46
You must use Computer Audio This session is being conducted using Audio Broadcast – it is not possible to join by phone Attendees do not have microphone capability Use the Q&A panel to ask questions Click the arrow Type your question in the box – hit “Send” AUDIO WILL COMMENCE WHEN THE MEETING BEGINS 1 2 3 If you do not see Q&A, click the icon with 3 dots, and select Q&A Audio quality is highly dependent on individual’s internet bandwidth. If you experience audio issues, we recommend you : 1) Turn off your company VPN connection 2) Check if you have applications running in the background – anti-virus can completely cut audio 3) If your computer is connected to a virtual environment, it can effect quality – connect from a PC w/out virtual environment if possible TechU Talks is moving to a new platform to increase capacity and improve user experience. Register once and get access to webcasts and replays from May 12 th going forward. https://bit.ly/TechUTalks

AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

You must use Computer Audio• This session is being conducted using

Audio Broadcast – it is not possible to join by phone

• Attendees do not have microphone capability

Use the Q&A panel to ask questions

Click the arrow

Type your question in

the box – hit “Send”

AUDIO WILL COMMENCE WHEN THE MEETING BEGINS

1

2

3

If you do not see Q&A, click the icon with 3 dots, and

select Q&A

Audio quality is highly dependent on individual’s internet bandwidth. If you experience audio issues, we recommend you :

1) Turn off your company VPN connection2) Check if you have applications running in the background –

anti-virus can completely cut audio3) If your computer is connected to a virtual environment, it

can effect quality – connect from a PC w/out virtual environment if possible

TechU Talks is moving to a new platform to increase capacity and improve user experience. Register once and get access to webcasts and replays from May 12th going forward.

https://bit.ly/TechUTalks

Page 2: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

How to build your complete Red Hat OpenShift environment on IBM Z

Wilhelm MildIBM Executive IT ArchitectIBM R & D Lab Germany

2020 IBM Systems TechUApril 30, 2020

Page 3: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

2020 TechU Talks

Thursday 11:00 AM EDT April 30, 2020How to Build Your Complete Red Hat OpenShift Environment on IBM Z

Panelists:• Wilhelm Mild, IBM Executive IT Architect, Integration Architectures for Container,

Mobile on IBM Z and LinuxONE - IBM Systems

• Elton DeSouza, Chief Architect, Cloud Native Client Success on z at IBM, IBM Systems

• Kavita Sehgal, Program Director for Hybrid Cloud on IBM Z & LinuxONE Lead, IBM Systems

• Narjisse Zaki, Linux on Z & LinuxONE Architect - IBM Systems

• Brett Webb, Program Director for LinuxONE WW Sales Enablement - IBM Systems

IBM Systems TechU © Copyright IBM Corporation 2020 3

Q&A can be in English, Spanish, French and German

Page 4: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

Agenda

4

➢ What is Red Hat OpenShift

➢ Red Hat OpenShift on IBM Z and LinuxONE Overview

➢ Planning for an environment on IBM Z & LinuxONE

➢ The IBM Cloud Paks

➢ Installation & setup guidance

Page 5: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

Foundation

Infrastructure

Advise Move Build Manage

Certified Offerings

Open Hybrid Multicloud Platform

Common Services

Red Hat OpenShift

Mesh/Serverless/Tekton/…

RHEL/CoreOS

Cloud Paks

ApplicationsData Integration AutomationMulticloud

Management

Services

5

IBM Z®

IBM LinuxONE™

IBM® Hybrid Multicloud Strategy

Open Hybrid Cloud is the future

5

IBM Power Systems™ IBM cloud™

AWS™

Azure™

Google Cloud™

IBM Systems TechU © Copyright IBM Corporation 2020

Page 6: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

Red Hat OpenShift is a leader in The Forrester New Wave™: Enterprise Container Platform Software Suites

Reference quotes from the analyst report

“OpenShift supports both public cloud and on-premises environments in a dynamic and automated fashion.”

“Red Hat has great synergy across its product ecosystem.”

