Let's get into the big conflict of open source, something that we actually have in mind. This is so awesome. We are an open culture that is actually able to fix that process that a developer or, let's say, as the Kubernetes ecosystem really brings. Welcome to this week's Ask an OpenShift Administrator office hour livestream. That is a mouthful that I have to, like, concentrate on every week. Johnny, how many times have I borked that? 100% of the time. What's the Napoleon Dynamite rate? 60% of the time it works all the time? Every time. That's right. Hello, everyone. Welcome to February. Today is the unofficial holiday or pseudo-official holiday, I guess, here in the U.S. Groundhog Day. It is also my youngest daughter's birthday. It's a great day to turn eight, I guess. Today is something that I think Johnny has been looking forward to, at least since we put it on the schedule about a month ago. It's something that is interesting to me as I learn more and more about it. Johnny, what are we talking about today? Today, Anthony and I are going to talk about the validated patterns that our engineering group is working on. We're really excited about what we're doing. I think we've seen a lot of great output from our team, and there's a lot of excitement building around it. Hopefully you guys can pick up on it and see it, too, and find a way that you can use it. Really excited to talk about it. Yeah, I am, too, because there's... Let's just say I have questions. Johnny, you know my background, right? Administrator and all that other stuff. We focus a lot on what we used to call reference architectures. I'm excited. I'm interested to find out what all of that means from a validated pattern. I keep wanting to say platform. I think I've said validated platform probably more times than I have pattern. I don't know why. It just makes sense. I get it. I'm excited to learn what that means for you all, for our audience. With that being said, this is one of our office hours series of live streams. What that means here on Red Hat Live Streaming is that we are here to answer your questions. Just like if you ever had a manager or a professor who had open office hours where you could come in and talk about or discuss anything that you need to discuss, we can't improve your grades, but we can certainly help answer some questions about OpenShift. Regardless of what today's topic happens to be, you're more than welcome to ask any of those questions in chat, regardless of which platform you happen to be watching us on. They all get rebroadcast and integrated, so we can see both YouTube channels, Twitch, all that other stuff here in our interface. Please don't hesitate to ask those questions. Before we get into today's topic, we will have what I'm going to call a reoccurring segment, which is the top of mind topics. Let me bring up my notes document here. The first thing, before I forget, and I want to make sure to get it out of the way. If you are not aware, so from a stream perspective, next week we will have Frank Baldwin and the performance add-on operator on the stream. If you're interested in performance add-on operator, how to maximize the performance of your nodes for things like DPDK, actually it's DPDK supported, I don't remember, definitely SRIOV, all that other stuff. Be sure to join us next week for that. We'll be talking about a myriad of other things as well. Be sure to get subscribed, and if you don't subscribe on one of the channels, I would definitely encourage you to go to red.htslivestream. There's a Google calendar embedded in that page that you can subscribe to, and it has all of the streams that are inside of there. Next week we'll be doing performance add-on operator. The week after that, the 16th, we will not be streaming this stream. Instead, during our time slot, actually it's starting a little bit earlier, I think it starts at 10 a.m. and goes until 11.30 a.m. Eastern, is the what's new in OpenShift 4.10. So that is the product management team's opportunity to basically give you all all of the details of what's happening inside of 4.10. And then Johnny and I typically follow those up with another episode where we focus on some of the things that I have a little bit deeper into those for things that we think are interesting to you. So if you have the opportunity to watch that long stream, great, maybe take some notes, suggest some things that you want to learn more about to us. If you don't have, if you miss that, no worries, we'll talk about it a little bit afterwards. Then you can always reach out to us too. Yeah, the roadmap is a great way to get an idea of what's on the horizon. So that way, there's always a feature that somebody's looking for that you may not know that's even thought of right now. I'm going to go out there and look at it. I'm really happy that we open that up to everybody to see it. So it's exciting. And yeah, go find out what OpenShift is doing to make your lives easier. Yeah, although I will say that this is the what's new, the what's next, which is the roadmap. I think that one is happening in March. March or April, I don't remember. Gotcha. Yeah. So I don't, yeah, I get them confused all the time. My bad. Yeah, that's right. I'm all amped up. All right, let me find my share button here. And we're going to share a window and we're going to share this one. All right. So the next thing I wanted to talk about or the next thing I wanted to highlight is the mirror registry, mirror registry. So this is something we briefly mentioned it a while ago. Effectively what it is. And if we scroll down in the page here. So you can see that this is a command line that will go and effectively deploy a single node instance of quay that you can then use to mirror images. So this is really helpful for disconnected installs or, you know, even if you're pseudo connected right where you're, you don't want to have your images pulled directly from the internet. You want to cache them locally. So super useful for that. It's a very quick and easy way to get a registry up and running inside of your infrastructure. And of course it's quay. So it's super powerful to boot. But if we scroll all the way down here, a couple of things to note. So the mirror registry can be downloaded at no additional cost from the downloads page. So it is included with OpenShift. It is supported as a part of OpenShift. Just be aware that it is not, and you are not intended to use it as a replacement for the internal registry or a replacement for a standalone, full-on quay registry instance for all of your applications and stuff. It's specifically targeted at, you know, mirroring OpenShift images for deploying clusters and stuff like that. Oh, I see Mark's on. Hey, Mark. Let's see Microsoft or MicroShift rather. CRC, Snow, 3node, OpenShift, in order of increasing features. Yeah, don't forget about single node or remote worker nodes and all that other stuff. So MicroShift, just a bit of a plug. Johnny and I have been talking with some of the MicroShift engineering folks. We're going to have them on in March. So we'll be going, diving deep into what that looks like. So again, be sure to subscribe if you haven't already. And there's a lot of banging going on side today. My dog is trying to get in the door. If it sounds like a wild animal is getting in here, it's my puppy trying to get in. I was, you know, getting, I don't know what it is about this hour. All week long, every other hour of the day, it's mostly quiet, even like the delivery guys. Surprisingly, they'll like tiptoe on it. I don't know that I have a package until I get the alert. And like Wednesdays, all of a sudden it's, I'm going to take this and I'm going to slam it down and kick it around and see if I can set off the dogs. That's right. Following up from last week, and I think I've got it up over here somewhere. So last week we talked about the CVE 2021-4034. So this is the pulpit escalation. So I talked with a bunch of different folks, product management, engineering, et cetera, has a follow-up to that. One of the things that came out of that, and if we scroll all the way down, I won't say it was just me. It was field folks and account teams and all of that, working with them as well. In the red hat security bulletin, oh, I forgot to publish this link. Let me do that real quick. Nope, got to find the right window. Here we go. So that is the mirror registry link, but we want this RHSB link. So in this red hat security bulletin, way down at the bottom under the FAQ, they added this question for what is the impact to OpenShift? So the abbreviated version of that is essentially, the exploit is a quote unquote local exploit. Man, I cannot talk today. I cannot say my P's is a local exploit. So what that means is that effectively for someone to take advantage of it, they would need to have root access or the ability to log in to the host anyways. With OpenShift, that's limited to the core user. And if you can log in with the core user, well, you already have sudo, so you're root anyways. Conversely, or on the other side, is there are some packages or container images, I should say, that are shipped by or with OpenShift that include the pull kit vulnerability as well. Similarly, those container images are effectively privileged.  