Improving CloudStack for operators
Download as PPTX, PDF1 like1,270 views
Rohit Yadav from ShapeBlue discussed improvements to Apache CloudStack for operators, including support for SAML2 single sign-on, metrics views in the UI, out-of-band host management, CloudMonkey enhancements, and upcoming dynamic role-based access control. He also outlined efforts in the CloudStack community to improve clustering, installation/upgrades, and other areas.
Improving CloudStack for operators
- 1. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue Improving CloudStack for Operators Rohit Yadav Software Architect rohit.yadav@shapeblue.com @_bhaisaab | rohit.yadav.xyz CloudStack European User Group, 3 March 2016
- 2. The Cloud Specialists • Software Architect at ShapeBlue • Apache CloudStack Committer since 2012 and PMC member • Specialise in: • CloudStack feature development and 3rd party integrations • KVM, API/DB Layers, SystemVMs, UI, Upgrades, UI • Distributed Systems, Java, Python • Author: Apache CloudStack CloudMonkey • Release Manager: Apache CloudStack 4.5.x • Maintainer of Apache CloudStack packages (shapeblue.com/packages) • Recent work: Out-of-band management, Metrics Views, SAML2 plugin, KVM and UI improvements A b o u t M e
- 3. The Cloud Specialists A b o u t S h a p e B l u e “ShapeBlue are expert builders of public & private clouds. They are the leading global Apache CloudStack integrator & consultancy” …and we’re hiring!
- 4. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue I m p r o v i n g C l o u d S t a c k O p e r a t i o n a l E x p e r i e n c e ? • Managing CloudStack users in large orgs • Finding critical information • Dealing with physical hosts • Dealing with security and user roles • Making sense of CloudStack API results • Pain points around Installing and Upgrading CloudStack • Improving CloudStack Clustering
- 5. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue W h a t i s t h i s t a l k a b o u t ? Improving CloudStack for Operators • Support for SAML2 • Metrics Views for CloudStack • Out-of-band Management for CloudStack • CloudMonkey improvements • Dynamic CloudStack Roles (RBAC) • Upcoming features • Painpoints and improvements
- 6. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue S A M L 2 • SAML2 Single-Sign-On Plugin based on newer authentication framework in CloudStack • Available in 4.5.2, 4.6.0+ • Authorization based workflow • Demo
- 7. C l i c k t o e d i t The Cloud Specialists @ShapeBlueShapeBlue.com C l o u d S t a c k S A M L 2 A u t h e n t i c a t i o n Wo r k f l o w
- 8. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue M e t r i c s Vi e ws f o r C l o u d S t a c k • Finding critical information about infrastructure and cloud resources using UI • Identify performance hotspots • CloudMonkey works but operators like using UI • Available in 4.7.0+ • Demo
- 9. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue O u t - o f - b a n d M a n a g e m e n t f o r C l o u d S t a c k • Manage physical hosts using out-of-band management interface such as ilo, idrac • Allows custom driver implementation, out of box support for IPMI 2.0 • Available in 4.9.0+ • Demo
- 10. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue O u t - o f - b a n d M a n a g e m e n t h i g h - l e v e l a r c h i t e c t u r e OOBM Power State Finite State Machine
- 11. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue C l o u d M o n k e y I m p r o v e m e n t s • CSV output: Making sense of data • History support • Available in 5.3.3 (upcoming) • Demo
- 12. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue U p c o m i n g f e a t u r e : D y n a m i c R B A C • Improve RBAC, allow dynamic roles • Presently only four static roles: Admin, Resource Admin, Domain Admin, User • Each role maps to set of allowed APIs, currently statically configured in commands.properties • Operators can create users/account with new sets of dynamic roles with custom set of allowed APIs
- 13. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue O t h e r E ff o r t s i n t h e C o m m u n i t y • Dynamic routed VPC (support for OSPF) • Host HA with out-of-band based fencing • Distributed Resource Load-Balancer Service • CloudStack CI for Github PRs • Improve CloudStack installation and upgrade experience specifically around database and systemvms • SDN plugin improvements, StrongSwan based VPN/ipsec, Debian 8 based systemvm template, support Java 8, embedded Jetty. Marvin and UI improvements
- 14. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue I m p r o v i n g C l o u d S t a c k C l u s t e r i n g • Better distributed systems implementation; claim&ownership, improved fault-tolerance and resilience, clustering and agent rebalancing, circuit breaker, mgmt server fencing • Improve CloudStack agents framework, improve/replace link protocol • Improve job framework • Zero-downtime upgrades
- 15. C l i c k t o e d i t The Cloud Specialists ShapeBlue.com @ShapeBlue T h a n k y o u ! • Q&A • Follow-ups - dev@cloudstack.apache.org
Editor's Notes
- #5: a few of the things that ive been working on recently hat these had one thing in common - theyre all features to make running large clouds easier.
- #7: Large federated login, shared pool of compute/network/storage across federations/co-operations
- #10: Why need drivers – gives you flexibility to implement your own