OpenShift Commons Briefing. Kubernetes Service Catalog 0.1.0

Transcription

1 OpenShift Commons Briefing Kubernetes Service Catalog Paul Morie Principal Software Engineer November 1, 2017

2 Agenda 2 Open Service API Overview Service Catalog API Concepts Service Catalog in OpenShift 3.7

3 Open Service Broker API Overview

4 Users and Applications need access to services and resources 4

5 Typical Workflow 5 END USER REQUESTS RESOURCES RESOURCES ALLOCATED DETAILS PROVIDED TO END USER Help desk ticket or process initiated Resources provisioned based on the request Information on how to make use of the service (connection string, credentials)

6 A Centralized Location for Services 6 The service catalog provides a central place for consuming services

7 Open Service Broker API Defines an HTTP interface between a platform and entities that provide a set of services (service brokers) A service broker is the component of the service that implements the Open Service Broker API 7

8 Open Service Broker API The Open Service Broker API defines the interaction between the catalog and a broker User Service Catalog Brokers 8

9 Contributing Members Browse the specification 9

10 10 Successor to the Cloud Foundry Service Broker API Existing ecosystem provided along with the API History September Working group formed June v2.12 released Context profile for non-cf platforms September v2.13 released Parameter schemas Originating ID Auth flavors

11 History of the Open Service Broker API - V1 open sourced by VMWare - Asynchronous provisioning implemented - Begin decoupling from CF - Parameter schemas - Originating user identity - Allow new auth types - 5 fixed services MySQL, PostgreSQL, RabbitMQ, MongoDB, Redis V2 released - Clean abstraction between platform and service implementation Open Service Broker API specification released 2017

12 Kubernetes Service Catalog 12 Integration between Kubernetes and brokers implementing the OSB API Timeline September Special Interest Group (SIG) formed October Incubator Repository Created March Alpha (0.0.1) released October Beta (0.1.0) released Primary Contributors Red Hat, Google, Atlassian, Microsoft (Formerly Deis), IBM

13 Kubernetes Service Catalog: Alpha to Beta 13 New features: Token-based auth and TLS support for communication with broker Support for originating identity of user to broker Service instance plan and parameter updates API Changes: Works with Kubernetes API aggregator Significant refinement of API resources re: the Kubernetes way Resource status has detailed information about completed and in-progress operations Improved error handling: Correctly handle operations that time out or fail Correctly handle corner cases like deleting resource while operation in progress

14 Service Catalog API Concepts

15 OSB Broker Operations Brokers implement the following operations 15 Catalog Management List of services offered Provision Allocation of new resources Bind Create resources to allow applications to communicate with the provisioned resource Unbind Removal of resources created by the binding action Deprovision Removal of resources created by the provisioning action

16 Kubernetes Service Catalog Concepts 16 Service Broker - Manages a set of capabilities (Services) Service Class - A capability managed by a service broker Example: Database as a Service Service Plan - A specific offering of a service Example: Free tier, Medium Tier ($5.99/mo) Service Instance - An instantiation of a particular service s capability Example: My database Service Binding - Relationship between a service instance and an application Example: Credentials created in a database for a consuming application Application - Code that will access or consume a service Example: Web application requiring database storage

17 Kubernetes Architecture: Leading the Way Core components ensure the operation and stability of the platform 17 KUBERNETES API KUBERNETES CONTROLLER Exposes REST operations and exposes the shared state of the cluster to the backend data store (etcd) Watches the shared state of the cluster and attempts to move the current state towards the desired state

18 Service Catalog Core Architecture 18

19 Kubernetes Service Catalog API The service-catalog API has 5 resources that closely model the OSB API concepts ClusterServiceBroker 19 ClusterServiceClass ClusterServicePlan ServiceInstance ServiceBinding

20 ClusterServiceBroker apiversion: servicecatalog.k8s.io/v1beta1 kind: ClusterServiceBroker metadata: name: test-broker spec: url: (1) authinfo: Bearer: (2) secretref: name: test-broker-token namespace: test-broker-ns 20 Represents a particular broker that the service-catalog should show services and plans from Provides an endpoint to query for available services Provides the auth token to use when communicating with the broker

21 Adding a Broker to the Platform 21 Provides a set of capabilities that can be consumed by end users ClusterServiceBroker resource typically created by cluster operators Once resource created, broker is queried for list of available services ClusterServiceClass and ClusterServicePlan resources created on the platform corresponding to the broker s catalog payload

22 Adding a Broker to the Catalog 22

23 ClusterServiceClass apiversion: servicecatalog.k8s.io/v1beta1 kind: ClusterServiceClass metadata: name: 4f6e6cf6-ffdd-425f-a2c7-3c9258ad2468 spec: bindable: true clusterservicebrokername: ups-broker description: A user provided service externalid: 4f6e6cf6-ffdd-425f-a2c7-3c9258ad2468 (1) externalname: user-provided-service (2) planupdatable: false (3) status: removedfrombrokercatalog: false 23 Represents an offering in the Service Catalog OSB ID of the service OSB name of the service Whether instances of this service can change plans