So again, if they have cluster administrator, well, they already have root across all of the nodes as well. So while yes, OpenShift and Red Hat Enterprise Linux CoreOS, CoreOS is vulnerable. It is mitigated somewhat by some other circumstances. That being said, they are working on a fix. I don't know the precise version of OpenShift that it will be in because it depends on release cycles and how they do all that stuff. So hypothetically, and I'm sure anybody who's watched the stream long-term knows, let's say next Monday is 4.8.703. That might not get promoted into fast or stable. It might stay in candidate for other reasons. So it could be the next version, 704, that would be the one that gets promoted into stable. So it's hard to say on this day with this version, you will have access to fixes for that. Rather, we just have to wait for those promotions to happen. All right. Tiger, can Raspberry Pi running MicroShift be a worker node for a normal OpenShift cluster? I don't believe so, but we'll check with the MicroShift folks when they join us. I'll collect your questions on that, Tiger. And we'll put them in the notes document that we use so that we can be sure to address them when they join us. And Tiger, I know you're a Red Hatter, so you can also send me messages internally if you'd like. Since you mentioned 4.10, curious to know what the release date is. So we don't... Let me rephrase that. Andrew doesn't ever discuss specific dates because they're always prone to change. As in, I have seen a OpenShift release slip hours, like two hours from the originally intended shipping time. And it slipped by two weeks in that instance. So we are expecting it to ship soon, but I would say ideally in Q1. So calendar Q1. So you can kind of project that out. But remember that times are always subject to change depending on whether or not they find any last minute bugs and stuff like that. But the good news is I think January 31 was code freeze. So we're close. Let's see, looking through some of these others. Oh, kind of a... Not super technical, but interesting. So I don't know if anybody else saw this. There's a Kubernetes documentary. Documentary. Words are hard today. So part two was released earlier this week or maybe Friday last week, which for me, it was a lot of fun. Not the least of which because like this flyover in the introduction, it says Raleigh in like 2014. And it actually has the old logo here on the building. And then I think the next scene, it cuts to, yeah, Red Hat Tower. And now we have the new logo. So it was kind of funny for me to see them piece together the multiple clips and to form a full video. Anyways, we'll post that there. I did watch through it. Lots of really interesting stuff. A bit of my own history. I was actually at the very first CNCF meeting in New York City when they had it at the Times Building. So it was super fun and super interesting to see the very beginning or I guess that was just after the very beginning of Kubernetes. And of course, Red Hat was very involved from the very beginning. Yeah, I haven't had a chance to watch it, but it's definitely on the list. I should have caught up on it this weekend, but just got busy doing stuff from the house.  I know. I felt out of work. I know. I know. I shouldn't. I wouldn't even talk about it. We should talk to your manager. I know. Yeah, Sachin, it was good to see Clayton, yeah. Clayton, so Clayton actually lives here in Raleigh, I think. So we've at my previous employer, we did a podcast and we actually had him on at one point. We haven't had him on here though. Maybe we should do that, Johnny. Yeah, that'd be awesome. Last but not least one that this is kind of late breaking news, if you will. So they just did the press release for this. I don't think it's even like it's public, but it hasn't actually been linked from the press releases page. Let's check real quick. Yeah, so it's not even on the press releases page, but it has been released and that is. So red hat open shift platform plus entitlements now include open shift data foundation essentials. So essentially this is a, I won't say an add on, but basically it's an addition to that entitlement. No additional cost where you can go in and add ODF essentials, which entitles you to think it's 256 terabytes of capacity inside of there. So if you're using open shift platform plus entitlements today, you can now deploy ODF. You can take advantage of that shared storage rate, the local storage on your hosts for all of your PVC needs up to 256 terabytes. No, that's really good news. And if you're not familiar with the platform plus, it comes with a lot of the big things that red hat wants you to use, right? ACM, I think ACS is in there now, ODF. That's really great. So I think that it simplifies the subscription purchasing and all that and helps people get up and running without worrying about, you know, licensing or whatever. Yeah. Yeah, it's, I know our, or my team, there's several folks who are working on like environments and stuff like that for red hatters to be able to get hands on with all of the products, all of the things and open shift platform plus. So that way it'll be an easier onboarding thing. So for any red hatters who are watching very soon, we'll have those environments available to you. I'm just looking. I don't think that my links are coming through. I'm pasting them on to YouTube, the open shift YouTube channel, but I'm not saying that. I don't see them. All right. I'll, I will put them into Twitch then, but rather than me trying to do that and talk at the same time, I'm out of top of mind topics. So Johnny, what, what, let's talk about some, some validated patterns. Yep, for sure. But real quick, I'm going to answer Sasha's question. The inclusion, it's to make, it's to simplify the purchasing of subscriptions really it's, it's so that you don't have to worry about buying like eight different SKUs for the products that you want to use. It helps give you a single SKU to order to get what you want. Right. And like a single shot. So it helps simplify that workflow. That's really most likely while they're doing it. But yeah, validated patterns. So I've got with me the, the, the man, the myth, the legend Anthony her and he's a, he's a product manager for the validated patterns team. So I'll, I'll go ahead and have Anthony introduce himself and kick us off. Thanks, Johnny. My name is Anthony her. I'm a product manager in the office of the CTO focused on edge and these validated patterns. So our validated patterns initiative started about a year and a half ago and we've been working towards bringing up a number of use cases into the library. I'm extremely happy to have Johnny and the team. I've been with red hat for about five years now, but it, this is a fantastic initiative to showcase real world solutions or at least the framework for those solutions