How has it helped my organization?
We can deploy microservices on the fly. The time to market has improved for our organization. If any issues are found or any incident is reported, fixes or hotfixes can be done within a fraction of a second. These KPIs are the improvements.
In terms of security, it supports user management. An authentication and authorization solution is embedded in that. There is also certificate management in terms of how it rotates the certificates and the kind of TLS mechanism it uses for the end-users as well as for the communication within a cluster. It also allows our images to be scanned before deployment.
OpenShift comes with a lot of marketplace operator-based solutions. It also allows any open-source operator-based solution. It could also be a Helm Chart-based solution for deploying any cloud-native application or workload.
OpenShift is much better than others as an upstream project for Kubernetes. It also has certain features that are not there in any other flavor of Kubernetes. For example, Source-to-Image (S2I) is a wonderful feature in OpenShift where your code can be in the source repository. It can be built and deployed with a click of a button. That helps the developers' community to deploy their code and see the results on the fly.
What is most valuable?
In OpenShift, there are a lot of things that are good as compared to any other Kubernetes flavor. The console or the GUI of OpenShift is awesome. You can do a lot of things from there. You can perform administration tasks as well as development tasks.
The RBAC user management that comes packaged with OpenShift is not there in other Kubernetes. That's a very nice feature.
The upgrade mechanism is also very good. The upgrades are pushed by Red Hat, and with just the click of a button, your OpenShift cluster gets upgraded. That is another very nice feature. These are a couple of things that I like.
What needs improvement?
A lot of improvements are required in OpenShift when it's deployed on a public cloud such as AWS, GCP, or AKS.
OpenShift has certain restrictions in terms of managing the cluster when it's running on a public cloud. For example, identity and access management integration with the IM of AWS is quite difficult. It requires some open-source tools to integrate. This is one area where I always see room for improvement.
In addition, the RBAC access is only controlled by the OpenShift internal mechanism, whereas the authorization part can be handled by any public cloud. We are already managing and maintaining users in the cloud environment. So, a repetitive or duplicate RBAC mechanism is not required.
For how long have I used the solution?
I have been working with this solution since 2018. It has been more than four years.
What do I think about the stability of the solution?
It's a stable solution. However, most organizations are lagging in upgrading the versions because of various reasons, such as business downtime and the risk involved behind that. If you don't upgrade it on time, then there will definitely be bugs. It normally doesn't create many issues, but we have had instances where when we go to the Red Hat product support team, they always mention going for the next upgrade or the next possible upgrade so that a bug is completely removed. However, it's not always possible to do that. So, stability-wise, it's quite stable, but no product can be perfect. In the version that we are running, there are a couple of bugs, and we have to live with them, unless and until we upgrade to the next version.
What do I think about the scalability of the solution?
Because it's on a public cloud, it's very easy to scale up.
In terms of its users, we have close to 100 users. There are a couple of DevOps engineers in that, and then there are administrators who manage and maintain the cluster. The rest of them are developers. These are the primary users.
It's being used quite extensively, at least in two of our markets. I have no idea about plans to increase the usage of this product, but I also don't see any reduction in its usage in the near future.
How are customer service and support?
Their support is very good. We have a premium subscription for our organization, and we get support whenever we need it. It's quite good. It's the backbone of this product. I would rate them a nine out of ten. Sometimes, the support professionals work from different geographical regions, and when there is a shift change, we lose some time. It happens rarely, but it has been a cause of concern a couple of times.
As a partner for helping us create the platform that we need, I would rate Red Hat an eight out of ten. In terms of support, they provide all the required commands, code pieces, or files required to troubleshoot the issue. They also provide support during any new installation or upgrade.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
When I started working on this project, OpenShift was already there. I don't know if and what it was migrated from. In the accounts that I'm handling, we had OpenShift, and applications were containerized and migrated to OpenShift.
We use other Red Hat products. We use Red Hat OpenStack, and we also use GlusterFS storage from Red Hat, which comes as a part of OpenStack. Apart from that, most of the virtual machines are already using RHEL. OpenStack, for us, is on a private cloud. It's not as friendly as AWS public cloud. Integration-wise, it's seamless, but if we want auto-scaling at the OpenStack level, it's not possible for us.
An advantage of using multiple Red Hat products together is in terms of the support we get from them. That's very good. If we consider any Kubernetes flavor running on any public cloud, getting support on the components we have deployed is difficult, but Red Hat supports that. Whatever we have deployed, they can provide support on that. The support provided by Red Hat is really great, and that's why they're asking for a premium cost for that.
How was the initial setup?
It was already done before I came, but I know that it was done using Ansible stack and Ansible code. Its deployment is quite straightforward. The 4x versions of OpenShift are very easy to deploy. The older 3x versions were quite difficult to deploy, but in the latest versions, especially on a public cloud, it manages everything. It spins up your cloud virtual machines, installs OpenShift on them, and provides you the endpoint to access it.
If the Ansible code or scripts are available and ready, on a production system, it takes about one hour to one and a half hours. It also depends on how many virtual machines you require to install OpenShift.
What's my experience with pricing, setup cost, and licensing?
Its price is a bit high because it's a premium product, but as long as the business is ready to pay for that, it's okay.
What other advice do I have?
I would recommend evaluating the product thoroughly for your requirements. That's because OpenShift comes with a lot of bells and whistles, and most organizations don't need that. It also comes with auto-managed components. If you are looking for less-managed components on a Kubernetes cluster, then Red Hat OpenShift is the only answer.
We didn't consider building our own container platform. There are different flavors available for Kubernetes. We use OpenShift, EKS, AKS, and GKE. Even OKE is coming up. It depends on what different markets of our organization prefer and what is cost-effective for them.
Overall, I would rate it a nine out of ten because we are quite happy with it. There are a couple of restrictions in terms of managing clusters on a public cloud, but other than that, it has a lot of inbuilt components, which are helpful for managing the cluster better.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: I am a real user, and this review is based on my own experience and opinions.