Analysts Link

Forrester Red Hat OpenShift analyst reports

6

Page 7: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

What is Red Hat OpenShift about

- An enterprise Kubernetes platform for container workloads

- Enables seamless Kubernetes deployments on any cloud or on-premises environments

- Integrated and automated installation, from infrastructure to OS and application services

- Seamless platform and application updates

- Auto-scaling of resources and services

- Ability to run enterprise workloads with enterprise CI/CD services, across multiple deployments

7IBM Systems TechU © Copyright IBM Corporation 2020

Page 8: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Kubernetes MasterKubernetes MasterKubernetes Master

Worker 1 Worker 2 Worker 3

Kubernetes (K8S) – defines itself in a cluster format

Container Pod

container2container1 container1 container2 container1 container3

Container Pod Container Pod

K8S cluster

➢ Kubernetes orchestrates Containers; it is not running them➢ Smallest entity is a pod, which can contain one or more containers 8

Page 9: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Infrastructure Support

Application Catalog

Development support

Image and Registry

Management

Kubernetes Core Functions

Differentiator: Toolset and components

Kubernetes APIs are used in all orchestration products(e.g. Red Hat OpenShift, Cloud Foundry, Rancher, IBM Cloud Private)

NamespaceNamespace

container engine

container runtime

containercontainer container

Host kernel

POD POD

9

Page 10: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

Red Hat OpenShift V4 Overview

Physical Virtual Private Public

CaaS↔PaaS | FaasBest IT ops experience Best developer experience

Cluster servicesmonitoring, showback,

registry, logging

Application servicesmiddleware, functions, ISV

Service mesh

Developer servicesdev tools, automated

builds, CI/CD, IDE

Automated operations

Enterprise Linux CoreOS

certified

10IBM Systems TechU © Copyright IBM Corporation 2020

Page 11: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift Container change – Docker

Red Hat headed towards a world without Docker

• cri-o is only one component (the Kubernetes CRI runtime) of OpenShift

• RHEL will not deliver a Docker engine anymore

• Red Hat replaced it with:

– podman (Docker client compatible CLI)

– skopeo (registry)

– buildah (Docker build)

11

Red Hat

SUSE

Ubuntu

Docker podman

SLES15 17.09 -

SLES15 SP1 18.09.1 1.0.1

Docker podman

RHEL 7.5 1.13 0.9.2

RHEL 7.6 1.13 1.4.4

RHEL 7.7 1.13 1.4.4

RHEL 8 - 1.0.0.2

RHEL 8.1 - 1.4.2

Docker podman

16.04 LTS 18.09.7 -

18.04 LTS 18.09.7 -

20.04 LTS 18.03.8 -

Container availability on IBM Z

11

Page 12: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift Version 4 evolution

12

Page 13: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Introduction to RHEL CoreOS (RHCOS)

Immutable container host based on RHEL 8

• CoreOS is tested and shipped in conjunction with the Red Hat OpenShift platform

• Immutable – can not be changed & no sshand tightly integrated with Red Hat OpenShift

• Self-managing, over-the-air updates, appliance model – like a container

• Host isolation is enforced via Containers and Security Enhanced Linux (SELinux)

CoreOS is operated as part of the cluster with config for components managed by operators.

13

Page 14: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift v4.3 for IBM Z and LinuxONE is available today !

14

30. April 2020 NEW

Page 15: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Agenda

15

➢ What is Red Hat OpenShift

➢ Red Hat OpenShift on IBM Z and LinuxONE➢ Planning for an environment on IBM z & LinuxONE

➢ The IBM Cloud Paks

➢ Installation & setup guidance

Page 16: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift V4 Installation Options

▸* Based on OCP v4.3 GA slated for March; public beta available now

▸** Entitlements of OCP obtained through a Cloud Pak purchase are not transferable to these environments

Full Stack Automated (IPI)

Simplified opinionated “Best Practices” for cluster provisioning

Fully automated installation and updates including host container OS.

Pre-existing Infrastructure (UPI)

Customer managed resources & infrastructure provisioning

Plug into existing DNS and security boundaries

OPENSHIFT CONTAINER PLATFORM HOSTED OPENSHIFT

Azure Red Hat OpenShift **

Deploy directly from the Azure console. A MSFT service, jointly managed by Red Hat and Microsoft Azure engineers.

OpenShift Dedicated **

Get a powerful cluster, fullymanaged by Red Hat engineers and support; a Red Hat service.

Red Hat OpenShift on IBM Cloud *

Deploy directly from the IBM Cloud console. An IBM service, master nodes are managed by IBM Cloud engineers.