into a reproducible architecture. And the framework is, is what we're working on. So I'm happy to talk about it and happy to support you on this, Johnny and happy to be with you, Andrew. Awesome. So we're happy to have you. So Johnny, I don't want to seal your thunder. So I do have a question up front though. Let's do it. Yeah. And so we've used the term validated platform. Right. And I think in the social media posts, I was making some, some pokes about, you know, that sounds an awful lot like a reference architecture. So we have reference architectures, things that we actually call reference architectures from our partners. I'll dig up the blog post. It has a whole list of those from primarily our hardware partners. And we have portfolio architectures. Right. There's a, I don't know if they're publicly accessible, but certainly red headers are aware of the portfolio architecture team. And then we have validated patterns. So can you describe what the difference between those is? Like when would I use a reference architecture versus a validated platform pattern, right? That type of stuff. Yep. So a reference architecture is, it's essentially just a, an architecture that you would use to product, to make your environment, you know, production ready. Right. It's something that we say, Hey, here's the best, best practices to get your, your solution in place, you know, in a production environment. A validated pattern is it takes that reference architecture. And it essentially runs it, you know, we build the framework, the getups framework around that, that reference architecture. So we're building out the Argo applications. We're building Helm charts and we're building all of the automation through a getups framework for that reference architecture. And then we're also running it through a CI pipeline. Right. So a reference architecture is a moment. I actually got this from Anthony earlier. It's a point in time snap of that design. Right. And the, the red hat validated pattern is, it's a life cycle of that reference architecture.  So when you go from 4.8 to 4.9 or 4.9.4 to 4.9.704 or whatever, right? It's running through the CI pipeline. And on the other end comes out this validated pattern that you know that you can take from one environment to another. You know, obviously you'd have to, the key here is you'd have to have your own open shift cluster and then you would just take your, your 80% Legos and then you'd have your 20% right. And you'd bolt that in to our validated pattern and that's really what you get at the end. So I think that's the biggest difference is that reference architecture is the point in time and the validated pattern is the life cycle of that reference architecture from, you know, from now until it's dead. Got it. Got it. And so, so you and your team are responsible for effectively the continuous update and validation, revalidation of those. Yeah. So what we do is there's a CI aspect or there's a, a QE aspect to our team. And so once we've got it and get, and we've said, hey thumbs up, it runs through the QE team. They run it through a CI pipeline. And then, you know, once that comes out, that's, that's really the 8,000 foot view of the oversimplified process. Right. We build it, we build it, deploy it, send it over to QE, QE does it, runs it through the CI and then they run the continuous integration to make sure that, you know, it works or if it breaks, then it comes back to us. We figure out what happened and then, you know, rinse and repeat. So I'm, I don't know the answer to this. So I'm, I usually, you know, what's the thing about being a lawyer and every ask a question you don't know the answer to. I know you're on, you know, you and the team, you're on the engineering side. Yep.  Does that mean that these are supported? Like if you deploy using this pattern, it is a supported pattern. I'm going to defer to Anthony on that question. Yeah. The red hat products themselves are supported. Yeah. The red hat products themselves are supported, but as far as the pattern right there, there is an aspect of it that, that is, it's community, right? It's a, it's a community project.   I don't know if it's better in this case. Yeah. So, you know, that's, that's, that's, that's, that's, that's, that's, that's, that's, that's, that's, that's, that's, that's validation. And that's what we're including in here. When you had asked earlier, what's the difference between all these different offering? A lot of the things are the same. Ultimately, they're just a reference of a solution. When we're looking at our side. If you have a problem with open shift inside a pattern inside a validated pattern, open shift support will, will take the call. So you shouldn't worry that you're not going to get forced all some issues coming your way when going from open shift 4.9 to 4.10 as you upgrade the stack, as well as all the minor components. And the things that don't, don't always get tested are connecting from Kafka to through the API chain to all the different services in these patterns. So that's what we're trying to, to do within this validation stage. Will it be supported? All the products inside a validated pattern right now are all Red Hat products because we're only delivering as, as Johnny said, 80% of the solution, the top 20% is going to be partners, system integrators, consultants, and the hardware is obviously not Red Hat either. So we're relying on external forces to surround the validated patterns to make them work for any customer. So all the Red Hat products, everything inside that we support, we will support whether it's in a validated pattern or not. We're just going that extra step to make sure that it's a nicer solution for you. Yeah. And so that's, I like thinking about it that way. And the reason I say that is because, you know, we see fairly frequently and I'm sure you see them as well, you know, emails internally where it's, I have this matrix of things that I've added to my open shift. How do I know that service mesh version X and, you know, open shift virtualization version Y and, you know, feature, you know, like all of these things all work together. And it sounds like the validated pattern team is effectively doing that, right? Making sure that everything plays nicely together, that it's going to continue to function as good or better after the upgrade as it did before the upgrade. Right. And a good example of that, right, is when the APIs were, the API extensions were deprecating, right? So we would have caught that a really great example actually is last week, open shift getoffs. The operator went out 1.4.0. And within, I'd say minutes of the release, we identified quickly that there was a parameter that was removed from the CRD, right? And so we, our team, like three out of the five engineers on our team caught it within like 10 minutes, right? And we reported that submitted the chair ticket and all that stuff.  And so I think that that's really a lot of the value, the un, the unspoken value that you're going to get from a validated pattern is, is that, that just continuous testing that continuous, you know, validation that we're going to be providing. So, or when asked a question here and I'm going to expand on a little bit and I think we'll answer it's kind of in the flow. And that is, you know, what is, what, what is that validation process? What does that look like from kind of inception to delivery? And, or when specific question is, you know, is performance benchmarking a part of that? Performance benchmarking. I do not think on the medical diagnosis specifically, it's definitely not part of it. There might be some of it built into the industrial edge pattern, but I, if it's not part of the original architecture, then, you know, it's probably not going to be part of the initial pattern build up. But from the way it goes from inception to deployment and Anthony, you know, please chime in Q and a Q or Q and if there's something else that like I'm missing on that, but from inception to production really, it's like we, we get this reference architecture or this POC that was delivered to a customer or a solution.  