Tim Burke & Cloud Engineering Leaders
Agenda Introduction Tim Burke VP Linux & Cloud Engineering Satellite Bryan Kearney Sr Mgr Satellite Eng Enterprise Virtualization Andy Cathrow Dir Cloud Prod Mgt OpenStack Mark McLoughlin Consulting Eng OpenStack Project Atomic, Docker Containers & OpenShift Daniel Riek Sr Dir Systems Eng CloudForms Xavier Lecauchois Principal PM CloudForms Identity Management Dmitri Pal Sr Mgr Identity Eng Closing Tim Burke 2
Red Hat Upstream Focus Red Hat's development philosophy is upstream focused, working with partners & customers critical in delivering an enterprise product Upstream investment is required to Innovate - drive new features Influence strategy & direction of project Gain knowledge and experience to support product For cloud, upstream is more than openstack.org projects Contribute to and help incubate new OpenStack projects ovirt driving enterprise virtualization KVM hypervisor, libvirt and supporting infrastructure RHEL platform enablers Kernel through userspace Driving upstream innovation & responsible backports to RHEL6 & upcoming RHEL7 Network stack OVS, drivers, kernel networking layer #redhat #rhsummit 3
Red Hat Upstream OpenStack Focus Heavily engaged in community since 2011 Established leadership position in community Both in terms of governance and technology Including PTLs on Nova, Keystone, Heat and Ceilometer Creating and leading stable tree 3rd largest contributor to Essex 2nd largest contributor to Folsom Largest contributor to Grizzly Largest contributor to Havana Contributed even more in Icehouse! (stats pending) Juno design summit participation in May Note: these statistics do not include external dependencies (e.g. libvirt, KVM, Linux components) #redhat #rhsummit 4
Enterprise Productization Linux User Space PARTICIPATE (upstream projects) System Call Interface Process Management Virtual File System OpenStack Tenant Services OpenStack APIs INTEGRATE (community platforms) Message Queuing Cinder Network Neutron Security Ref. Architectures Device Drivers STABILIZE Component Drivers Linux kernel OpenStack Core Hardware Hardware RHEL RHEL OSP DELIVER Similar approach in other cloud projects #redhat #rhsummit 5
Building communities ---> Productization 6
Red Hat Enterprise Linux OpenStack Platform (RHEL-OSP) Enterprise grade OpenStack deployment with ecosystem, lifecycle, support that customers expect from Red Hat Based on RHEL and includes cloud enhancements Enterprise hardened OpenStack code Longer supported lifecycle includes bug fixes, security errata, selected backports Certified ecosystem (Red Hat Certified OpenStack Partner program and Red Hat Enterprise Linux ecosystem) Full support and Certifications for RHEL and Windows guest-based workloads Simplified installation / setup for large configurations #redhat #rhsummit 7
Cloud Portfolio Integration Platform Optimizations & Impact Examples of RHEL optimized enablers integrated with Red Hat's OpenStack in RHEL-OSP: Virtualization guest performance, reliability and Windows Security SELinux enforcing guest isolation Network SDN/OVS performance optimized Storage vendor plugins, performance, thin provisioning Ecosystem certification of hardware, storage and networks The pairing of the RHEL operating system and OpenStack is so tight that Red Hat s combination can most effectively support functionality, performance, security, and ecosystem support Similar integration focus with Satellite, Identity, OpenShift PAAS, CloudForms #redhat #rhsummit 8
Rich Ecosystem Around Red Hat Enterprise Linux OpenStack Platform OEMs and IHVs Extend Red Hat Enterprise Linux certification into the OpenStack ecosystem, and take advantage of an expanding market segment. ISVs Extend Red Hat Enterprise Linux certification and create new application functionality that delivers platform capabilities in the context of the new cloud platform model. SIs Architect, implement, and integrate new cloud solutions based on a leading-edge platform. MSPs and cloud service providers Create an infrastructure platform as basis for other value-added services such as hosted applications, cloud services, and more. Channel Partners Extend Red Hat Enterprise Linux strength into a broader platform that can deliver other ISV and vertical industry solution offerings to end-user customers. #redhat #rhsummit 9
