Red Hat OpenShift Commons Briefings 2016 | OpenShift Commons, 20 May 2016

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: OpenShift Commons Image Builder SIG #2 : Enterprise CI/CD Workflows Images

Description

This will be the 2nd meeting of the Image Builders SIG; we’ll do introductions and have a discussion led by Produban’s Cristian with a overview of Produban CI/CD workflows for building redistributable OpenShift-ready images. There will be Q/A and we will solicit topics for upcoming meetings.

We are planning on bi-monthly meetings depending on the group’s schedules and interests.

For the latest information on OpenShift 3.1 and available briefings, please visit http://commons.openshift.org or subscribe to the OpenShift Blog (https://blog.openshift.com).

The OpenShift Commons exists to provide a platform for customers, partners, developers and other open source technology initiatives to collaborate, share and accelerate the pace of innovation and adoption of OpenShift globally.

The OpenShift Commons represents a new open collaborative community model designed to facilitate communication and sharing of best practices, feedback and development across the many open source initiatives that integrate with OpenShift. The best way to get involved is to join the conversation today at http://commons.openshift.org

A

A

Welcome everybody: this is the actually the second image builders special interest group meeting of the open ship Commons and really thank you all for joining us, and if you have any questions or suggestions for upcoming topics, please send them to the mailing list or type them into the chat room here and we'll have conversation after today's presentation.

A

So what I've done today is invited Christian rolled on from cotto van who has a large multinational deployment of openshift out there in the real world in production, to tell us a little bit about their enterprise, see I CD workflow for doing deployment with containers and building those containers. So I thought.

A

What we would do today is let him talk for 20 minutes or as long as it takes him to do his demo and we'll record that and other people can watch it and then afterwards talk a little bit about with each other I'll just unmute everybody and you can ask questions of Christian and his team are number of whom are on the call- and this is interesting for me from a couple of perspectives is this is definitely an enterprise approach to it.

A

We've talked and we'll be talking with other people who are doing like if you only get one service that you have to continually integrate and build doctor and maintain a docker image. So this is going to be an interesting talk today to hear about how they're doing it across the enterprise, so Christian I'll. Let you talk and introduce your team and folks ask questions in the chat and we will read them out at the end or try and answer them. While the presentation is going on so go ahead. Program.

B

So my name is a Christian or none more.

C

B

So this presentation we are going to talk about the world continues in duration for the languages that we reduce. In our past platform, we use opposite version field on one talk waiting on the difference is really interesting.

A

To share a trade.

B

C

Go to the next slide.

B

One and retail again the past project manager here with me, real Fernandez with our past solution. Architect, chris, is a and project leader.

C

B

The contains in the written consent from consideration solution, ok, and I will tend to have a really strong introduction and after that, ever again we going to find more information about this dissolution.

B

Ok, so what is problem for one? Is we.

C

B

Countries in princeton, in spain, mexico, brazil, with the UK, united state control, etc, and we are more than.

C

B

Professionals are on the walls of the Planitia IT company we used. We are the ITV operation combo for weights and their group. Okay, so also it is important to commend a wheelie honest from his van is buggy is an honor santander whole body is gone. Is the Sun welcome buddy, a shopper company, so it is project is a project that we call blowing that we are working together is one ok. So what is the incentive for the diplomas? What is a global pass?

B

What is that is that we have to design an employer great with rational delay, past solution, this resolution, this path solution, is based on containers. We reuse all the everything all this: a partial solution. We r I'm finals and financial application so formed this point of view. The pass environment is, will it create? These are real critical environment, so we selected openshift enterprise version version, 3 14, this past moment we started work with opposition special into.

B

We were working with Albert enduring to earn more or less and we started a way Canadians, two years old, with the same to me, going to open sea virtual three good one, always one hey.

B

C

Go to the next slide well,.

B

As I told you, the global pass is a blow a solution for the porter one, with a ploy offensive different of massive cluster around the world. Right now, we with we have a program in the Spain and Mexico recent rads to and to have two more efficient Adele, no idea. We would like to go.

C

To come, Brazil and.

B

You que todo mio. We will be up to two important vision, Spain and Mexico. Ok, so from this point of view, for us is a very big challenge and in order to prepare.

C

B

Design this position is really a challenge. Ok, so what we have solid is this project? Why we we decide to create a continuous integration solution for the images and.

C

B

We have tied to to do have the same billing system for all the contrary, operating agreement. We have a couple of gaining control image. We have, for instance, I spilled, my groceries runtime and we have a tomcat random engineers sandra only be arriving in q1, etc. So.

C

B

This item two: no designing the same: the build system for all the images so.

B

Validation for us is important, so we stand as a shin whispering it's free too important. We use the same git repository structure of all the images become the same folder, the same script, the same in the same metal, Adah and Zillah. Ok, so illumination from the project. We use the same normal muse mark down for image rotation. The damn name is important.