On IBM Z and LinuxONE

16

Page 17: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift (OCP) V4 on IBM Z and LinuxONE

https://www.ibm.com/blogs/systems/get-ready-for-red-hat-openshift-on-ibm-z-and-linuxone/

➢ takes advantage of the underlying enterprise capabilities➢ grow to thousands of Linux guests ➢ and millions of containers

These capabilities were highlighted with the recent announcement of the IBM z15 and IBM LinuxONE III. Running Red Hat OpenShift on IBM Z and LinuxONE also enables cloud native applications to easily integrate with existing data and applications on these platforms, reducing latency by avoiding network delays.

z/VM 7.1

LPAR OSA/ RoCE

OpenShift cluster

VSWITCH

➢ non-disruptively grow, vertical and horizontal scalability ➢ including advanced security ➢ secure Cloud Computing,

including FIPS 140-2 Level 4 certification

17

Page 18: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift on LinuxONE or IBM Z collocated with z/OS

z/VM 7.1

LPAR

OSA/ RoCE

OpenShift

VSWITCH

z/VM 7.1

LPAR

OSA/ RoCE

OpenShift

VSWITCH

IBM LinuxONE IBM Z

Red Hat OpenShift standalone Red Hat OpenShift collocated with z/OS

z/OS

LPAR OSA

DB2

z/O

SM

F

transactionalservices

zCX

CICS

z/O

S

Co

nn

ec

t

IMS

18

Page 19: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Which Red Hat OpenShift environment(s) would be most likely implement in your enterprise?

(A) Red Hat OpenShift standalone

(B) Red Hat OpenShift collocated with z/OS

Poll

(C) Both

19

Page 20: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Agenda

20

➢ What is Red Hat OpenShift

➢ Red Hat OpenShift on IBM Z and LinuxONE

➢ Planning for an environment on IBM z & LinuxONE➢ The IBM Cloud Paks

➢ Installation & setup guidance

Page 21: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

z/VM 7.1

Minimum OCP cluster Nodes on IBM Z & LinuxONE with z/VM 7.1 (PoC)

LPAR ( z13,+ / LinuxONE)3IFLs + SMT2 OSA/ RoCE

Master13 vCPU,

16 GB memory

OCP Master

Master23 vCPU,

16 GB memory

OCP Master

Master13 vCPU,

16 GB memory

OCP Master

Worker23 vCPU,

8 GB memory

OCP Worker

Worker13 vCPU,

8 GB memory

OCP Worker

EAV –Ext. Address Vol.for ECKD usage

Hyper-PAVfor ECKD

VSWITCH

ECKD/DASDFCP/SCSINFS

The minimum system requirements for an OCP cluster are:

➢ Hardware:• IBM z13 or later• any IBM LinuxONE • 1 LPAR, SMT2 with 3 IFLs,

+80GB RAM➢ Hypervisor

• z/VM Hypervisor 7.1• EAV Function ( HyperPAV recomm.)

➢ Networking options• OSA, RoCE, z/VM VSWITCH • 1 Network interface avail. per Node

➢ Storage• OCP Master, 120 GB each• OCP Worker, 120 GB workload dep.• NFS, 150 GB

21

Page 22: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

z/VM 7.1

LPAR ( z13, … / LinuxONE)3IFLs + SMT2 OSA/ RoCE

Master13 vCPU,

16 GB memory

OCP Master

Master23 vCPU,

16 GB memory

OCP Master

Master13 vCPU,

16 GB memory

OCP Master

Worker23 vCPU,

8 GB memory

OCP Worker

Worker13 vCPU,

8 GB memory

OCP Worker

Bootstrap(temporary)

4 vCPU, 16 GB memory

CoreOS

Forinstallation(temporary)

RequiredExternal services

Load Balancer

DNS

NFS

EAV –Ext. Address Vol.for ECKD usage

Hyper-PAVfor ECKDDHCP

VSWITCH

ECKD/DASDFCP/SCSINFS22

FTP / HTTP

Additional Requirements to Build a OCP V4.3 cluster in z/VM

Page 23: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

z/VM 7.1

LPAR ( z13, … / LinuxONE)3IFLs + SMT2 OSA/ RoCE

Master13 vCPU,

16 GB memory

OCP Master

Master23 vCPU,

16 GB memory

OCP Master

Master13 vCPU,

16 GB memory

OCP Master

Worker23 vCPU,

8 GB memory

OCP Worker

Worker13 vCPU,

8 GB memory

OCP Worker

EAV –Ext. Address Vol.