Red Hat Cloud Infrastructure (RHCI) Single subscription that provides an open cloud solution Bridges traditional and cloud/elastic workloads Provides both virtualization and cloud services Policy-based cloud management Available with or without RHEL guests 10
Upcoming section template Recent releases Upcoming feature highlights Portfolio integration Details @ Summit 11
Red Hat Satellite Bryan Kearney
Recent Red Hat Satellite Feature Advancements Red Hat Satellite 5.6 Features Benefits Enhanced subscription and system reporting Provides incremental, in-depth details and reports of subscription consumption and hardware facts across the totality of your Red Hat deployment. Client side crash analysis Crashes can be centrally reported to the administrator for improved awareness, analysis, and timely triage. Automated provisioning in PXE-less environments Automated and efficient provisioning of Red Hat Enterprise Linux systems in environments previously hostile to Satellite provisioning. New install option: Embedded database Provides significant scaling without requiring the expertise of a DBA on separate system (admin-managed) Expanded install option: Choice for external DBA-managed database Using a DBA-managed database for your backend? Now you have a choice beyond just Oracle. We now support PostgreSQL as an option as well. Inter-Satellite Sync (ISS) content management and trust refinement Administrators of each Satellite in a synchronized exchange now have finer control over access permissions per Satellite, per Organization, and, by extension, per Channel. Red Hat Satellite server hot-backups No longer do IT teams need to build in downtime when backing up the Satellite server. Zero downtime = more productivity and availability! 13
Recent Red Hat Satellite Feature Advancements Red Hat Satellite 6 Most projects 3-4 years old (Puppet is 9+) Notable Fortune 500 + Red Hat IT users 100s, even 1000s of deployments Scalability Notable 60k Foreman host installation 14
Recent Red Hat Satellite Feature Advancements Red Hat Satellite 6 Provision 10s 1000s systems Configuration Management Automated Software Distribution Lifecycle Management Administrator Dashboard Provision 10s 10,000+ systems Recipe-Style Configuration Management Automated Software Distribution Refined Lifecycle Management Modern Administrator Dashboards Simplified Content Management Drift Management Federated Services & Management Deploy on VMware, RHEV, EC2, and OpenStack 15
Red Hat Satellite Futures 16
Red Hat Satellite Portfolio Integration IPA Satellite 5.6 and 6 register managed hosts with IPA during provisioning Open Stack Satellite 6 will provision systems into Open Stack and RHEV-M RHEV-M RHEV-M can use Satellite 6 to provision back onto RHEV-M Coming Soon Docker and Glance APIs from Satellite 6 17
Satellite @ Summit Sessions: Satellite 6.0 Roadmap and Demo Tue 2:30pm Come learn about the Beta! Moving from Red Hat Satellite 5 to 6 Tue 3:40pm Thomas Cameron walks you through this transition Real-world perspectives: Managing infrastructures with Red Hat Satellite Wed 10:40am Real customer experiences using Satellite 5 Test-drive Red Hat Satellite 6 Wed 1:20pm (2 hours) Come kick the tires on the next version of Satellite Understanding your Subscription Inventory Wed 4:50pm See Enhanced Subscription Reporting with Satellite 5.6 18
Red Hat Enterprise Virtualization Andrew Cathrow
Red Hat Cloud Infrastructure 20
Red Hat Enterprise Virtualization Centralized Management High Availability Live Migration Storage Live migration Load Balancing Power Management Templates, thin provisioning, snapshots V2V & P2V Migration tools Self Service User Portal Reporting Engine OpenStack Services Integration 3rd Party Plugin Ecosystem 21
External Providers Infrastructure for supporting external service providers Currently Supports Host Deployment Image Registry SDN Infrastructure via Foreman (Satellite 6) via OpenStack Image Service (Glance) via OpenStack Network Service (Neutron) 22
Red Hat Enterprise Virtualization Roadmap RHEV 3.4 May 2014 Storage - Mixed storage domains (iscsi, NFS, Fiber, Gluster, Posix) - Single disk snapshots - Read-only disks - Online resize iscsi Storage domain - OpenStack Image Service (Glance) Enhancements 23
