IBM Think 2020 Openshift on IBM Z and LinuxONE
- 1. Filipe Miranda
Solution Architect Leader
fmiranda@ibm.com
IBM Hybrid Cloud Solutions on IBM Z & LinuxONE
Red Hat Synergy
Worldwide IBM Z
Worldwide Acceleration Team
OpenShift on IBM Z and LinuxONE
- 2. The market is entering a new chapter in cloud and digital
Customer Expectations Continue to Rise
The empowered customer is increasingly savvy and expects a highly personalized experience, one that is consistent across
channels. The cause of this rising expectations is fairly clear and Uber, Amazon, Airbnb, Netflix are the disruptors of their industries.
“Each time a consumer is exposed to an improved digital experience, their expectations are immediately reset to a new higher level.”
SPEED is More Important than Ever
"It's no longer the big beating the small, but the fast beating the slow."
Indeed the challenge for many legacy brands is that they struggle to move as rapidly towards the future that digital disruptors have
already staked out.
Digital Transformation means Business Transformation
Enterprises need to recognize that evolving to a true digital value proposition isn't just about digital, but requires in many cases a re-
invention of major portions of the business including core technology systems, operating processes and business models
"Digital transformation is a fundamental shift in how a firm delivers value and drives revenue."
What problems are customers trying to solve?
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 3. Infrastructure Efficiency
Containers significantly reduce the overhead on compute resources — particularly memory. This enables far more workloads per
physical server since each share a single host OS, meaning only one copy of the kernel and system libraries is running per
system.
Greater Scalability
Greater scalability is garnered through the use of container orchestration systems like Kubernetes that can automatically place
workloads on the least-used node in a container cluster and dynamically scale the number of container instances up and down in
response to changing application usage
Greater Agility in Application Delivery
This increase is a result of the low resource overhead of containers that allows new instances to be deployed in seconds.
DevOps Organizations Creation
Containers facilitate the integration of developers and IT operations into DevOps organizations that can accelerate application
testing and delivery.
New Application Creation
Containers combine deployment agility, process automation, and application scalability, allowing developers to rapidly explore and
prototype new ideas while encouraging them to design differently. A different approach helps developers take advantage of
distributed container systems, along with their dynamic scalability and frictionless startup and shutdown processes.
How containers can help ?
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 4. Linux
Container Runtime & Packaging
Networking SecurityStorage Registry
Logs &
Metrics
Container Orchestration & Cluster Management
Application Lifecycle Management (CI / CD)
Build Automation Deployment Automation
Service Catalog (Language Runtimes, Middleware, Databases, …)
Self-service
Container ContainerContainer Container Container
PublicPrivateVirtualPhysical
Bring your own middleware, data
& other services. Build out a
service catalog / interface to
enable self-service deployment.
Take existing application build/CI
& deployment tools and evolve to
add container image build & mgt.,
continuous deployment, etc.
Pull Kubernetes or other
orchestration (Mesos, Swarm)
from rapidly moving upstream &
support / maintain yourself. Do all
the work required to integrate it
into your enterprise IT
environment (networking,
storage, registry, security,
logging, metrics, etc.)
Pull Docker container runtime
from rapidly moving upstream
and support, secure and maintain
it yourself.
Support and manage your own
Linux community distro or build
on existing RHEL or 3rd party
commercial Linux offerings.
DIY CONTAINER STACK CHALLENGES
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 5. CONTAINER
CHALLENGES
Trusted enterprise Kubernetes
Continuous security, world-class support and services, and
deep expertise to confidently run any application
A cloud-like experience, everywhere
Full-stack automated operations on a consistent foundation
across on-premises or hybrid cloud infrastructure
Empowerment for developers to innovate
Ability to get applications to production sooner with a wide
range of technologies and streamlined workflows
Container security
Image scanning, patching, and compliance
Day 2 management
Installations, upgrades, and maintenance
Integration of existing enterprise technology
Application delivery
Monitoring, metering, and management
Integration of existing developer tools
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 6. Automated, full-stack installation from the
container host to application services
Seamless Kubernetes deployment to any
cloud or on-premises environment
Autoscaling of cloud resources
One-click updates for platform, services,
and applications
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
Red Hat Openshift 4
- 7. Red Hat OpenShift on IBM Z & LinuxONE / March 2020 / © 2020 IBM Corporation
Introduction to RHEL CoreOS (RHCOS)
Immutable container host based on RHEL 8
• CoreOS is tested and shipped in conjunction
with the OpenShift platform
• Immutable and tightly integrated with
OpenShift
• Self-managing, over-the-air updates
• Host isolation is enforced via Containers and
Security Enhanced Linux (SELinux)
CoreOS is operated as part of the cluster with
config for components managed by operators.
