OpenShift v4 overview and update

1. Red Hat OpenShift 4
Robert Bohne
SR. SPECIALIST SOLUTION ARCHITECT | OPENSHIFT
Twitter: @RobertBohne
1

2. Trusted enterprise Kubernetes
● Trusted Host, Content, Platform
● Full Stack Automated Install
● Over the Air Updates & Day 2 Mgt
A cloud-like experience, everywhere
● Hybrid, Multi-Cluster Management
● Operator Framework
● Operator Hub & Certified ISVs
Empowering developers to innovate
● Developer Tools
● Cloud-Native CI/CD
● Serverless
● Service Mesh
2

3. The New Platform Boundary
RED HAT OPENSHIFT 4
3
AUTOMATED OPERATIONS
KUBERNETES
RHEL | RHEL CoreOS
OpenShift & Kubernetes
certificates & security settings
container runtime config
allowed maintenance windows
software defined networking
kernel modules
device drivers
network interfaces
security groups
Nodes & Operating System
OpenShift 4 is aware of the entire infrastructure and
brings the Operating System under management

4. Installation Experiences
RED HAT OPENSHIFT 4
4
Full Stack Automated
Simplified opinionated “Best
Practices” for cluster provisioning
Fully automated installation and
updates including host container
OS.
Pre-existing
Infrastructure
Customer managed resources &
infrastructure provisioning
Plug into existing DNS and security
boundaries
OPENSHIFT CONTAINER PLATFORM OPENSHIFT DEDICATED
Hosted By Red Hat
Get a powerful cluster with no
maintenance required
Managed by Red Hat engineers
Free your team from the distraction
of operations

5. Demo
$ ./openshift-install --dir ./demo create cluster
? SSH Public Key /Users/demo/.ssh/id_rsa.pub
? Platform aws
? Region us-west-2
? Base Domain example.com
? Cluster Name demo
? Pull Secret [? for help]
*************************************************************
INFO Creating cluster...
INFO Waiting up to 30m0s for the Kubernetes API...
INFO API v1.11.0+c69f926354 up
INFO Waiting up to 30m0s for the bootstrap-complete event...
INFO Destroying the bootstrap resources...
INFO Waiting up to 10m0s for the openshift-console route to be created...
INFO Install complete!
INFO Run 'export KUBECONFIG=<your working directory>/auth/kubeconfig' to
manage the cluster with 'oc', the OpenShift CLI.
INFO The cluster is ready when 'oc login -u kubeadmin -p <provided>'
succeeds (wait a few minutes).
INFO Access the OpenShift web-console here:
https://console-openshift-console.apps.demo.example.com
INFO Login to the console with user: kubeadmin, password: <provided>

6. Provider Roadmap
RED HAT OPENSHIFT 4
6
4.1*
4.2
4.3 (tentative)
Full Stack Automation Pre-existing Infrastructure
Bare Metal
Bare Metal
On RHHI**
* Requires Internet connectivity; support for cluster proxy &
disconnected installation/updating not planned until 4.2
** On qualified hardware stack

7. Full Stack Automated Deployments
OPENSHIFT PLATFORM
Generally AvailableProduct Manager: Katherine Dubé
Day 1: openshift-install - Day 2: Operators
openshift-install deployed
Control Plane Worker Nodes
User managed
Operator managed
Cloud Resources
RH CoreOS
OCP Cluster
OCP Cluster Resources
RH CoreOSRHEL CoreOS
Cloud Resources
RH CoreOSRH CoreOSRHEL CoreOS

8. Full Stack Automated Deployments
OPENSHIFT PLATFORM
Generally AvailableProduct Manager: Katherine Dubé
Simplified Cluster Creation
Designed to easily provision a “best practices” OpenShift
cluster
● New CLI-based installer with interactive guided workflow that
allows for customization at each step
● Installer takes care of provisioning the underlying
Infrastructure significantly reducing deployment complexity
● Leverages RHEL CoreOS for all node types enabling full stack
automation of installation and updates of both platform and
host OS content
Faster Install
The installer typically finishes within 30 minutes
● Only minimal user input needed with all non-essential install
config options now handled by component operator CRD’s
● 4.1 provides support for AWS deployments with additional
provider support planned in future releases
● See the OpenShift documentation for more details
$ ./openshift-install --dir ./demo create cluster
? SSH Public Key /Users/demo/.ssh/id_rsa.pub
? Platform aws
? Region us-west-2
? Base Domain example.com
? Cluster Name demo
? Pull Secret [? for help]
*************************************************************
INFO Creating cluster...
INFO Waiting up to 30m0s for the Kubernetes API...
INFO API v1.11.0+c69f926354 up
INFO Waiting up to 30m0s for the bootstrap-complete event...
INFO Destroying the bootstrap resources...
INFO Waiting up to 10m0s for the openshift-console route to be created...
INFO Install complete!
INFO Run 'export KUBECONFIG=<your working directory>/auth/kubeconfig' to
manage the cluster with 'oc', the OpenShift CLI.
INFO The cluster is ready when 'oc login -u kubeadmin -p <provided>'
succeeds (wait a few minutes).
INFO Access the OpenShift web-console here:
https://console-openshift-console.apps.demo.example.com
INFO Login to the console with user: kubeadmin, password: <provided>

