Deploying OpenStack Services with Linux Containers - Brisbane OpenStack Meetup overview of Project...

Kolla: Docker, Kubernetes & Atomic

Ken ThompsonSenior Cloud Solution ArchitectMay 2015

Deploying OpenStack Services with Linux Containers

INSERT DESIGNATOR, IF NEEDED 2

“The Kolla Project is part of the OpenStack TripleO effort,

focussed on deploying OpenStack services using

Docker containers”

INSERT DESIGNATOR, IF NEEDED3

Discrete services, when combined providing private cloud capabilities

OPENSTACK IN THEORY

INSERT DESIGNATOR, IF NEEDED4

Not so discrete services... with complex interdependencies, which complicates the deployment and lifecycle of OpenStack environments

OPENSTACK IN REALITY

Journey to the Cloud with Red Hat – Technical Event Series – May 20155

HOW CONTAINERS HELPPackaging OpenStack services with their runtime dependencies reduces deployment and lifecycle complexities

● Easy to deploy and portable across host systems

● Isolates applications on a host operating system

● In RHEL, this is done through:● Control Groups (cgroups)● Kernel namespaces● SELinux, sVirt, iptables● Docker

HOST OS

SERVER

CONTAINER

LIBS

APP

Journey to the Cloud with Red Hat – Technical Event Series – May 20156

TRADITIONAL OS VS. CONTAINERS

Traditional OS Containers

HARDWARE

HOST OS

HARDWARE

HOST OS

CONTAINER

LIBS

NOVA

LIBS A LIBS B LIBS LIBS

NOVACONTAINER

LIBS

CINDER

Packaged dependencies = faster boot times + greater portability

CINDER

INSERT DESIGNATOR, IF NEEDED7

PUTTING IT ALL TOGETHORLeveraging best of breed container technologies

CONTAINER FORMAT WITH DOCKER

● Interface for communications, configuration, data persistence, provisioning

● Lightweight

● Packaged dependencies

● Content & Infrastructure agnostic

ORCHESTRATION WITH KUBERNETES

● Orchestrate containers at scale

● Define application topologies

● Handle container networking

● Manage container state

● Schedule across hosts

CONTAINER HOSTING WITH ATOMIC

● Lightweight

● Atomic updates and rollbacks

● Security & Isolation (cgroups, namespaces, selinux, svirt, selinux, iptables etc)

● Provides portability across systems

INSERT DESIGNATOR, IF NEEDED8

COMMUNITIES & FURTHER INFOGo forth, experiment & contribute!

https://launchpad.net/kolla

https://github.com/stackforge/kolla

https://github.com/projectatomic

https://github.com/googlecloudplatform/kubernetes

https://github.com/larsks/heat-kubernetes

http://Projectatomic.io

http://Kubernetes.io

http://www.openshift.org/

http://www.allthingsopen.com

INSERT DESIGNATOR, IF NEEDED 9

THANK YOUken@redhat.com

plus.google.com/+RedHat

linkedin.com/company/red-hat

youtube.com/user/RedHatVideos

facebook.com/redhatinc

twitter.com/RedHatNews

INSERT DESIGNATOR, IF NEEDED 10

APPENDIX

11

Linux kernel(cgroups, namespaces, SELinux,

devicemapper filesystem)

docker

atomic

Red Hat Enterprise Linux Atomic Host

atomic

Systemd / journald

kubernetes

docker

atomic

Red Hat Enterprise Linux Atomic Host

atomic

Systemd / journald

Linux kernel(cgroups, namespaces, SELinux,

devicemapper filesystem)

Running linux containers requires an entire stack rooted in the Operating System

RHEL ATOMIC HOST

INSERT DESIGNATOR, IF NEEDED12

KubernetesDeclarative container orchestration