OpenShift on AWS “The Big Idea”
Giriraj Rajawat
SSA Openshift
Red Hat SAARC
21 May 2019
AGENDA
● Introduction & Understanding Containers
● OpenShift Container Platform on AWS
● Look & feel of OCP on AWS
● Q&A
2 GENERAL DISTRIBUTION
Amazon Web Services & OpenShift
Stronger Together
● Container Platform by Red Hat ● Reliable, scalable cloud computing
○ Kubernetes orchestration ● Provides hundreds of web services
○ Powerful web UI
● Offerings in 20 geographic regions
○ Developer centric tools
● Runs in ANY environment ● Pay only for what you use
4
INTRODUCTION TO CONTAINERS
WHAT ARE LINUX CONTAINERS?
“Software packaging concept that typically includes an application and all of its runtime dependencies”
Benefits:
● High quality software releases
● Shorter test cycles
● Easier application management
● Standard format allows for “Life and Shift”
6 GENERAL DISTRIBUTION
LIGHTWEIGHT VIRTUALIZATION
vs
Containers provide less overhead, faster instantiation, better isolation, and are generally easier to scale
7 GENERAL DISTRIBUTION
BUSINESS VALUE OF DEVOPS
THE PROBLEM
Applications require
complicated installation and
integration every time they are
deployed leading to
● Slow service delivery
● Reduced service quality
● Frequent down times
9 GENERAL DISTRIBUTION
THE PROBLEM
DEVELOPERS I.T.
OPERATIONS
10 GENERAL DISTRIBUTION
THE SOLUTION
Adopting a container strategy
will allow applications to be
easily shared and deployed
● Consistent env and tools
● Predictable building blocks
● Faster deployment
11 GENERAL DISTRIBUTION
THE SOLUTION
DEVELOPERS I.T.
OPERATIONS
12 GENERAL DISTRIBUTION
THE SOLUTION
Container
Controlled by
App Developers
Operating System
Controlled by Virtual Machine
IT Operations
Hardware
GENERAL DISTRIBUTION
DEVOPS WITH CONTAINERS
physical
virtual
private cloud
dev source CI/CD container
repository engine
public cloud
14 GENERAL DISTRIBUTION
OPENSHIFT OVERVIEW AND
ARCHITECTURE REVIEW
Container Adoption Rate
in Production
35%
Source: RightScale 2017 State of the Cloud Report
16 GENERAL DISTRIBUTION
Why the Difference?
17 GENERAL DISTRIBUTION
DEVOPS WITH CONTAINERS
?
18 GENERAL DISTRIBUTION
DEVOPS WITH CONTAINERS
?
19 GENERAL DISTRIBUTION
WE NEED MORE THAN JUST CONTAINERS
Scheduling Security
Decide where to deploy containers Control who can do what
Lifecycle and health Scaling
Keep containers running despite failures Scale containers up and down
Discovery Persistence
Find other containers on the network Survive data beyond container lifecycle
Monitoring Aggregation
Visibility into running containers Compose apps from multiple containers
20 GENERAL DISTRIBUTION
Container application
platform based on Docker
and Kubernetes for building,
distributing and running
containers at scale
21 GENERAL DISTRIBUTION
Self-Service Standards-based
Multi-language Web-scale
Automation Open Source
Collaboration Enterprise Grade
Multi-tenant Secure
22 OPENSHIFT TECHNICAL OVERVIEW
TRUE POLYGLOT PLATFORM
.NET Third-party
PHP Python Java NodeJS Perl Ruby Language
Core
Runtimes
MySQL PostgreSQL MongoDB Redis ...and virtually Third-party
Databases CrunchyData
any docker GitLab
Apache
image Third-party
Iron.io
Phusion
HTTP
Server
nginx Varnish
Passenger
Tomcat
out there! App
Runtimes
Couchbase
Sonatype
EnterpriseDB
JBoss