What we'll do is we'll, we'll decouple that from the, the, the original repo and then we'll, we'll start converting into Helm charts, right? We'll create Kubernetes manifest and then then we'll start applying through ACM if it makes sense to apply through ACM or we'll definitely apply through an Argo application and really start testing out piece by piece, right? And then automate piece by piece and then essentially, you know, we'll just tack on to each of those Legos, right? We just keep building onto that block by our workflow that goes from, okay, I've just pulled this from, you know, stable and then here's your, your route and you go and you click on the route and it's got your data and it's got the app and everything. So it sounds like and it may be easiest if we, I don't know if you have like an overview or a view of what one of the patterns looks like, but it sounds like you're not telling people, you know, here you have to deploy an OpenShift cluster that has three control plane nodes with these resources and six infrastructure nodes with these resources and then, you know, n number of compute nodes to run these workloads. Rather, it's deploy your cluster sized according to your workload and once the cluster is deployed, here is the GitOps repo, here's the implementation to go through and configure everything. That's 100% correct. We're not in the business of telling you how to build your cluster, right? Like if you need ODF, there's restrictions that come with ODF, X amount of compute.  See, you have to have a lot of CPU and a lot of RAM, obviously a lot of disks and stuff like that. So there are those aspects where, like you said, you have to be ready. Your environment has to be ready and then we just lay down the pipeline on top of that and then it goes. And we do get into that a little bit. It's more of a high level from an application standpoint, but not necessarily on the OpenShift side from an architecture, but like I said, it doesn't matter as long as you have resources that you need to run that workload. We don't care. Got it. So kind of to Orwin's question, circling back and answering that indirectly, it's the performance is whatever you configure the cluster to be, right?  So I'll pick on the medical imaging for a moment, right? I would suspect that your cluster, you know, deployment is going to look very different if you're doing one image an hour versus, you know, 100,000 images an hour. Right. So basically the patterns team doesn't address maybe there's some basic requirements of, hey, you need this much to achieve this goal, but, um, yeah, or this many nodes of this different type or I don't know. I'm curious to see I know you said you had a demo. So I'm curious to see. Yeah. Yeah. So what I'll do is I'll start the demo because it's going to take a minute. Okay. And then, um, my dog is warning because you're going to send all right. So I don't know if you can see this. Is that any better? It's a little small, but that could be because my, yeah, that's better. Okay, cool. So I'll make it. All right. So, so essentially this isn't like a requirement, but the way that we've done this to help to kind of simplify the delivery is we created a file, right? And inside the main file, it has everything we have a read me that has all of the directions.  So all we have to do is run a make install and this pattern in particular is the medical diagnosis. And so it uses a combination of ODF, Grafana, there's a bunch of operators that get deployed, but it's also right now a combination of helm and Argo. And then there's a little bit of Ansible for some of the imperative commands, which we're running on or we're working on completely converting into OpenShift job. So that way it's completely declarative and we don't have any imperative things going on. So I'm just going to run this. Actually I'm going to export, make sure I'm good to go and then I'm going to run. So well, well, Johnny's typing Anthony. How does a an architecture and implementation, I guess, right? So how does it become a validated pattern? Does that mean that a customer has adopted it? Does that mean that we're for lack of a better term like inventing this as an example of how to do something? I'm curious about the kind of before Johnny starts work on this. How did it come to be? It's a great question. We hear this all the time. The patterns themselves, we think of things in terms of kind of scaling up. Anyone can create a pattern. You don't have to be at Red Hat to generate a pattern. This team is done along with help from other teams within Red Hat, our portfolio architecture team, the data engineering team. They've created these initial examples from customers. So everything that we've done thus far has been based on a customer's architecture without the secret sauce that sits on top. All of that is proprietary and we don't really want to showcase anything that's going to put that customer in jeopardy. But what we can show is how to configure things with some level of best practices inside of the Red Hat team. These are not science projects. They're not something that's just off the shelf and oh, we want to highlight this. Our goal was to highlight what customers have been deploying. So when we started out with the medical diagnosis, the industrial edge, all these projects started out from a customer first. So when they start out, they're generated as a get-ups deployment. And what Johnny's going to go through is how this was created for the medical diagnosis solution. I'm afraid to ask this because I know there's never enough humans behind the scenes to execute. But how many validated patterns are there? The follow on to that is I'm a customer. I did something that I think is really cool. Can I submit that as a validated pattern to your team? You can submit that as a pattern. And depending on our ability to take it into house, then we can make that a validated pattern. So the distinction is we have different sites and I know that I talked to Johnny about this earlier. We have different online locations. One that is our Red Hat get-ups pattern, which is specifically around everything that we have validated. And then there's a hybrid cloud get-ups pattern, hybridcodpatterns.io and we'll put the references in here. And that location, anyone can put a pattern on. We're also working with partners to be able to deploy our patterns and their third party solutions at the same time in the same get-ups workflow. So we can talk about all of this. There's lots of areas to get into. I want to make sure that we have time for Johnny's presentation. Sorry, I'm sitting on my bed. So what we're seeing here is this is just the initial build-up. So this is the open-shift get-ups operator deploying. And so what we do is we do an open-shift get-ups, which is cluster-wide and then we deploy a data center level get-ups operator. And what that does is that deploys everything like the data center level. And so what you'll see is you'll start seeing all of these operators popping up here in just a second. So you'll see like open data foundations, open data hub, Grafana, open-shift serverless, AMQ streams, there's going to be all of these operators that start popping up. And once they do, I'll kick over to Argo and then we'll look at Argo from the application side so that way we can kind of see it going through. But open-shift data foundation takes so long to come up because Nuba has to come up and it has to do some validations and then the OCS operator, it actually doesn't complete until everything completes. So by the way, the cool part about this is we've just been sitting here shooting the breeze and all I typed was make install. So that's something to remember when we talk about simplicity and ease of use, I typed make install and we're getting all of these operators popping up automatically. All the routes are being created, all the things that we need to make this application operational, it's all automated.  