Red Hat OpenShift / Upstream AMA | OpenShift Commons Briefing

OpenShift Commons Briefing Sept 8 2021
Kubernetes Operators for Telco Workloads
Guest Speaker: Tal Liron (Red Hat)
Host: Diane Mueller

Abstract:

Kubernetes is neither an NFVI (NFV Infrastructure) nor a VIM (Virtualized Infrastructure Manager). It is an orchestrator. Moreover, it’s an extensible orchestrator. It can be extended via plugins, such as CNI, or via custom controllers, which in Kubernetes are called (confusingly, as we’ll see) “operators”. When developing CNFs (Cloud Native Network Functions) we can deliberately choose not to extend Kubernetes and instead use only its built in controllers and their associated resources: Deployments, DaemonSets, Services, PersistentVolumeClaims, ConfigMaps, Secrets,
etc. It is entirely possible to follow cloud native principles without deep integration into the platform itself. However, doing so leaves many of the advantages of Kubernetes on the table and can increase complexity by forcing us to add non native layers of orchestration. In this briefing, RedHat's Tal Liron focus on custom controllers (“operators”) and how they can and why to implement the operator design pattern for Telco Workloads.

Link to White Paper: https://bit.ly/3koXMus
Link to Slides: https://bit.ly/3lK14bi

https://commons.openshift.org/index.html#join

Database Disaster Recovery Made Easy: Building a Metro HA Postgres Cluster with OpenShift Data Foundation
Guest Speakers: Annette Clewett (Red Hat) and Andrew L'Ecuyer (Crunchy Data)

Abstract:
Getting your database-backed application up and running on OpenShift is straightforward, but what about deploying a mission-critical application that needs to have geo-redundant high availability and fault tolerance?
Knowing the right open source tooling to use can simplify the "disaster recovery" problem when running complex applications on OpenShift. By combining PGO, the open source Postgres Operator from Crunchy Data used for managing production grade Postgres databases, and OpenShift Data Foundation (ODF), providing resilient storage for OpenShift clusters, you can survive the loss of a datacenter with RPO=0 and RTO in minutes instead of hours.
In this OpenShift Commons Briefing, you will see how to configure operator-based ODF installed on an OpenShift cluster stretched across multiple locations to create a suitable environment for a geo-redundant Postgres cluster. From there, we will explore the fundamental concepts for building a high availability, multi-datacenter Postgres cluster. We will demonstrate location failure tests to show OpenShift, ODF, and Postgres cluster availability and disaster recovery capabilities.

Additional Resources:

https://github.com/CrunchyData/postgres-operator

https://github.com/CrunchyData/postgres-operator-examples

https://red-hat-storage.github.io/ocs-training/training/ocs4/ocs4-metro-stretched.html

Emerging Multi-cluster Patterns: HyperShift and Kubernetes Control Planes
Guest Speaker: Adel Zaalouk (Red Hat)
OpenShift Commons Briefing
June 28, 2021
hosted by Diane Mueller (Red Hat)
https://commons.openshift.org/events.html

abstract:

In OpenShift / Kubernetes, pods are the most basic resources that all other orchestration primitives are built upon, they represent workloads .

What if we can take the same concepts that we created to lifecycle, orchestrate, and schedule pods and applied them to whole clusters? But what is a whole cluster, does it need to be whole, can we apply dualism to clusters, and is it worth it?

We bring more questions than answers, join us if you are interested in musing on the potential futures of virtual dualistic logical-centralised physically-distributed multi-clusters (I know!)

Finding a Work-Load Balance: Cruise Control for Kafka on Kubernetes

Guest Speakers: Paolo Patierno and Kyle Liberti (Red Hat)

OpenShift Commons Briefing
2021-06-21
https://commons.openshift.org/events.htm

Abstract:
Over time, the load on the brokers of an Apache Kafka cluster can easily become unbalanced causing the topics to receive an unhealthy distribution of traffic.

In situations like these, some brokers may become overloaded leading to Kafka cluster performance issues due to poor utilization of cluster resources such as CPU, network, and storage.

To make matters worse, rebalancing the cluster manually with the provided command-line tools is one of the most complicated and time-consuming Kafka operations.

