Upgrade to Pro — share decks privately, control downloads, hide ads and more …

[What's Next] OpenShift Roadmap Update [Mar-2021]

[What's Next] OpenShift Roadmap Update [Mar-2021]

On March 18 2021, the OpenShift PM team will broadcast the[What’s Next] OpenShift Roadmap Update [Mar-2021] briefing directly to customers and partners on OpenShift.tv.

YouTube: https://www.youtube.com/watch?v=vfGwMBme7zI

Red Hat Livestreaming

March 18, 2021
Tweet

More Decks by Red Hat Livestreaming

Other Decks in Technology

Transcript

  1. 3
    What’s Next for OpenShift
    Q1 2021 Update
    OpenShift Product Management
    March 18th, 2021

    View Slide

  2. What's next in OpenShift Q1CY2021
    4
    4
    ● “OpenShift Roadmap Update: What’s Next”
    ○ A look ahead over the next 6 - 12+ months
    ○ Focused on major OpenShift features / initiatives
    ○ Updated quarterly (goal) and subject to change
    ○ Useful for customers who want a general OpenShift Roadmap update
    ● “OpenShift Roadmap Update: What’s New in OpenShift x.y”
    ○ A deep dive into the next OpenShift release
    ○ Delivered with each new OpenShift release
    ○ Useful for customers who want a deep dive on latest OpenShift release
    ● Both of these presentations are ok to use publicly
    ○ Decks will be available in PnT in multiple formats & via Google Slides
    ○ Feel free to use relevant slides, customize and make them your own
    ○ PM roadmap session recordings also available, but for internal use only
    ○ Slides and content are subject to change without notice
    Purpose of this presentation

    View Slide

  3. Kubernetes powered Hybrid Cloud Platform from Red Hat
    Data-driven insights
    Kubernetes cluster services
    Containers ⠇VMs ⠇Install ⠇Operators ⠇ Helm ⠇Over-the-air updates ⠇Monitoring ⠇Logging ⠇Registry ⠇ Storage
    ⠇Networking ⠇Security | Ingress routing
    Linux (container host OS)
    Kubernetes (orchestration)
    Service mesh
    ⠇Serverless
    Builds ⠇CI/CD pipelines
    Log management
    Cost management
    Platform services
    Languages & runtimes
    API management
    Integration
    Messaging
    Process Automation
    Application services*
    Developer CLI ⠇IDE
    Plugins & extensions
    CodeReady Workspaces
    CodeReady Containers
    Developer services
    Build cloud-native apps
    Manage workloads
    Multicluster management
    Observability ⠇Discovery ⠇Policy ⠇Compliance ⠇Configuration ⠇Workloads
    Databases ⠇Cache
    Data ingest & prep
    Data analytics ⠇AI/ML
    Data mgmt & resilience
    Data services*
    Advanced security
    Declarative security ⠇ Container vulnerability management ⠇ Network segmentation ⠇ Threat detection & response
    Developer productivity
    * OpenShift includes supported runtimes for popular languages/frameworks/databases. Additional capabilities listed are from Red Hat Application and Data Services
    Physical Virtual Private cloud Public cloud Edge

    View Slide

  4. What's next in OpenShift Q1CY2021
    Key Investment in 2021
    7
    Core Platform
    Enable OpenShift-aaS for customers
    Security tools for software supply chain
    Kubernetes Native Infrastructure
    Hybrid apps of VMs, Pods & Serverless
    Single Node & other Edge configurations
    Hybrid: Single to Multi-cluster
    Expand networking across clusters
    GitOps for apps, cluster config, policy
    Developer & Platform Tools
    GA of Builds, Pipelines, & GitOps
    FaaS experience on top of Serverless