And I think that that's where at least for me when I get excited that's when I'm getting amped up thinking about this because I was in consulting for five years and there's so many times that we've deployed OpenShift from 3.11 I mean from 3.4, 3.3 to 4.10 or 4.9 rather and just people can't they get overwhelmed and they can't find a way to meaningfully use the cluster and so I think that this really helps solve that problem and I think that this provides that tool chain that people need to get over that hump to like okay I got this you know what I mean and then now they've deployed something and it's meaningful it shows value back to them and back to their organization and then it helps them have that base layer that now they can build on it gives them like a legit framework that they can like truly build on and then be part of a community that they can distribute back to and then everybody can build on it you know what I mean so I mean it's just this it's the idea of helping everyone and but it's not just charity help right it's like legitimate help that's gonna bring you value yeah and I was just looking at so I posted a link to the hybrid cloud patterns.io and there's hyphens between hybrid and cloud and cloud and patterns so I was looking at the site and there's you know basically documentation around each one of these including there's a very nice architecture diagram logical diagrams and all of this other stuff that go into a lot of detail inside of here and I do see kind of what we were talking about before there's cluster sizing suggestions around like different platforms that it's been tested on and different like node counts and node saw instance sizes and instant types rather so yeah I'm I was cognizant of this website I had not actually looked at it in depth and there is just a wealth of information here I keep going to the wrong orco I'm getting all excited I'm sorry I've got myself all pumped up don't forget that the hybrid cloud patterns is the upstream pattern site that anyone can go to and submit queries to there's also the red hat dash validated dash no it's easy to get confused on these sites I'll pop it into the chat as well that's where our validation comes from yeah please do if you have the link oh sorry and yeah so if you're familiar with Argo CD you know this is this is what we this is what we're showing right like these are each one of these represents an application an Argo application and you can see the repo it's going out to get hubs going out to our repo and then yeah the repo and then our branch and then it's pulling in the helm charts and it's deploying the helm charts all through Argo and so it's going to go through and it's going to loop through and it's going to deploy all of these resources and then when it's all done when my little script is done running in the background then what we'll do is we'll go hit the links for Grafana because that's really the dashboard for the medical diagnosis and what's going on in that is from a architecture standpoint we're going to run just scale up a pod and what that's going to do is it's going to sync images extra images from an S3 bucket via Nuba you know because it's S3 but it's really it's like Nuba backed from ODF and it's going to push it through an AMQ pipeline and then so AMQ and then serverless and all that stuff is going to happen and then it's going to display like the pictures of the X-ray but it's also going to run some statistics and it'll give you like the risk assessment like the standard deviation and all that so you get a bunch of information from images that are coming in images that are being processed and this particular pattern it's using X-rays right for to check for pneumonia or to detect pneumonia rather but this is just one sample right like there's there's other ones where you'll be able to take a hopefully a CT scan or X-rays of something else and be able to detect you know other anomalies within a within the body so it'll it'll helps take some of the human errors out of you know X-ray visualization or X-ray reporting and you know make some of these medical diagnosis is the medical diagnosis much easier right and much more accurate and it just out of curiosity the validated platform or pattern rather and I really got to stop saying platform the validated pattern it doesn't have to be used with the specific application rather it's kind of a yes we're showing it and it's tested and validated using this application but really it's all the parts and pieces that go into that and you know it could be a different application that's doing maybe something similar using the same same bits. Yeah 100% so the idea is that it's LEGOs right like it's modular so each one of these things right you have your ACM that's one component of it you have ODF that's another component you know the 20% in this regard would be like the image generator and the image server and demo right where everything else is a red hat product and so you know that those three things that there might actually be for I might be misremembered but like those three or four things right that's going to be that 20-25% that you're bolting on right you're that's that's our that's our nuts and bolts that we're putting into this pattern to make it you know meaningful to us right yeah but everything else it's it's modular they're built to be individual repos and so the reusable they're composable like that it's it's all the all the good stuff about automation and OpenShift and GitOps kind of like all wrapped into one. Yeah Christian yet again he owes us a check for all this GitOps. I know man I know we should get like free Argo shirts or something like that you know Argo tattoos I don't know I do I do have an Argo shirt so I see Jacob asks is it possible to have two network adapters on control plane nodes in terms of network redundancy so yes you can basically what I would suggest in that case is to create a bond with those two network adapters so if you're doing UPI or a non-integrated install or a bare metal install you can boot to the you can either do that through kernel parameters so kind of the afterburn kernel parameters to set that up or you can boot to the live ISO and configure that using nmcli or nm2e and then when you install coroS so coroS installer dash dash copy dash network excuse me and that will that will apply that IPI it's going to be harder so IPI you can't preconfigure the network for those nodes so essentially what you would have to do is if you're using OpenShift SDN day two you could use something like nmstate operator which is tech preview right now to reconfigure that interface so go from a single interface to a bond or something like that if you're using OVN Kubernetes then you can't do that it won't allow you to basically it'll break if you change that first interface so IPI would not be ideal there I don't think if you have two network adapters that are on the same network and both have an IP address I don't think that would work because etcd is configured for a specific IP address for each one of the nodes and it would take which everyone comes up first so Jenny I know you're watching your Argo there I don't know if you had any thoughts on that no I feel like that's right I think etcd is going to bind to the I think it truly will bind to the first address it gets right so yes it's possible it's just complex or maybe not possible if you're doing IPI but UPI non-integrated definitely we're really only waiting for the OCS operator to essentially do its health check but one thing I just wanted to kind of take Kean on here is I'm just going to click on whatever but the cool part about Argo if you're not familiar with Argo is that it literally gives you a visual representation of the resources that are deployed in your cluster so like this Kafka application this is our Argo application it's deploying a Kafka resource the Kafka topic the routes and then each one of those is pointing to a service which is pointing to a pod or whatever there's just all this cool stuff that's happening and to me this is probably being an infrastructure guy and then trying to