Hyper-PAVVSWITCH

DASDFCP/SCSI

Bootstrap(temporary

for installation)4 vCPU,

16 GB memCoreOS

Forinstallation(temporary)

Bastion deployment srv

Linux

Load Balancer

DNS

NFS

DHCP

NFS

- Minimum 3 Master / Control Planes, the number of Worker Nodes can vary, min 2 Worker Nodes

23

FTP/HTTP

All required Infrastructure components for OCP can be in z/VM guests

Page 24: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Major Operational Components and Storage options for OCP Nodes

API ETCD

Storage

API ETCD

Storage

3 Master Nodes

APIETCD

(PVC1)

StoragePV – Persistent Volume

App 1 App 2

Storage

App 1 App 2

Storage

Worker Nodes

App 1(PVC2+)

App 2(PVC3)

StoragePV – Persistent Volumes

ECKD/DASDFCP/SCSINFS

RouterRegistry (PVC2 –rwm)

https://docs.openshift.com/container-platform/4.3/storage/persistent_storage/persistent-storage-local.html

Local volumes Local volumesShared Persistent Storage

- Pods

PVC-PersistantVolume Claim

24

Page 25: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Major Operational Components and Persistent Storage options

API ETCD

Storage

API ETCD

Storage

3 Master Nodes

APIETCD

(PVC1)

StoragePV – Persistent Volume

App 1 App 2

Storage

App 1 App 2

Storage

Worker Nodes

App 1(PVC2+)

App 2(PVC3)

StoragePV – Persistent Volumes

ECKD/DASDFCP/SCSI NFS

https://docs.openshift.com/container-platform/4.3/storage/persistent_storage/persistent-storage-local.html

Local volumes Local volumesShared Persistent Storage

- Pods

PVC-PersistantVolume Claim

Infrastructure Worker Nodes

Router

Registry (PVC2 –rwm)

StoragePV – Persistent Volumes

Cluster Monitor

25

FCP/SCSIECKD/DASD

(rwm)

Page 26: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift Infrastructure components on IBM Z and LinuxONE

OpenShift components that fall into the Infrastructure categorization includedo not require subscription:

• OpenShift control plane services ("masters")• Router• container image registry• cluster metrics collection ("monitoring")• cluster aggregated logging• service brokers

➢ Any node running a container / pod / component not described above is considered a ‘worker’ and must be covered by a subscription.

https://docs.openshift.com/container-platform/4.3/machine_management/creating-infrastructure-machinesets.html 26

Page 27: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Network topology options for OCP with z/VM VSWITCH

LPAR

OSA/ RoCE

Master13 vCPU,

16 GB memory

OCP Master

Master23 vCPU,

16 GB memory

OCP Master

Master13 vCPU,

16 GB memory

OCP Master

Worker23 vCPU,

8 GB memory

OCP Worker

Worker13 vCPU,

8 GB memory

OCP Worker

VSWITCH

- The OCP cluster requires external network communication

Internetaccess

z/VM 7.1

Using z/VMVSWITCH enables easier extension with OCP Nodes

27

Bootstrap(temporary

for installation)CoreOS4 vCPU,

16 GB mem

Forinstallation(temporary)

Bastion serverLinux

Load Balancer

DNS

NFS

DHCP

FTP/HTTP

Page 28: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Network topology options for OCP with direct OSA attachment

LPAR OSA/ RoCE

Master13 vCPU,

16 GB memory

OCP Master

Master23 vCPU,

16 GB memory

OCP Master

Master13 vCPU,

16 GB memory

OCP Master

Worker23 vCPU,

8 GB memory

OCP Worker

Worker13 vCPU,

8 GB memory

OCP Worker

- The OCP cluster requires external network communication

z/VM 7.1

28

Using direct attached OSA to the Nodes is a fast communication to outside

Bootstrap(temporary

for installation)4 vCPU,

16 GB memCoreOS

Forinstallation(temporary)

Bastion serverLinux

Load Balancer

DNS

NFS

DHCP

FTP/HTTP

Page 29: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Network topology options for OCP with z/VM VSWITCH & Hipersockets