B

Dispute we were using the latest novel. We.

A

B

No problems we decided to use another time. Maybe Kalyanam is going to talk about this love this time in how we use this technique. Ok, we also support our urban images to board a binary deployment by gallon per minute of each other. We will we'll have an inversion.

B

Only novel solution to we implement some banana deployment in the world. Corriendo collect images, also a we. We do some processing and deployment allowances and.

A

B

Every component image has consistently we use the template to the glowing red ochre a ship, so when we all day when we are taking umbrage with also updated offensive 10.7 after building a favorite with the growing a new template, that is a very important important know. If that William is going to doc.

B

Also will push the deliberate.

C

B

Corporative recipe we execute different unit test. Some somehow cover image are critical image. For instance, we talkin or microservice imager. Three critically, we introduced from box. We can affect the productions of the reason why we decided to include unit tests in every day in America, very much project and also when what we notice is built and then he'll even needed. If everything works. Ok, we we send a change low, 2, all the US customers em co in the next topic.

B

We with I want to talk when and why we reveal the daughter of the image 1. The reason why we reveal our because of the operating system is updated. Every incorporate local image is based on.

A

B

The police will be used a base image from.

A

B

So if we received a personal day automatically, we had obtained the only a proper intimate, also we are made when they travel the product is amazing. For instance, we receive an education that open CD case and a deal. We also updated the doctor or went away, and we also will include new features or a little squeeze and also for that reason. We also reveal the image if we need to attend updated with the 10th grade. We again we regularly with the break.

B

Ok Tom in the next slide and fujian is going to talk about the global solution and also we will try to do a live demo.

C

Ok thanks Kristine hello. This is Korean Fernandez, Christian hostel and work as close routine architect in his van and I in collaborating with the Christian steaming the project program global test. Today I am going to spread you the continuous integration and continuous delivery cycle that we are running to remain behind, deploy our operator very much into opposite before. To start, the presentation I think it's important to emphasize that when we start working with opposite version 3 we decide what to use the sword.

C

We must tools for building the elements how kristen has gone before is it is you're mistaken because we have our own application lifecycle management in and we are referring to the web developers a binary in deployment solution using the environment, jobs with our token asked. Ok, so, let's go to establish a citation talking about the technical solution stack make up the global pass application, a cycle management. Also, I'm not going to talk about it. A.

C

Surely, in this presentation.

A

C

You can see this as like. We are using JIRA and taro to manage our project planning and to manage the support of incident of our customers on our side. April one girl passes included into the new architectural Santander group called serenity. Serenity is a group of assets that have a common drama and follow the consent and arrow Club yesterday. That is the hope, develop our group over line the serenity Lloyd us saturday. The road passes only one of the things that are part of serenity.

C

Maybe one of the basic things over say: okay and serenity is using conference as we key to serve the documents documentation between the project. So we have the documentation of ghetto pyramids in our did repository an old, also centrally set in conference. We are you seeing Jenkins as they continue sinton droid, interracial, ninja everyone now. Thank you. So I'm not going to explain how the words I try to describe the jobs. We are running late. Okay, all our source code is stored.

C

Energy repository, in this case his lab, or they had a Christian told before bad or they must have the same as standard general procedure, is true to the farmers of this code is spirit, but we hope that in the future we can police et cetera, key your store, Daenerys we use Nexus and restore, and it's posted o kalamat. We are using dr. Augustine.

C

Now, certainly we are going to be going to a way or atomic registry where we still got to make that decision in order to test the docker image before we leader we use to drews implemented in recall or aspirin service. Egg Ali will decay some time to spring to perform the dance later I'm. Finally, but assume we are using open series version 3 sorry, there is 73 ad platform as a service. Now I'm going to describe the workflow, we are following for the continuous integration cycle, how, when totally nuts?

C

Well, I have to tell you that playing going to explain the process of release of the Emacs, the development.

A

C

The image follows a different Road, as you can see in this slide is the phone with that the docker image, indeed drinking job I release it every time an attack is created on a dog, a limit, indeed laughs so genki second day per person today, jenkins work estates and once they must fold is don't know, judit s, an integration test and executed in that ssl pass without failures. Docker image is built with the corresponding earth and later is deployed to the era asleep. The matter.

C

The next step is deployed, associate template in oven, safe Jenkins is responsible for updating the image calendar template to point to the once the template is peace. In the offensive we upload the Rodney Mott MacDonald file, I mean the image the professor to contracts and finally, Jenkins clean at the workspace analytic 8 by mail, the result of the sakutin all of the job to the user. Subscribe to that image.

C

Ok, to talk about the test now I going to ascribe how we're testing the documents, our idea is to use that as the drive in the Roman mythology in the docker image creation process. For this we are using our stack and service tech.

