L’IT as a Service con OpenStack - Incontro DevOps Italia 2015

40
from lab to enterprise [email protected] L’IT as a Service con OpenStack Incontro DevOps Italia, Bologna, Venerdì 10 Aprile 2015

Transcript of L’IT as a Service con OpenStack - Incontro DevOps Italia 2015

from lab to [email protected]

L’IT as a Service con OpenStack

Incontro DevOps Italia, Bologna, Venerdì 10 Aprile 2015

from lab to [email protected]

Tecniche di sopravvivenza al “private Cloud”

o, in altri termini, come gestire efficacemente infrastrutture IT complesse senza reinventare la ruota

from lab to [email protected]

Ettore SimoneCOSULENTE SU SOLUZIONI OPEN SOURCE • GNU/Linux (0.99): 1993 • SUSE Linux: 2000 • MOSIX: 2002 • L4, Xen, Lustre, PVFS2: 2005 • Ceph (RBD), Eucalyptus (2.0): 2010 • OpenStack (Essex): 2012

from lab to [email protected]

L’IT è Autoreferenziale

from lab to [email protected]

Intuitività!

andare drittogirare a sinistra girare a destra

Cosa cambia se acquisto/noleggio una Audi, BMW, Chevrolet, Citroen, FIAT, Ford, Honda, Lancia, Mercedes, Mini, Nissan, Opel, Peugeot, Renault, SEAT, Skoda, Toyota, Volkswagen, Volvo... ? (formali scuse per i marchi non citati)

from lab to [email protected]

Intuitività?

…in un delirio di autoreferenzialità il mondo IT si concentra sull’estremizzazione del servizio offerto.

from lab to [email protected]

ICT-IT = communicationTELEFONIA

In casa: • Dispositivi fissi e mobili • Centralini (solitamente in gestione a ditte esterne)

Fuori: • Centrali di smistamento • Celle • Gestione del servizio

from lab to [email protected]

Hic Sunt Leones

BUSINESS

PersonaleServizi

IT

Erogazione

Gestione

from lab to [email protected]

Hic Sunt Dracones• L’Informatica non segue le leggi dell’ingegneria inerenti la

semplificazione della fruizione dei prodotti e dei servizi • L’attuale complessità è completamente destrutturata e non orientata

alle esigenze di chi la implementa • Applicazioni • Sistemi Operativi • Storage • Networking • Virtualizzazione • Sicurezza

from lab to [email protected]

L'Abito e il MonacoGUI & Command Line • La risposta dell'Informatica, molto spesso, si racchiude nella User

Interface • Veste grafica • Veste a linea di comando

• Questo risolve solo parte del problema • Semplifico il suo utilizzo • Massimizzo la sua efficienza • Ma non risolvo il problema dell'interazione (se non in piccola parte)

con il resto del mondo

from lab to [email protected]

Servizi

from lab to [email protected]

Alcune OvvietàSERVIZIO • Deve SERVIRE • Devo essere cosciente di averne bisogno • Devo capire quanto mi sta aiutando • NON devo essere un tecnico per capirlo

from lab to [email protected]

Complicazioni• Ci sono troppi strati di interazione (App, OS, DB, Net, ...) • Troppe figure tecniche non direttamente orientate al business

• E' necessario ridurre la complessità ed introdurre metodi di misurazione

• Bisogna creare dei processi di gestione dell'IT che ne normalizzino il flusso ed il funzionamento

from lab to [email protected]

Cloud, XaaS, OpenStack... @#!?

from lab to [email protected]

Cos'è OpenStack?

OpenStack is a cloud operating system that controls large pools of compute, storage, and networking resources throughout a datacenter, all managed through a dashboard that gives administrators control while empowering their users to provision resources through standard APIs and a web interface.

from lab to [email protected]

Cloud / XaaS

from lab to [email protected]

Cosa Promette OpenStack?

from lab to [email protected]

La Realtà?

from lab to [email protected]

from lab to [email protected]

Complessità / Astrazione =

Modularità

from lab to [email protected]

ComputeNOVA: provides a cloud computing fabric controller, supporting a wide variety of virtualization technologies

bare metal vmware hyper-v kvm xen containers

compute

from lab to [email protected]

GLANCE: defines services for discovering, registering, retrieving and storing virtual machine images

Imaging

windows linux specialized vm snapshot workload

compute image

from lab to [email protected]

CINDER: storage service for block device

Block Storage

NAS

SAN

Internal Storage

Distributed Storage

compute image

block storage

from lab to [email protected]