    View Slide

  5. What's next in OpenShift Q1CY2021
    OpenShift Roadmap
    APP DEV
    PLATFORM APP DEV
    ● Jenkins Operator GA
    ● OpenShift Builds v2 & Buildpacks GA
    ● Tekton Hub on OpenShift
    ● Kata containers in Pipelines
    ● OpenShift Serverless Functions GA
    ● Global Operators Model & new Operator API
    ● Operator Maturity increase via SDK
    ● Dynamic Plugins for the OCP Console
    ● Azure China & AWS China
    ● Alibaba, AWS Outposts, Equinix Metal, &
    Microsoft Hyper-V
    ● Utilize cgroups v2
    ● Enable user namespaces
    Additional Windows Containers capabilities*
    ● Gateway API + Contour
    ● Network Topology and Analysis Tooling
    ● SmartNIC Integrations
    ● Network Policy v2
    ● BGP Advertised Services (FRR)
    ● OVN no-overlay option
    HOSTED
    ● Cost mgmt integration to Subs Watch, ACM
    ● ROSA AWS console integration
    ● Cluster Suspend / Resume
    2021+
    ● OpenShift Builds v2 & GitOps GA
    ● Automate access to RHEL subs in builds
    ● Pipelines-as-code
    ● DevSecOps tasks in OpenShift Pipelines
    ● Rootless builds
    ● OpenShift Serverless End-to-End Encryption
    ● Application delivery dashboard in Dev Console
    ● Support for OCI chart repositories in Console
    ● Operator SDK for Java (Tech Preview)
    ● OVN as default networking plugin
    ● Edge: Single node lightweight Kube cluster
    ● Azure: BYO Disk Encryption Keys
    ● RHEL 8 Server Compute/Infra Nodes
    ● Multi-Instance-GPU support
    ● ARM Support (Dev Preview)
    ● SmartNIC support for perf., OVS hardware offload
    ● MetalLB Support (L2)
    ● ACM scale to 2000 single node clusters
    ● CoreOS dynamic first boot images for fast scaling
    ● Windows with containerd runtime support
    ● Subject claim URI scheme for OIDC IdPs
    ● Move to out-of-tree cloud providers
    ● FIPS compliance for Kata Containers
    ● Service Meshes federation, OCP Virt. VMs in Mesh
    ● NetFlow/sFlow/IPFIX collector
    ● Cert-manager operator
    ● Cost management forecasting and budgeting
    Q3 2021
    PLATFORM
    APP DEV
    ● OpenShift GitOps (Argo CD) GA
    ● OpenShift Pipelines GA
    ● OpenShift Builds v2 TP
    ● Simplify access to RHEL subs in builds
    ● OpenShift Serverless Functions TP
    ● Console internationalization GA
    ● Foundation for User Preferences
    ● Better Operator version & update mgmt
    ● OSD consumption billing, autoscaling
    ● Expanded ROSA and OSD Add-ons
    ● ARO government region (MAG) support
    ● Cost management for IBM and GCP
    Q2 2021
    ● Azure Stack Hub
    ● IPv6 (single/dual stack on control plane)
    ● GA Userspace Interface API & Library
    ● Gateway API + Contour Tech Preview
    ● External DNS Management
    ● SmartNIC: OVS HW Offload
    ● OVN Egress Router
    ● HAProxy 2.2
    ● ipfailover Support
    ● Vertical Pod Autoscaling
    ● Pod Disruption Budget v1/beta to stable
    ● Scheduling profiles
    ● Windows BYOH
    HOSTED PLATFORM

    View Slide

  6. CORE
    WHAT'S NEXT IN OPENSHIFT
    9

    View Slide

  7. What's next in OpenShift Q4CY2020
    CORE PLATFORM
    10
    Taking workloads to the next level by
    combining Kubernetes extension points
    with OpenShift’s unique Node Feature
    Discovery.
    Only possible with the tight integration
    of the cluster with Node management
    that ties into the operating system.
    Security
    Advanced Scheduling
    Secure out of the box, with advanced
    options available to address your threat
    environment.
    New focus for 2021 on zero trust for
    workloads and addressing supply chain
    attacks at multiple layers.
    Install, Run and Upgrade
    Tools for increased automation
    “around” installation to fill out the
    experience tailored to each customer.
    Reduced complexity with increased
    flexibility of options and performance.
    APIs for full cluster lifecycle to help
    customers run OCP-aaS internally.
    A Kubernetes core that ticks all the boxes

    View Slide

  8. What's next in OpenShift Q1CY2021
    Specialized workload scheduling framework
    Openshift
    Red Hat Enterprise Linux & Red Hat Enterprise Linux CoreOS
    Physical Virtual Private cloud Public cloud Managed cloud
    (Azure, AWS, GCP, IBM, Red Hat)
    Edge cloud
    Scheduling Profiles/Plugin/Extension points
    Gang scheduler for specialized workload: HPC : Deep
    Learning: Big Data
    Node Feature
    Discovery
    Specialized workload plugin
    Topology Aware
    Scheduling
    Multi-Cluster Application Dispatcher
    Job Queues : Quota : Priorities
    Specialized
    workload
    scheduler and
    NUMA aware
    Open Data Hub
    Prometheus: Grafana: SELDON: Spark: Jupyterhub: Ceph: Kafka: Argo
    Genome Sequencing
    AI/ML Self Driving
    11
    Product Manager: Gaurav Singh
    CORE PLATFORM

    View Slide

  9. DEV OPS
    Kubernetes User Namespaces
    Cert-manager operator
    OpenShift sandboxed containers
    Automate Service Mesh Policies
    12
    DETECT
    Keyless image signing
    Encrypted Containers
    KubeLinter with GitHub Actions
    Rootless Builds
    RESPOND
    DISA STIG for OCP 4
    SCCs co-exist with future PSP
    replacement
    Enabling Hard Multitenancy
    Attestation
    A layered approach to container and Kubernetes security
    PROTECT
    Future of Security: Zero Trust
    BUILD DEPLOY RUN
    Product Managers: Doron Caspin, Kirsten Newcomer
    CORE PLATFORM

    View Slide

  10. What's next in OpenShift Q1CY2021
    CORE PLATFORM
    Storage Direction
    ● Get new storage features faster,
    outside the standard release
    schedule
    ● More vendors, more storage
    options - select the right solution
    ● Make the move to CSI smoothly
    with limited impact, seamless
    transition
    Stay informed
    Any Storage, Anytime
    ● Monitor your storage at the node
    and the PV level
    ● Get the appropriate data points to
    make informed decisions ahead of
    time
    Secure Storage for all Infrastructures
    ● More choice by increasing the
    number of platforms that OCS can
    be deployed on
    ● Further secure your data centers
    with encryption for data at rest and
    in transit in OCS
    ● Use OCS to help mitigation of
    outages with WAN DR functionality
    Multi-Cloud
    Multi-site
    Hybrid
    Volume
    Snapshot
    Volume
    SnapshotClass
    Volume
    Snapshot
    Content
    CSI Snapshot API
    OCS
    IBM Other
    CSI Driver CSI Driver CSI Driver Out of the box
    monitoring
    Extend to your
    own needs
    Observability
    OpenShift Monitoring OpenShift Logging
    OpenShift Console
    Advanced Cluster Management
    Collect & forward
    Low retention
    storage
    OpenShift Tracing
    13
    Product Managers: Duncan Hardie

