Docker All The Things

Transcription

1 OpenStack Services Docker All The Things and Kubernetes and Atomic OpenStack Summit Paris,

2 Agenda The Problem Current Solutions Tomorrow s Improvements Demonstration

3 A Thing of Beauty

4 The Reality

5 All Infrastructure Platforms Face This Problem!=

6 All Infrastructure Platforms Face This Problem

7 And Developers Lives Aren t Easy Either Reproducible Environment Separation between Operating System and Application Description of Deployment Pattern w/o lots of code

8 Current Solutions

9 Present Solutions - Build Based + Config Management Inefficient Difficult Workflow State Machine Decision Engine Configuration Management Content Repository OpenStack Service A OpenStack Service B Operating System Operating System Lifecycle Management Tools Bare Metal Bare Metal Workflow State Machine Decision Engine Configuration Management Content Repository OpenStack Service A OpenStack Service B Operating System Lifecycle Management Tools Slow Deployment Workflow State Machine Decision Engine Configuration Management Content Repository Lifecycle Management Tools Bare Metal OpenStack Service A OpenStack Service B Operating System Packages Bare Metal

10 Present Solutions - Image Based + Declarative Image Builder Still Difficult OpenStack Service OpenStack Service OpenStack Service OpenStack Service Deployer Operating System Operating System Image Image Repository Bare Metal Image Builder Expensive (updates) OpenStack Service OpenStack Service OpenStack Service OpenStack Service Deployer Operating System Image Repository Operating System Image Bare Metal

11 Tomorrow s Improvements

12 What If Isolated, lightweight, and portable Pre-integrated Easily describe run-time relationships Run on something thin and easy to update

13 What If Isolated, lightweight, and portable Pre-integrated Easily describe run-time relationships Run on something thin and easy to update

14 What If Isolated, lightweight, and portable Pre-integrated Easily describe run-time relationships Run on something thin and easy to update

15 What If Isolated, lightweight, and portable Pre-integrated Easily describe run-time relationships Run on something thin and easy to update

16 What If Develop locally and run in production with less friction Isolated, lightweight, and portable Pre-integrated Easily describe run-time relationships Run on something thin and easy to update

17 Docker Isolated, Lightweight, and Portable Virtual Machines Linux Guest Linux Guest Application Binaries Libraries Application Binaries Libraries Application Application Application Application s Binaries Libraries Libvirt/KVM Linux Linux Server Server API (Docker) Develop Build Push Enjoy!

18 Kubernetes Scheduling Traffic Minion kubectl (user commands) Docker cadvisor Kubelet Pod Authorization Authentication APIs Scheduling actuator REST (pods, services, rep controllers) Pod Pod Proxy Kubelet info service Minion Docker Scheduler Scheduler Master Components Replication Controller Distributed Watchable Storage cadvisor Kubelet Pod Pod Proxy Pod

19 Kubernetes Scheduling + Easily describe run-time relationships Imperative service mongod start Declarative { "id": "mongodb", "desiredstate": { "manifest": { "version": "v1", "id": "mongodb", "containers": [{ "name": "mongodb", "image": "dockerfile/mongodb", "ports": [{ "containerport": 6379, "hostport": 6379 }] }] } }, "labels": { "name": "mongodb" } chkconfig mongod on mongo --host controller --eval ' db = db.getsiblingdb("ceilometer"); db.adduser({user: "ceilometer", pwd: "mypassword", roles: [ "readwrite", "dbadmin" ]})'. }

20 Atomic Run on a thin and easy to update OS Application Libraries `rpm-ostree upgrade` SELinux `rpm-ostree rollback` Logging Network Docker + Host

21 How does it change your life?

22 Developer Workstation(s) Docker Docker Git Kubernetes Kubernetes Puppet Chef Linux Box Linux Box Vagrant Vagrant Libvirt/KVM Virtual Box Linux OSX Commodity Hardware Apple Hardware

23 From Development to Operations Test/UAT/Prod GitHub Docker OpenStack Registry OpenStack Service OpenStack Service Vagrant OpenStack Service Linux Box OpenStack Service Puppet Docker Docker Docker Docker Libvirt/KVM Linux Commodity Hardware Kubernetes Atomic Atomic

24 Demonstration Time!

25 Demonstration - Operate Registry 1. Quick Tour of Kubernetes GlanceRegistry Docker Docker kube-api-server kube-scheduler kubelet Fedora (Master) cadvisor Fedora (Minion) OpenStack Kubernetes Cluster Fedora Workstation kubectl Docker Kolla Images kube-proxy kolla.git clone #./tools/start Kolla Images Pod Keystone 3. Deploying all the OpenStack services Glance-API 2. Deploying a Pod/Service for an OpenStack service

26 Challenges External Connectivity Multi-Host Networking Privileged s Run-Time Configuration Persistent Storage (for Services and Exposing Cinder) Monitoring Early Days for Kubernetes

27 Communities

28 Design Summit Session for Kolla Tuesday November 4 17:30-18:10 Duffy (Le Meridien) Read the notes :)

29

30 Neutron L3 Networking Review Source:

31 Networking Difficulties Stock Docker Configuration Host PID NS A PID NS NET NS B PID NS NET NS NET NS

32 Networking Difficulties (2) Host eth0 Linux bridge (docker0) Stock Docker Configuration /bin/ bash tap (eth0)

33 Networking Difficulties (3) Host eth0 Linux bridge (docker0) Stock Docker Configuration tap (eth0)

34 Networking Difficulties (4) Stock Docker Configuration Host eth0 Linux bridge (docker0) L2 Agent tap (eth0) L3 Agent tap (eth0)

35 Networking Difficulties (4) Stock Docker Configuration Host Linux bridge (docker0) eth0 L2 Agent tap (eth0) L3 Agent tap (eth0)

36 Networking Difficulties (5) Kubernetes Docker Configuration Shared Network NS PID NS A PID NS B PID NS NET NS Kubernetes Pod Host

37 Networking Difficulties (6) Kubernetes Docker Configuration PID NS eth0 tap (eth0) A PID NS tap (eth1) B PID NS Kubernetes Pod Host Linux bridge (docker0) Shared Network NS

38 Networking Difficulties (7) Kubernetes Docker Configuration PID NS eth0 tap (eth0) L2 Agent neutron l2-agent tap (eth1) L3 Agent (Privileged) neutron l3-agent Kubernetes Networker Pod Host Linux bridge (docker0) Shared Network NS

39 If I had an hour to solve a problem and my life depended on the solution, I would spend the first 55 minutes determining the proper question to ask, for once I know the proper question, I could solve the problem in less than five minutes. Albert Einstein