whats new in_juno_meetup_barcelona

RED HAT ENTERPRISE LINUX OPENSTACK PLATFORMDOC144908

What's new in JUNO?

OPEN CLOUD INFRASTRUCTURE BUILT FOR THE ENTERPRISE

Pedro NAVARRO PEREZOpenStack Technical Specialist


Who am I?

Pedro Navarro Pérez ([email protected])

OpenStack Technical Specialist in EMEADeveloper backgroundWorking on OpenStack since CactusMajor contributor in the Hyper-V Nova teamWindows Storage Cinder driver maintainer


WHAT'S NEW IN VERSION 6

● OpenStack Compute (Nova)● Guest vCPU topology configurability

● Support definition of vCPU NUMA topologies and sockets/cores/threads to expose to guests.

● Defined in flavor extra specifications and/or image properties.● Useful where guest operating system has specific topology requirements or to maximize

guest performance by aligning it with expected host topologies.● Evacuation to a scheduled host.

● Evacuate previously required user specified target host.● Target host is now optional, scheduler can instead pick best target.



● OpenStack Compute (Nova)● Instance support for interactive serial console.● Support for per-image config drive format.

● It is now possible to set expected configuration drive format using image properties rather than global configuration value.

● Allows mix of vfat, iso9660, to match guest expectations.● Compute driver for Baremetal (Ironic) – Technology Preview



OpenStack Identity (Keystone)● LDAP Multi-backend

Keystone now supports the integration of multiple Identity Providers together in a single Keystone Instance, Using a mapping layer to store the domain and local ID for the public facing user and group IDs.

● Support Compression of the PKI tokenPKI tokens are topping out over 8K, this adds support for optional compression to shrink the token size.

● Endpoint Policy AssignmentOS-POLICY Provides the means to assign policy files to specific endpoint, or to all endpoints for a specific services via the API.



OpenStack Identity (Keystone)● Stand alone service catalog

This introduces a standalone V3 API request to fetch an authenticated service catalog, for use with tokens that do not contain a catalog

● Enable filtering of Policy credentials by user_idThis enables filtering policy files by user_id attribute which enables users to have access only to their credentials.


WHAT'S NEW IN VERSION 6 ● OpenStack Object Storage (Swift)

● Storage Policies ● Storage Policies allow for some level of segmenting the cluster for various purposes

through the creation of multiple object ring. ● Once configured, users can create a container with a particular policy● Storage Policies can be set for:

● Different Storage implementations:● Different Diskfile (e.g. GlusterFS, Kinetic) for group of nodes ● Different levels of replication● Different Performance profiles (e.g. SSD-only)


WHAT'S NEW IN VERSION 6 ● OpenStack Object Storage (Swift)

●Multi-ring awareness ● Object replication - added to be aware of the different locations on-disk that storage

policies introduced● Large objects - Refactoring work for storage polices● Object auditing – added to be aware of the different on-disk locations for objects in

different storage policies● Improve partition placement

● The swift-ring-builder has been updated to first prefer device weight, then use failure domains to break ties.

* The progress on multi-ring and storage policies is the foundation to the the Swift Erasure code development that is on-going.



● OpenStack Block Storage (Cinder)● Pool-aware Scheduler

● Cinder was extended to be aware of storage pools within backend and also use them as finest granularity for resource placement.

● Volume Num Weighter ● Added the support to choose volume backend based on

volume number in volume backend, to improve volumes IO balancing performance.



● OpenStack Block Storage (Cinder)● Cinder volumes replication

● Enable Cinder to leverage volume replication features available in storage backends including failover, failback as well as reverse direction capabilities for disaster recovery.

● Consistency Groups ● Consistency groups support was added to group volumes

together for the purpose of application data protection (with the focus of snapshots for disaster recovery)



● OpenStack Image Storage (Glance)● Asynchronous Processing

● Added the async worker support for processing to be performed on an image without delaying the user (such as image imports tasks etc)

● Metadata Definitions Catalog● A new catalog was added to define available metadata that

can be used on different types of resources (images, artifacts, volumes, flavors etc). So, a user through Horizon, would be able to search this catalog to list the available properties they can add to a flavor or image. Example: hw_cpu_cores=1 (images) hw:cpu_cores=1 (flavor)



● OpenStack Image Storage (Glance)● Image download improvements:

● Download image restriction policy● A support was added to restrict users from downloading

image based on policy. Until Juno release, images got to be shared publicly with the users can download these images freely without restriction that could have lead to piracy.