Red Hat Enterprise Virtualization Roadmap RHEV 3.4 May 2014 Network - OpenStack Network Service (Neutron) Integration enhancements - Security Groups - IP Address Management (IPAM) - Allow deletion (as well as creation) of Neutron Networks - Host Level Quality of Service (3.3 provided VM level only) - Multihost network configuration 24
Red Hat Enterprise Virtualization Roadmap RHEV 3.4 May 2014 Compute - Scheduler Enhancements - Affinity / Anti-affinity Groups - Extended load balancing policies - High Availability Reservations - Power saver policy to power down and power up hypervisors - Hot Plug CPU - Template Versioning - Extended console configuration for Spice and VNC - Configure maximum downtime per VM for migration - Persistent cloud-init metadata per VM (not just at first-boot) 25
Red Hat Enterprise Virtualization Roadmap RHEV 3.4 May 2014 Infrastructure - SNMP Notification Service - New fence agents: HP Blade and DRAC7 - Add JSON support to API (in addition to XML) UX - Support for lower resolution displays (1024x768) - Improved refresh logic - Case insensitive search 26
Red Hat Enterprise Virtualization Roadmap RHEV 3.5 (In Development) Late 2014 Highlights - Support for RHEL 6 and RHEL 7 Hypervisors - Live Clone VM - Live Merge Snapshots - OpenStack Services Virtual Appliance (incl pre-configured services) - Extended SLA / QoS options Block I/O throttling, CPU capping - Advanced NUMA support - External Advanced scheduler for load balancing & rebalancing - Import existing storage domain - Extended Foreman (Satellite 6) support for host provisioning 27
RHEV @ Summit Sessions: Red Hat Enterprise Virtualization: Overview & roadmap Wed 3:40pm Red Hat Enterprise Virtualization disaster recovery Tue 4:50pm Configuring a disaster-resilient Red Hat Enterprise Virtualization environment Wed 2:30pm Red Hat Enterprise Virtualization deep dive Wed 4:50pm Red Hat Enterprise Virtualization Hypervisor roadmap Thu 9:45am Manage your HP ProLiant & Bladesystem environment with Red Hat Enterprise Virtualization Thu 9:45am 28
Red Hat Enterprise Linux OpenStack Platform Mark McLoughlin
Red Hat Enterprise Linux OpenStack Platform OpenStack is a fast moving, chaotic and exciting project Red Hat makes sense of it all for our customers RHEL is the best platform for operating OpenStack RHEL-OSP provides a stable base for your workloads/clouds Red Hat has the upstream influence and insight Red Hat has the broad ecosystem of certification and partnerships 30
RHEL-OSP Releases 4.0 (based on Havana) released Dec 2013 Heat and Ceilometer now fully supported LBaaS fully supported, VPNaaS & FWaaS Technology Preview Foreman based deployment fully supported, Packstack for PoC/demos RHEL 6.5+ only, 18 month support lifecycle 5.0 (based on Icehouse) targeted for Jun/Jul 2014 Trove integrated and provided as Technology Preview Sahara (was Savanna) incubated and provided as Technology Preview Provide both on RHEL 7.0+ and RHEL 6.5+, 3 year support lifecycle 31
Recent RHEL-OSP Feature Advancements Comprehensive HA architecture for RHEL-OSP 4.0.z RHEL-OSP 3 to 4 upgrade process VMware vcenter compute driver now supported Improved Foreman deployment workflow in RHEL-OSP 4.0.z 32
RHEL-OSP Futures Enhanced RHEL-OSP 4 to 5 upgrade process RHEL-OSP 5 will use RabbitMQ as the default messaging system Support for active/active database in RHEL-OSP 5 Improved Neutron scaling and reliability Scale testing and research on best practices for scaling TripleO Next generation deployment and management platform Growing focus on supporting NFV use cases 33
RHEL-OSP Portfolio Integration OpenShift Easy deployment on RHEL-OSP 4 using Heat Iaas/PaaS convergence via Docker and Solum Red Hat CloudForms Introspects and interacts with RHEL-OSP 4 Red Hat Storage Improved performance and features, particularly around Cinder Identity Management IPA as Keystone backend, also certificate management 34
RHEL-OSP @ Summit Sessions: Red Hat Storage Server: Roadmap & integration with OpenStack Tue 2:30pm Best practices for PaaS, OpenStack, & cloud adoption Tue 2:30pm Red Hat Cloud Infrastructure architecture design Tue 4:50pm Building scalable cloud infrastructure using Red Hat Enterprise Linux OpenStack Platform Wed 10:40am Deterministic capacity planning for OpenStack as elastic cloud infrastructure Wed 1:20pm 35
