ANSIBLE SERVICE BROKER Deploying multi-container applications on OpenShift Todd Sanders John Matthews OpenShift Commons Briefing.

Transcription

1 ANSIBLE SERVICE BROKER Deploying multi-container applications on OpenShift Todd Sanders John Matthews OpenShift Commons Briefing May 31, 2017

2 Open Service Broker API Overview API working group formed in September 2016, officially announced December; successor to CF Service Broker API API defines an HTTP interface between the services marketplace of a platform and service brokers Service Broker is the component of the service that implements the Service Broker API, for which a platform's marketplace is a client Service brokers are responsible for advertising a catalog of service offerings and service plans to the marketplace, and acting on requests from the marketplace for: 2 Provisioning, binding, unbinding, and deprovisioning Provisioning reserves a resource (service instance) Binding typically generates credentials necessary for accessing the resource or provides the service instance with information for a configuration change Platform marketplace may expose services from one or many service brokers Individual service broker may support one or many platform marketplaces using different URL prefixes and credentials Backed by numerous industry leaders including Fujitsu, Google, IBM, Pivotal, Red Hat, and SAP

3 ANSIBLE SERVICE BROKER Orchestrating OpenShift Services Define, extend, and deliver simple to complex multi-container OpenShift services Standardized approach to using Ansible to manage and provision applications Leverage existing investment in Ansible roles/playbooks Easy management of applications for simple cloud-native apps Ansible Service Broker Embraces Service Catalog and Open Service Broker API concepts Supports: Traditional S2I deployments Provisioning of pre-existing images Orchestrating external services Deploying multi-service solutions Ansible Playbook Bundle Lightweight application definition (meta-container) Simple directory employing: Named playbooks [provision, bind, ] to perform Open Service Broker actions Metadata containing a list of required / optional parameters during deployment Embedded Ansible runtime

4 ANSIBLE SERVICE BROKER - Architecture Example Ansible Playbook Bundles: Red Hat Container Catalog catalog provision deprovision bind unbind Ansible Playbook Bundle ELK, Etherpad, Foreman, Galera ManageIQ, MongoDB, PostgreSQL Foreman, Pulp, Wordpress External MLAB MongoDB SaaS and more... ansible-playbook $method.yaml $vars Ansible Service Broker Service Consumer oc run $appname $method $vars OpenShift Mall / Service Catalog Service Broker Service Broker Service Broker Ansible Playbook Bundle OpenShift Service Supports provisioning of and binding to both on-platform and off-platform (public cloud) services!

5 ANSIBLE PLAYBOOK BUNDLE (APB) Definition Simple directory with named action playbooks and metadata. Metadata: required/optional parameters dependencies (provision vs bind) Leverages existing investment in Ansible Roles / Playbooks. Developer Tooling to drive guided approach. Easily modified or extended.

6 ANSIBLE PLAYBOOK BUNDLE (APB) A Closer Look Steps to create an APB: 1. Create apb.yml 2. Create Ansible Playbooks 3. apb prepare a. Creates Dockerfile with image labels 4. Build container

7 ANSIBLE PLAYBOOK BUNDLE (APB) abp.yaml name: helloworld-apb image: myorg/helloworld-apb abp.yml playbooks provision.yml deprovision.yml Dockerfile parameters: - name: namespace type: string default: hello-world-apb - name: message type: string default: "Hello World"

8 ANSIBLE PLAYBOOK BUNDLE (APB) provision.yml abp.yml playbooks provision.yml deprovision.yml Dockerfile - name: Deploy sampleapp hosts: localhost connection: local tasks: - name: create namespace shell: "oc new-project {{ ns }}" - name: create app dc shell: "oc create -n {{ ns }} -f sampleapp.yml"

9 ANSIBLE PLAYBOOK BUNDLE (APB) deprovision.yml abp.yml playbooks provision.yml deprovision.yml Dockerfile - name: Uninstall sampleapp hosts: localhost connection: local tasks: - name: delete namespace shell: "oc delete project {{ ns }}"