● Restart of partial download ● Solved a problem associated with a very large images

download that may be interrupted prior to completion, due to dropped connections



● OpenStack Orchestration (Heat)● Support additional resource types:

● Data Processing (Sahara)● Server (Instance) Groups

● Stack lifecycle improvements:● Update a failed stack● Cancel a stack update● Stack update no longer requires resubmission of all original

parameters



OpenStack Dashboard (Horizon)● Usage Data downloadable in CVS format

Allow the user to download daily usage data for all of the projects as a CSV file.● Table Filtering is performed via API query attributes which filter complete tables, not only

single pages.● Keystone:

● New Identity Dashboard: Identity panels are under their own dashboard, using RBAC to determine the data to load in the identity dashboard

● New mechanism to easily switch between projects and regions, and domains.● Horizon now supports Trove and Sahara dashboards as Tech Preview


WHAT'S NEW IN VERSION 6OpenStack Dashboard (Horizon)

● Nova: ● RBAC: Horizon now checks policy rules for all Nova instance actions on projects and

admin dashboards.● Ability to evacuate nova-compute hosts

● Cinder: ● System info panel now includes Cinder services' status ● Users can now upload Cinder Volumes to Glance images● Ability to manage Quality-of-Services for Cinder Volumes ● Ability to manage Extra Specs for volume types● Resetting States of volumes and Snapshots



OpenStack Dashboard (Horizon) ● Glance:

● Users can now manage key/value Metadata registry for images● Neutron:

● Horizon now supports creating IPv6 subsets ● Ability to manage networks in the DHCP agent● UI adjustments to support Distributed Virtual Routers ● RBAC: Policy checks for all Neutron actions on firewalls, loadbalancers,

network_topology, networks, routers and vpn panels.● Heat:

● RBAC: New policy checks for heat actions



● OpenStack Telemetry (Ceilometer)oSupport for hardware-oriented monitoring of IPMI sensors via

Ironic or standalone agent.o Improved scalability using horizontally scaled central agent

and alarm partitioning to spread load.



● OpenStack Telemetry (Ceilometer) - Cont.oMany improvements to SNMP handling:

Batching of queries for related SNMP metrics. Lower barrier to extending list of SNMP metrics retrieved. Ability to apply arithmetic when deriving new metrics from

other primary metrics. Support for auto-discovery of TripleO deployed hosts for

polling.


● OpenStack Data Processing (Sahara)● Full support for OpenStack Data Processing

● Was previously Tech Preview● Certification of Hadoop distributions (HortonWorks, Cloudera, etc)● Hadoop 2.4.0 Support

● Vanilla 2 plugin support● Secondary NameNode support

● Stronger integration testing● Now includes support for Hue (a UI for analyzing data with Apache Hadoop)



● OpenStack Bare Metal Provisioning (Ironic)● Integrated in Juno and Tech Preview for RHEL OSP 6● Leverages common technologies like PXE, IPMI and DHCP● Consists of Ironic API, Conductor, database and hardware specific drivers

● Early out of band management support for HP iLO and Dell DRAC● Provides a solution for the “bare metal to tenant” use case

● Hadoop on bare metal within OpenStack● Hyperscale and High performance computing (HPC) clusters ● Database hosting for virtual machine sensitive applications

● Ironic is a foundational component of TripleO



● OpenStack Deployment (TripleO)● TripleO's goal is to provide deployment, upgrades and operational awareness of

OpenStack.● A limited scope, Tech Preview version is included in RHEL OSP 6. Highlights include:

● A live image installer● An operator focused user interface● Manual or automatic hardware discovery● Support for compute, block storage, object storage and controller roles● Image and service deployment using Heat, Glance and Ironic● OpenStack service, capacity and other metrics displayed via the Operator Dashboard



TECH PREVIEW: TROVE

*Tech Preview features are subject to change in GA

● Added Replication support● Asynchronous mysql master-slave replication

● Added Neutron support● Add Neutron NICs on instance create / support default Neutron Networks

● Datastore Enhancements● Added support for PostgreSQL & Vertica databases● Added Datastore_version to backup api response

● Other Enhancements● Configuration Groups: per datastore and version / or per DB e.g. MongoDB ● restrict the type of Cinder backend used for Trove Volumes



OpenStack Networking (Neutron)

● IPv6 support for tenant networkso Instance can use SLAAC from physical device (provider

network)oNeutron routers can announce IPv6 routes and addressesoDHCPv6 stateless and stateful mode in Dnsmasq




● Revised HA deploymentoNetwork Node can be configured to use HA routersoBased on keepalived/VRRP for providing load sharing and

high availability for the Neutron routersoPacemaker still going to be used to monitor the processes




● Security Groups enhancementso Internal RPC code changes that leads to significant scale and

performance enhancements




● Included as a Technology Preview:oDistributed Virtual Routing (DVR)

Provides Neutron equivalent to nova-network’s multi host, provides HA for L3 networking.

oNew ML2 driver to support SR-IOV networking

whats new in_juno_meetup_barcelona

Software

whats new

storage backends

new catalog

support compression

different locations

different diskfile

async worker support

filtering policy files