9. Deploying to Pre-existing Infrastructure
OPENSHIFT PLATFORM
Generally AvailableProduct Manager: Katherine Dubé
Day 1: openshift-install - Day 2: Operators + Customer Managed Infra & Workers
openshift-install deployed
Cloud Resources
RH CoreOS
OCP Cluster
OCP Cluster Resources
Control Plane
Cloud Resources
Worker Nodes
Customer deployed
User managed
Operator managed
Note: Control plane nodes
must run RHEL CoreOS!
RH CoreOSRHEL CoreOS RHEL 7
RHEL
CoreOS

10. Deploying to Pre-existing Infrastructure
OPENSHIFT PLATFORM
Generally AvailableProduct Manager: Katherine Dubé
Customized OpenShift Deployments
Enables OpenShift to be deployed to user managed resources and
pre-existing infrastructure.
● Customers are responsible for provisioning all infrastructure
objects including networks, load balancers, DNS, hardware/VMs
and performing host OS installation
● Deployments can be performed both on-premise and to the
public cloud
● OpenShift installer handles generating cluster assets (such as
node ignition configs and kubeconfig) and aids with cluster
bring-up by monitoring for bootstrap-complete and
cluster-ready events
● While RHEL CoreOS is mandatory for the control plane, either
RHEL CoreOS or RHEL 7 can be used for the worker/infra nodes
● Node auto-scaling can be setup for providers with OpenShift
Machine API support
● See the OpenShift documentation for more details
$ cat ./demo/install-config.yaml
apiVersion: v1
baseDomain: example.com
compute:
- name: worker
replicas: 0
controlPlane:
name: master
...
$ ./openshift-install --dir ./demo create ignition-config
INFO Consuming "Install Config" from target directory
$ ./openshift-install --dir ./demo wait-for bootstrap-complete
INFO Waiting up to 30m0s for the Kubernetes API at
https://api.demo.example.com:6443...
INFO API v1.11.0+c69f926354 up
INFO Waiting up to 30m0s for the bootstrap-complete event...
$ ./openshift-install --dir ./demo wait-for cluster-ready
INFO Waiting up to 30m0s for the cluster at
https://api.demo.example.com:6443 to initialize...
INFO Install complete!

11. Red Hat Enterprise Linux CoreOS
11
Immutable foundation for
OpenShift clusters
Ignition-based Metal and
Cloud host configuration
Over-the-air automated
updates
Decreased attack surface
Optimized for running
containers
Minimal Linux distribution
RED HAT OPENSHIFT 4

12. Over-the-Air Updates
12
● Retrieves list of available updates
● Admin selects the target version
● OpenShift is updated over the air
● Auto-update support
RED HAT OPENSHIFT 4

13. Kubernetes Machine API Operator
Using Kubernetes To Provision Kubernetes Clusters
RED HAT OPENSHIFT 4
13

14. Unified Hybrid Cloud
RED HAT OPENSHIFT 4
14
● Multi-cluster management
○ New clusters on AWS, Azure, GCP, vSphere,
OpenStack, and bare metal
○ Register existing clusters
○ Including OpenShift Dedicated
● Management operations
○ Install new clusters
○ View all registered clusters
○ Update clusters
cloud.redhat.com
AWS GCP Azure On-Prem

15. Trusted enterprise Kubernetes
● Trusted Host, Content, Platform
● Full Stack Automated Install
● Over the Air Updates & Day 2 Mgt
A cloud-like experience, everywhere
● Hybrid, Multi-Cluster Management
● Operator Framework
● Operator Hub & Certified ISVs
Empowering developers to innovate
● Developer Tools
● Cloud-Native CI/CD
● Serverless
● Service Mesh
15

16. Evolution of Self-Service Backend Workloads
RED HAT OPENSHIFT 4
16
● Virtualized
● External to the cluster
● Cloud storage ready
● Replicated
● Backup
● Automated updates
● Containerized
● Container storage ready
● Replicated
● Backup
● Automated updates
● Enhanced observability
● Customization
● Local development
● Fully Open Source
● Any Kubernetes
● Certified on OpenShift
● Containerized

17. OperatorHub.io Ecosystem
RED HAT OPENSHIFT 4
17
The public registry for finding
Kubernetes Operator backed
services

18. OperatorHub in OpenShift
RED HAT OPENSHIFT 4
18
The embedded registry for
Community and Certified
Operators from Red Hat and
Partners, tested and verified on
OpenShift 4

19. Operator Framework
RED HAT OPENSHIFT 4
19
Operators codify operational
knowledge and workflows to
automate life cycle
management of containerized
applications with Kubernetes
SDK
LIFE CYCLE
MANAGEMENT
METERING

