1. ENTER THE TITLE OF YOUR OPENSTACK
ANATOMY OF A NETWORK CLOUD
Amy Wheelus – AT&T
Ryan van Wyk – AT&T
Andrew Leasck – AT&T
OpenStack Summit
5/22/2018
Vancouver, Canada
ENTER THE TITLE OF YOUR OPENSTACK
PRESENTATION

2. AGENDA PATH TO THE NETWORK CLOUD NETWORK CLOUD DESIGN NETWORK CLOUD
Security
Containerization
Quality
PATH TO THE
NETWORK CLOUD
NETWORK CLOUD
DESIGN
NETWORK CLOUD
DELIVERY
WHAT’S
NEXT
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

3. PATH TO THE NETWORK CLOUD NETWORK CLOUD DESIGN NETWORK CLOUD DELIVERY
Security
Containerization
Quality
PATH TO THE
NETWORK CLOUD
NETWORK CLOUD
DESIGN
NETWORK CLOUD
DELIVERY
WHAT’S
NEXT
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

4. BUSINESS DRIVERS FOR THE NETWORK CLOUD
Security
Containerization
Quality
FIRSTNET
BUSINESS COLLABORATION
vEPC 5G
INTELLIGENT EDGE
CRICKET WIRELESS
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

5. Path to the network cloud
Security
Containerization
Quality
2014 – 2016 | CONVERGE AND DEPLOY
2017 | ENHANCE
2018+ | EVOLVE
AIC 1.0 – AIC 2.5
AIC 3.0
NC 1.0
Common Platform Architecture
Structured Agile Development
Single Unified Code Base
Global, automated AIC Zone Deployments
AIC Flavor Series
Fault Tolerance, Normalization, Resiliency
Matured Security
Container Based Resiliency
“Lego” Blocked Infrastructure
Scalable Footprint
High Performance Focused
ONAP Orchestrated
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

6. Software Defined Networking
ONAP: The at&t story
Security
Containerization
Quality
THE ROAD TO ONAP
Rapidly onboard new services
AT&T
Software Defined Networking
Enables the creation of a new ecosystem of cloud consumer and enterprise services
ECOMP
8.5 Million Lines of Code
Reduces capital and operational expenditures
OPEN SOURCE
OPEN SOURCE
PLATFORM 1
OPEN SOURCE
PLATFORM 2
Provides operational efficiencies
ECOMP
ONAP
Allows the customer in near real-time to reconfigure their network, services, and capacity
900+ contributors
50+ members – 30+ projects
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

7. PATH TO THE NETWORK CLOUD NETWORK CLOUD DESIGN NETWORK CLOUD DELIVERY
Security
Containerization
Quality
PATH TO THE
NETWORK CLOUD
NETWORK CLOUD
DESIGN
NETWORK CLOUD
DELIVERY
WHAT’S
NEXT
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

8. Network cloud design criteria
Security
Containerization
Quality
SPEED
COST
QUALITY
Born in a Strong, Open Community
Collaborative Innovation from diverse thought leaders
Supported by leading companies in computing and networking
Fast Deployments & Upgrades
SW deploy weeks to < day
Major upgrade days to hours
Minor upgrades 1 day to minutes
Lower VM Cost
Significantly reduce control plane hosts
Eliminates control plane dependency on high cost external storage
Designed for Ops Excellence
Predictable process for all SW changes
Greater control
Higher resiliency
Greater visibility
Flexible, Fine-Grain Scaling
Granular control of scaling by component
Scale site 1 control plane host at a time
Service right sizing to site needs
Enable Seamless Upgrades
Upgrades with no impact to running tenant workloads*
Enabler of feature continuous delivery
SW Delivery Automation (CI/CD)
Self contained control plane & deployable on a dev laptop
Automated, homogenous deployments from dev to prod with zero config drift
Extreme Reuse
One platform from DC to edge
Single operations interface
Standard APIs for tenants & ONAP
Evolves Control Plane Security
Additional control
Greater visibility
*Note: HW pinning and OS upgrades may cause short interruptions
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