10 ANSIBLE PLAYBOOK BUNDLE (APB) Dockerfile - Ansible runtime for base image FROM ansibleplaybookbundle/apb-base abp.yml playbooks provision.yml deprovision.yml Dockerfile LABEL "com.redhat.apb.version"="0.1.0" LABEL "com.redhat.apb.spec"=...<base64 encoded apb.yml data > ADD roles /opt/ansible/roles ADD playbooks /opt/apb/actions RUN useradd -u r -g 0 -M -b /opt/apb -s /sbin/nologin -c "apb user" apb RUN chown -R 1001:0 /opt/{ansible,apb} USER 1001

11 ANSIBLE PLAYBOOK BUNDLE (APB) Ansible 2.4 will include k8s/openshift modules Playbook - Executes oc commands directly Playbook - Leverages Ansible Modules for K8S/OCP - name: create namespace shell: "oc new-project {{ ns }}" - openshift_v1_project: name: '{{ ns }}' - name: create route shell: "oc create -n {{ ns }} -f route.yml" - openshift_v1_route: name: wordpress namespace: '{{ ns }}' port_target_port: 80 apiversion: v1 kind: Route spec: port: targetport: port-80 <snip>

12 How about a demo?

13 Bind Example Python WebApp + PostgreSQL

14 Download Postgres APB Red Hat Container Catalog postgres-demo-apb Ansible Service Broker Service Consumer OpenShift Mall / Service Catalog

15 Run provision.yaml from postgres-demo-apb Red Hat Container Catalog postgres-demo-apb ansible-playbook $method.yaml $vars Ansible Service Broker Service Consumer oc run $appname $method $vars OpenShift Mall / Service Catalog postgres-demo-apb

16 Postgres is now running Red Hat Container Catalog postgres-demo-apb ansible-playbook $method.yaml $vars Ansible Service Broker Service Consumer oc run $appname $method $vars OpenShift Mall / Service Catalog postgres-demo-apb Pod: postgres-demo

17 Create WebApp Red Hat Container Catalog postgres-demo-apb ansible-playbook $method.yaml $vars Ansible Service Broker Service Consumer postgres-demo-apb Pod: postgres-demo oc run $appname $method $vars OpenShift Mall / Service Catalog S2I Created Python WebApp

18 Bind Postgres to WebApp Red Hat Container Catalog postgres-demo-apb ansible-playbook provision.yaml $vars Ansible Service Broker Service Consumer postgres-demo-apb POD: postgres-demo oc run $appname $method $vars OpenShift Mall / Service Catalog Bind connects the WebApp to the Database S2I Created Python WebApp

19 What is Bind Doing? OpenShift Mall / Service Catalog Ansible Service Broker Credentials postgres-demo-apb APB returns credentials of service to Broker Service Catalog injects credentials into pod S2I Created Python WebApp Pod: postgres-demo

20 Bind WebApp to PostgreSQL Binding connects WebApp to Database through a Secret

21 PostgreSQL APB: apb.yml Dockerfile playbooks provision.yaml roles postgresql-demo-apb-openshift defaults main.yml files airports.ddl airports.sql tasks main.yml - name: create service k8s_v1_service: name: postgresql namespace: '{{ namespace }}' state: present labels: app: postgresql-demo-apb service: postgresql selector: app: postgresql-demo-apb service: postgresql ports: - name: port-5432 port: 5432 protocol: TCP target_port: 5432 register: postgres_service

22

23 Ansible Service Broker More Information IRC (Freenode): #asbroker Trello: Github: Library of example APBs: ManageIQ, Etherpad, Wordpress, ELK Stack YouTube Channel: Using the Service Catalog to Bind a PostgreSQL APB to a Python Web App Service Catalog deploying ManageIQ APB on to OpenShift Docker hub published APBs

24 Questions? 24