Spring Wildfly JBoss JBoss JBoss Third-party and many more
Vert.x Web Middleware
Boot Swarm EAP A-MQ Fuse
Server
3SCALE
JBoss JBoss JBoss JBoss RH Third-party
API RH SSO Middleware
BRMS BPMS Data Virt Data Grid Mobile
mgmt
23 GENERAL DISTRIBUTION
YOUR CHOICE OF INFRASTRUCTURE
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
24 OPENSHIFT TECHNICAL OVERVIEW
NODES RHEL INSTANCES WHERE APPS RUN
NODE NODE NODE
RHEL RHEL RHEL
NODE NODE NODE
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
25 OPENSHIFT TECHNICAL OVERVIEW
APPS RUN IN CONTAINERS
NODE NODE NODE
Container
C Cc
Image
C C C
RHEL RHEL RHEL
Container
NODE NODE NODE
C C C C
Pod
C
RHEL RHEL RHEL
26 OPENSHIFT TECHNICAL OVERVIEW
PODS ARE THE UNIT OF ORCHESTRATION
NODE NODE NODE
C C
c
C C C
RHEL RHEL RHEL
NODE NODE NODE
C C C C
RHEL RHEL RHEL
27 OPENSHIFT TECHNICAL OVERVIEW
MASTERS ARE THE CONTROL PLANE
NODE NODE NODE
MASTER
RHEL RHEL RHEL
NODE NODE NODE
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
28 OPENSHIFT TECHNICAL OVERVIEW
API AND AUTHENTICATION
NODE NODE NODE
MASTER
API/AUTHENTICATION
RHEL RHEL RHEL
NODE NODE NODE
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
29 OPENSHIFT TECHNICAL OVERVIEW
DESIRED AND CURRENT STATE
NODE NODE NODE
MASTER
API/AUTHENTICATION
DATA STORE
RHEL RHEL RHEL
NODE NODE NODE
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL
PHYSICAL
VIRTUALVIRTUAL
PRIVATEPRIVATEPUBLIC PUBLICHYBRID HYBRID
30 OPENSHIFT TECHNICAL OVERVIEW
INTEGRATED CONTAINER REGISTRY
NODE NODE NODE
MASTER
API/AUTHENTICATION
DATA STORE
RHEL RHEL RHEL
NODE NODE NODE REGISTRY
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
31 OPENSHIFT TECHNICAL OVERVIEW
ORCHESTRATION AND SCHEDULING
NODE NODE NODE
MASTER
API/AUTHENTICATION
DATA STORE
RHEL RHEL RHEL
SCHEDULER
NODE NODE NODE REGISTRY
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
32 OPENSHIFT TECHNICAL OVERVIEW
PLACEMENT BY POLICY
NODE NODE NODE
MASTER
C Cc
API/AUTHENTICATION
C C
DATA STORE
RHEL RHEL RHEL
SCHEDULER
NODE NODE NODE REGISTRY
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
33 OPENSHIFT TECHNICAL OVERVIEW
AUTOSCALING PODS
NODE NODE NODE
MASTER
C Cc
API/AUTHENTICATION
C C
DATA STORE
RHEL RHEL RHEL
SCHEDULER
NODE NODE NODE REGISTRY
HEALTH/SCALING
RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
34 OPENSHIFT TECHNICAL OVERVIEW
SERVICE DISCOVERY
SERVICE LAYER
NODE NODE NODE
MASTER
C Cc
API/AUTHENTICATION
C C C
DATA STORE
RHEL RHEL RHEL
SCHEDULER
NODE NODE NODE REGISTRY
HEALTH/SCALING C C C C
RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
35 OPENSHIFT TECHNICAL OVERVIEW
PERSISTENT DATA IN CONTAINERS
SERVICE LAYER
NODE NODE NODE PERSISTENT
MASTER STORAGE
C Cc
API/AUTHENTICATION
C C C
DATA STORE
RHEL RHEL RHEL
SCHEDULER
NODE NODE NODE REGISTRY
HEALTH/SCALING C C C C
RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
36 OPENSHIFT TECHNICAL OVERVIEW
ROUTING AND LOAD-BALANCING
ROUTING LAYER
SERVICE LAYER
NODE NODE NODE PERSISTENT
MASTER STORAGE
C Cc
API/AUTHENTICATION
C C C
DATA STORE
RHEL RHEL RHEL
SCHEDULER
NODE NODE NODE REGISTRY
HEALTH/SCALING C C C C
RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
37 OPENSHIFT TECHNICAL OVERVIEW
ACCESS VIA WEB, CLI, IDE AND API
ROUTING LAYER
SERVICE LAYER
NODE NODE NODE PERSISTENT
SCM