help deploy applications and stuff like that this is probably the coolest thing ever to see when it just starts popping stuff out it's just amazing so hopefully you guys are getting excited about this too because it's pretty awesome I will say that GitOps is on my list of things to learn a lot more about this calendar year yeah man and not just because Christian's excitement about it is infectious it's a legitimate it's a powerful tool it is and if you like automation I think a lot of people like automation but I think a lot of people love visualization there's a lot of things that you don't really get out of that from normal writing Ansible Core or writing a shell script you might put some green feedback where you're like oh okay or red stops or whatever all the old school stuff but with Ansible Tower you can do workflows representation of your workflow going through and I think that that was a big hit and I think that with this in Argo this is just awesome to see and it's cool to see it just like spider web out to all the resources and really help people understand just how awesome this thing is it's not just an app it's an app with all of its buddies so with the patterns does it extend that beyond just the deployment and connection of all these various pieces that include things like so using this x-ray imaging example does it explain how to do like HA maybe or DR across multiple clusters that type of stuff no I mean honestly not yet if that was something that was like you know I'd say on the roadmap then yeah it would definitely would but I think initially it's really just taking that that initial repo and then decoupling it and making it up pattern and I don't think that that was built into it or even considered when it was written so I think the biggest thing from an HA or DR aspect would be that it's all blasted out to S3 and backed by Nuba and so or backed by ODF rather so there's some of that but it's not like multi-site or anything as far as ODF is concerned okay that kind of makes sense you know because each application is going to be different and have different requirements you know we've talked about this before here on the stream you know with each one being different it means that there's going to be different methods of recovery you know each storage provider is going to have a different method of replicating storage or protecting storage so on and so forth so speaking of which for anybody in the audience ODF is a topic I know we talked about it some with Annette last week we have an ODF topic that's going to be coming up as well in March so I'm learning how to share a screen I told you it is funny to me we're on episode what 56 I still am like every week it's how do I share what's this button do yeah so I just wanted to share this so that way you know that I'm not cheating you know so the route for Grafana is here and so what I did is I just increased the replica account from from zero to one so that way it kicks off the that pipeline that we were kind of talking about so if we look here we can see that oh man this is going to be awesome alright so let's see you know it's funny I ran this like four times back to back and I went through every time and so naturally as I'm doing this so my Michael's asking about looking into OpenShift platform for the first time thank you Michael I hope it's everything you want it to be is the monitoring aspect comprehensive enough to execute an Ansible command if a criteria is met so yes effectively you would use AlertManager which is a part of Prometheus to trigger some sort of alert to go out and if that includes going to a third party or an external system to trigger some other automation that can absolutely be a part of it so Terence is lauding this is awesome so he's saying that it's great resource and I agree Anthony did you have by chance sort of looking at the chat here did you by chance happen to have that link for the validated platforms instead of the upstream patterns so I included both in the chat a little bit earlier up you might be able to see it there are some just to point out a couple things we're increasing the framework over time so there's small things that we're starting out now to be able to make this more consistent as Terence is saying to make it consistent for people to deploy if you're deploying the same thing over and over again multiple sites but Johnny and I were talking earlier on there are several parts of the framework that as we move forward that will be increasing and adding value dealing with sealed secrets dealing with vault those sorts of things may not be in the framework to start but those will be adding value to others that want to take that same base framework and the way that we're doing this from the validated pattern side is that when we created the industrial manufacturing edge or this x-ray the medical diagnosis solutions they're using a common framework that we started with and we're including that in our CI so that it's being tested but there are changes happening in that common framework so that we can add in vault or sealed secrets over time and they'll be back ported into the older patterns or the validated patterns to bring them up to speed over time but we're trying to do things in a more methodical way so that we're not just constantly being updating and causing disruption at customer sites if they decide to deploy these You're kind of flirting with the edge of something there which is I really, really like and that's I know most people don't see this but internally because I'm adjacent to the OpenShift product management team we see your team driving a lot of roadmap stuff that's happening across OpenShift and to me it's really cool that you're creating these things that are effectively to quote the name, it's a validated like yes you can do this and checking and making sure and finding all of those little errors and all of these little incompatibilities and inconsistencies that normally we would have to rely on unfortunately we'd have to wait until a customer tries to do it and now y'all are finding those way earlier in the process so that's really cool to me We appreciate that I mean this is part we are a customer in this regard taking customers configurations from external making them validated solutions inside the company and using those to constantly test all our products working together because we're focused on business solutions and not just individual product solutions as much as they are incorporated we're looking at what the business value is for a customer to deploy this from a hospital's perspective to reduce the number of doctors that they need to see a patient's x-ray because they can do some AI on that x-ray and see what the likelihood that they have pneumonia or sepsis or other diseases associated with it so there's some really cool stuff here that's a really interesting way that you put it of you are effectively a customer for all intents and purposes and very much to the core points you know the product management team as a whole they quote-unquote own open shift in all of the features and functions on top but ultimately each one of them is only responsible for a small piece and even me as a tech marketing you know person I only own are responsible for a couple of those pieces so it's hard to see it's hard to get that you know basically confirmation validation again across you know the big large swath of the things that are happening inside of there so yeah I'm you know I make no secret about it internally or externally I love the work y'all are doing and not just y'all but also the portfolio architecture team right and all that other stuff and that's certainly not to discredit the work that our partners do with reference architectures or anything like that but it's super valuable. There was a slide I know we were looking at presenting some things and one of the slides that we had was that we're part of like a three legged stool and the portfolio architecture team and the data services team that put together several of these examples and our customers and