OpenStack Summit Berlin – November 14, 2018 Stacks on Stacks on Stacks OpenShift, OpenStack, & Why They’re Best Friends T. Nichole Williams OpenStack Summit Berlin – November 14, 2018 treva@linuxacademy.com

About T. Nichole Williams Technical Evangelist | Linux Academy Based in Texas (howdy y’all) OpenStack ATC (Magnum, RDO) https://academybytes.com OGtrilliams

WHAT IS OPENSTACK? Open source IaaS software Provides an easy-to-use virtualization layer between server hardware & you API or Dashboard management Built-in integration with popular technologies (including OpenShift :D) A set of open source software tools for building & managing cloud infrastructure including, but not limited to - virtual servers (nova) - identity (keystone) - orchestration (heat) - networking (neutron) - images (glance) - bare metal (ironic) - object storage (swift) - block storage (cinder) openstack software aids in creation of a custom public/private/hybrid cloud solution tailored to your business needs, supported by a community of thousands of contributors.

Kubernetes, but Enterprise WHAT IS OPENSHIFT? OpenShift Container Platform is a platform as a service (PaaS) offering from Red Hat that brings together Docker and Kubernetes, and provides an API to manage these services. Openshift has a microservices-based architecture of smaller, decoupled units that work together, running on top of a kubernetes cluster. While Docker provides the abstraction for packaging & creating linux-based, lightweight container images, kubernetes provides the cluster management & orchestrates containers on multiple hosts. OpenShift container platform adds: - Source code management, builds, and deployments for developers - Managing and promoting images at scale as they flow through your system - Application management at scale - Team and user tracking for organizing a large developer organization Data about the objects is stored in etcd, a reliable clustered key-value store. Those services are broken down by function:* REST APIs, which expose each of the core objects, and Controllers, which read those APIs, apply changes to other objects, & report status or write back to the object. TL;dr - kubernetes, but enterprise

WHY OPENSHIFT ON OPENSTACK? 1 Containers are awesome – but so are VMs 2 Enterprise environments benefit from having multiple options 3 OpenStack IaaS is (arguably) the best infrastructure option for OpenShift PaaS Container registry backed by Swift PersistentVolumes backed by Cinder Simple, out-of-the-box setup Enterprise workloads need versatility – not all apps can run on a container, just like not all apps require a full-on VM Security – running openshift on Openstack VMs gives openshift pods vm namespace isolation which – as of yet – is not quite ready for primetime/production environments (kata containers) Why packstack over TripleO? tripleO requires Ironic to configure nodes == LOTS of HDD, RAM, CPU packstack makes it easy to set up an all-in-one or multi-node OpenStack cloud

Public network Bastion Master LB Infra LB router Master1 node0 node1 infra0 registry Container traffic Cinder storage public access to our cluster will route through either the bastion, or through load balancers as shown in the diagram, while admin access will route through a private tenant network that will be created by our playbooks. Authentication will be handled with SSH keys that are automatically injected from bastion to all of our OpenShift nodes. The docker registry & openshift router is hosted on the `infra0` node, & while node0 & node1 are hosts for pods which will be administered through the openshift Master.

EASY OPENSHIFT SETUP Create bastion Create OpenShift “golden image” Use golden image to launch OpenShift cluster - master(s), node(s), infra… Launch openshift-ansible installer from bastion Profit! Head over to the Red Hat booth after the talk for a demo! If you’d like to see a demo, head on over to the Red Hat booth after this presentation where I’ll be showing a full install of OpenShift v3.9 on OpenStack Queens – brought to you by PackStack. This is the part where I’d throw up an RDO gangsign but they don’t have one as far as I know, so just imagine that I did one just now.

Q&A Twitter: @OGtrilliams LinkedIn: in/trilliams GitHub: ogtrilliams #Freenode: PagliaccisCloud https://linuxacademy.com/ Thanks for coming, & if you’re into making new internet friends feel free to add me on the twitters or linkedin, or follow me on github. To learn more on OpenShift, OpenStack, or the combination of the two, head on over to Linux academy for hands-on, online training!