    View Slide

  11. What's next in OpenShift Q1CY2021
    CORE PLATFORM
    Product Manager: Marc Curry
    OpenShift Networking supports your most advanced workloads
    14
    More detail: networking roadmap
    Internet
    Gateway API
    Platform-Native Load Balancing
    Ingress Controller
    Physical Virtual
    Private cloud Public cloud Managed cloud Edge
    Node Node Node
    Pod Pod Pod
    OVN
    OVS
    ▸ Unified traffic handling so you configure
    all your traffic the same way
    ▸ OVN for advanced traffic workloads
    ▸ IPv6 single/dual for scale
    ▸ HW Offload (OVS, IPsec, ...) for performance
    ▸ Multi-NIC support to align host networking
    ▸ BGP-advertised services (FRR)
    ▸ Observability for improved understanding
    ▸ eBPF precision traffic control
    ▸ No-overlay option
    ▸ Any supported platform – add or swap
    easily, hybrid scenarios
    ▸ Flexibility to use native traffic distribution
    for optimal performance
    ▸ Your traffic, your way: L4-L7, Envoy, by-pass

    View Slide

  12. What's next in OpenShift Q1CY2021
    Installation & Updates
    CORE PLATFORM
    Deploy OpenShift to even
    more platforms & RHEL 8
    compute node support
    | Outposts
    Azure Stack Hub
    Unified Installation
    Experience
    EUS to EUS Upgrades
    15
    PMs: Katherine Dubé (AWS, Azure, GCP), Gaurav Singh (Alibaba), Maria Bracho (VMware vSphere), Peter Lauterbach (RHV & CNV), Ramon Acedo Rodriguez (Bare Metal),
    Anita Tragler (OSP), & Duncan Hardie (IBM Z & Power)
    4.6
    EUS
    4.(n+1)
    4.(n+2)
    4.x
    EUS
    Contingent
    on Testing &
    Validation
    Upgrade Control
    Plane to 4.(n+1) &
    Skip Compute nodes
    All nodes upgrade to
    4.(n+2)
    All nodes upgrade to
    4.x EUS
    All nodes are running
    4.6 EUS
    Cluster Lifecycle API
    OpenShift Hive (& Assisted Installer)
    Central Host Management
    (New Project)
    Infrastructure Admin (IT)
    Cluster & Fleet Management
    ACM/OCM/OCP
    Cluster Admin
    DevOps
    Install Core
    openshift-install

    View Slide

  13. What's next in OpenShift Q1CY2021
    CORE PLATFORM
    Mixed Windows and Linux workloads
    Windows traditional
    .NET framework
    containers
    Windows
    application
    Linux
    containers
    .NET core
    containers
    Windows
    containers
    Linux
    containers
    Windows
    virtual machine
    Red Hat OpenShift
    virtualization
    Red Hat Enterprise
    Linux CoreOS
    Microsoft
    Windows
    Installation Experience
    Bring your own Windows
    Hosts
    Reuse "pet" Windows
    instances as OpenShift work
    nodes, run Windows workloa
    and gain similar benefits tha
    their Linux workloads get
    when being managed by
    OpenShift
    Deploy OpenShift
    with Windows
    Containers to even
    more platforms
    | Outposts
    Azure Stack Hub
    Windows Containers in OpenShift
    Product Manager: Anand Chandramohan

    View Slide

  14. BRIDGING SINGLE &
    MULTIPLE CLUSTERS
    WHAT'S NEXT IN OPENSHIFT
    17

    View Slide

  15. What's next in OpenShift Q4CY2020
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    18
    Provide the hooks, extension points and
    query interfaces that allow teams to run
    apps across clusters.
    The platform is the correct place to
    standardize log config, container builds,
    monitoring metrics and troubleshooting
    dashboards.
    DevSecOps/GitOps
    Observability
    DevOps is both technical and cultural.
    OpenShift provides technical tools
    across the gamut for devs and admins.
    Building on automated operations,
    provide fully programmatic
    install/management with
    admin-defined policy at each layer.
    Networking
    Provide a toolbox to secure, isolate, and
    connect both basic & specialized
    workloads.
    Orchestrate multi-cluster networking so
    your apps don’t have to handle that
    complexity.
    Expansion from single to multi-cluster as you need it

    View Slide

  16. What's next in OpenShift Q1CY2021
    North/South North/South
    Node layer
    Router layer
    Cluster B
    Multi-cluster layer
    Cluster A
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    Node Node Node
    Pod Pod Pod
    Node Node Node
    Pod Pod Pod
    Ingress/Router
    Multicluster management
    Observability ⠇Discovery ⠇Policy ⠇Compliance ⠇Configuration ⠇Workloads
    Machine Pool’s tuning/hardware offload config
    Machine Pool’s tuning/hardware offload config
    Ingress/Router
    Standardized tools for your 1st and 100th cluster
    East/West
    IPsec
    19
    Container registry
    Container Builds ⠇Security Scanning ⠇Geo Replication

