OpenShift on AWS “The Big Idea”

Giriraj Rajawat
SSA Openshift
Red Hat SAARC

21 May 2019
 AGENDA

● Introduction & Understanding Containers

● OpenShift Container Platform on AWS
● Look & feel of OCP on AWS
● Q&A

2 GENERAL DISTRIBUTION
Amazon Web Services & OpenShift
Stronger Together
 ● Container Platform by Red Hat
○ Kubernetes orchestration
○ Powerful web UI
○ Developer centric tools
● Runs in ANY environment
● Reliable, scalable cloud computing
● Provides hundreds of web services
● Offerings in 20 geographic regions
● Pay only for what you use

4
INTRODUCTION TO CONTAINERS
 WHAT ARE LINUX CONTAINERS?
“Software packaging concept that typically includes an application and all of its runtime dependencies”

Benefits:
● High quality software releases
● Shorter test cycles
● Easier application management
● Standard format allows for “Life and Shift”

6 GENERAL DISTRIBUTION
 LIGHTWEIGHT VIRTUALIZATION

vs

Containers provide less overhead, faster instantiation, better isolation, and are generally easier to scale

7 GENERAL DISTRIBUTION
BUSINESS VALUE OF DEVOPS
 THE PROBLEM

Applications require
complicated installation and
integration every time they are
deployed leading to
● Slow service delivery
● Reduced service quality
● Frequent down times

9 GENERAL DISTRIBUTION
 THE PROBLEM

DEVELOPERS I.T.
OPERATIONS
10 GENERAL DISTRIBUTION
 THE SOLUTION

Adopting a container strategy

will allow applications to be
easily shared and deployed
● Consistent env and tools
● Predictable building blocks
● Faster deployment

11 GENERAL DISTRIBUTION
 THE SOLUTION

DEVELOPERS I.T.
OPERATIONS
12 GENERAL DISTRIBUTION
 THE SOLUTION

Container

Controlled by
App Developers

Operating System

Controlled by Virtual Machine

IT Operations
Hardware

GENERAL DISTRIBUTION
 DEVOPS WITH CONTAINERS

physical

virtual

private cloud
dev source CI/CD container
repository engine

public cloud

14 GENERAL DISTRIBUTION
OPENSHIFT OVERVIEW AND
ARCHITECTURE REVIEW
 Container Adoption Rate
in Production

35%
Source: RightScale 2017 State of the Cloud Report

16 GENERAL DISTRIBUTION
 Why the Difference?

17 GENERAL DISTRIBUTION
 DEVOPS WITH CONTAINERS

?
18 GENERAL DISTRIBUTION
 DEVOPS WITH CONTAINERS

?
19 GENERAL DISTRIBUTION
 WE NEED MORE THAN JUST CONTAINERS

Scheduling Security
Decide where to deploy containers Control who can do what

Lifecycle and health Scaling

Keep containers running despite failures Scale containers up and down

Discovery Persistence
Find other containers on the network Survive data beyond container lifecycle

Monitoring Aggregation
Visibility into running containers Compose apps from multiple containers

20 GENERAL DISTRIBUTION
 Container application
platform based on Docker
and Kubernetes for building,
distributing and running
containers at scale

21 GENERAL DISTRIBUTION
 Self-Service Standards-based

Multi-language Web-scale

Automation Open Source

Collaboration Enterprise Grade

Multi-tenant Secure

22 OPENSHIFT TECHNICAL OVERVIEW

 TRUE POLYGLOT PLATFORM
.NET Third-party
PHP Python Java NodeJS Perl Ruby Language
Core
Runtimes

MySQL PostgreSQL MongoDB Redis ...and virtually Third-party

Databases CrunchyData
any docker GitLab

Apache
image Third-party
Iron.io
Phusion
HTTP
Server
nginx Varnish
Passenger
Tomcat
out there! App
Runtimes
Couchbase
Sonatype
EnterpriseDB
JBoss
Spring Wildfly JBoss JBoss JBoss Third-party and many more
Vert.x Web Middleware
Boot Swarm EAP A-MQ Fuse
Server

3SCALE
JBoss JBoss JBoss JBoss RH Third-party
API RH SSO Middleware
BRMS BPMS Data Virt Data Grid Mobile
mgmt

