Kubernetes on OpenStack @eBay
Download as PPTX, PDF1 like1,806 views
This document summarizes how Kubernetes can be used on OpenStack. It discusses integrating Kubernetes with OpenStack services for networking (Neutron), identity and access management (Keystone), storage (Cinder and Swift), cluster setup/management, and container registry. For each area, it provides an overview of the current integration and potential future enhancements.
Kubernetes on OpenStack @eBay
- 1. Kubernetes on Openstack @ Ashwin Raveendran eBay Cloud Engineering
- 2. What is Kubernetes A lean, portable, extensible platform for managing cloud native applications - container packaged - dynamically scheduled - declarative state - microservices oriented
- 4. neutron keystone cinder nova swift
- 5. work streams Networking IAM Storage Cluster setup and Management Container Registry
- 6. Networking • Leverage cloud native networking solution Pods needs cluster wide routable IPs Each node requires a CIDR block Performance and Manageability • Neutron private networks within cluster • Assign one neutron network/subnet per node
- 8. Networking: future • Pure Layer 3 networking with BGP • Policy based distributed firewall • IPV6
- 9. Kube APIs requires identity and access management • Leverage keystone as the IAM service • map keystone projects == kube namespaces • use keystone authentication and RBAC IAM
- 11. ABAC policy based plugin Integrate keystone into kubectl cli flow for tokens Offer a native IAM service for cloud native applications IAM: future
- 12. Storage Stateful workload needs high performance persistent storage • leverage openstack cinder • Storage plugin manages pod volume lifecycle automatically
- 14. Storage: future • Native distributed storage • Swift based storage sidecars
- 15. Cluster Setup and Management • openstack apis, custom scripts, cloud-init, salt stack • disk-image-builder based pipeline for building compute images for minions • swift for storing non-dockerized build artifacts
- 16. Cluster Setup and Mgmt: future • multi cloud-provider cluster setup and management using declarative state • federated cluster management for hybrid clouds patterns (cluster federation)
- 17. Container Registry Container registry needs access control • Keystone for ACLs Container registry needs dependable storage • Swift as backing storage
- 18. Container Registry: future • Notary support • Scale
- 19. thank you
Editor's Notes
- #2: Intro on name
- #3: Container cluster platform, Abstracts infrastructure, scheduled , application failure and node failures are handled Containers Flexible Consistency Division of labor between dev and ops predictable performance
- #6: Loadbalancer integration challenges
- #7: Loadbalancer integration challenges
- #9: Loadbalancer integration challenges