Luckily using open source tools like Cruise Control for automated cluster balancing and Strimzi for cloud-native Kafka Kubernetes, we can maintain healthy Kafka clusters with significantly less effort. During this session, you will learn how to easily balance your under-performing cluster using the Kubernetes native Cruise Control resources provided by Strimzi.

hosted by Diane Mueller (Red Hat)

Deploying Crossplane Providers with OLM
Guest Speaker: Krish Chowdhary (Red Hat)
2021-05-25
OpenShift Commons Briefing
More upcoming briefings here: https://commons.openshift.org/events.html

Slides: https://speakerdeck.com/redhatopenshift/openshift-commons-briefing-crossplane-providers-and-olm-repackaging

Blog post: https://next.redhat.com/2021/05/20/deploying-crossplane-providers-with-the-operator-lifecycle-manager/

Abstract: Crossplane is a project that strives to bring cloud infrastructure, services, and applications closer to your Kubernetes cluster in order to create a hybrid control plane. This goal is primarily achieved through the use of providers, which are standalone controllers for a specific API group. The Crossplane project itself manages the lifecycle of these providers, from installation to cleanup. In this briefing, Red Hat's Krish Chowdhary will briefly discuss what providers are, the Crossplane architecture as well as how we can repackage a provider installation via the Operator Lifecycle Manager (OLM).

Slides:
Blog Post:

Host(s): Karena Angell and Diane Mueller (Red Hat)

Apache Kafka is getting used as an event backbone in new organizations every day. However, most of the time, connecting to simple third party applications and services becomes a headache that involves several lines of code and additional applications. As a result, connecting Kafka to services is a challenge nobody wants to face.

Wouldn't you like to have hundreds of connectors readily available out-of-the-box to solve this problem? The Camel Kafka Connect project, from the Apache foundation, has enabled their vastly set of connectors to interact with Kafka Connect natively. So, developers can start sending and receiving data from Kafka to and from their preferred services and applications in no time without a single line of code.


In summary, during this session will:
- Go over the list of connectors available as part of the project
- Showcase a couple examples of integrations using the connectors
- Share some guidelines on how to get started with the Camel Kafka Connectors

Integrations using Apache Camel and Apache Kafka in OpenShift
Zineb Bendhiba, Rachel Jordan, Mara Arias de Reyna (Red Hat)
May 10 2021
https://commons.openshift.org/events.html

Inside the Indexer
How Clair extracts and persists your container contents
Louis DeLosSantos (Red Hat)
2021-04-26
OpenShift Commons Briefing #Upstream #AMA
For more information about Clair:
https://github.com/quay/clair


Slides: https://github.com/openshift-cs/commons.openshift.org/blob/master/briefings/slides/Inside%20The%20Indexer.pdf

Event-driven Applications with Kogito Serverless Workflows and Knative
Guest Speaker - Ricardo Zanini (Red Hat)
hosted by Diane Mueller (Red Hat)
2021-04-19
OpenShift Commons Briefing
#AMA #Upstream
see full calendar here: https://commons.openshift.org/events.html
link to slides:
https://github.com/openshift-cs/commons.openshift.org/blob/master/briefings/slides/Event-driven%20Applications%20with%20Kogito%20Serverless%20Workflows%20and%20Knative%20%5B2021%5D.pdf

Introducing Gateway API for OpenShift 4.8 - Daneyon Hansen (Red Hat)

OpenShift Commons Briefing

2021-04-12
Gateway API is an open source project managed by the SIG-NETWORK and Contour community. It comprises resources for modeling service networking in Kubernetes. These resources evolve Kubernetes service networking through expressive, extensible, and role-oriented interfaces that are implemented by many vendors and have broad industry support. OpenShift 4.8 will add Gateway API support (tech preview).

Guest Speakers: Daneyon Hanson and Marc Curry

Hosted by Diane Mueller

Additional Resources:

https://projectcontour.io/community/
https://gateway-api.sigs.k8s.io/community/
Contour FAQ: https://projectcontour.io/resources/faq/
Contour Operator: https://github.com/danehans/contour-operator/blob/v1.14_ocp4.8_gw_api/OCP_GATEWAY_QUICKSTART.md



Note: This project was previously named “Service APIs” until being renamed to “Gateway API” in February 2021

Kyverno: Kubernetes Native Policy Management Ritesh Patel & Jim Bugwadia (Nirmata)
OpenShift Commons Briefing
03-29-2021

Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline.