C

Well, our stag zabiha wonder when development river for rule this framework can be considered a domain-specific language and the samples are natural language specification and similar spec is a Riveter, very interesting tool which allows you to write simple toys to belabor. The seller is currently don't agree with several state. You can write tech test for checking your service. In this case, I will operate. Agreement are entirely correct.

C

Okay, here we have two assembles unit test, verifying that the data file contains all the specification defining really. It is a good, a double instead comment and verify that understood that I hurt the blood in their spec file are included in the governance.

C

Periscopes I can verify their purpose, then be human balls were in this, but it's steroid users or reduction and in the Richard tells verify request to server into google image britain's avoid response, for example, in the dugout 8 image we are taking that on board and elated we're exposing a default application that reduce the system environment variables and also here we very find that you can address to latent emanation. In the premiere party, okay go to the real world here.

C

I'm going to show you our engine SP maths, test, okay,.

B

C

Don't know you can see it yeah.

A

It looks like things.

C

And we have the geometers, we check that we have a working there, a opt as loss program. We have to my room and bass, we suppose the oh sorry. This is another layer file. Well a moment.

C

C

Ok, this is the file. Well, they work. Indeed, the environment bars suppose that part 81 and we have some package install it go down. Ok,.

C

The file I'm going to to show you down our integration test: ok in the narration test, with the store locations, one in the port 80 and another one and important d 1, and we spit out a truce taken over 200 guests at escala, ok and some HED ma. Let's go ok, have grout and go to execute the test. I have one script to do it.

C

Ok, hey! This is very quickly because I have a day Matt's a bullet in my email matching. Ok! Now we have the first as the second tellin. What is more, that is the intelligent, sk13 okay. So everything is right now I'm going to show you well dr., fine! Well, sorry, well, I'll, respect fight with errors to show you a what happened when when something like this, this is no is no.

C

If I suspect, which works as this one, for example- well I'm not going to explain on the file, but here we are respected that the port 1919 is exposed. Ok, now I'm going to execute this test.

C

Oh another face not come. That's.

A

Why we do guys them there.

C

As you can see, you can in there are the arrows and reduce.

A

C

And explanation of the road, for example: here we want the response day, 90 90 import, but we only expose the 443 for dating a deity okay to go back to the presentation, and once we have checked that document had passed the unit and the integration tests they match this bill. We have a big seller strip in all the image to make the daughter be processed. The script contains of the variables needed to make the process Jenkins.

C

They cannot attack the image with the same thing name, tag name that we have previously clear, create in a way the repository. The dynamic convention is the classic release. Commission mayor chain, dot s dot, field batteries. This is a sample later we added the talin atis to this image. Finally, we boost the image to a private donor registry.

C

Okay, now in the raita were very much into open sea, open sea template with all the configuration repelled by the docker image is in the stately repertory that the result of the image ranking job handles for setting the value of the docker image, with value of the new tag into a double frame. It's important to say that we are introducing the latest economic health to avoid problems when we change the ratio of as much to our communities prosper normal past in place.

C

Are that as instant up and with the docker image me once the des plaines has mini date is deployed in the admin, credit or conceived of all available source. Well, as Christopher Corella, we have simple routine rooms to in-state and annoy Iranian missing.

C

Okay and two teenies, we police the image documentation where you seen conference as corporate we give to serve with RunAs the documentation and conferences pose an appearance to pull this documentation. Jenkins update the redmi markdown file, but they met and police it in conference once the job is settled, Jenkins clean up their workspace and said an email notification to everyone who will subscribe to that in US, and in this last slide you can see some pictures of some of the features that I just described.

C

The first one is our Jenkins does work, luckily ability in his grave. If one job is read, the ability can go home until the double degree. Well, this is only a joke, but maybe this would be the way to do it and other pictures ar2 demonstrated a criminal damage stream, evasive assistant up here, the founder of associated when they complained a little, carry much ok and go to their real time.

C

There's now, oh hey! Here we can see the junkies as well. We have one word sudden someone will sell faster than today. huh We have an example of one image in the devel register. Aware christian tone has power about the more president before I. Here we have the first be less absurd da. The three release we hold on, as you can see,.

A

C

The same image is that the same it image that they were not to do dot, 0 degrees and the last, where is too so the engine is complete, pointing to the time one dot: five dot, one dot release ademas: okay, oh sorry, Christian is Tommy I have to last nice, okay, so that's home! That's.

A

Pretty awesome actually to see that whole workflow in action and the use of confluence and Jenkins I'm going to open it up to questions now for anyone else, who's on the call right now, if folks, are interested in that I'm I'm, very appreciative of the use of Jenkins in this I'm a big fan of jenkins and, in the end, the email notification process of all the subscribed users. I think that's a really interesting, an interesting aspect of your your work fault. Oh.