    View Slide

  17. What's next in OpenShift Q1CY2021
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    Product Manager: Scott Berens (ACM), Jamie Longmuir (Service Mesh)
    Multi-cluster: Seamless networking mesh extends across cluster boundaries
    Multi-cluster networking makes it dead simple
    to span your apps across failure domains and
    geographies.
    ▸ Provides IPsec tunnel cluster to cluster
    ▸ IPsec = CNCF Submariner
    ▸ Service Mesh = CNCF Istio with federation
    Advanced Cluster Management (ACM) maintains East-West networking between all of your clusters
    using Submariner
    20
    More detail: ACM roadmap
    Better than stretched cluster
    Easier HA apps across clusters
    Securely access shared services

    View Slide

  18. What's next in OpenShift Q1CY2021
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    Product Manager: Christian Heidenreich
    Single Cluster: Foundation to gather info for cluster and every app on top
    Capture critical telemetry data to create SLOs, be notified of any breach, and use them for resolving
    issues quickly and/or optimize the status quo.
    Logging
    ▸ Allow processing and querying JSON logs.
    ▸ Adopting Loki as an alternative storage
    engine to Elasticsearch.
    ▸ View contextualized log information inside
    the OpenShift Console.
    ▸ Govern noisy applications which would
    overwise overflow the logging system.
    Monitoring
    ▸ Extend our out-of-the-box,
    platform-related SLOs with your own rules.
    ▸ Support non-administrators to individually
    configure where alert notifications will go.
    ▸ Allow administrators to push selected
    metrics to a centralized metrics aggregation
    system.
    ▸ Allow the use of custom metrics for HPA.
    21
    More detail: Observability roadmap

    View Slide

  19. What's next in OpenShift Q1CY2021
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    Product Manager: Scott Berens
    Multi-cluster: Observe your entire fleet from one location
    ▸ CCX Insights data will be visible in the ACM hub
    ・ Avoid unplanned downtime and better manage the security
    risks of your entire fleet. Help pinpoint the risks and resolve
    them
    Advanced Cluster Management (ACM) aggregates telemetry data from all your clusters
    22
    ▸ SREs and DevOps teams
    ・ Improve and support SRE / DevOps practices with cluster
    health information and how that may impact application
    availability
    ▸ IT Operations / Cluster admins:
    ・ Aggregated data and metrics from “Regional” Hubs to a
    “Geographic” Hub .
    ▸ Cost Management
    ・ Help customers understand utilization and make cost
    adjustments via scale automatically
    ・ Leverage Cluster Pools (Claim and Hibernate) to mitigate
    cost associated to off hours and overnight spend.
    More detail: ACM roadmap

    View Slide

  20. What's next in OpenShift Q1CY2021
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    Product Manager: Siamak Sadeghianfar
    Multi-cluster: GitOps for the entire cluster and application lifecycle
    Recommended repo layouts, workflows and our user interface make it easy for all teams to adopt GitOps
    OpenShift provides a full set of tools enabling
    GitOps and DevSecOps workflows:
    ▸ 4.8: Builds v2 TP, Pipelines GA, GitOps GA
    ▸ Integrate with popular secret mgmt tools
    ▸ Promotion between different envs
    ▸ App delivery views coming to Dev Console
    ▸ kam CLI for bootstrapping GitOps workflows
    23
    More detail: DevOps/GitOps roadmap, Console roadmap
    Sync
    Pull
    Tekton Pipelines
    Argo CD
    Push source
    code
    Webhook
    Image
    Registry
    Pull-request
    app manifests
    Pull
    Dev
    Staging
    Prod
    Push
    $ kam bootstrap

    View Slide

  21. What's next in OpenShift Q1CY2021
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    Product Managers: Jeff Brent, Scott Berens
    Multi-cluster: Unlock new DevSecOps capabilities with many clusters
    Advanced Cluster Management (ACM) provides the distribution point for GitOps tools and best
    practices.
    Integrate with Red Hat portfolio for
    multi-cluster workflows:
    Use ACM’s global view to augment each
    cluster:
    ▸ ACM installs GitOps Operator on clusters
    ▸ ACM managed clusters are added into
    OpenShift GitOps as target clusters
    ▸ Credential Management across clusters
    ▸ Deploy Advanced Cluster Security (ACS)
    on managed clusters
    24
    More detail: ACM roadmap
    Business Continuity: Integration for disaster
    recovery and continuity
    Cluster Lifecycle, Application Lifecycle and
    Governance, Risk and Compliance

    View Slide

  22. What's next in OpenShift Q4CY2020
    25
    Quota Management UI
    Notifications / Alerting
    Reporting / Dashboards
    Logging / Auditing
    Soft Quota
    Hard Quota Limiting / Pruning
    Reporting / Alerts
    Serving multiple organizations and multiple clusters with confidence
    Product Manager: Daniel Messer
    ▸ Quota Management for various resources:
    ・ Image Storage consumption
    ・ Push / Pull operations
    ・ Network egress bandwidth (tbd)
    ▸ Important for customers with multiple
    clusters from different departments /
    businesses
    ▸ Allows to offer different service tiers in the
    registry (dev vs. production)
    RED HAT QUAY
    Multi-cluster: Registry Quota Management
    More detail: Red Hat Quay Roadmap