LPAR

OSA/ RoCE

Master13 vCPU,

16 GB memory

OCP Master

Master23 vCPU,

16 GB memory

OCP Master

Master13 vCPU,

16 GB memory

OCP Master

Worker23 vCPU,

8 GB memory

OCP Worker

Worker13 vCPU,

8 GB memory

OCP Worker

VSWITCH

- The OCP cluster requires external network communication

Internetaccess

z/VM 7.1Hipersockets Bridge

Hipersockets (IQD)

https://www.ibm.com/support/knowledgecenter/en/SSB27U_6.4.0/com.ibm.zvm.v640.hcpa6/bhslzvs.htm 29

Using Hipersockets enables very fast communication in the cluster

Bootstrap(temporary

for installation)4 vCPU,

16 GB memCoreOS

Forinstallation(temporary)

Bastion serverLinux

Load Balancer

DNS

NFS

DHCP

FTP/HTTP

Page 30: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

OCP on IBM Z & LinuxONE implementation topology planning

z/VM 7.1

LPAR OSA/ RoCE

OpenShift cluster

VSWITCH

1. HW topology• On one HW machine

• One cluster /

1LPAR (PoC)

• multiple LPARs

• Multiple HW machines• in same DC

• across DC

2. Deployment topology• OCP Standalone

• collocated with z/OS

A) What is the Use Case• PoC environment

• less resources

• Productive like env.• SLA based

B) What are SLAs• DevOps integration

• automation

• shared content

• Transactional load• performance

• HA variants• availability

• resiliency NFS ECKD/DASDFCP/SCSI30

Page 31: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Use Cases: Red Hat OpenShift cluster HA options

z/VM 7.1

LPAR

OSA/ RoCE

VSWITCH

z/VM 7.1

LPAR OSA/ RoCE

VSWITCH

z/VM 7.1

LPAR OSA/ RoCE

VSWITCH

LPAR Isolation: EAL5+z/VM Isolation: EAL4+

OSA/ RoCE

LACP

Master13 vCPU,

16 GB mem.

OCP Master

Worker23 vCPU,

8 GB mem.

OCP Worker

Worker13 vCPU,

8 GB mem.

OCP Worker

Infra13 vCPU,

8 GB mem.y

OCP InfraNode

Master13 vCPU,

16 GB mem.

OCP Master

Master13 vCPU,

16 GB mem.

OCP Master

Master13 vCPU,

16 GB mem.

OCP Master

Worker23 vCPU,

8 GB mem.

OCP Worker

Worker23 vCPU,

8 GB mem.

OCP Worker

Infra13 vCPU,

8 GB mem.y

OCP InfraNode

Distribute OCP nodes to different z/VM instances on one or more IBM Z / LinuxONE servers to achieve HA and avoid service outages

Master13 vCPU,

16 GB mem.

OCP Master

Page 32: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Red Hat OpenShift colocation environment with z/OS

z/VM 7.1

LPAR

OSA/ RoCE

OpenShift

VSWITCH

z/VM 7.1

LPAR

OSA/ RoCE

OpenShift

VSWITCH

OCP collocation to z/OS major use cases:

• Dynamic workload accessesz/OS services

• OCP logic access to DB2 z/OS

• OCP uses z/OS Cloud Brokerto access z/OS resources

• OCP Web environment with z/OS transactional integration

• OCP with Open Source technologies extends z/OS

• Batch workload executed in OCP with z/OS data

Network options: - Shared OSA- Hipersockets (HS) with VSWITCH Bridge (VB)

HS HS

VB VB

z/OS

LPAR OSA

DB2

z/O

SM

F

transactionalservices

zCX

CICS

z/O

S

Co

nn

ec

t

IMS

32

Page 33: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

33© Copyright IBM Corporation 2017. Technical University/Symposia materials may not be reproduced in whole or in part without the prior written permission of IBM.

IBM Systems TechU © Copyright IBM Corporation 2020

• Connects z/OS services running on an IBM Z

backend to a frontend private cloud platform

providing self-service access and consumption

of these services to developers

IBM z/OS Cloud Broker

z/OS subsystems(CICS/IMS/Db2 etc.)

z/OS

IBM z/OSCloud Broker

Consumers

Provides self-service access to managed IBM Z resources to all flavors of application developers

Centralization and automation of IBM Z operations to provide Z resources to agencies or clients in their hybrid cloud

Improve time to value through efficiencies in development and deployment

https://www.ibm.com/support/z-content-solutions/cloud-broker/

Page 34: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Configuration summary for a cluster in OpenShift Container Platform on IBM Z & LinuxONE

