Learning Library

← Back to Library

OpenShift Benefits: Faster Development, Simple Networking

Key Points

  • OpenShift adds developer‑focused features that vanilla Kubernetes lacks, speeding up cloud‑native app creation and simplifying operations.
  • Its Source‑to‑Image (S2I) pipeline automatically detects the code language, selects the appropriate base image, builds a container image, and pushes it to a registry, eliminating the need for developers to write Dockerfiles.
  • OpenShift’s built‑in routing gives each service a readable URL and abstracts the complex Kubernetes networking model, making exposure of applications easier.
  • The platform also handles integration with external load balancers, further reducing networking configuration effort for both new and experienced developers.

Full Transcript

# OpenShift Benefits: Faster Development, Simple Networking **Source:** [https://www.youtube.com/watch?v=ZsOR8RkAOwI](https://www.youtube.com/watch?v=ZsOR8RkAOwI) **Duration:** 00:09:18 ## Summary - OpenShift adds developer‑focused features that vanilla Kubernetes lacks, speeding up cloud‑native app creation and simplifying operations. - Its Source‑to‑Image (S2I) pipeline automatically detects the code language, selects the appropriate base image, builds a container image, and pushes it to a registry, eliminating the need for developers to write Dockerfiles. - OpenShift’s built‑in routing gives each service a readable URL and abstracts the complex Kubernetes networking model, making exposure of applications easier. - The platform also handles integration with external load balancers, further reducing networking configuration effort for both new and experienced developers. ## Sections - [00:00:00](https://www.youtube.com/watch?v=ZsOR8RkAOwI&t=0s) **OpenShift’s Source‑to‑Image Benefit** - The speaker highlights how OpenShift speeds up developer workflows by automatically detecting a project's language from a Git repository, choosing the right base image, building a container image, and pushing it to a registry via the Source‑to‑Image feature—an advantage over plain Kubernetes. ## Full Transcript
0:00so a question we're often asked is why 0:03openshift over vanilla kubernetes well 0:07today we're going to look at the 0:08benefits of openshift both for 0:10developers and for it operations 0:14so let's start with Developers 0:16one of the key features that openshift 0:18is going to give us is speed of 0:20development particularly with the steps 0:23of creating and building the cloud 0:25native application which is you know 0:27manifested as containers and the feature 0:29in openshift that makes that possible is 0:32called source to image 0:36so let's look at how sourced the image 0:38works first your developer is going to 0:41write some code 0:46and they're going to put it in a git 0:48Repository 0:53and this is where sourced image is going 0:55to take over 1:02sourced image is going to be able to 1:03look at the code that was placed in the 1:06repository and it's going to be able to 1:07determine did you write Java code did 1:09you write python code and it's going to 1:11be able to recognize what type of code 1:13you wrote 1:14and since you wrote some code it's now 1:17smart enough to know what type of Base 1:18image that you need to pick and it's 1:21going to go pull that 1:22from an image catalog 1:29so now what source damage is going to do 1:31it's going to take the code that you 1:33wrote it's going to combine it with the 1:35base image that was appropriate for 1:37whether you wrote python or whether you 1:38wrote Java and it's going to build a new 1:41image 1:42and it's going to put that new image in 1:45a registry 1:47it's going to push your new image to a 1:49registry and then when it's ready to 1:51deploy it's gonna 1:52push that image 1:55to deploy to deployment 1:58so what happened here why was this such 2:01a great feature well a lot of these 2:03steps here uh the selecting of an image 2:07and merging that image with code and 2:10building a new image 2:12typically you have to write a container 2:15script building files sometimes called 2:18Docker files to do all those steps and 2:21if you're someone like myself who's been 2:23writing these types of container 2:25building files for years those steps 2:27aren't too hard 2:28but if you have a lot of new Developers 2:31you know Java developers python 2:34developers who've been developing for 2:35years but aren't very familiar with 2:37Cloud native applications and how to do 2:39container type activities building 2:42containers and picking an image and 2:45putting it and merging it with the image 2:48with the code that they wrote and then 2:49pushing it to a registry having 2:51openshift automate all of that for you 2:54is is a huge help 2:56so that's a key feature for new 2:58developers that openshift provides and 3:01another feature that openshift provides 3:06is easy networking 3:10through the use of routes 3:14so in vanilla kubernetes the networking 3:17piece is really complicated and can be 3:20very hard to do and what's really nice 3:22about openshift is it takes care of the 3:24networking piece for you so what it'll 3:26give you is it'll give you an easy to 3:28read URL that maps to your deployed 3:31application and then the other aspect 3:33that