    View Slide

  23. What's next in OpenShift Q4CY2020
    26
    Solving the chicken-egg problem for mirroring OCP content
    Bootstrap registry for disconnected clusters
    Product Manager: Daniel Messer
    RED HAT QUAY
    $ quay-install --all-in-one
    Production/Infra Cluster
    OCP Payload
    OperatorHub
    Online Mirror
    Samples
    +
    +
    +
    ▸ Disconnected clusters and registries need
    their binaries mirrored into the air-gapped
    environment before deployment
    ▸ A quick install variant of Quay and
    automation to mirror OpenShift content
    helps customers in regulated environments
    to get up and running quickly and stay in
    sync over time
    ▸ Local all-in-one Quay instance provided at
    no additional cost*
    * restricted to the use case of OpenShift payload mirroring
    Air-gapped Mirror
    OCP Payload
    OperatorHub
    Samples
    +
    +
    +

    View Slide

  24. What's next in OpenShift Q1CY2021
    ▸ Cost Visualization and Modeling
    ・ Allow customers to represent tenant usage
    model via Tier rating and Currency Support
    ・ Drive behavior change in our customers
    customers
    ▸ Brand new Cost explorer view
    ・ Full time based view of tenant costs for historical
    context
    ▸ Additional support for customers using OCP on
    GCP and IBM Cloud
    Product Manager: Sergio Ocón-Cárdenas
    Multi-cluster: Track expenditure with Red Hat Cost Management
    More detail: Red Hat Cost Management Roadmap

    View Slide

  25. What's next in OpenShift Q1CY2021
    North/South North/South
    Node layer
    Router layer
    Cluster B
    Multi-cluster layer
    Cluster A
    BRIDGING SINGLE AND MULTIPLE CLUSTERS
    Node Node Node
    Pod Pod Pod
    Node Node Node
    Pod Pod Pod
    Ingress/Router
    Multicluster management
    Observability ⠇Discovery ⠇Policy ⠇Compliance ⠇Configuration ⠇Workloads
    Machine Pool’s tuning/hardware offload config
    Machine Pool’s tuning/hardware offload config
    Ingress/Router
    Standardized tools for your 1st and 100th cluster
    East/West
    IPsec
    28
    Container registry
    Container Builds ⠇Security Scanning ⠇Geo Replication

    View Slide

  26. Kubernetes-native
    Infrastructure
    WHAT'S NEXT IN OPENSHIFT
    29

    View Slide

  27. What's next in OpenShift Q1CY2021
    Kubernetes-native Infrastructure
    KUBERNETES-NATIVE INFRASTRUCTURE
    Enjoy simplicity and
    agility of public cloud in
    an on-prem
    environment
    Plan for growth in
    container adoption
    while still running VMs
    Create a consistent
    experience across
    public and on-prem
    30

    View Slide

  28. What's next in OpenShift Q3CY2020
    31
    OpenShift on Bare Metal
    OpenShift on Bare Metal
    What’s Coming Next?
    Centralized Bare Metal Provisioning
    Powered by Metal3 and the Assisted Installer, manage bare metal
    hosts for other clusters
    Schedule Pods Based on BIOS Settings
    Take advantage of specific hardware attributes in your workloads
    Assisted Installer meets Metal3
    Manage bare metal nodes of clusters deployed with the Assisted
    Installer
    Advanced Host Network Configuration
    Using Kubernetes NMState, configure hosts deployed by IPI, Assisted
    Installer and existing cluster nodes
    Metal3

    View Slide

  29. What's next in OpenShift Q4CY2020
    32
    Developers access VM services and
    data in a natural way with
    Service Mesh and developer pipelines
    Data protection
    Developer friendly
    Extend OpenShift data protection to
    backup and restore VMs alongside apps
    in a namespace or cluster.
    Simplified configuration
    Reduce complexity for admins when
    configuring VM storage & networking
    What’s next for OpenShift Virtualization
    Product Manager: Peter Lauterbach
    OpenShift Virtualization
    More detail: Virtualization roadmap

    View Slide

  30. OpenShift Virtualization
    33
    Reduce complexity for administrators to
    properly configure VM storage and networking
    ▸ Storage profiles automatically configure
    storage classes with proper defaults.
    ▸ Accelerate AI / ML compute workloads with
    GPU passthrough
    ▸ Consistent infrastructure with node network
    configuration rollout
    “In the aerospace industry, IT solutions
    should be innovative and streamlined to
    rapidly deliver applications. ... OpenShift
    Virtualization has enabled us to move our
    virtualized workloads onto containers, giving
    us the ability to continue to support those
    workloads from a single management plane
    with Red Hat OpenShift. “
    Matt Wittstock, Cloud Architect
    Lockheed Martin
    Simplified configuration and deployment
    33
    Move infrastructure forward without leaving apps behind
    Product Manager: Peter Lauterbach