MASTER STORAGE
(GIT)
C Cc
API/AUTHENTICATION
C C C
CI/CD DATA STORE
RHEL RHEL RHEL
SCHEDULER
NODE NODE NODE REGISTRY
EXISTING HEALTH/SCALING C C C C
AUTOMATION
TOOLSETS
RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL
PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID
38 OPENSHIFT TECHNICAL OVERVIEW
OPENSHIFT CONTAINER PLATFORM
ANY CONTAINER CONTAINER CONTAINER CONTAINER CONTAINER CONTAINER
SELF-SERVICE
OPENSHIFT SERVICES SERVICE CATALOG
OPENSHIFT BUILDS OPENSHIFT DEPLOYMENTS
APPLICATION LIFECYCLE AUTOMATION
ORCHESTRATION CLUSTER SERVICES
SECURITY TELEMETRY STORAGE NETWORK REGISTRY
PACKAGING FORMAT
RED HAT ENTERPRISE LINUX RHEL ATOMIC HOST
AWS provides
the foundation
ANY AWS
INFRASTRUCTURE
39
AWS INTEGRATION AND
DEPLOYMENT OPTIONS
AWS SERVICE BROKER
utilizing the
41 GENERAL DISTRIBUTION
INTEGRATION WITH AWS OPEN SERVICE BROKER
Red Hat OpenShift users are able to
seamlessly configure, deploy, and scale
AWS services like Amazon RDS, Amazon
Aurora, Amazon Athena, Amazon Route
53, and AWS Elastic Load Balancing
directly within the Red Hat OpenShift
console.
42 GENERAL DISTRIBUTION
Amazon Amazon
AWS KMS Amazon RDS RDS
Lex Postgres MariaDB
Amazon Amazon Amazon Amazon
S3 DynamoDB EMR Kinesis
Amazon Amazon Amazon Amazon Amazon Amazon Amazon
Amazon
SQS SNS Athena Redshift Route 53 Polly Rekognition
RDS
MySql
18 Supported AWS Services
WHAT DOES THIS MEAN FOR YOU?
Integration into AWS Global Footprint Security Partner Ecosystem
services
45 GENERAL DISTRIBUTION
DEPLOYING OPENSHIFT ON AWS
QuickStart available that will configure a
VPC that spans 3 availability zones with
private and public subnets in each zone
as well as deploying Master,
Infrastructure, and Application OCP
nodes in each availability zone.
https://aws.amazon.com/quickstart/archit
ecture/openshift/
46 GENERAL DISTRIBUTION
WRAP-UP AND Q&A
Where to go from here
RED HAT/AWS OPENSHIFT POC PROGRAM
Interested in running a POC with OCP deployed on AWS?
Amazon is providing funding for qualified OpenShift
customers.
If you’re interested, chat with us after the lab today!
Contact
[email protected] and/or AWS-
[email protected] for more information
49 GENERAL DISTRIBUTION
FOLLOW UP REFERENCES
TAKE OUR WORKSHOP SURVEY
In order to improve our workshop experience, please send us your feedback by taking this short survey.
REQUEST AWS POC CREDITS
If you're interested in receiving AWS credits to run a POC, please email [email protected] for more
information.
RUN THE OPENSHIFT QUICK START ON AWS
This Quick Start sets up a cloud architecture and deploys Red Hat OpenShift Container Platform on AWS.
This deployment also includes AWS Service Broker, which provides direct access to AWS services on the
Red Hat OpenShift Container Platform.
50 GENERAL DISTRIBUTION
OTHER RESOURCES
● AWS Broker
○ Docs - https://bit.ly/2jIm0zO
○ Getting Started Guide - https://bit.ly/2I18UMw
○ AWS service APBs on GitHub - https://bit.ly/2JN802G
○ AWS QuickStart (free credits!) - https://amzn.to/2x6m1ph
● Automation Broker (base project)
○ Home: http://automationbroker.io/
○ YouTube Channel: https://bit.ly/2w704aD
○ Freenode IRC: #asbroker
51
THANK YOU
plus.google.com/+RedHat facebook.com/redhatinc
linkedin.com/company/red-hat twitter.com/RedHatNews
youtube.com/user/RedHatVideos