Project Atomic, Docker Containers & OpenShift Daniel Riek
Evolution of Deployment Paradigms Traditional Enterprise Operating System Multiple applications per OS instance Single monolithic software stack, shared services Central host-level management App App App Host OS Userspace Runtime Stack Virtualization & IaaS Application Centric IT & PaaS One VM per application Per-VM stack, OS defined by application Delegation at VM level, complex management Applications packaged with their runtime Multi instance, version, tenant Delegation at container level, central management Best of both App App App worlds Runtime Runtime Runtime App App App Runtime Runtime Runtime Guest Services Guest Services Guest Services Guest Kernel Guest Kernel Guest Kernel Hypervisor Service Containers App Runtime App Runtime Service Containers App Runtime Mgmt Containers Container Host OS & Central Shared Services Orchestration Primitives Mgmt Containers Container Host OS & Central Shared Services Orchestration Primitives Kernel & HW Drivers Hypervisor Host OS & Shared Services, Mgmt Virt Host OS, Host Mgmt Kernel & HW Drivers Kernel & HW Drivers Kernel & HW Drivers Kernel & HW Drivers HW HW HW HW HW HW HW HW 37 Virt Host OS, Host Mgmt
What is Docker? Linux Containers are a combination of features like kernel namespaces, control groups, SELinux Docker is a tool that can package an application and its runtime dependencies for deployment into a Linux Container Docker builds on Linux Containers, adds an API, an image format and a registry/index plus a simple but effective layering model Unlike traditional a virtual machine, a Linux Container is not separated from the host by a strict host/guest boundary. It's rather the host partitioned into namespaces Docker images include the userspace runtime of an application, not the kernel, not typically shared services of the OS RHEL, SCLs, JBoss, certified ISV content available for content 38 Customer Customer/ /ISV ISV/ /RH RH Application Application 33rdrdParty Party Layer Layer rd Certified Certified33rdParty PartySW SW Platform Platform Layer Layer JBoss JBoss OS OSBase Base Image Image SCLs SCLs RHEL RHELUser UserSpace Space Customer Layer App App App Runtime Runtime Runtime ISV ISVLayer Layer Platform Platform Layer Layer OS OSBase Base Image Image Service Containers Mgmt Containers Container Host OS & Central Shared Services, Orchestration Primitives Kernel & HW Drivers HW HW
What is Atomic? Pattern for an optimized container host Minimal OS to run containers Minimal patching Atomic updates through OSTree Standardized core shared services App Runtime Orchestration primitives Service Containers Extendable by privileged containers (management, content lifecycle, security, identity, logging, etc.) Deployment into Cloud, Virtualization and bare metal Upstream: Project Atomic. Implemented in RHEL, Fedora, CentOS Atomic variants 39 App Runtime App Runtime Service Containers App Runtime Mgmt Containers Container Host OS & Central Shared Services Orchestration Primitives App Runtime App Runtime Mgmt Containers Container Host OS & Central Shared Services Orchestration Primitives Kernel & HW Drivers Hypervisor Virt Host OS, Host Mgmt Kernel & HW Drivers Kernel & HW Drivers HW HW HW HW
OpenShift, GearD, Satellite, Docker & Atomic OpenShift 3.0 built on Docker OpenShift OpenShift3.0 3.0 Geard advanced orchestration layer Satellite enablement planned for on-premise repositories, content management, provisioning Access to Red Hat container images in Docker format, certified ISV content, Docker.IO community content Deployment Placement Monitoring Red RedHat Hat Satellite Satellite Conf Mgmt Content Mgmt Repositories Provisioning Docker DockerCLI CLI 33rdrdParty Party Mgmt Mgmt e.g. e.g.shipyard Shipyard Red RedHat HatIndex Index Manage Pull Images OpenShift OpenShiftGeard GeardAPI API Orchestration Primitives Docker Systemd Integration in Docker ecosystem App App Container Container... SSH SSH Service Service Container Container Atomic Container Host 40 Docker.IO Docker.IO