    View Slide

  31. ▸ Improved integration between VMs and
    modernized apps
    ▸ Ensure a seamless transition as you
    modernize VM apps to microservices with
    service mesh.
    ▸ Improve build and test quality with VMs and
    containers in a developer pipeline
    Unified developer tools, process and pipelines for all apps
    34
    OpenShift Virtualization
    Product Manager: Peter Lauterbach

    View Slide

  32. What's next in OpenShift Q1CY2021
    Migration Toolkit for Virtualization
    KUBERNETES-NATIVE INFRASTRUCTURE
    Product Manager: Miguel Pérez Colino
    35
    Automation for bringing VMs to OpenShift
    Mass migrate VMs from VMware vSphere 6.5+
    to OpenShift Virtualization..
    Reducing VM downtime
    Concentrating on reducing migration related
    downtime for the tool’s GA
    Executing pre-migration checks
    Save customers from time wasted if a migration
    is going to fail or is not a good fit as currently
    configured.
    Progressing from beta to GA

    View Slide

  33. What's next in OpenShift Q1CY2021
    KUBERNETES-NATIVE INFRASTRUCTURE
    Product Manager: Adel Zaalouk
    apiVersion: kataconfiguration.openshift.io/v1
    kind: KataConfig
    metadata:
    name: example-kataconfig
    spec:
    kataConfigPoolSelector:
    matchLabels:
    custom-kata1: test
    apiVersion: node.k8s.io/v2
    kind: RuntimeClass
    metadata:
    name: my-kata-class
    Handler: kata-qemu
    apiVersion: v1
    kind: Pod
    metadata:
    name: mypod
    spec:
    runtimeClassName: kata-qemu
    Installs and Life Cycles
    Kata Binaries (e.g., Kata
    2.0)
    Configures CRI-O runtime
    handlers + optimizations for Kata
    as a runtime
    Adds / Creates RuntimeClass
    for Kata + Scheduling
    Installs and Lifecycles
    QEMU as an OS
    Extension
    Exposes CRD
    (KataConfig) to manage
    configuration for Day 1
    and Day2 tasks
    Availability in RH Marketplace /
    Operator Hub and enabled from
    console
    OpenShift sandboxed containers (Kata) Operator
    36
    Cluster Admin
    Developer
    The Operator
    The Operator
    Kata Containers as as Service (Operator machinery) Usage Manual
    Admin creates KataConfig (optionally
    selects nodes that will have Kata enabled)
    Operator automagically enables Kata on
    the nodes and creates the RuntimeClass
    Developers defines the RuntimeClass at
    the Deployment / Pod level to use Kata

    View Slide

  34. ▸ Available now
    ▸ Available now
    Edge computing with Red Hat OpenShift
    37
    Central data center
    Cluster management and application
    deployment
    Kubernetes node
    control
    Single node
    edge servers
    Low bandwidth or
    disconnected sites.
    Regional data center
    Edge
    ▸ Available in 2021
    C W
    Site 1
    W
    Site 2
    C
    C W
    Site 3
    Remote worker
    nodes
    Environments that are
    space constrained
    3 Node
    Small footprint with
    high availability
    Legend:
    C: Control nodes
    W: Worker nodes
    OpenShift for Edge

    View Slide

  35. Zero Touch Provisioning
    38
    Existing Infrastructure
    Regional Data Center
    Site 1 - DU Site 2 - DU Site 3 - DU
    CU Pool
    ZTP Deployed
    Infrastructure
    ZTP - Zero Touch Provisioning
    DU - Distributed Unit (5G RAN)
    CU - Central Unit (5G RAN) - future
    Infra as code in Git
    S
    S W
    W
    S W
    W W
    DU
    Remote Worker Nodes Single Node OpenShift Three Node Cluster
    Product Managers: Robert Love, Moran Goldboi (Edge), Scott Berens (RH ACM)
    Example deployment Overview

    View Slide

  36. High-level roadmap
    Telco 5G Roadmap
    39
    1H 2021 2H 2021
    5G RAN Centralized Unit and (CU) Distributed Unit (DU)
    2022
    5G Core
    - IPv4 and IPv6 dual stack networking
    - Performance profile setup helper
    - ZTP of additional infrastructure components (CU, Hub Cluster)
    - Advanced Precision Time Protocol (PTP) Functionality (BC, GMC,
    SyncE)
    - Real-Time and Low Latency Kernel tuning
    - Reduced platform core utilization for DU
    profile
    - Zero Touch Provisioning (ZTP) of a DU
    - Forward Error Correction via FPGA
    accelerators
    - Single Node OpenShift
    - Forward Error Correction via eASIC devices
    - DU Lifecycle Management enhancements
    - NUMA aware memory management
    - Hyperthreading aware scheduling
    - Gatekeeper: labels and annotations update
    - NUMA aware scheduler to minimize need for workload rescheduling up
    front
    - Load Balancer for bare-metal
    - Additional SmartNIC enablement