23 GENERAL DISTRIBUTION
 YOUR CHOICE OF INFRASTRUCTURE

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

24 OPENSHIFT TECHNICAL OVERVIEW

 NODES RHEL INSTANCES WHERE APPS RUN

NODE NODE NODE

RHEL RHEL RHEL

NODE NODE NODE

RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

25 OPENSHIFT TECHNICAL OVERVIEW

 APPS RUN IN CONTAINERS

NODE NODE NODE

Container
C Cc
Image
C C C

RHEL RHEL RHEL

Container
NODE NODE NODE

C C C C

Pod
C

RHEL RHEL RHEL

26 OPENSHIFT TECHNICAL OVERVIEW

 PODS ARE THE UNIT OF ORCHESTRATION

NODE NODE NODE

C C
c

C C C

RHEL RHEL RHEL

NODE NODE NODE

C C C C

RHEL RHEL RHEL

27 OPENSHIFT TECHNICAL OVERVIEW

 MASTERS ARE THE CONTROL PLANE

NODE NODE NODE

MASTER

RHEL RHEL RHEL

NODE NODE NODE

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

28 OPENSHIFT TECHNICAL OVERVIEW

 API AND AUTHENTICATION

NODE NODE NODE

MASTER

API/AUTHENTICATION

RHEL RHEL RHEL

NODE NODE NODE

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

29 OPENSHIFT TECHNICAL OVERVIEW

 DESIRED AND CURRENT STATE

NODE NODE NODE

MASTER

API/AUTHENTICATION

DATA STORE
RHEL RHEL RHEL

NODE NODE NODE

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL
PHYSICAL
VIRTUALVIRTUAL
PRIVATEPRIVATEPUBLIC PUBLICHYBRID HYBRID

30 OPENSHIFT TECHNICAL OVERVIEW

 INTEGRATED CONTAINER REGISTRY

NODE NODE NODE

MASTER

API/AUTHENTICATION

DATA STORE
RHEL RHEL RHEL

NODE NODE NODE REGISTRY

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

31 OPENSHIFT TECHNICAL OVERVIEW

 ORCHESTRATION AND SCHEDULING

NODE NODE NODE

MASTER

API/AUTHENTICATION

DATA STORE
RHEL RHEL RHEL

SCHEDULER
NODE NODE NODE REGISTRY

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

32 OPENSHIFT TECHNICAL OVERVIEW

 PLACEMENT BY POLICY

NODE NODE NODE

MASTER
C Cc
API/AUTHENTICATION

C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER
NODE NODE NODE REGISTRY

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

33 OPENSHIFT TECHNICAL OVERVIEW

 AUTOSCALING PODS

NODE NODE NODE

MASTER
C Cc
API/AUTHENTICATION

C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER
NODE NODE NODE REGISTRY

HEALTH/SCALING

RED HAT
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

34 OPENSHIFT TECHNICAL OVERVIEW

 SERVICE DISCOVERY

SERVICE LAYER

NODE NODE NODE

MASTER
C Cc
API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER
NODE NODE NODE REGISTRY

