brief history of Kubernetes, OpenShift, and IBM: https://developer.ibm.com/technologies/containers/blogs/a-brief-history- of-red-hat-openshift/ ´ Red Hat OpenShift Container Platform Life Cycle Policy: https://access.redhat.com/support/policy/updates/openshift ´ Kubernetes commit contribution: https://www.stackalytics.com/cncf?module=kubernetes&date=all
- 44. References ´ OpenShift and Kubernetes: What’s the difference? https://www.redhat.com/en/blog/openshift-and-kubernetes-whats-difference ´ Enterprise Kubernetes with OpenShift (Part one): https://www.openshift.com/blog/enterprise-kubernetes-with-openshift-part-one ´ OpenShift vs Kubernetes: What are the differences? https://www.whizlabs.com/blog/openshift-vs-kubernetes/ ´ 10 most important differences between OpenShift and Kubernetes: https://cloudowski.com/articles/10-differences-between-openshift-and- kubernetes/ ´ OpenShift vs. Kubernetes: Are they really in competition? https://www.padok.fr/en/blog/kubernetes-openshift
- 45. References ´ Kubernetes Operators: https://www.redhat.com/cms/managed-files/cl-oreilly- kubernetes-operators-ebook-f21452-202001-en_2.pdf ´ Operators: https://www.openshift.com/learn/topics/operators ´ OperatorHub.io: https://operatorhub.io/ ´ Honest review of OpenShift 4: https://cloudowski.com/articles/honest-review-of- openshift-4/ ´ Tomcat-operator: https://github.com/kube-incubator/tomcat-operator ´ Red Hat OpenShift 4 on your laptop: https://haralduebele.blog/2019/09/13/red- hat-openshift-4-on-your-laptop/ ´ Product Documentation for Red Hat CodeReady Containers 1.11: https://access.redhat.com/documentation/en- us/red_hat_codeready_containers/1.11/
- 46. Thank you! Q&A