Operating OpenShift. An SRE Approach to Managing Infrastructure

Copyright
Table of Contents
Preface
	Conventions Used in This Book
	Using Code Examples
	O’Reilly Online Learning
	How to Contact Us
	Acknowledgments
Chapter 1. Introduction
	Traditional Operations Teams
	How Site Reliability Engineering Helps
	OpenShift as a Tool for Site Reliability Engineers
	Individual Challenges for SRE Teams
Chapter 2. Installing OpenShift
	OKD, OCP, and Other Considerations
		OKD
		OCP
		OSD, ROSA, and ARO
	Local Clusters with OpenShift Local
	Planning Cluster Size
		Instance Sizing Recommendations
		Node Sizing Recommendations
		Master Sizing Recommendations
		Infra Nodes
	Basic OpenShift Installations
		Installer-Provisioned Infrastructure
		Self-Provisioned Infrastructure
	Summary
Chapter 3. Running Workloads on OpenShift
	Deploying Code
		Deploying Existing Container Images
		Deploying Applications from Git Repositories
	Accessing Deployed Services
		Accessing Services from Other Pods
		Distribution of Requests
	Exposing Services
		Route by Auto-generated DNS Names
		Route by Path
		External Load Balancers
	Securing Services with TLS
		Specifying TLS Certificates
		Redirecting Traffic to TLS Route
		Let’s Encrypt Trusted Certificates
		Encrypted Communication to the Service
	Summary
Chapter 4. Security
	Cluster Access
	Role-Based Access Control
		Roles and ClusterRoles
		RoleBindings and ClusterRoleBindings
		CLI
	ServiceAccounts
	Threat Modelling
	Workloads
	Summary
Chapter 5. Automating Builds
	OpenShift Image Builds
		Docker Build
		Source to Image (S2I) Build
		Custom S2I Images
	Red Hat OpenShift Pipelines
		Overview
		Install Red Hat OpenShift Pipelines
		Setting Up the Pipeline
		Turning the Pipeline into Continuous Integration
	Summary
Chapter 6. In-Cluster Monitoring Stack
	Cluster Monitoring Operator
		Prometheus Operator
		User Workload Monitoring
	Visualizing Metrics
		Console Dashboards
		Using Grafana
	Summary
Chapter 7. Advanced Monitoring and Observability Strategies
	Service Oriented Monitoring
		Service Level Indicators
		Service Level Objectives
		Tools
	Logging
		ClusterLogging
		Log Forwarding
		Loki
	Visualization
		Installation
		Creating a Grafana Instance
		Data Source
		Dashboards
	Summary
Chapter 8. Automating OpenShift Cluster Operations
	Recurring Operations Tasks
		Application Updates
		Certificate Renewals
		OpenShift Updates
		Backups
	Automating Recurring Operations Tasks
		Persistence
		Creating Snapshots
		Using CronJobs for Task Automation
	Cluster Configuration
	Manage Cluster Configuration with OpenShift GitOps
		Installing OpenShift GitOps
		Managing Configuration with OpenShift GitOps
		Managing Configuration of Multiple Clusters with OpenShift GitOps
	Summary
Chapter 9. Developing Custom Operators to Automate Cluster Operations
	Operator SDK
	Operator Design
	Bootstrapping the Operator
	Setting Up a CA Directory for Development
	Designing the Custom Resource Definition
	Installing the CustomResourceDefinition
	Local Operator Development
	The Reconcile Function
	Deploying the Operator
	Creating and Updating OpenShift Resources
	Specifying RBAC Permissions
	Routing Traffic to the Operator
	Adding Additional Controllers
	Updating Resource Status
	Summary
Chapter 10. Practical Patterns for Operating OpenShift Clusters at Scale
	Cluster Lifecycle
	Cluster Configuration
	Logging
	Monitoring
	Alerting
	Automation
	On Call
		Primary On Call
		Backup On Call
		Shift Rotation
		Ticket Queue
	Incident Management
		When to Declare an Incident
		Inform the Customer
		Define Roles
		Incident Timeline
		Document the Process
		Postmortem
	Accessing OpenShift Clusters
	The Stage Is Yours
Index
About the Authors
Colophon