HEALTH/SCALING C C C C

RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

35 OPENSHIFT TECHNICAL OVERVIEW

 PERSISTENT DATA IN CONTAINERS

SERVICE LAYER

NODE NODE NODE PERSISTENT

MASTER STORAGE
C Cc
API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER
NODE NODE NODE REGISTRY

HEALTH/SCALING C C C C

RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

36 OPENSHIFT TECHNICAL OVERVIEW

 ROUTING AND LOAD-BALANCING
ROUTING LAYER

SERVICE LAYER

NODE NODE NODE PERSISTENT

MASTER STORAGE
C Cc
API/AUTHENTICATION

C C C
DATA STORE
RHEL RHEL RHEL

SCHEDULER
NODE NODE NODE REGISTRY

HEALTH/SCALING C C C C

RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

37 OPENSHIFT TECHNICAL OVERVIEW

 ACCESS VIA WEB, CLI, IDE AND API
ROUTING LAYER

SERVICE LAYER

NODE NODE NODE PERSISTENT

SCM
MASTER STORAGE
(GIT)
C Cc
API/AUTHENTICATION

C C C
CI/CD DATA STORE
RHEL RHEL RHEL

SCHEDULER
NODE NODE NODE REGISTRY

EXISTING HEALTH/SCALING C C C C
AUTOMATION
TOOLSETS

RED HAT C
ENTERPRISE LINUX
RHEL RHEL RHEL

PHYSICAL VIRTUAL PRIVATE PUBLIC HYBRID

38 OPENSHIFT TECHNICAL OVERVIEW

 OPENSHIFT CONTAINER PLATFORM
ANY CONTAINER CONTAINER CONTAINER CONTAINER CONTAINER CONTAINER

SELF-SERVICE

OPENSHIFT SERVICES SERVICE CATALOG

OPENSHIFT BUILDS OPENSHIFT DEPLOYMENTS

APPLICATION LIFECYCLE AUTOMATION

ORCHESTRATION CLUSTER SERVICES

SECURITY TELEMETRY STORAGE NETWORK REGISTRY

PACKAGING FORMAT

RED HAT ENTERPRISE LINUX RHEL ATOMIC HOST

AWS provides
the foundation
ANY AWS
INFRASTRUCTURE

39
AWS INTEGRATION AND
DEPLOYMENT OPTIONS
 AWS SERVICE BROKER
utilizing the

41 GENERAL DISTRIBUTION
 INTEGRATION WITH AWS OPEN SERVICE BROKER

Red Hat OpenShift users are able to

seamlessly configure, deploy, and scale
AWS services like Amazon RDS, Amazon
Aurora, Amazon Athena, Amazon Route
53, and AWS Elastic Load Balancing
directly within the Red Hat OpenShift
console.

42 GENERAL DISTRIBUTION
 Amazon Amazon
AWS KMS Amazon RDS RDS
Lex Postgres MariaDB

Amazon Amazon Amazon Amazon

S3 DynamoDB EMR Kinesis

Amazon Amazon Amazon Amazon Amazon Amazon Amazon

Amazon
SQS SNS Athena Redshift Route 53 Polly Rekognition
RDS
MySql
18 Supported AWS Services
 WHAT DOES THIS MEAN FOR YOU?

Integration into AWS Global Footprint Security Partner Ecosystem

services

45 GENERAL DISTRIBUTION
 DEPLOYING OPENSHIFT ON AWS

QuickStart available that will configure a

VPC that spans 3 availability zones with
private and public subnets in each zone
as well as deploying Master,
Infrastructure, and Application OCP
nodes in each availability zone.

https://aws.amazon.com/quickstart/archit
ecture/openshift/

46 GENERAL DISTRIBUTION
WRAP-UP AND Q&A
Where to go from here
 RED HAT/AWS OPENSHIFT POC PROGRAM

Interested in running a POC with OCP deployed on AWS?

Amazon is providing funding for qualified OpenShift
customers.

If you’re interested, chat with us after the lab today!

Contact jmanasi@amazon.com and/or AWS-
NA@redhat.com for more information

49 GENERAL DISTRIBUTION
 FOLLOW UP REFERENCES
TAKE OUR WORKSHOP SURVEY

In order to improve our workshop experience, please send us your feedback by taking this short survey.

REQUEST AWS POC CREDITS

If you're interested in receiving AWS credits to run a POC, please email aws-na@redhat.com for more
information.

RUN THE OPENSHIFT QUICK START ON AWS

This Quick Start sets up a cloud architecture and deploys Red Hat OpenShift Container Platform on AWS.
This deployment also includes AWS Service Broker, which provides direct access to AWS services on the
Red Hat OpenShift Container Platform.

50 GENERAL DISTRIBUTION
 OTHER RESOURCES

● AWS Broker
○ Docs - https://bit.ly/2jIm0zO
○ Getting Started Guide - https://bit.ly/2I18UMw
○ AWS service APBs on GitHub - https://bit.ly/2JN802G
○ AWS QuickStart (free credits!) - https://amzn.to/2x6m1ph

● Automation Broker (base project)

○ Home: http://automationbroker.io/
○ YouTube Channel: https://bit.ly/2w704aD
○ Freenode IRC: #asbroker

51
THANK YOU
plus.google.com/+RedHat facebook.com/redhatinc

linkedin.com/company/red-hat twitter.com/RedHatNews

youtube.com/user/RedHatVideos