9. ARCHITECTURALLY FLEXIBLE
Airship | A New Open Infrastructure Project for OpenStack
Airship | What & Why:
Airship Architecture:
What
The focus is a declarative platform to introduce OpenStack on Kubernetes (OOK), and the lifecycle mgmt. of the resulting cloud, with the scale, speed, resiliency, flexibility & operational predictability demanded of Network Clouds.
Why
DECLARATIVE
Sites are declared using YAML, including both hard assets & soft assets. You manage the document and Airship implements it.
CONTAINER BASED
Containers are the unit of software delivery for Airship. This allows progress from dev, to testing, and production with confidence.
Airship Sub-Projects
Treasure Map
Shipyard
Drydock
Divingbell
Deckhand
ONE WORKFLOW
One workflow that handles both initial deployments and future site updates with virtually no difference in interacting with the two
ARCHITECTURALLY FLEXIBLE
Airship to manages our entire cloud platform, not just OpenStack including small and large environments with multiple configurations
Berth
Promenade
Pegleg
Armada
More info:
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

10. Airship-An UNDERCLOUD PLATFORM enabling the network cloud
Security
Containerization
Quality
Baremetal
Host OS
OCI Compliant Container Runtime | Kubelet
Kubernetes
Logging
Monitoring & Alerting
Keystone
SDN Controller
Glance
Horizon
Nova
Neutron
Cinder
Heat
Barbican
Ranger
Swift
Security & Operations
Ceph
Calico
Divingbell
Drydock
Shipyard
Deckhand
Promenade
Berth
OpenStack-Helm (OSH)
Helm
Armada
VNF
ONAP
Cloud Platform
Undercloud Platform (UCP)
Runtime
The blue highlights the Airship projects that facilitate the creation and life-cycle management of an undercloud platform that is used to enable a OpenStack based Network Cloud with the scale, speed, flexibility and operational predictability this infrastructure must deliver.
The green highlights the Open Source projects that Airship leverages/ integrates with to deploy the undercloud platform.
End to End CI/CD
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

11. PATH TO THE NETWORK CLOUD NETWORK CLOUD DESIGN NETWORK CLOUD DELIVERY
Security
Containerization
Quality
PATH TO THE
NETWORK CLOUD
NETWORK CLOUD
DESIGN
NETWORK CLOUD
DELIVERY
WHAT’S
NEXT
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

12. How to build the network cloud
Security
Containerization
Quality
Simplicity
Predictability
Quality
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

13. Simplicity Multiple, best in class, opensource projects converged
Security
Containerization
Quality
Airship
Kubernetes
Keystone
Helm
Barbican
OpenStack-Helm
Kubernetes + OpenStack = use as individual services - Eliot
Multiple, best in class, opensource projects converged
Shift from Imperative to declarative
Shift to API layer over engines
Utilize OpenStack standalone components
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

14. Predictability
Security
Containerization
Quality …
Artifact Repository
Gerrithub.io
Containers
Built
Airship
Assembled
Testing
Executed
GIT
Ephemeral
Deploy
Genesis Node
Provision
Publish Site
definition
Clone
Syntax Check
Bandit
Unit Test
Containerize
Coverage
Merge
Publish
Site deploy
Tempest Full
VNF Testing
Infra Testing
Enhance developer experience by deploying a reference architecture on a single machine, increasing efficiency
Pipelines continuously run across all services, driving predictable delivery
No-touch deployment from point of merging, to posting docker images and deploying full integration labs
Continuous deployment identifies issues early in process, through quality gating in Jenkins pipeline via AQuA testing
Everything deployed is 100% containerized – common infrastructure is utilized from Jenkins to Artifactory
Bottom line: Pipeline is zero touch and human interaction eliminated from deployment process
Kubernetes + OpenStack = use as individual services - Eliot
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