    View Slide

  37. What's next in OpenShift Q1CY2021
    Bare Metal
    services
    Product Manager: Anita Tragler
    Openshift on OpenStack for Enterprise, Telco and Edge
    OpenStack
    Services
    Deployment &
    Lifecycle
    Openshift
    services
    OpenStack NFV
    Fast Datapath
    Central
    ▸ Flexibility of Telco/NFV & Edge deployments
    ・ IPI for SR-IOV, OVS-DPDK, HW offload
    ・ UPI customization for edge HW
    ・ Routed Provider networks
    ▸ Mixed deployment of bare-metal remote
    workers and virtualized control-plane with
    OpenStack management of hardware
    (SmartNIC, GPU, FPGA, Timing)
    ▸ NFV high performance - OpenStack
    Fast datapath (OVS-DPDK, SR-IOV,
    OVS HW offload) interfaces available as
    SR-IOV PCIe devices (vNIC) to pods
    using multus SR-IOV operator
    ▸ OpenStack services at DCN edge sites -
    OVN routed networks, Octavia LBaaS,
    Storage using Availability zones and HCI
    GPU, FPGA, NVMe over Fabric,
    SmartNICs, SyncE
    W
    C
    DCN Edge
    SR-IOV, OVS-DPDK, OVS HW
    offload, RDMA, GPU Direct, PTP
    Private
    Cloud
    multus
    multus
    SR-IOV
    device plugin
    Kuryr CNI
    Manila
    Cinder
    OVN firewall, routed provider,, IPv6
    Octavia OVN LBaaS,
    Neutron, Cinder, Octavia AZs, HCI
    Manila CSI Ganesha NFS
    VF
    IPv6/dual-stack: ovn-k8s, Kuryr CNI
    Openshift Container Storage OCS
    Multus + SR-IOV, switchdev operators
    Metrics and Telemetry
    OVN-k8s
    IPI and UPI OpenStack infrastructure
    OSP versions 13, 16.1 and 16.2
    Disconnected Air Gapped, Quay proxy
    External cloud provide
    Installer Provisioned
    User Provisioned
    ▸ More Storage, SDN and Telemetry
    ・ Provider networks for primary CNI
    ・ Storage: Manila CSI with Ganesha, OCS
    Flexibility and performance with OpenStack managing the infrastructure

    View Slide

  38. Openshift on OpenStack with Provider Networks
    Use a Provider Network as the Primary CNI
    ● Provider network directly connects the application pods
    to the physical fabric
    ● Recommended when there is significant North-South or
    inter-cluster traffic
    ● Avoids Floating IPs and NAT for external connectivity
    ● External connectivity via the physical infrastructure, ToR
    is the gateway router
    ● No double encapsulation, no need for Kuryr CNI
    ● Use Openshift default SDN option for internal
    microservices and load balancing (east-west traffic)
    ● Typically used with external Load balancer
    ● Limitations: requires admin privileges, metadata service
    ● Manual config for IPI install-config.yaml
    VM Worker1
    podB
    podA
    11.1.1.4/24
    ToR
    VLAN 101
    provider network
    Segment1: 11.1.1.0/24
    eth0
    VM Worker2
    podD
    podC
    eth0 11.1.1.5/24
    overlay
    OCP Ingress
    or External LB
    11.1.1.2/24 11.1.1.3/24
    GW: 11.1.1.1/24
    VIP
    set custom ports IPs for the `apiVP` and `ingressVIP,
    set`machinesSubnet` to the UUID of provider network subnet and
    networking.machineNetwork` to the CIDR of that subnet
    10.1.1.2/24 10.1.1.3/24
    Product Manager: Anita Tragler

    View Slide

  39. WHAT'S NEXT IN OPENSHIFT
    DEVELOPER & PLATFORM
    SERVICES
    42

    View Slide

  40. OpenShift: The platform of platforms
    43
    Extending Kubernetes has never been so simple
    Automate delivery with a cloud-native CI/CD
    platform and drive operations via GitOps principles.
    Extensible and customizable Kubernetes web UI
    designed to empower users of all levels.
    DevOps & GitOps
    Developer-friendly quick start templates of
    popular applications and tools.
    Helm
    Developer-friendly Console
    Making our Kubernetes platform more available
    and easy to use for developers.
    Developer tools
    Offer managed services on all your clusters for a
    cloud-like experience wherever you run OCP.
    Operators
    Improved user experience, day 2 operations across
    multiple clusters and security enhancements.
    Serverless & Service Mesh
    DEVELOPER AND PLATFORM SERVICES

    View Slide

  41. What's next in OpenShift Q4CY2020
    44
    Customize and extend the OCP
    Console to meet your needs. Build
    native solutions with our pluggable
    platform
    Making Kube Easy
    Extending the Platform
    Educate users on the vast
    everchanging Kubernetes ecosystem.
    Quickly discover what is new and learn
    best practices
    What’s next for Console
    Product Manager: Ali Mobrem, Serena Nichols, Tony Wu
    OpenShift Console
    Developers First
    Focus on getting developers
    productive now!

    View Slide

  42. OCP Console - Extending the Platform
    Teach users about available apps and services, provide custom dashboards,
    integrate services natively, or build full blown solutions on top of the OCP Console.
    ▸ Enhanced Quick Starts, Metrics Dashboard CRD, Dynamic Plugins
    ▸ As the platform capabilities grow so does the UI (Operator Powered)
    e.g., Pipelines UI is delivered and enabled with the Pipelines Operator, Admins can create Quick
    Starts, Users can create custom dashboards, ISVs can create custom solutions.
    Frictionless, Cohesive, Pluggable Platform
    45
    Customize and extend the OCP Console
    Console Configs Console Extensions (CRDs) OLM Descriptors Dynamic Plugins
    Least to Most Flexible
    More detail: Console roadmap
    Product Manager: Ali Mobrem, Serena Nichols, Tony Wu

    View Slide

  43. OCP Console - Making Kube Easy
    Never be in the dark again… The new getting
    started card will provide you with the latest
    features, samples and guides!
    Allow everyone to get up to speed quickly!
    46
    In-Cluster Learning
    More detail: Console roadmap
    Product Manager: Ali Mobrem, Serena Nichols, Tony Wu
    Get your local app up and running on OpenShift!
    Now developers can drag and drop their fat
    JAR from their desktop into topology.