Operating System

• A Linux for Bastion deployment server

• RHEL CoreOS only for Master and Bootstrap

• RHEL CoreOS only for Worker Nodes

Persistent Storage / Persistent Volume (PV)

• NFSv4 server with >100GB disk storage

• 100GB for internal registry at minimum

Infrastructure Services (Pre-requisites)

• DHCP server or static IP addresses for OCP Nodes

• DNS server (e.g. BIND, ExternalDNS, dnsmasq )

• Load balancer (e.g. IBM Datapower, F5, NGINX, HAProxy …)

• Internet connectivity, or AirGap install (new in OCP 4.3)

Bootstrap and Master Nodes (Control Planes)

• 4 vCPUs

• 16+ GB main memory

• 120GB disk storage

Worker Nodes (+ depending on workload)

• 2+ vCPUs (1+ IFLs with SMT2 enabled)

• 8+GB main memory

• 120GB disk storage ( workload dependant)

Reference about OCP cluster limits

• https://docs.openshift.com/container-platform/4.2/scalability_and_performance/planning-your-environment-according-to-object-limits.html

34

Page 35: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Agenda

35

➢ What is Red Hat OpenShift

➢ Red Hat OpenShift on IBM Z and LinuxONE Overview

➢ Planning for an environment on IBM z & LinuxONE

➢ The IBM Cloud Paks➢ Installation & setup guidance

Page 36: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

A faster, more secure way to move your core business applications to any cloudthrough enterprise-ready containerized software solutions

IBM Software as Cloud Paks – Middleware anywhere

Complete yet simpleApplication, data and AI services,fully modular and easy to consume

IBM certifiedFull software stack support, and ongoing security, compliance and version compatibility

Run anywhereOn-premises, on private and public clouds,and in pre-integrated systems

IBM containerized softwarePackaged with Open Source components,

pre-integrated with the common operational services,and secure by design

Container platformand operational services

Logging, monitoring, security,identity access management

36

Page 37: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

• Enterprise-proven managed Kubernetes service running 14k+ production clusters

• Most secure environment for containerized workloads with built-in container level security, isolation, bare metal support, and broad industry compliance (PCI, HIPPA, etc.)

• Built in load balancing and multi-zone availability for simplified management and resiliency

• Cloud Paks are certified and optimized for On-Prem platforms and IBM’s public cloud for accelerating moving your workloads to the cloud

IBM public cloud

IBM Cloud Paks for Red Hat OpenShift

Integrated with IBM’s public cloud, leveraging RedHat OpenShift

Cloud Pak for Automation

Cloud Pak for Integration

Cloud Pak for Multicloud

Management

Cloud Pak for Applications

Cloud Pak for Data

Cloud Pak for Security

37

Page 38: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Agenda

38

➢ What is Red Hat OpenShift

➢ Red Hat OpenShift on IBM Z and LinuxONE Overview

➢ Planning for an environment on IBM z & LinuxONE

➢ The IBM Cloud Paks

➢ Installation & setup guidance

Page 39: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

OpenShift on IBM Z and LinuxONE

Basic installation steps:⚫ Prepare your z/VM environment ( User directories, storage, network ) ⚫ Prepare a RHEL 8.1 Bootstrap (temporary ) server

⚫ Setup an FTP or HTTP server to serve installation files⚫ Prepare the OCP pre-req. Services: DNS, NFS, Load Balancer, DHCP⚫ Download OCP product code from cloud.redhat.com:

⚫ openshift-installer, RH CoreOS image ⚫ Run the openshift-installer to define and create ignition files for the OpenShift cluster⚫ Save the ignition files on the FTP / HTTP server⚫ Copy kernel image, parmfile, coreos-installer image to your z/VM guests⚫ Adjust the parmfile for the z/VM guest

and specify the ignition file for the bootstrap, master, and worker nodes⚫ Punch the installation files into the z/VM virtual readers⚫ Boot (IPL from z/VM virtual reader) the CoreOS-installer

on each node, to install the bootstrap, master, and worker nodes

39

z/VM 7.1

LPAR

OSA/ RoCE

OpenShift

VSWITCH

➢ Red Hat Installation documentation:https://access.redhat.com/documentation/en-us/openshift_container_platform/4.3/html/installing_on_ibm_z/installing-on-ibm-z

➢ Step by step sample installations and environment setuphttps://www.openshift.com/blog/installing-ocp-in-a-mainframe-z-serieshttps://www.openshift.com/blog/red-hat-openshift-installation-process-experiences-on-ibm-z-linuxone

Page 40: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

Replay availability!