Kyverno is a CNCF Sandbox Project, and in this OpenShift Commons Briefing, Nirmata’s Ritesh Patel and Jim Bugwadia will give introduction to the project, a demostration, walk us thru the road map and answer your questions.

Scribe: Asynchronous Data Replication
John Strunk, Parul Singh and Scott Creely (Red Hat)
OpenShift Commons Briefing #AMA #Upstream
February 22, 2021

Slides: http://bit.ly/3elfVXk

Scribe is exciting for its unique, light weight and agnostic data movement capabilities for any storage type including File, Block and Object. Scribe also supports all Kubernetes based storage drivers, CSI and non-CSI compliant. It takes advantage of best-of-breed industry data replication technologies using rsync and rclone controlled by a single CR based interface. Scribe also utilizes CSI capabilities like Snapshots and VolumeClones if supported by the driver.

Red Hat’s John Strunk, Parul and Scott Creeley for an introduction to Scribe, a bit of demo of it’s capablities, a look at the Road Map and live Q/A in this AMA-style OpenShift Commons Briefing.

K8GB - Kubernetes Global Balancer with Yuri Tsarev (Absa Group)
https://github.com/AbsaOSS/k8gb

Slides: http://bit.ly/2O7OxBf

Upcoming OpenShift Commons Briefings:
https://commons.openshift.org/events.html

K8GB is a Global Service Load Balancing solution with a focus on having cloud native qualities and work natively in a Kubernetes context. Global load balancing, commonly referred to as GSLB (Global Server Load Balancing) solutions, have typically been the domain of proprietary network software and hardware vendors and installed and managed by siloed network teams. k8gb is a completely open source, cloud native, global load balancing solution for Kubernetes. k8gb focuses on load balancing traffic across geographically dispersed Kubernetes clusters using multiple load balancing strategies to meet requirements such as region failover for high availability.

Global load balancing for any Kubernetes Service can now be enabled and managed by any operations or development teams in the same Kubernetes native way as any other custom resource.

In this briefing, we get an intro to K8GB from Yuri Tsarev (Absa) & we’ll leave time for live Q/A!

more k8gb details here: https://github.com/AbsaOSS/k8gb

Clair Overview and Road Map
Louis DeLosSantos, Hank Donnay, and Ales Raszka (Red Hat)
OpenShift Commons Briefing AMA hosted by Diane Mueller (Red Hat)

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of container-based infrastructure.

In this AMA-style briefing, Red Hat’s Louis, Hank and Ales give an introduction to Clair, demonstrate it’s use, and talk about the road map for future releases – and then take live questions from the audience.

Scribe is exciting for its unique, light weight and agnostic data movement capabilities for any storage type including File, Block and Object. Scribe also supports all Kubernetes based storage drivers, CSI and non-CSI compliant. It takes advantage of best-of-breed industry data replication technologies using rsync and rclone controlled by a single CR based interface. Scribe also utilizes CSI capabilities like Snapshots and VolumeClones if supported by the driver. Join this briefing for a introduction, demo and live AMA session with Scribe project leads!
https://github.com/backube/scribe

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of container-based infrastructure.

In this AMA-style briefing, Red Hat’s Louis, Hank and Ales will give an introduction to Clair, demonstrate its use, and talk about the road map for future releases - and then take live questions from the audience.

KubeLinter is a static analysis tool that analyzes Kubernetes YAML files and Helm charts, and checks them against a variety of best practices, with a focus on production readiness and security.

KubeLinter runs sensible default checks, designed to give you useful information about your Kubernetes YAML files and Helm charts. This is to help teams check early and often for security misconfigurations and DevOps best practices. Some common examples of these include running containers as a non-root user, enforcing least privilege, and storing sensitive information only in secrets.

In this session, StackRox’s Viswajith Venugopal and Michael Foster will give an introduction to Kubelinter, demonstrate it’s use, and talk about the road map for future releases.

Join us for this Ask Me Anything (AMA) Session on Kubernetes centralized policy management.