KEYSTONE: provides authentication, authorization and service discovery mechanisms

Identiry

compute image

block storage

identity

from lab to [email protected]

HORIZON: a complete dashboard with an extensible framework

Dashboard

compute image

block storage

identity

dashboard

from lab to [email protected]

NEUTRON: a cloud computing network fabric controller

Networking

compute image

block storage

identity

dashboard

networking

from lab to [email protected]

from lab to [email protected]

Di Cosa Necessito?Compute Nova provides a cloud computing fabric controller, supporting a

wide variety of virtualization technologies

Imaging Glance defines services for discovering, registering, retrieving and storing virtual machine images

Block Storage Cinder storage service for block device

Identity Keystone provides authentication, authorization and service discovery mechanisms

Object Storage Swift distributed object storage system designed to scale from a single machine to thousands of servers

Dashboard Horizon a Django-based project aimed at providing a complete OpenStack Dashboard along with an extensible framework

Networking Neutron a cloud computing network fabric controller

Telemetry Ceilometer collect measurements within OpenStack

Orchestration Heat an orchestration engine to launch multiple composite cloud applications based on templates

from lab to [email protected]

Altro?...Database Trove provide scalable and reliable Cloud Database as a Service

provisioning functionality for both relational and non-relational

Data Processing Sahara provides a simple means to provision a data-intensive application cluster (Hadoop or Spark) on top of OpenStack

Bare Metal Ironic provision bare metal machines instead of virtual machines

Queue Service Zaqar a multi-tenant cloud messaging service for web developers (like Amazon SQS)

Secure Storage Barbican designed for secure storage, provisioning and management of secrets

Domain Naming Designate provides DNS as a Service for OpenStack

Catalogs Murano enabling to publish various cloud-ready applications in a categorized catalog

Shared Storage Manila a shared file system service

CI/CD Zuul a program that is used to gate the source code repository of a project so that changes are only merged if they pass tests

from lab to [email protected]

The KISS Principle: "keep it simple stupid"

from lab to [email protected]

OpenStack as a Service

from lab to [email protected]

IT as a ServiceOpenStack è una sorta di rivoluzione industriale che comporta cambiamenti radicali dei processi IT e li spinge a trasformarsi in Servizi • Nelle grandi aziende:

• Il management è libero di allocare risorse messe a disposizione dall'IT • E' possibile quantificare come e quanto queste risorse incidono sul business • L'IT può cambiare tecnologie senza creare (troppi) disservizi

• Nelle piccole e medie: • Fornitori di servizio possono gestire il datacenter • L'azienda è libera di cambiare "operatore"

• In tutti i casi: • Si è liberi di sceglere dove mantenere i servizi: private, public o hybrid Cloud

from lab to [email protected]

DevOps

from lab to [email protected]

VagrantOPENSTACK PROVIDER

Vagrant is a very popular tool within developer communities. It makes easy to manage virtual machines and is very useful to set up development or staging environments.

Vagrant can be plugged on various VM providers using its plug-in mechanism, VirtualBox, Docker, AWS and OpenStack Provider, implementing a plug-in to use OpenStack as a cloud provider for Vagrant.

from lab to [email protected]

MuranoAPPLICATION CATALOG

The mission for this project is to provide a way to make third-party applications and services running on VMs or even external services available as self-service for OpenStack. These applications may be a simple, a single VM or complex, multi tier applications with autoscaling and self healing.

From the third-party tool developer’s perspective, the application catalog will provide a way to publish applications and services, including deployment rules and requirements, suggested configuration, output parameters and billing rules. It will also provide a way to track billing and usage information.

From the user’s perspective, the application catalog will be a place to find and self-provision third-party applications and services, integrate them into their environment, and track usage information and costs.

from lab to [email protected]

ZUULCI/DI

Zuul is a program that is used to gate the source code repository of a project so that changes are only merged if they pass tests.

The main component of Zuul is the scheduler. It receives events related to proposed changes, triggers tests based on those events, and reports back. • Gerrit/Phabricator/... • Jenkins/Bamboo/Hudson/...

from lab to [email protected]

Quando il Bicchiere è Mezzo Vuoto?

from lab to [email protected]

Cosa può Andare Storto:

5%5%6%

10%

11%

13% 19%

31%

Failure to change the operational modelDoing too littleFailure to change the funding modelDefending I&O and doing too muchFocusing on the wrong benefitsUsing the wrong technologiesSomething elseNothing

from lab to [email protected]

Nessuna Domanda, Vero?

from lab to [email protected]

[email protected]

Buon Proseguimento