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 8. • OpenShift retrieves the list of
available updates
• Admin selects the target
version
• OpenShift is updated over
the air
• Auto-update support
Over the Air (OTA) Updates
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 9. Flexible app
architectures
Uniform deploy
and debug
No reinvention
of core concepts
Truly hybrid
Operators codify operational knowledge and workflows to automate life-
cycle management of containerized applications with Kubernetes
Kubernetes-native day 2 management
OPERATOR
FRAMEWORK
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 10. • OperatorHub.io launched by Red Hat, AWS,
Microsoft and Google
• OpenShift Operator Certification
• OperatorHub integrated into OpenShift 4
COMMUNITY OPERATORS
OperatorHub and certified Operators
OPENSHIFT CERTIFIED OPERATORS
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 11. Key Features
• Import source from Git
• View existing container image
• Edit YAML definition
• Build from Dockerfile
• Explore services catalog
• Deploy database from catalog
Developer Console: Create Applications
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 12. Key Features
• View structure and status of app
components
• Drill into specific workloads
• Quickly navigate to pod logs
• Manually scale
• Pod donut!
• Access route/URL
• Linked build and source
Developer Console: Application Topology
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 13. Key Features
• View structure and status of app
components
• Drill into specific workloads
• Quickly navigate to pod logs
• Manually scale
• Pod donut!
• Access route/URL
• Linked build and source
Developer Console: Application Logs
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 14. Key Features
• View structure and status of app
components
• Drill into specific workloads
• Quickly navigate to pod logs
• Manually scale
• Pod donut!
• Access route/URL
• Linked build and source
Developer Console: Application Scaling
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 15. Key Features
• View structure and status of app
components
• Drill into specific workloads
• Quickly navigate to pod logs
• Manually scale
• Pod donut!
• Access route/URL
• Linked build and source
Developer Console: Application Deployment
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 16. Kubernetes OpenShift
Multi-host container scheduling ✔ ✔
Self-service provisioning ✔ ✔
Service discovery ✔ ✔
Enterprise Linux operating system ✔
Image registry ✔
Validated storage plugins ✔
Networking and validated networking plugins ✔
Log aggregation and monitoring ✔
Multi-tenancy ✔
Metering and chargeback ✔
CONTAINER INFRASTRUCTURE AND MANAGEMENT
16
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 17. Kubernetes OpenShift
Automated image builds
No developer or
application services
✔
CI/CD workflows and pipelines ✔
Certified application services ✔
Certified middleware ✔
Certified databases ✔
200+ certified ISV solutions ✔
DEVELOPER EXPERIENCE
17
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 18. Kubernetes OpenShift
Community forums and resources ✔ ✔
Zero downtime patching and upgrades ✔
Enterprise 24/7 support ✔
9 year support lifecycle ✔
Security response team ✔
External review: 10 most important differences between OpenShift and Kubernetes
ENTERPRISE SUPPORT AND COMMUNITY
18
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 19. Infrastructure
IBM Cloud®
Edge Private
IBM Z®
IBM LinuxONE™
IBM Power Systems™
IBM Hybrid Multicloud Strategy
Creating the world’s leading hybrid cloud provider
Private
Consulting
Services
Cloud Native
Software
Foundation
Strategy Migration Development Management
Cloud Pak for
Applications
Cloud Pak for
Data
Cloud Pak for
Integration
Cloud Pak for
Automation
Cloud Pak for Multicloud
Management
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
Developer &
DevOps Tools
Modernization
Toolkit
Frameworks and Runtimes
Organize Analyze
Collect
API
Lifecycle
Messaging
and Events
App and Data Integration Workflow and Decisions
Operational
IntelligenceContent
App and
Infrastructure
Multicluster
Security and Compliance
Management
- 21. Why IBM Z and IBM LinuxONE when Using Containers?
Ultra Low Latency and Large Volume Data
Serving and Transaction processing
Enterprise class infrastructure – Elastic,
Scalable, Available and Resilient
Highest levels of Security, Compliance and
Platform uptime
Scale-out to 2.4 million containers on a single system
Workload scaling that involves an increase in the capacity
for resources within the same server either by redirecting
resources, increasing priority, unlocking resources etc.
without increasing the number of resources.