Current Container & Docker Roadmap Status Docker tool chain included in RHEL as of the 7 Release Candidate RHEL and JBoss Docker-images currently in testing Delivery infrastructure for Red Hat container images in Docker format (index / registry) under development RHEL Atomic Container Host implementing the Atomic architecture as PoC at Summit Next generation OpenShift built around Docker-based containers previewed ISV partner program and certification announced and in pilot Red Hat Satellite support for advanced content management in development Docker enablement across Red Hat products and platforms in planning 41
Docker & OpenShift @ Summit Sessions: Application-centric packaging with Docker & Linux containers Tue 4:50pm OpenShift roadmap & the evolution of PaaS Tue 1:20pm Booths: Infrastructure Booth Emerging technologies Booth Platform-as-a-Service Booth 42
Red Hat CloudForms Xavier Lecauchois
What Red Hat Delivers Red Hat Cloud Infrastructure 44
Recent CloudForms Feature Advancements CloudForms 3.0 Available on RHN since November 2013 Initial Support for Red Hat OpenStack Inventory Eventing Capacity & Utilization Self-Service Provisioning Reporting Improved Support for Red Hat Virtualization Manager Support for Analyzing VMs with Snapshots 45
CloudForms Futures Open Sourcing This Year Improved Support for OpenStack Image Analysis Tenant Support Initial Support for Neutron (Inventory and Provisioning) Eventing on RabbitMQ Content Management Automate Domains Granular Import/Export for most CloudForms Content 46
CloudForms Portfolio Integration Red Hat Identity Management CloudForms leveraging Certificates and SSL For PostgreSQL and inter-appliance communications Authentication via SSSD Enhancements to LDAP Integration Kerberos Integration Satellite Leverage Satellite's Provisioning Capabilities (Foreman) in CloudForms Support for Microsoft System Center Virtual Machine Manager 47
CloudForms @ Summit Sessions: Union Bank: Red Hat Cloud Infrastructure Tue 10:40am Red Hat CloudForms: Automation Tue 3:40pm Red Hat Cloud Infrastructure architecture Tue 4:50pm Red Hat CloudForms for cloud management: Key features & roadmap Wed 1:20pm Flex workloads across private, public, & hybrid clouds with Red Hat CloudForms Wed 3:40pm Speeding up infrastructure provisioning with Red Hat CloudForms Thu 11:00pm 48
Identity Management Dmitri Pal
Identity Management in RHEL 7 Active Directory integration Direct integration joining Linux systems into AD domains Indirect integration using IdM to manage Linux environment while allowing uses from AD to access Linux based resources leveraging cross realm Kerberos trusts. A lot of improvements to: Identity Management in Red Hat Enterprise Linux (FreeIPA) System security services daemon (SSSD) 50
Identity Management Futures Identity Management (IdM) Native two factor authentication support via Kerberos Certificate authority management tools New look and feel Better access control granularity More AD integration improvements DNSSEC Backup & Restore 51
Identity Management Futures SSSD SSSD feature parity/advantage over Samba Winbind CIFS client integration SSSD for Samba member server SSSD for Docker containers Different identity and authentication sources for different containers Rich identity info over D-Bus Leveraging platform components to provide identity information to applications 52
Portfolio Integration Identity Management integration efforts: Unified authentication and SSO Key and certificate management for the infrastructure stack Linux system provisioning with the automatic domain enrollment Integration targets: CloudForms, OpenStack, Enterprise Virtualization, Satellite 5 & 6, JBoss 53
Identity Management @ Summit Session: Interoperability update: Red Hat Enterprise Linux 7 beta & Microsoft Windows Tue 3:40pm Booth: Identity Management booth in Partner Pavilion (any time) Lab: Red Hat Enterprise Linux Identity Management Thu 11:30am (2 hours) 54
Wrapup
Themes Leading innovation & making it consumable Open source community development Enterprise productization, lifecycle & support Integration RHEL-OSP (Enterprise Linux + OpenStack) paired CloudForms managing RHEL-OSP, RHEV, VMW, MS Satellite & Identity PAAS enablement with OpenShift Ecosystem of certified partners 56
Enjoy the Summit! Learn much more in detailed sessions Check out the demos & labs Talk with us, feedback welcome! 57