mhrivnak

containerd in OpenShift

This rough document captures steps that can be taken as an experiment to hack containerd into an OpenShift cluster. This should not be used for anything important.

Limitations:

• The resulting cluster is not upgradeable.
• None of OpenShift's disconnected features will work, because they are cri-o specific.

containerd RPM

mhrivnak

apiVersion: v1
kind: ConfigMap
metadata:
  name: config
data:
  FOO: bar

mhrivnak

pullsecret.yml

mhrivnak

Assumptions

• A management cluster serves as a "hub" from which bare metal clusters are created and managed.
• A management application on the hub can provision and lifecycle bare metal clusters.
• The hub cluster needs to maintain an inventory of physical hosts that can be used by the bare metal clusters it manages.

API

mhrivnak

apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: cincinnati
  name: cincinnati
spec:
  replicas: 1
  selector:
    matchLabels:

mhrivnak

# install operator-sdk
curl -L https://github.com/operator-framework/operator-sdk/releases/download/v0.7.0/operator-sdk-v0.7.0-x86_64-linux-gnu -o bin/operator-sdk
chmod 755 bin/operator-sdk

# install other utils
yum install -y jq tree ansible python-devel golang

# install "dep"
curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh

mhrivnak

Please bring a laptop to the lab with the following:

• Web Browser
• Internet connection
• Coffee (optional?)

mhrivnak

[[constraint]]
  name = "k8s.io/apimachinery"
  version = "kubernetes-1.11.2"

[[constraint]]
  name = "k8s.io/client-go"
  version = "kubernetes-1.11.2"

[[constraint]]
  name = "sigs.k8s.io/controller-runtime"

mhrivnak

# redoing the comparison from this blog post using KeepAlive:
# https://www.peterbe.com/plog/govspy

falcon
- no keepalive
	Requests per second:    3217.84 [#/sec] (mean)
	Requests per second:    3229.56 [#/sec] (mean)
	Requests per second:    3251.01 [#/sec] (mean)
- keepalive
	Requests per second:    3003.11 [#/sec] (mean)

mhrivnak

package main

/*
Run this service, then make http requests to the unix socket at path /events/

Each request must:
- use method POST
- include a JSON body

The request body will be printed for human inspection.