    View Slide

  44. 47
    Cluster-wide operator model for
    improved installs, visibility into
    provided application versions and
    dependencies.
    Managed Service Support
    Better Management
    Gitops-style management and fleet
    deployments in multi-tenant clusters
    Operator Maturity
    Provide better tooling and abstractions
    to let developers focus on Operator
    features and maturity
    What’s next for Operators
    OPERATOR FRAMEWORK
    Product Manager: Daniel Messer More detail: Operator Framework Roadmap

    View Slide

  45. Converging 3 interfaces into one to drive
    simplicity and improve the admin UX:
    ▸ Customers using GitOps can now install and
    update to specific versions
    ▸ Multi-tenant cluster providers get discrete
    controls on who can access which Operator
    ▸ Developers can install an Operator without
    asking an admin to drive velocity
    New Operator API
    48
    ClusterService
    Version
    Subscription InstallPlan
    apiVersion: operators.coreos.com/v1
    kind: Operator
    metadata:
    name: openshift-pipelines
    spec:
    catalog:
    name: redhat-operators
    namespace: my-ns
    version: 2.0.0
    access:
    - tenantA
    - tenantB
    status:
    conditions:
    - kind: UpdateAvailable ...
    OPERATOR LIFECYCLE MANAGEMENT

    View Slide

  46. What's next in OpenShift Q1CY2021
    49
    What’s Next for Helm on OpenShift
    Deliver first class components with tested and certified Helm Charts
    from Partners reducing time-to-value as well as runtime failures and
    security risks.
    Deliver Helm Certification Program
    Engage and enable Red Hat product teams to build and showcase
    Helm Charts for OpenShift developers’ use.
    Enable Red Hat Portfolio
    Improve experience in ODC and tools enabling a self-service
    developer experience that minimizes the need to interact with a
    cluster operator.
    Improve Developer Experience
    HELM ON OPENSHIFT
    Simplified and integrated application development
    Product Manager: Stevan Le Meur
    Pre-populate the catalog from popular services available
    out-of-the-box.
    Enrich Developer Catalog

    View Slide

  47. What's next in OpenShift Q4CY2021
    50
    Better Together
    Further integrations
    across the OpenShift
    platform and
    ecosystem.
    What’s next for Serverless and Service Mesh
    Product Manager: Jamie Longmuir (Service Mesh), Naina Singh and Karena Angell (Serverless)
    OpenShift Serverless and Service Mesh
    User Experience
    Enhancing the admin and
    developer experiences for
    Day 0, Day 2 and workload
    deployments.
    Scaling Services
    Scale platform and
    application resources
    quickly and efficiently.
    Security
    Secure by default at
    every level to manage
    risk as well as achieve and
    maintain compliance.

    View Slide

  48. OpenShift Serverless Functions Tech Preview
    OpenShift Serverless Functions allows users to
    consume events via functions based APIs and
    provide a simplified programming model for
    developers and data scientists alike.
    ▸ Simplified deployments
    ▸ Reduced programming complexity
    ▸ Secure, consistent programming models
    Create, Build, and Deploy Applications Quickly
    51
    Product Manager: Naina Singh
    Build
    New Knative Service on the Cluster
    Create
    Source code
    Build Packs
    Knative CLI +
    Func Plugin
    Knative CLI +
    Func Plugin
    Java
    Node.js
    Go
    Deploy
    Knative CLI +
    Func Plugin Cluster
    Container
    Registry
    OpenShift Serverless

    View Slide

  49. Multi-Tenant, Multi-Cluster Service Mesh
    Service Mesh Federation
    Service Mesh Federation will provided guided
    resources for sharing services across meshes in
    different clusters, while maintaining the secure
    multi-tenant separation that customers have
    come to expect from OpenShift Service Mesh.
    ▸ Manage service to service connectivity
    between meshes in different clusters.
    ▸ Configure services to be “highly available”
    across meshes in different clusters.
    Adding scalability and high-availability to multi-tenant service mesh
    52
    Service A
    Service B
    Service Mesh: foo.com
    Service C
    Service D
    Service Mesh: bar.com
    Control Plane
    Control Plane
    Product Manager: Jamie Longmuir

    View Slide

  50. linkedin.com/company/red-hat
    youtube.com/user/RedHatVideos
    facebook.com/redhatinc
    twitter.com/RedHat
    Red Hat is the world’s leading provider of
    enterprise open source software solutions.
    Award-winning support, training, and consulting
    services make
    Red Hat a trusted adviser to the Fortune 500.
    Thank you

    View Slide

  51. linkedin.com/company/red-hat
    youtube.com/user/RedHatVideos
    facebook.com/redhatinc
    twitter.com/RedHat
    81
    Thank you

    View Slide