Modernizing OpenStack with Kubernetes, Cluster API, Keycloak (..and Rust?)
summary
Migrates OpenStack control plane into Kubernetes using openstack-helm and an Ansible-driven installer called Atmosphere, now at Atmosphere (1,500 kits), and replaces brittle Terraform state workflows with stamped Ansible installs. Adds Keycloak as primary identity with a Keycloak-backed Keystone user list and a pip-installable web SSO driver for CLI tokens. Implements Cluster API via a Cluster API provider for OpenStack (500+ commits) and builds event-driven billing, Stratom: 1M VMs, 20ms queries, while replacing RabbitMQ with gRPC and signing images with cosign.
AI-written summary · about
chapters (18)
- 0:00Introduction to atmosphere
- 1:25Early deployment challenges
- 2:29Moving to puppet automation
- 3:33Adopting ansible for scaling
- 4:29Transitioning to openstack helm
- 6:16On-premise deployment hurdles
- 7:56Atmosphere project overview
- 9:44Kubernetes ecosystem benefits
- 11:07Day two operations operators
- 12:09Keycloak for authentication
- 14:31CLI access and security
- 16:10Magnum cluster api integration
- 18:26Atmosphere service improvements
- 20:02Backporting security features
- 21:44Future innovations with rust
- 23:39Replacing rabbit mq
- 26:37Replacing horizon and billing
- 29:01Project Q&A session
related talks
31mIntro: OpenStack SIG
21mBack to the original mission: an open cloud operating system
18mCloud Provider OpenStack Community Session
31mIntro: OpenStack SIG
01h 20mIntro + Deep Dive: OpenStack SIG
49mIntroduction to OpenStack
45mLarge-scale kubernetes deployment, which tools to use and how - Rachid Zarouali
33mOpenStack SIG Deep Dive