Operating OpenShift

Operating OpenShift - Opis

Kubernetes has gained significant popularity over the past few years, with OpenShift as one of its most mature and prominent distributions. But while OpenShift provides several layers of abstraction over vanilla Kubernetes, this software can quickly become overwhelming because of its rich feature set and functionality. This practical book helps you understand and manage OpenShift clusters from minimal deployment to large multicluster installations.Principal site reliability engineers Rick Rackow and Manuel Dewald, who worked together on Red Hat's managed OpenShift offering for years, provide valuable advice to help your teams operate OpenShift clusters efficiently. Designed for SREs, system administrators, DevOps engineers, and cloud architects, Operating OpenShift encourages consistent and easy container orchestration and helps reduce the effort of deploying a Kubernetes platform. You'll learn why OpenShift has become highly attractive to enterprises large and small.Learn OpenShift core concepts and deployment strategiesExplore multicluster OpenShift Container Platform deploymentsAdminister OpenShift clusters following best practicesLearn best practices for deploying workloads to OpenShiftMonitor OpenShift clusters through state-of-the-art concepts Spis treści:
Preface
Conventions Used in This Book
Using Code Examples
OReilly Online Learning
How to Contact Us
Acknowledgments
1. Introduction
Traditional Operations Teams
How Site Reliability Engineering Helps
OpenShift as a Tool for Site Reliability Engineers
Individual (...) więcej Challenges for SRE Teams
2. Installing OpenShift
OKD, OCP, and Other Considerations
OKD
OCP
OSD, ROSA, and ARO
Local Clusters with OpenShift Local
Planning Cluster Size
Instance Sizing Recommendations
Node Sizing Recommendations
Master Sizing Recommendations
Infra Nodes
Basic OpenShift Installations
Installer-Provisioned Infrastructure
Prerequisites
Installation
Self-Provisioned Infrastructure
Summary
3. Running Workloads on OpenShift
Deploying Code
Deploying Existing Container Images
Security context constraints
Scaling and exposing deployments
Deploying Applications from Git Repositories
Accessing Deployed Services
Accessing Services from Other Pods
Distribution of Requests
Exposing Services
Route by Auto-generated DNS Names
Route by Path
External Load Balancers
Securing Services with TLS
Specifying TLS Certificates
Redirecting Traffic to TLS Route
Lets Encrypt Trusted Certificates
Encrypted Communication to the Service
Passthrough
Reencrypt
Summary
4. Security
Cluster Access
Role-Based Access Control
Roles and ClusterRoles
RoleBindings and ClusterRoleBindings
CLI
ServiceAccounts
Threat Modelling
Workloads
Summary
5. Automating Builds
OpenShift Image Builds
Docker Build
Triggering a build with the generic webhook
Triggering a build with the GitHub webhook
More build triggers
Source to Image (S2I) Build
Automatic language detection
Custom S2I Images
Red Hat OpenShift Pipelines
Overview
Install Red Hat OpenShift Pipelines
Setting Up the Pipeline
Implementing the tasks
Composing the pipeline
Turning the Pipeline into Continuous Integration
Summary
6. In-Cluster Monitoring Stack
Cluster Monitoring Operator
Prometheus Operator
Prometheus
Persisting Your Metrics
Query using PromQL
Alerting Rules
Deploy Your Rules
Alertmanager
Configure Alertmanager via a Secret
Practice Alert Routing
Configure Alertmanager from the UI
User Workload Monitoring
Visualizing Metrics
Console Dashboards
Using Grafana
Summary
7. Advanced Monitoring and
Observability Strategies
Service Oriented Monitoring
Service Level Indicators
Service Level Objectives
Stage 1
Stage 2
Stage 3
Final Stage
Tools
Route Monitor Operator
Pyrra
Installation
Example
Logging
ClusterLogging
Installation
Configuration
Log Forwarding
Loki
Visualization
Installation
Creating a Grafana Instance
Data Source
Dashboards
Summary
8. Automating OpenShift Cluster Operations
Recurring Operations Tasks
Application Updates
Certificate Renewals
OpenShift Updates
Backups
Automating Recurring Operations Tasks
Persistence
Creating Snapshots
Using CronJobs for Task Automation
Automated VolumeSnapshots
Automated OpenShift updates
Cluster Configuration
Manage Cluster Configuration with OpenShift GitOps
Installing OpenShift GitOps
Managing Configuration with OpenShift GitOps
Managing Configuration of Multiple Clusters with OpenShift GitOps
Summary
9. Developing Custom Operators to
Automate Cluster Operations
Operator SDK
Operator Design
Bootstrapping the Operator
Setting Up a CA Directory for Development
Designing the Custom Resource Definition
Installing the CustomResourceDefinition
Local Operator Development
The Reconcile Function
Deploying the Operator
Creating and Updating OpenShift Resources
Specifying RBAC Permissions
Routing Traffic to the Operator
Adding Additional Controllers
Updating Resource Status
Summary
10. Practical Patterns for Operating
OpenShift Clusters at Scale
Cluster Lifecycle
Cluster Configuration
Logging
Monitoring
Alerting
Automation
On Call
Primary On Call
Backup On Call
Shift Rotation
Ticket Queue
Incident Management
When to Declare an Incident
Inform the Customer
Define Roles
Incident Timeline
Document the Process
Postmortem
Accessing OpenShift Clusters
The Stage Is Yours
Index mniej