B

You know some some, the variant humanism is critical, so it is important to all the information to our customers. Our customers developers relocated the most teams, so it is important to send a change low 2. Only us Jesus.

A

So this, for me, this is a and I understand that you're not using STI, because you had all this tooling in place. You have any plans to incorporate STI, eventually or use it in your developer. World.

B

We were STI, but this.

B

Ciac Lucien is just for corporate a daughter in England, okay, stop for applications. We have another, a CIA, DC solution, okay, without a very interesting a solution in order to deploy applications from.

A

B

Sea we use our corporate solutions. A resolution is Jenkins, even though we were told we were already STI to use with decide to use our compare it with a van, a solution for application.

B

Okay, I'm intention. Yes,.

C

B

C

I can't we talk about the salinity project, an aln project, one of the lines of salinity and our developers wants to have a binary deployment like the open sea bass, your jewel funny, huh and the better solution for us to do it is. Is this.

A

Okay, well, it makes sense, I'm not saying you should I'm just I'm just curious if at the end developers would use it some where yeah, because because that's cuz, that's as an evangelist and the community manager, when I do my demos I, don't have access to all the things that you have so STI works quite nicely for me as a developer.

A

Is it one other thing that I was thinking about in terms of so so far? You said you were using rel as a base image.

A

You had to do a rel base image update across the enterprise yet, and how is that done gone? Is it.

B

A

If you're going to update the underlying operating system so you're using a base image, have you had to do a major upgrade on the operating system level across all of your images? Yet.

B

Yes, when we deploy overseas and apparently it does zero right, we were you, see you round by round from.

C

B

C

B

We receive a notification that a new base rail I will decide to reveal all images with you single event to yes,.

C

Currently, we are running a 7ft and.

A

And so you used your CI CD workflow to do the update of all the images yes and it worked fine. What I'm.

B

B

It is not guys dishonesty, an angle, corporate a solution, it is has a solution opposite for our path, environment, great. We have another solution for publication deployment. Yes,.

C

Espanha went ok much, and maybe that is a step is to include in this continuous integration cycle, our computers, yanez great for fancy, ball or puppet, but will be here. Yes,.

A

Another day, no, it is well. Let me look again I'm looking to see if someone who is on the call has a question or wants to there's a couple in in Spanish, so I'm not going to try and read those out that my Spanish is not very good.

A

Oh I have I, have one more I, have lots of questions so because this is the image building. This is really different across different enterprises and such but I did have an interesting conversation I'm here in Texas at aswan, and there's a lot of open source project folks here, including the people from WordPress. Since you use your example, I'm wondering where you you've got your if you pull down the source code for wordpress and built your image from your own pull from wordpress.org or if you used.

A

If you started with one of the base images on docker hub for WordPress,.

B

Other words we use the official in WordPress, 3some I love it um well. We made some customization okay, we use very much. That is a little odd, but we made from some University and customization Jordan 25 times. We are victorious verify synchronization we're in order to see more noise well content when we have a 7am, LOL wordpress instances, and we also.

A

C

B

And also some carving techniques.

A

It's I think almost everyone who does WordPress this has has some customization for it on the deployment so yeah that's sort of what I expected for a response, but I. Also I'm curious if people will start to have different versions of word, press so they'll need to build from from the source code from wordpress.org, anantha and you've sort of answered. My question: I think that the docker hub one is is good enough as a starting point for building your custom image.

A

B

Problem that we we we are seeing right now is that the doc aha, we noticed a version of WordPress talk and lovely, doesn't awhile and somebody said prefer to feel the from zoosk. Oh yeah.

A

Yeah that, then that's what we found: I'm curious to see and wordpress on I'm, not trying to pick on wordpress but I'm curious to see how those images and darker hubs get maintained and when they are upgraded, who are the people would mean taking and supporting them? Whether they're, dr.

A

people or WordPress, people on and that's kind of the conversations I've been having this week with the WordPress people and trying to figure out who's going to build the latest image and make it official and maintain it on on docker hub or wherever the word boss wants to host their own registry. So um so that's that's I! Think you've done a great job because nobody's asking any questions, at least as far as I can tell my bad spanish translations.

A

So I want to thank you for coming today and doing this presentation I'm a puppet up blog post and on the YouTube channel and into the mailing list for the image building going to host another cig in two weeks time and I'm wondering if people have suggestions for topics I have a couple of speakers lined up one from the atomic registry program to do a deep dive into the registry and ask to that and I think I might use that as the next topic.

A

But if we'll have other suggestions, I'm very open to that, if there's something that crota bond wants us to drill into around image building. Let me know.

B

B

Corresponding to turn and burn so easily, okay, many questions. Okay,.

A

Okay, thank you. Everybody have a wonderful weekend or no, it's not quite the weekend yet but evening, take care.