How CERN empowers its users with Kubernetes and OpenShift
summary
CERN runs two complementary Kubernetes offerings: unmanaged clusters via OpenStack Magnum giving users root access and custom nodes (GPUs, large-memory) and managed OKD with Argo CD that hosts multi-tenant platforms and automates upgrades. Operators (custom and upstream), OpenPolicyAgent, and storage integrations (CERN EOS, CFS, Manila) power the system; the OKD PaaS holds ~1,400 projects, the web cluster ~4,000 projects on ~20 nodes. ArgoCD reconciles config, okdctl aids ops, and a recent misconfigured operator caused mass deletions, prompting safer deletion practices.
AI-written summary · about
chapters (18)
- 0:00Intro
- 1:05About Jack
- 2:15Web services at CERN
- 2:42Fast-forward to 2023
- 3:33Benefits of unmanaged Kubernetes
- 5:29Benefits of managed Kubernetes
- 7:43Deploying Containers
- 9:23Resource management
- 12:19Kubernetes Deployment Architecture
- 13:10OKD @ CERN
- 18:02Web Services Portal
- 19:09Behind the scenes
- 19:58OKD cluster management
- 22:26OKD deployment
- 23:34Benefits of using ArgoCD (GitOps)
- 25:43Spotlight: OpenPolicyAgent
- 27:06Operators
- 28:51Lessons learned
related talks
20mCERN's 1500 Drupal Websites on Kubernetes: Sa...
29mA Multi-Cluster, Multi-Cloud Infrastructure with GitOps at CERN
19mKeynote: Building Bridges: Cloud Native and High Performance Computing
08mLightning Talk: Orchestrating Kubernetes Clusters on HPC Infrastructure
28mCloud native for governmental workloads
29mTowards Sustainable Multi-Cluster Management in Real-World Academic Infrastructure
23mScale GitOps With the Argo CD Agent and Open Cluster Management
26mGitOps Me Some of That! Managing Hundreds of Clusters with Argo CD