book

Hybrid Cloud Apps with OpenShift and Kubernetes

by Michael Elder, Jake Kitchener, Dr. Brad Topol

June 2021

Intermediate to advanced

271 pages

7h 19m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Why We Wrote This BookWho This Book Is ForHow This Book Is OrganizedConventions Used in This BookUsing Code ExamplesO’Reilly Online LearningHow to Contact UsAcknowledgments
Kubernetes: Cloud Infrastructure for Orchestrating Containerized ApplicationsCNCF Accelerates the Growth of the Kubernetes EcosystemOpenShift: Red Hat’s Distribution of KubernetesBenefits of OpenShift for DevelopersBenefits of OpenShift for IT OperationsSummary
Kubernetes ArchitectureDeployment Options for Kubernetes and OpenShiftRed Hat’s CodeReady ContainersIBM CloudOpenShift Deployment OptionsKubernetes and OpenShift Command-Line ToolsKubernetes FundamentalsWhat’s a Pod?How Do I Describe What’s in My Pod?DeploymentsRunning the Pod and Deployment Examples in Production on OpenShiftService AccountsOpenShift EnhancementsAuthenticationProjectsApplicationsSecurity Context ConstraintsImage StreamsKubernetes and OpenShift Advanced TopicsWebhooksAdmission ControllersRole-Based Access ControlOperatorsSummary
Pod Resources and SchedulingDriving Scheduler Decisions via Resource RequestsNode Available ResourcesSchedulingPod Priority and PreemptionPost-Scheduling Pod Life CyclePod Quality of ServicePod QoS LevelsTesting Resource LimitsNode EvictionCapacity Planning and ManagementKubernetes Worker Node CapacityKubernetes Master CapacityAdmission Controller Best PracticesStandard Admission ControllersAdmission WebhooksSummary
System AvailabilityMeasuring System AvailabilityWhat Is a Highly Available System?OpenShift and Kubernetes Application and Service AvailabilityFailure ModesApplication Pod FailureWorker Node FailureWorker Zone FailureControl Plane FailureNetwork FailureSummary
HelmKustomizeGeneratorsCompositionPatchesOverlaysDirect Deploy of Kustomize-Generated Resource FilesGitOpsRazeeArgo CDTektonTasksPipelinesOpenShift PipelinesOpen Cluster Management AppsSummary
Why Multicluster?Use Case: Using Multiple Clusters to Provide Regional Availability for Your ApplicationsUse Case: Using Multiple Clusters for Multiple TenantsUse Case: Supporting Far-Edge Use Cases Where Clusters Do Not Run in Traditional Datacenters or CloudsArchitectural CharacteristicsProvisioning Across CloudsUser-Managed OpenShiftUpgrading Your Clusters to the Latest Version of KubernetesSummary of Multicloud Cluster ProvisioningOpenShift as a ServiceKubernetes as a ServiceOperating System Currency for NodesSummary
Configuring Your Cluster with OperatorsUnderstanding OperatorsExample: Container Security OperatorUsing Cluster Operators to Manage OpenShiftExample: Configuring the Authentication OperatorOpenShift htpasswd Identity ProviderPolicy and Compliance Across Multiple ClustersPolicy Example: Federate a Project Across Your FleetPlacementRules to Assign Content to ManagedClustersPolicy Example: Managing etcd Encryption Within ManagedClustersPolicy Example: Managing RBAC Within ManagedClustersPolicy Example: Managing IdPs Within ManagedClustersPolicy Example: Managing Upgrades with Policy Across ManagedClustersSummary
Failure Is InevitableMulticluster Load BalancingAutomating Without OperatorsDeploying the Example ApplicationConfigure Your Hub ClusterProvision an OpenShift Cluster to Host the Open Cluster Management HubConfigure the Open Cluster Management HubProvision Two or More Clusters to Host the ApplicationDeploy Ansible Tower and the Ansible Resource OperatorConfigure Projects for ServiceNow and F5 DNS Load BalancerConfigure the toweraccess Secret and Create the Ansible Tower TokenDeploy the pacman-app Example to Your ClusterSummary

Increased Migration of Legacy Enterprise Applications to Cloud Native ApplicationsIncreased Adoption of Kubernetes for High Performance ComputingKubernetes and OpenShift Will Become the De Facto Platforms for Machine Learning and Deep LearningOpen Cloud Marketplaces Will Accelerate Adoption of Cloud Native ApplicationsOpenShift Will Be the Platform for Enterprise MulticloudRecommended ResourcesIBM Developer WebsiteLearn OpenShiftKubernetes WebsiteKubernetes IBM Cloud Provider Special Interest GroupKubernetes Contributor Experience Special Interest GroupSummary

Content preview from Hybrid Cloud Apps with OpenShift and Kubernetes

Preface

OpenShift, the Red Hat distribution of Kubernetes, is rapidly becoming the platform of choice for containerized applications. As enterprises attempt to scale and operate OpenShift, there are many practices that must be understood to manage resources, expose those resources for application teams, govern those resources, and deliver changes continuously to those environments.

Based on our expertise built on managing and supporting thousands of bare metal and virtual machine clusters for some of the largest enterprise applications, we will focus on how to operationalize both basic Kubernetes and OpenShift with specific techniques and examples to make your organization effective.

Why We Wrote This Book

Although a lot of content exists on how to get started with Kubernetes and OpenShift, our goal was to focus on a book that covered more advanced concepts, such as the effective management of cluster resources and availability models that can be applied to ensure business continuity. In addition, we wanted to dig deep into topics, tools, and best practices that are critical to operating Kubernetes and OpenShift successfully in production environments. We give particular attention to topics like security, advanced resource management, continuous delivery, multicluster management, and high availability. Additionally, the book explores best practices for supporting hybrid cloud applications, which are applications that integrate the best features and functions from a combination ...