99.999% uptime for hardware and even higher
guarantees for memory/network. There have been zero
memory failures in field in the past 4 decades and zero
unplanned downtime
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 22. IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
Red Hat Openshift on IBM Z and LinuxONE
OpenShift 4.3
now available
on IBM Z and
LinuxONE
- 23. IBM Z / LinuxONE LPAR 1
z/VM Hypervisor
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
Red Hat Openshift:
• Minimum configuration
• 1 LPAR
• z/VM 7.1 Hypervisor
• Openshift cluster nodes
run on guest virtual
machines
Minimum Configuration Architecture Overview
OSA /
RoCE
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 24. Preferred Configuration Architecture Overview
Notes
• Distribute OCP master nodes (control planes) to different z/VM instances on one or more IBM Z /
LinuxONE servers to achieve High Availability and cover service outages/windows
IBM Z / LinuxONE
z/VM LPAR
z/VM Control Program (CP)
OCP
Master
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
z/VM LPAR
z/VM Control Program (CP)
OCP
Master
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
z/VM LPAR
z/VM Control Program (CP)
OCP
Master
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OSA /
RoCE
OSA /
RoCE
OSA /
RoCE
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 25. Architecture Overview – Network Option 1
Use single vNIC for z/VM guest virtual
machines:
• Direct-attached OSA or RoCE to
each guest virtual machine
Openshift uses this 1 vNIC for two
networks:
• External communication
• Internal communication – software-
defined network for Kubernetes pod
communication
IBM Z / LinuxONE
z/VM LPAR
z/VM Control Program (CP)
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OSA /
RoCE
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 26. Architecture Overview – Network Option 2
IBM Z / LinuxONE
z/VM LPAR
z/VM Control Program (CP)
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OSA /
RoCE
VSwitch
Use single vNIC for z/VM guest virtual
machines:
• z/VM VSwitch with OSA (optionally,
using link aggregation)
Openshift uses this 1 vNIC for two
networks:
• External communication
• Internal communication – software-
defined network for Kubernetes
pod communication
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 27. IBM Z / LinuxONE
z/VM LPAR
z/VM Control Program (CP)
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Master
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
OCP
Worker
Node
RHEL
CoreOS
Architecture Overview – Disk Storage Options for Installation
Disk storage considerations
• Minidisks are a z/VM virtual resources
and represent smaller chunks on a
DASD; Linux sees them as individual
disks (DASDs)
• Consider HyperPAV for ECKD storage
• DASDs/FCP devices can be
dedicated to a z/VM guest ("pass-
through")
• Consider using FCP multipath
installations (future)
FCP
FCP
FCP
FCP
FCPECKD
MinidiskMinidisk
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 28. z/VM
Sample operational Openshift on
z/VM Layout
Notes
• DHCP server/relay is not required
for static IP configurations.
API ETCD
Storage
API ETCD
Storage
Master
Nodes
API ETCD
Storage
Router
Worker nodes
Router Registry
Storage
App 1 App 2
Storage
Local
DASD/FCP
Local
DASD/FCP
NFS Local
DASD/FCP
NFS
External network
Load Balancer
DHCP NFS
OpenShift SDN
DNS
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 29. • Enterprise scale Private Cloud-in-a-Box
Instant capacity on-demand with scale-up/out in a single footprint for space and
power constrained data-centers
• Digital Transformation and Modernization for z/OS
• Extreme consolidation and scalable Data Serving
• Data Gravity
apps connect via ultra-low-latency, ultra-secure and highly resilient network into
legacy system-of-record (eg. Service Broker to zOS instances)
• Consistency Across DevOps Experience
• Workload Modernization and Hybrid Cloud
Adoption Patterns for Openshift on IBM Z and LinuxONE
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 30. Large International Bank
Modernization and Digital Transformation
Modernize and extend legacy assets incrementally while
maintaining enterprise SLAs and keeping risk/cost low.
Accelerate Enterprise Digital
Transformation
Containerized services running on Openshift
on Z co-located on the same hardware with
z/OS Db2 data and CICS for low latency,
high volume transaction processing –
enables incremental modernization of
mission-critical systems while maintaining
enterprise SLAs.
Up ~10x lower application response time
by co-locating applications on Z
compared to workloads running on x86.
Security
z/OS
CPs/mem/IO/hipersockets
z/VM
service
CICS/ IMS/DB2
z/OSMF
IBM Z
z/OS
Connect
serviceservice
COBOL .…
OpenShift Experience with Better SLAs at Lower Cost
Seamless integration of IBM Z with OpenShift DevOps, dev experience, etc
Common cloud control plane across the entire enterprise – including Z
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
- 31. What’s Next?
IBM Think 2020 / May 5-6 2020 / © 2020 IBM Corporation
https://www.linkedin.com/pulse/understanding-network-definitions-from-
openshift-4-ibm-filipe-miranda/
https://www.openshift.com/blog/red-hat-openshift-installation-process-experiences-on-ibm-z-linuxone