Red Hat’s Jaya Ramanathan and Yu Cao will talk about using policy-based governance for admission and audit scenarios across multiple clusters and demo how this can be done using OPA Gatekeeper with the Red Hat Advanced Cluster Management (ACM) policy engine.

Guest Speaker(s):Jayashree Ramanathan, Yu Cao and Kirsten Newcomer (Red Hat)

Hosted by Paul Morie and Diane Mueller (Red Hat)

Knative, created originally by Google with contributions from over 50 different companies, delivers an essential set of components to build and run serverless applications on Kubernetes. Knative offers features like scale-to-zero, autoscaling, in-cluster builds, and eventing framework for cloud-native applications on Kubernetes. Whether on-premises, in the cloud, or in a third-party data center, Knative codifies the best practices shared by successful real-world Kubernetes-based frameworks. Most importantly, Knative enables developers to focus on writing code without the need to worry about the “boring but difficult” parts of building, deploying, and managing their application.

In this briefing, Red Hat’s Paul Morie and VMWare's Matt Moore will give a brief intro into Knative, a bit of demo of some of the latest features, walk us thru the road ahead and answer your questions.

In this session we introduce you to Keptn: Cloud-native application life-cycle orchestration automating observability, dashboards, alerting, SLO-driven multi-stage delivery, operations & remediation.

Keptn decouples the declaration of delivery and remediation processes from the underlying tooling. Keptn is based on GitOps and follows the “everything as code” approach for its key use cases of automated deployments, testing, SLO-based quality gates, observability, promotion and remediation definitions!

Modern application development is evolving to support new architectures like microservices, containers, and serverless.  It’s no secret that traditional Java frameworks are not ideal for creating these types of applications.  Instead of learning a new framework for cloud-native applications, you should leverage your Java skills with Quarkus is specifically designed to optimize Java for container environments. Quarkus, in combination with OpenShift, provides an ideal application environment for creating scalable, fast, and lightweight applications. Quarkus significantly increases developer productivity with tooling, pre-built integrations, application services, and more.

Guest Speakers:

Rich Sharples, Application Services Product Management Senior Director
Jeff Beck, Application Services Product Marketing Manager
Daniel Oh, Application Services Technical Marketing Manager

Guest Speaker: Peter Brachwitz
The Elasticsearch Operator or ECK is built and maintained by the creators of Elasticsearch, it does a lot more than manage Elasticsearch though. The operator can help you automate the deployment, management and upgrade of Elasticsearch, Kibana, Beats and Enterprise Search. Since making the operator generally available in January 2020, we have consistently added value to our customers by releasing new features and partnerships, like the Red Hat Certification most recently.
In this Briefing, learn about how the ECK operator can help you automate the Day2 operations if you are running the Elastic Stack and Solutions on Kubernetes.

Keylime is a CNCF hosted project that provides a highly scaleable remote boot attestation and runtime integrity measurement solution. Keylime enables users to monitor remote nodes using a hardware based cryptographic root of trust. Keylime was originally born out of the security research team in MIT’s Lincoln Laboratory. https://keylime.dev

OpenShift Commons Briefing
Nov 9th, 2020
Guest Speakers: Luke Hinds and axel simon (Red hat)
Host: Diane Mueller (Red Hat)

OpenShift Commons Briefing AMA Session on Metal³
Metal3 Bare Metal Host Provisioning for Kubernetes
Feruzjon Muyassarov & Mael Kimmerlin (Ericsson)
https://metal3.io
The Metal³ project (pronounced: Metal Kubed) exists to provide components that allow you to do bare metal host management for Kubernetes. Metal³ works as a Kubernetes application, meaning it runs on Kubernetes and is managed through Kubernetes interfaces.
In this Commons AMA session, Feruzjon Muyassarov and Mael Kimmerlin (Ericsson) will give an overview of the project, demostrate deploying with Metal3 and talk about the road ahead

Foreman and Pulp Project Updates
Melanie Corr (Red Hat)
Dennis Kliban (Red Hat - Pulp)
Eric Helms (Red Hat - Foreman)
OpenShift Commons Briefing
October 5, 2020

Introduction to Kubernetes Scheduler
Wei Huang IBM
SIG-Scheduling Cochair
OpenShift Commons Briefing
June 29 2020