20. Operator Deployment
Custom Resource
Definitions
RBAC
API Dependencies
Update Path
Metadata
Operators as a First-Class Citizen
RED HAT OPENSHIFT 4
20
YourOperator v1.1.2
Bundle
OPERATOR
LIFECYCLE MANAGER
Deployment
Role
ClusterRole
RoleBinding
ClusterRoleBinding
ServiceAccount
CustomResourceDefinitio
n

21. Operator Lifecycle Management
RED HAT OPENSHIFT 4
21
OPERATOR
LIFECYCLE MANAGER
YourOperator v1.1.2
YourOperator v1.1.3
YourOperator v1.2.0
YourOperator v1.2.2
Subscription for
YourOperator
Time
VersionOperator Catalog

22. Services ready for your developers
BROAD ECOSYSTEM OF WORKLOADS
Generally Available
New Developer Catalog aggregates apps
● Blended view of Operators, Templates and Broker
backed services
● Operators can expose multiple CRDs. Example:
○ MongoDBReplicaSet
○ MongoDBSharded Cluster
○ MongoDBStandalone
● Developers can’t see any of the admin screens
Self-service is key for productivity
● Developers with access can change settings and test out
new services at any time

23. Trusted enterprise Kubernetes
● Trusted Host, Content, Platform
● Full Stack Automated Install
● Over the Air Updates & Day 2 Mgt
A cloud-like experience, everywhere
● Hybrid, Multi-Cluster Management
● Operator Framework
● Operator Hub & Certified ISVs
Empowering developers to innovate
● Developer Tools
● Cloud-Native CI/CD
● Serverless
● Service Mesh
23

24. Sync local changes to
running pods on OpenShift
A developer-focused command-line tool for rapid
development iterations on OpenShift
24
RED HAT OPENSHIFT 4
$ odo push $ odo watch
Build and deploy app from
current directory
$ odo create
Create app from
supported runtimes

25. Developer Web Console
25
RED HAT OPENSHIFT 4

26. Cloud-native CI/CD with OpenShift Pipelines
RED HAT OPENSHIFT 4
26
● Based on Tekton Pipelines
● Built for cloud-native apps
● Containers as building blocks
● Deploy to multiple platforms
● Available in OperatorHub

27. OpenShift Serverless
RED HAT OPENSHIFT 4
27
● Familiar to Kubernetes users. Native
● Scale to 0 or to N based on demand
● Applications, functions and containers
● Powerful eventing model
● Multiple event sources
● No vendor lock in
● Available in OperatorHub

28. OpenShift Service Mesh
RED HAT OPENSHIFT 4
28
● A dedicated network for service to
service communications
● Observability and distributed tracing
● Policy-driven security
● Routing rules & chaos engineering
● Powerful visualization & monitoring
● Available in OperatorHub

29. CodeReady Workspaces
RED HAT OPENSHIFT 4
29
● Web-based Eclipse Che IDE
● Developer workspaces in pods
● Bundled development stacks
● Available in OperatorHub

30. Q4 CY2019
OpenShift 4.3
Q2 CY2019
OpenShift 4.1
Q3 CY2019
OpenShift 4.2
30
2019 RoadmapPLATFORMAPPDEV
● Serverless w/ Knative Dev Preview
● OpenShift Pipelines (Tekton) Dev Preview
● CodeReady Workspaces
● CodeReady Containers Alpha
● Developer CLI (odo) Beta
● OperatorHub
● Operator Lifecycle Manager
● Service Mesh (~2 month after)
● Kubernetes 1.12 with CRI-O runtime
● RHEL CoreOS, RHEL7
● Automated Installer for AWS
● Pre-existing Infra Installer for Bare Metal,
VMware, AWS
● Automated, one-click updates
● Multus (Kubernetes multi-network)
● Quay v3
HOSTED
● Universal Hybrid Cloud (UHC)
● OCP Cluster Subscription Management
● OpenShift on Azure by MSFT and RHT
● OpenShift Dedicated consumption
pricing
PLATFORMAPPDEV
● Developer Console GA
● Serverless w/ Knative Tech Preview
● OpenShift Pipelines (Tekton) Tech Preview
● CodeReady Containers GA
● Developer CLI (odo) GA
● GPU metering
● OperatorHub Enhancements
● Operator Deployment Field Forms
● Application Binding with Operators
● Application Migration Console
● Kubernetes 1.14 w/ CRI-O runtime
● Disconnected Install and Update
● Automated Installer for Azure, OSP, GCP
● OVN Tech Preview
● FIPS
● Federation Workload API
● Automated App cert rotation
● OpenShift Container Storage 4.2
HOSTED
● UHC Multi-Cluster deployment
● Proactive Support Operator
PLATFORMAPPDEV
● Serverless w/ Knative GA
● OpenShift Pipelines (Tekton) GA
● Metering for Services
● Windows Containers
● Kubernetes 1.15 w/ CRI-O runtime
● Automated Installer for IBM Cloud, Alibaba,
RHV, Bare Metal Hardware Appliance
● Pre-existing Infra Installer for Azure, OSP,
GCP
● OVN GA w/ Windows Networking
Integration
HOSTED
● UHC Subscription Mgmt Consumption
Improvements

31. Demo