On-premise cloud with aKubernetes-native infrastructure

Sahina BoseManager, Software EngineeringRed Hat

ON-PREMISE I.T. AND APP DEV CHALLENGES

SLOW ANDREACTIVE

COMPLEX LEGACY

OPERATIONS

REACTIVE SECURITY

PEOPLE & PROCESS

HIGH COSTS

HOW DO I.T. AND DEVELOPERS MOVE FORWARD?

Build a DevOps culture

Move to cloud-native app

dev

Operationalize a secure,

hybrid cloud

Enjoy simplicity and agility of public cloud in an on-prem environment

Plan for growth in container adoption while still running VMs

Create a consistent experience across public and on-prem

Gives developers the freedom to innovate faster across on-premise and public clouds

KUBERNETES POWERED OPEN HYBRID CLOUD

PHYSICAL

APP APP APP APP

VIRTUALPUBLICCLOUD

VM CC C

FUNCTIONAL ARCHITECTURE

Kubernetes Container Orchestration (Apps & Infrastructure Lifecycle Management)

Linux Container Host (Immutable, Lightweight)

Soft

war

e De

fined

Sec

urity

Software Defined Compute

Software Defined Networking

Software Defined Storage

Automation

Container Registry

App & Infrastructure Services

DNS, Load Balancing

Service Catalog

Identity & Access

Management

Monitoring

Cost Management

BARE METAL VIRTUAL PRIVATE CLOUD PUBLIC CLOUDS

Containers | VMs | Serverless Functions

RED HAT MAKES OPEN HYBRID CLOUD REAL

VIRTUAL

Containers | VMs | Serverless Functions

BARE METAL PRIVATE CLOUD PUBLIC CLOUDS

KUBERNETES-NATIVE INFRASTRUCTURE

BARE METAL VIRTUAL PRIVATE CLOUD PUBLIC CLOUDSVIRTUAL

Containers | VMs | Serverless Functions

BARE METAL PRIVATE CLOUD PUBLIC CLOUDS

UNDER THE HOOD

Kubernetes Operators Framework

Rook KubeVirt Metal3

Kubernetes

OPERATOR FRAMEWORK

Operators codify operational knowledge and workflows to automate lifecycle management of containerized applications with Kubernetes

SDK LIFECYCLE MANAGEMENT METERING

METAL3

Metal³ (http://metal3.io/) project:● Pronounced: Metal Kubed● Enables bare metal host management for

Kubernetes.

This means Metal3:● Runs on Kubernetes.● Is managed through Kubernetes interfaces.

MACHINE CONTROLLER

BARE-METAL ACTUATOR

BARE METAL OPERATOR

Bare Metal Management PodsBare Metal Management PodsBARE-METAL MANAGEMENT PODS

CONTAINER-NATIVE VIRTUALIZATION

Add virtual machines to your OpenShift projects as easily as application containers.Easily leverage existing VM-based services from your new workloads!

CONTAINER

KUBEVIRTwww.kubevirt.io

VIRTUAL MACHINE

RHEL KERNEL

PHYSICAL MACHINE

CONTAINER

Virtual machines are able to run side by side directly on the same OpenShift nodes as application containers.

APP

QEMU

KVM

LIBVIRT

RHEL KERNEL

PHYSICAL MACHINE

KVM

VIRTUAL MACHINE

LIBVIRT

QEMU QEMU

VIRTUAL MACHINE

Storage Infrastructure

CONTAINERS HYBRID CLOUDBARE METAL LEGACY

STORAGE

RED HAT OPENSHIFT CONTAINER STORAGE

VIRTUAL MACHINES

ANY CLOUD. ANY APP. NO LOCK IN.

Application portability through consistent consumption, management, and operationsOPENSHIFT CONTAINER STORAGE

● Rook project (https://rook.io/):○ Cloud-native Storage orchestrator○ Automates deployment and life cycle management

of storage■ Bootstrapping■ Configuration, provisioning, scaling, upgrading,

migration, disaster recovery, monitoring, and resource management

ROOK

Rook Operators

Kubernetes API

New Objects:Storage ClustersStorage PoolsObject StoreFile Store

Objects:DeploymentsDaemonSetsPodsServicesStorageClass / PV / PVCClusterRoleNamespaceConfig Maps

Kubelet

Daemons

kubectl

Management

Rook Agent(flex)

Ceph CSI

Driver

Client Pods

(RBD/CephFS Clients)

Attach/Mount

ROOK ARCHITECTURE

CEPH ON OPENSHIFT WITH ROOK

Summary

KUBERNETES NATIVE INFRASTRUCTURE

INFRASTRUCTURE VIRTUALMACHINES CONTAINERS