the openshift will provide you 3:35networking wise is integration with 3:37external load balancers so it allow 3:40it'll take care of that integration with 3:41the external load balancer and even give 3:43you different load balancing options and 3:45if you had to figure all that out in 3:46vanilla kubernetes you'd have to be 3:48really strong in kubernetes networking 3:50to be able to perform those activities 3:53so now let's move on and talk about what 3:57does openshift do for you from an IT 3:59operations perspective and we're going 4:01to talk about that under the context of 4:03day two operations 4:08and so the key piece that openshift 4:11gives you for your day two operations is 4:14automation 4:20so what does openshift automate for you 4:23well the first thing it automates for 4:24you are installs 4:29and then the next big piece that it 4:32provides automation for are updates 4:38and the updates aren't simple updates so 4:40when it doesn't update 4:42it worries about updating the platform 4:44which is openshift 4:48and it also updates the underlying 4:51operating system which is Rel now why 4:54it's important to update both of these 4:55together is openshift will always make 4:58sure that the version of openshift is 5:00compatible with the version of the 5:02operating system that's being used 5:03you'll never run into incompatibility 5:05issues because the wrong OS version was 5:08picked further for the particular 5:10version of openshift so it's a key 5:12feature in the automated updates that 5:14openshift provides 5:15another place where openshift provides 5:18automation is in cluster size 5:25so in vanilla kubernetes if your cluster 5:28is not big enough it's really hard to 5:31increase the size of the cluster but in 5:33openshift it's able to do this 5:35automatically for you so it's a huge 5:37benefit if you're running out of you 5:40know you have scalability issues and you 5:42don't have enough nodes in your cluster 5:43having this taken care of by openshift 5:46is going to be a huge help to your it 5:49operations folks 5:51the next feature that openshift provides 5:53you is multi-cloud management 6:03so when you start running in production 6:05the odds are you're going to be running 6:07lots of clusters and you're probably 6:09going to be running them on different 6:11clouds maybe different types of clouds 6:13public clouds private clouds and try to 6:16manage all those clusters running on all 6:19those different Cloud environments and 6:20vanilla kubernetes is really difficult 6:22but openshift has built-in tools for 6:26multi-cloud management that make running 6:28across multiple clouds very very easy 6:32it's all built into the tool 6:34now the last piece where open shift 6:36really shines is insecurity 6:42and the aspects of security that 6:45openshift really shines is in two pieces 6:48one is in guard rails 6:53and what do we mean by guard rails so 6:56openshift essentially prevents you from 6:59running with Scissors so if you have new 7:02developers new folks that are deploying 7:04to production 7:05there are some things that vanilla 7:07kubernetes will let you do that you 7:09really should never do in production so 7:12one example of this is running a 7:15privileged container a container that 7:17runs as root you never want to run those 7:19in production uh you know if you're 7:21worried about security because there's a 7:25big surface area that can be attacked 7:27with vulnerabilities if you're running 7:28as root so what openshift will do is it 7:32will prevent you from running that type 7:34of container it'll request that the 7:36container be non-privileged another 7:38example of of a particular vulnerability 7:41that openshift gives you guard rails for 7:43is if you use a default namespace again 7:46using a default namespace can have 7:48security vulnerabilities and openshift 7:51is going to make sure that whenever you 7:52deploy your container that you are using 7:55non-default namespace 7:57now the last aspect of security that 8:01openshift takes care of is the notion of 8:03profiles 8:07so in vanilla kubernetes there's a large 8:11number of knobs that you have to turn to 8:13get security right so and there's not a 8:15lot of people that are very comfortable 8:17with turning all those knobs correctly 8:19to make sure there's no security 8:21vulnerabilities 8:22in openshift you don't have to modify 8:25the individual knobs instead what you do 8:27is you pick a particular security 8:29context constraint profile and the 8:32profile that you pick will give you the 8:35level of security and the level of 8:37access that your container needs but 8:39it's also going to take care of turning 8:40all those knobs the right way so you 8:42never have to personally turn those 8:44knobs and you can feel more comfortable 8:46that you just picked a profile and that 8:48profile is proven to be secure 8:51so what have we seen today we've seen 8:54that openshift provides us great 8:56benefits for day two operations and it 8:59also provides us great benefits to 9:01developers and speeds up their 9:03development and this is why we feel 9:05openshift provides a lot of value Beyond 9:08vanilla kubernetes 9:11thanks for watching if you enjoyed this 9:13content please like the video and 9:15subscribe to our Channel