our partners are all contributing to this to make all our products better we focused I mean the reason that this came about is because it was a project on the Edge initiative leadership team the ILT that is across the entire company so breaking down silos so that our products work across the different barriers that we just just look at individually so it's our approach and it's why I'm so excited to be part of this well that and working with rock stars like Johnny and western Martin Andrew I mean all the folks on this team are just I mean I can't say enough about this team but anyway I'm bad at 1000 on demo so I mean like my luck with demos live has been outstanding so yeah so what's going on is like there's a job that's running in the back ground and it's essentially doing like this initialization and there might have been like a little bit of a race condition so I'm trying to reset it to get this thing up but if you look at the output on on here this this is the visual representation of like the pipeline that's going on so you can't really see it which kind of sucks but like right right in the middle of the screen under the risk distribution that would be the images that are being processed verse that are normal verses with pneumonia or whatever and then over on the far right would be where the x-ray itself would be presented you know and then these images that just shows the images that are going through and so like there's all of this data that you know it just gets plugged in and so that's where the one time where I'm trying to do it live and show everybody it just fails brilliantly that's what that's what you would get though I mean like you get like this awesome tool with a bunch of data that you can use and there is on the site for the validated platform or a pattern man I really did it earlier did you see me grimace there is an a screenshot of that with all the data filled out yeah there you go and so yeah exactly and so that's what you would see I'll just have to record one where it's actually working because it's being silly right now but the big thing here is that there's all the integration between all the different components and you know it just shows where like all you have to have is OpenShift it's going to go out it's going to install OCS or open OpenShift data foundations it's going to install AMQ streams it's going to configure all of those it's going to create the Kafka resources and you know then it's going to go through the OpenShift serverless and it's going to create those jobs or those those functions so serverless can do its thing and then at the end you're going to have this tool that is usable and it's going to provide value so Terrence highlights something here it's a great teaching tool to show off best practices with deploying complex applications and Anthony you would use the phrase best practices before as well so is that a part of the deliverable like is there if we go and browse through the websites for you know the hybrid cloud patterns that I owe and that stuff is there like a here are the best practices for integrating these components or is that rather reflected in like how the like in the get ops repo a repose as the case may be and how those things are deployed together well a couple things to consider though is best practices change over time the reason that we're looking at this sort of configuration as code is that it is a way to solve a specific business problem as outlined by the customer so when we look at this it is a it is still a point in time review from our architects and the engineers and people within red hat to say is this the way I want to deploy it if something was to change in one of our patterns and we're no longer able to use the API as defined we may have to change things does that mean that the best practices changed maybe on how you solve this problem because this is the only way to do it but there are also alternatives using AMQ or Apache there's lots of ways to solve the same thing in open source so we don't want to take the more declarative approach that this is the only way to solve the problem this is the way that we've documented to solve this specific business problem for a customer yeah that makes sense and I say that you know I was a VMware and a storage admin for a long time and of course both of those companies would publish best practices on here's how to connect our things together and the problem that I found when I eventually went to work for that storage vendor was that a lot of people treated as it's not a best practice it's a rule that you have to do this and you still need to be aware of your environment and what you're doing and you know kind of make that decision of is this a really recommended practice for me so G Kamar little off topic but when is the next release of 3.11 the last one was December 8 I don't know so off the top of my head my initial response is that 3.11 is in maintenance phase so I would expect that it will only be releasing when there's things like security issues and bugs and stuff like that so I also want to highlight Johnny I know you're still bouncing different things instead of there we are at the top of the hour so I don't want to consume too much of your audience time nor Anthony I know you have many other things to do Johnny I'll consume your time all day you know that that's right so if you have any questions comments concerns issues please go ahead and get those into the chat we'll address those as they come in you're also welcome to reach out to me at any point in time you can reach me via email andrew.sullivan redhead.com you can also reach out on social media so if you've seen me chatting there on twitch practical Andrew is my twitter handle as well so you can of course reach out on there I just saw a couple of messages come in you know just think of consulting creating the framework of the operators putting the plumbing together yeah that's absolutely right and Johnny I know you're busy so Johnny is a J-O-N-N-Y know H at redhead.com yep that's right hit me up if you have any questions or if you want to talk about anything you know patterns related or even you know open shift troubleshooting or whatever so with our last couple minutes here I'll again throw out a reminder and a plug for two weeks from today we will have the what's new and open shift 4.10 session with the product management team so we will not be having the open shift admin live stream that being said I along with several of the other folks here on redhead live streaming will be on that stream and we will be here to answer questions so if you have any questions about features functionality that type of stuff you can ask them here if we don't know the answer and even if we do know the answer we we always shuffle those or shuttle those over to the product management side as well so that way they get a full capture of all the things y'all are interested in whether it's internal or external folks so definitely if you are interested in a lot of the things happening 4.10 and I have to say 4.10 is a there's a lot of stuff going on in there ranging from you know metal lb has some stuff going on I know there's a lot of stuff happening with the scheduler and kind of other low laying components right things that I tend to interact with open shift virtualization 4.10 which is not a part of the open shift 4.10 release it's a decoupled but they usually follow within a few days or maybe a week they've got a bunch of stuff that's coming out in there so 4.10 is going to be exciting CSI providers there's a number of CSI providers that are going to be affected in there so yeah I would definitely encourage anybody and everybody to at least check out one of the recaps that you'll find around what's new in 4.10 because there's a bunch of stuff there yeah so Johnny any any progress no no it's something that I've obviously screwed up so I need to figure it out we'll send you a bill maybe you should send me a bill I don't know I'll relinquish my get up shirt this we'll have to talk to Christian see if maybe we can get one