24 ClusterServicePlan Represents a plan of a ClusterServiceClass apiversion: servicecatalog.k8s.io/v1beta1 kind: ClusterServicePlan metadata: name: ea2-467b-af93-ac9694d96d52 spec: clusterservicebrokername: ups-broker clusterserviceclassref: name: 4f6e6cf6-ffdd-425f-a2c7-3c9258ad2468 description: Sample plan description externalid: ea2-467b-af93-ac9694d96d52 (1) externalname: default (2) free: true (3) status: removedfrombrokercatalog: false OSB ID of the plan OSB name of the plan Whether there is a monetary cost for this plan

25 ServiceInstance apiversion: servicecatalog.k8s.io/v1beta1 kind: ServiceInstance metadata: name: ups-instance namespace: test-ns spec: clusterserviceclassexternalname: user-provided-service clusterserviceclassref: name: 4f6e6cf6-ffdd-425f-a2c7-3c9258ad2468 clusterserviceplanexternalname: default clusterserviceplanref: name: ea2-467b-af93-ac9694d96d52 externalid: 10ca b5d-b f191fa parameters: credentials: param-1: value-1 param-2: value-2 updaterequests: 0 25 Represents intent to provision a ServiceClass Namespace scoped User specifies human-readable names of service and plan Optional list of parameters

26 Requesting an Instance 26 A request for new resources based on a ClusterServiceClass and ClusterServicePlan by the consumer Creation of an ServiceInstance against the API Can provide a set of parameters to fine tune the request Service Catalog Controller recognizes new Instance object created Generates a GUID (ExternalID) for use for future request as instance_id Invokes provision API against the targeted broker to allocate new resources

27 Request an Instance 27

28 What about Long Running Requests? Provisioning an instance may take time to complete 28

29 Asynchronous Operations 29

30 ServiceBinding apiversion: servicecatalog.k8s.io/v1beta1 kind: ServiceBinding metadata: name: ups-binding namespace: test-ns spec: externalid: a8bb795a-711d-4854-adbb f9 instanceref: name: ups-instance secretname: ups-binding Relationship between an application and a ServiceInstance Namespace scoped Reference to the instance Secret created containing the details of the service for consumption by application Optional list of parameters

31 Binding an Application to A Service 31 Creation of a ServiceBinding against the API References the ServiceInstance to bind against Name of the secret that should be created containing credentials Service Catalog controller recognizes new Binding object created Invokes bind operation against broker Passes in any additional parameters Secret created in Kubernetes API based on response returned from broker Application can use secret to consume service

32 Binding 32

33 Resource Removal Resources and their associated provisioned components can be removed when they are no longer needed 33 Initiated by deletion of API objects Can trigger operations to be performed from the broker based on resource removed Unbind Deprovision

34 Unbinding Deletion of resources associated with the binding operation 34 Secrets are a common example of a resource that would be removed Triggered by the deletion of the ServiceBinding API object Controller invokes unbind operation on broker with instance and binding id

35 Deprovisioning Removal of the provisioned instance 35 Triggered by the deletion of the ServiceInstance API object Controller invokes deprovision operation on broker with the associated instance id

36 Removing Catalog Items Brokers and the Services they offer can also be removed to clean up any remaining resources 36 Triggered by the deletion of the ClusterServiceBroker API object ClusterServiceClass and ClusterServicePlan associated with the deleted broker are also removed

37 Service Catalog in OpenShift 3.7

38 Service Broker Implementations TEMPLATE SERVICE BROKER Application provisioning using OpenShift templates ANSIBLE SERVICE BROKER Leverages Ansible Playbook Bundles (APB) to automate complex services ENMASSE SERVICE BROKER Provision messaging services 38

39 OpenShift: Landing Page 39

40 OpenShift: Provisioning Services 40

41 OpenShift: Provisioning Services 41

42 OpenShift: Provisioning Services 42

43 OpenShift: Provisioning Services 43

44 OpenShift: Provisioning Services 44

45 Service Broker Development Open Service Broker SDK Skeleton project for creating new service brokers Written in Golang Boilerplate code for each of the key Open Service Broker API methods 45

46 Resources Open Service Broker API Kubernetes Service Catalog Source Code Kubernetes SIG Service Catalog 46

47 Components Available in OpenShift Catalog infrastructure API Server Controller manager Brokers Template Service Broker Ansible Service Broker Development Tooling oc cluster up --service-catalog

48 THANK YOU plus.google.com/+redhat facebook.com/redhatinc linkedin.com/company/red-hat twitter.com/redhatnews youtube.com/user/redhatvideos