IBM Systems TechU © Copyright IBM Corporation 2020 40

Wilhelm Mild

IBM Executive IT Architect

[email protected]

+49-703-116-3796

ibm.com

• Please feel free to send Questions you were unable to ask in the live call to my email

• The replay, presentation and Q&A transcript will be available on the TechU Talks page within 48 hours.

https://www.ibm.com/services/learning/events/techutalks

• To follow TechU on Linked in, join the LinkedinGroup : https://www.linkedin.com/groups/8518569/

TechU Talks is moving to a new platform to increase capacity and improve user experience. Register once and get access to webcasts and replays from May 12th going forward.

https://bit.ly/TechUTalks

Page 41: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

If you are new to OpenShift, Start here

https://learn.openshift.com/

41

Page 42: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

IBM Systems TechU © Copyright IBM Corporation 2020

Where can you download OCP?

try.openshift.comcloud.redhat.com

OCP 4.3GA 30. Apr.

2020

42

Page 43: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

More informationGet a free account on cloud.redhat.comhttps://developer.redhat.com

Red Hat OCP portalcloud.redhat.com

Install OCP on IBM Zhttps://docs.openshift.com/container-platform/4.2/installing/installing_ibm_z/installing-ibm-z.html

Learn OpenShifthttps://learn.openshift.com

Ross Mauri's Blog

http://www.ibm.com/blogs/systems/red-hat-openshift-now-available-ibm-z-linuxone

IBM Systems Magazine Article

https://ibmsystemsmag.com/01/2020/cutting-edge-ibm-z-innovations

IDC Whitepaper

https://www.ibm.com/it-infrastructure/linuxone/capabilities/linux-containers 43

Page 44: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

www.share.org/sanantonio-eval

http://creativecommons.org/licenses/by-nc-nd/3.0/44

IBM Systems TechU © Copyright IBM Corporation 2020

Questions?

IBM Deutschland Research

& Development GmbH

Schönaicher Strasse 220

71032 Böblingen, Germany

Office: +49 (0)7031-16-3796

[email protected]

Wilhelm Mild

IBM Executive IT Architect

44

Page 45: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

Notices and disclaimers

— © 2020 International Business Machines Corporation. No part of this document may be reproduced or transmitted in any form without written permission from IBM.

— U.S. Government Users Restricted Rights — use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM.

— Information in these presentations (including information relating to products that have not yet been announced by IBM) has been reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM shall have no responsibility to update this information. This document is distributed “as is” without any warranty, either express or implied. In no event, shall IBM be liable for any damage arising from the use of this information, including but not limited to, loss of data, business interruption, loss of profit or loss of opportunity. IBM products and services are warranted per the terms and conditions of the agreements under which they are provided.

— IBM products are manufactured from new parts or new and used parts. In some cases, a product may not be new and may have been previously installed. Regardless, our warranty terms apply.”

— Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without notice.

— Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are presented as illustrations of how those

— customers have used IBM products and the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary.

— References in this document to IBM products, programs, or services does not imply that IBM intends to make such products, programs or services available in all countries in which IBM operates or does business.

— Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not necessarily reflect the views of IBM. All materials and discussions are provided for informational purposes only, and are neither intended to, nor shall constitute legal or other guidance or advice to any individual participant or their specific situation.

— It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s business and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice or represent or warrant that its services or products will ensure that the customer follows any law.

IBM Systems TechU © Copyright IBM Corporation 2020 45

Page 46: AUDIO WILL COMMENCE WHEN THE MEETING BEGINS...Full Stack Automated (IPI) Simplified opinionated “Best Practices” for cluster provisioning Fully automated installation and updates

Notices and disclaimers continued

— Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products about this publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. IBM does not warrant the quality of any third-party products, or the ability of any such third-party products to interoperate with IBM’s products. IBM expressly disclaims all warranties, expressed or implied, including but not limited to, the implied warranties of merchantability and fitness for a purpose.

— The provision of the information contained herein is not intended to, and does not, grant any right or license under any IBM patents, copyrights, trademarks or other intellectual property right.

— IBM, the IBM logo, ibm.com and [names of other referenced IBM products and services used in the presentation] are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml

IBM Systems TechU © Copyright IBM Corporation 2020 46