Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...•...

31
© ETSI 2020 Community-driven Production OSM Operations Mark Shuttleworth - Canonical

Transcript of Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...•...

Page 1: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Community-driven Production OSM Operations

Mark Shuttleworth - Canonical

Page 2: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Readiness assessment

• Feedback from customers

• Feedback from GSIs and NEPs

• “OSM in Production” session

Page 3: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

NEP - OSM

GSI - OSM

Telco - OSMCloud - OSM

ISV - OSM

VIM - OSM

3

Upstream OSM and Distributions

Page 4: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

• Availability

• OSM components - NBI, LCM, RO, VCA, MON, POL

• HA, geo-redundancy, backups and disaster recovery

• Integrations - authentication, monitoring, ext. systems

• Deployment - K8s substrates, proxy/air-gap

• Operations

• Capacity - sizing, planning, scaling

• Upgrades and patches

• Security - ETSI NFV-SEC, CIS, NCSC, NIST

• Secret storage

Production considerations for OSM

Page 5: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020 5

Shared open source is very cost-effective for everybody

Page 6: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Reality is messy and mixed

6

OSM

KubernetesVIMRacks

PNF PNF VNF VNF KNF

LXD Operators

Proxy Charm(Ops Code)

VNF

Native Charm

KNF

K8s Operators

Proxy Charm(Ops Code)

Native Charm

Page 7: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

OSM VNFD

7

Metadata

Operations package - “Charm”

- Lifecycle

- Configuration

- Operation

- Integration

CODE

DECLARATIVE

Page 8: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Charms are packages of scripts to drive apps

Charm

“Action” scripts are OSM Primitives

“action: backup”“action: restore”“action: scan-viruses”“action: health-check”“action: add-repo”“action: ...”“action: ...”“action: ...”

Lifecycle scripts

- install- config- update- remove- scale

Integration scripts

- relate-mysql- relate-ldap- relate-proxy- relate-...

These are your operations primitives.

8

Page 9: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

OSM Architecture

9

LXDK8s

Operator Instance

charm

VCA

UI RO LCM POL MON

NBI

Operator Instance

charm

Page 10: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

OSM is big topology of services

● NBI. RO. POL. MON. Mongo. Kafka. Prometheus. MySQL.

● Many components have significant operational dimensions○ Deploy. Scale. Make HA. Backup. Restore.

○ All of these have to be well done for OSM to have a great reputation

○ It is easier to collaborate on great ops if we share code

○ Currently this is hugely duplicated between distributions

● The VCA is always present in OSM

Page 11: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

RO

MONLCM POLNBI

UI

Page 12: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

scale-application kafkarun-action mysql/leader backuprelate osm-nbi nagiosupgrade-charm osm-roconfig osm-lcm image=opensourcemano/lcm:7.1.0

Example operations

Page 13: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Example OSM charm operations

mysql: - scale - upgrade - backup - restore

mongodb: - scale - upgrade - backup - restore

osm-lcm: - scale - upgrade

osm-ro: - scale - upgrade

prometheus: - scale - upgrade

osm-nbi: - scale - upgrade

...

Shared collection ofOSM operations scriptsacross distributions.

Upstream maintenance and collaboration on operations.

Page 14: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

LXDK8s LXDK8s

High availability substrates

14

LXDK8s

Page 15: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Operator Instance

charm

Operator Instance

charm

VCA

LXDK8s LXDK8s

High availability OSM on Kubernetes

15

LXDK8s

RO

MONLCM POLNBI

UI

Operator Instance

charm

Operator Instance

charm

Page 16: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

High Availability

• OSM services high availability

• Using LXD clusters for proxy charm deployments

• Using K8s clusters for proxy charm deployments

• Highly available proxy charms

• Highly available VCA

Page 17: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020 17

Better integration

Page 18: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020 18

Common Codeand Operations

FCAPS

Identity

Logging

OSS/BSS

...

Page 19: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020 19

Community-driven roadmap

Page 20: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

OSM charms are in devops repo

git clone https://osm.etsi.org/gerrit/osm/devopscd installers/charm

├── bundles│ ├── osm│ └── osm-ha├── lcm├── mon├── nbi├── pol├── ro└── ui

Page 21: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Community-driven roadmap

• Upstream maintenance of charms by Canonical

• Distributions may use upstream or differentiated charms

• Upstream contributions create shared operations codebase

Page 22: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020 22

OSM 7.1 install with shared operations

Page 23: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

[--vca <controller-name> ]

23

$ ./install_osm.sh --charmed [--k8s <kubeconfig> ]

[--lxd <cluster-name> ] [--openstack <novarc> ] [--vsphere <vcfg> ]

$ ./install_osm.sh --charmed [--k8s <kubeconfig> ] [--vca <controller-name> ] [--lxd <cluster-name> ]

Page 24: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Single-node experience

24

$ ./install_osm.sh --charmed

MicroK8s LXD

RO

MONLCM POLNBI

UI

Operator Instance

charm

Page 25: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

OSM upstream charmed install

• Unified single-node, cloud and high-availability deploy

• Substrate-agnostic (Metal, AWS, Azure, VMware, OpenStack)

• All OSM and support components (db, messaging, monitoring)

• Simplified and consistent post-deployment operations

Page 26: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020 26

Documentation

Page 27: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Documentation

• Intro to Python Operator Framework

https://discourse.juju.is/t/first-steps-with-the-operator-framework/3006

• R8 planned documentation:

• Charmed OSM installation

• Scaling OSM components

• Upgrading OSM

• Scaling VCA

27

Page 28: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020 28

Cooperation

Page 29: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Cooperation

• TNO - OSM improvements

• Simula - Charm support

• Metaswitch - VNFs

• Parallel Wireless, Altiostar (OpenRAN) - Orchestration

• Juniper - SDN

Page 30: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

NEP - OSM

GSI - OSM

Telco - OSMCloud - OSM

ISV - OSM

VIM - OSM

Common Codeand Operations

30

Upstream OSM and Distributions

Page 31: Community-driven Production OSM Operationsosm-download.etsi.org/ftp/osm-7.0-seven/OSM9...• Integrations - authentication, monitoring, ext. systems • Deployment - K8s substrates,

© ETSI 2020

Find the Canonical OSM team at:[email protected]

[email protected]