15. Principles behind AQuA AQuA Framework Components
Quality
Security
Containerization
Quality
AIC Quality Automation (AQuA)
An extensible test framework, spanning various dimensions of the delivery lifecycle required to have confidence in delivering a stable platform.
AQuA seeks to establish consistent and continuous testing across our organization.
Leverage sanctioned open source test frameworks
Extend/Contribute to those frameworks
Integrated as quality gates in CI/CD pipeline
CSO-compliant testing and certification mechanisms
Ensure that each execution cleans up its resources
Call and assert meaningful results from APIs
Provide Development toolset/documentation
Principles behind AQuA
AQuA Framework Components
Unit testing
Code Quality Analysis
API Testing
Resource Testing
Dashboard
Command Line Interface (CLI) Testing
Graphic User Interface (GUI) Testing
Infrastructure Testing
Security
Performance
Resiliency
In Use
Beta
POC
Ideation
Kubernetes + OpenStack = use as individual services - Eliot
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

16. PATH TO THE NETWORK CLOUD NETWORK CLOUD DESIGN NETWORK CLOUD DELIVERY
Security
Containerization
Quality
PATH TO THE
NETWORK CLOUD
NETWORK CLOUD
DESIGN
NETWORK CLOUD
DELIVERY
WHAT’S
NEXT
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

17. What’s next NC Beta for 5G (In Process) NC 1.0 (Q4) 5G Market Launch
Security
Containerization
Quality
NC Beta for 5G
(In Process)
NC 1.0
(Q4)
5G Market Launch
(Q4)
Airship Milestones
AT&T Summit Sessions (Airship / Helm)
Airship: A New Open Infrastructure Project for OpenStack
OpenStack-Helm Hands-on Workshop: Deploy & Upgrade OpenStack on Kubernetes
OpenStack-Helm Project Update
Effective Kubernetes Helm Engineering: Open Stack-Helm Lessons Learned
AT&T Integrated Cloud - Transition from Virtualized to Containerized Control Plan CI/CD
The OpenStack and Kubernetes Smorrebrod (Open Sandwich)
Telco Cloud Next Generation Stack Update: What's Changed with OpenStack-Helm and OpenContrail-Helm
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

19. Appendix

20. The Airship sub projects
Security
Containerization
Quality
Treasure Map:
is the documentation project that outlines a reference architecture for automated cloud provisioning and management, leveraging the Airship interoperable open-source tools.
Shipyard:
is the directed acyclic graph controller for Kubernetes and OpenStack control plane life cycle management, and a component of the Undercloud Platform (UCP).
Drydock:
is a python REST orchestrator to translate a YAML host topology to a provisioned set of hosts and provide a set of post-provisioning instructions.
Divingbell:
is a lightweight solution for 1) Bare metal configuration management for a few very targeted use cases and 2) Bare metal package manager orchestration
Deckhand:
is a storage service for YAML-based configuration documents, which are managed through version control and automatically validated. Deckhand provides users with a variety of different document types that describe complex configurations using the features listed below.
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.

21. The Airship sub projects
Security
Containerization
Quality
Armada:
is a tool for managing multiple Helm charts with dependencies by centralizing all configurations in a single Armada YAML and providing life-cycle hooks for all Helm releases.
Note: Armada is an enhancement to the helm client. Still using the helm tiller service, we deploy multiple charts with data-driven yamls.
Promenade:
is a tool for bootstrapping a resilient Kubernetes cluster and managing its life-cycle via Helm charts.
Berth:
is a deliberately minimalist VM runner for Kubernetes.
Pegleg:
document aggregator providing early linting and validations via Deckhand for documents that can be consumed by UCP.
OpenStack-Helm:
is a OpenStack project to provide a collection of Helm charts that simply, resiliently, and flexibly deploy OpenStack and related services on Kubernetes.
Kubernetes Helm:
is a tool for managing Kubernetes charts. Charts are packages of pre-configured Kubernetes resources.
Kubernetes (K8s):
is a open-source platform for managing containerized workloads and services, that facilitates both declarative configuration and automation.
Open Source Projects that Airship
Leverages/Integrates with:
© 2018 AT&T Intellectual Property.  All Rights Reserved.  AT&T, the Globe logo, Mobilizing Your World and DirecTV are registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies.  All other marks are the property of their respective owners.