of the Argo shirts sent to you all right to our audience thank you so much for joining us today we really appreciate it again if there's any questions anything that you that comes to mind after you're viewing this I know that we get a lot of views on the various YouTube twitch you know people watching not live feel free to reach out to us via email or social media Anthony so much thank you so much my brain or mouth got ahead of my brain there thank you so much for joining us today we really appreciate it like I said this is one that I was looking forward to since we put it on the schedule a month or so ago so thank you again it's been a pleasure yeah it's um you know we're a friendly group here we're pretty laid back that's right have a good time with it so you know like I'm glad it it went down because you know stuff does always go wrong especially when it feels like I'm driving but you know it just goes to show that you know like there's just little things that you can tweak and then once we get it perfect it'll be in this tool and it'll it'll be perfect all the time yep so Johnny I will I'll give you the last word all right Anthony thank you Lester Martin McKaylee the validated pattern to team everybody you know Michael St. John thank you guys for showing up and supporting the chat and answering some questions too so those guys are rock stars I just get to hang out with them so glad that they were here and glad that you know mostly went well all right well we will see you next week then everyone have a great week great weekend and stay safe out there see ya


What's up bro? What's up bro? I'm just saying that. I'm just saying that. I'm just saying that. I didn't go. Now Brian, I just, you know, we'll be, we'll be checking up near you. You don't want that, you don't want that. You don't want that. Oh I'm just, I'm just trying to send this. You don't want that. We back here. You don't want it with rice. I'm just saying, we gotta figure something out. I brought the amp light for you.


So yes, we're getting there. We're getting there. We're going to be wrapping up our morning sessions and preparing for the midday juiciness as well. Thank you so much for that rich conversation. So we're going to kind of like gather into this fireside chat where we have three speakers who are going to hold space and then a series of respondents, people with announcements, but really as the way they were described to me by John Kluge, they're the lightning spark that mobilizes this community. So let me tell you a little bit about the three folks holding the space. John Kluge is the founder and managing director of the Refugee Investment Network. This is the first impact-investing blended finance collaborative dedicated to creating long-term solutions to global forced migration. This is a very large issue as someone who looks at epidemics and pandemics. I think it's important for us to really pay attention to the fact that we are in a pandemic at this point around the migration of folks, the way in which we are being forced to to leave our homes for various reasons, you know, to find safety and to find care and to find belonging, and so when I asked John, where do you live?  He said, oh, I live in Charlottesville, Virginia, and I went, oh, Okay, well, that's an interesting place. And so, you know, he has a lot to say about, you know, the energy that has been reconfigured and the way in which we can show up in spaces and represent for racial equity and represent for the folks who perhaps don't look and sound like us, but who have been doing and will continue to be doing work for social justice and radical inclusion. So welcome, John Kluge, to the stage, everyone. Yes. And then we have Rumables from Humanitarian Ventures. She is a business exec, extraordinary, an entrepreneur, a bestselling author and serves on the United Nations Foundation for Global Entrepreneurs Council. She also launched the Tent Foundation when she was the director at the Chilugi Foundation. And so I'm interested to hear about how someone who has such a broad range of expertise, you know, is now focusing in on this conversation with other folks and how she's going to be doing yet at a higher level, this work to bring forth the conversations on refugees. And really, as we're talking about this market on the move. And then last, we have Bert van der Wacht, who is the CEO and founder of Small Enterprise Assistant, I'm sorry, Small Enterprise, hmm, I'm not sure what the title is. It is assistance, assistant funds. And I know that there's been investment in small and medium enterprises. And so the three of them are going to hold this space, this container for a while, and there will be a group of people who follow up with response, with ideas and with innovation. So welcome them to the stage this morning. Thank you very much. It's a pleasure to be here at SoCAP at the main stage. And I think quite incredible to think about how far this community has come over the last three years. When I first came to SoCAP to talk about forced migration, there was only one panel on the topic. Today, there are nearly a dozen on various forcibly displaced communities, various interventions happening, and today we're sitting here on the main stage. So I think that we're making a lot of progress. The question is, why are we really here? And why are we here? And part of that is to offer you a different narrative, a different story. One that is filled with opportunity, one that is filled with need, and one that is filled with promise, which is very different from the narrative and the story we hear about refugees and forcibly displaced people. Often through the lens of burden, through the lens of fear, and the lens of hopelessness. When I think about our topic today and the sort of the lens of refugee investing as a concept, I think about the progress that has been made by the impact investing industry over the last several decades. I think about the work that has been done before us in gender lens investing, the growth of renewable energy investing. I think about the mobilization of people who have responded in the 80s to the AIDS crisis and the progress that has been made over the last 15 years in fighting malaria. Global forced migration is not a crisis. We're facing a crisis of hopelessness and a lack of creativity and commitment. But that's changing. So today we are announcing the creation of a new initiative, one that is a project of the global development incubator called the Refugee Investment Network. As an investment intermediary, we're helping to facilitate deals across the capital continuum, partner with entrepreneurs, with refugees, other displaced people, with development finance institutions and governments all over the world to facilitate the movement of capital and the unlocking of potential from displaced people. If you think about the growth of gender lens investing, there were sort of three primary ingredients that really helped to spur that movement. One was societal change and demand. This is the right and necessary thing to do. Another was the empirical data and evidence that said this is not just a good investment, not just the right investment but a good and a smart investment. Third was a framework that investors could use to actually find, qualify and execute on deals that would support the growth of women entrepreneurs and women managed companies. So with the announcement of the Refugee Investment Network, we are also launching our first landmark report called Paradigm Shift, how impact investing can unlock the potential of refugees. You can download this report at refugeeinvestments.org slash Paradigm Shift. And in the report, we make the case that refugees are investable. They have higher entrepreneurship rates than any other population on the planet. They are employable. Their retention rates are higher than non-refugee personnel. They are credit worthy contrary to what the biases of MSIs often are. Kiva has provided data on 8,000 micro-entrepreneurs in over four countries that verifies that the risk for lending to a displaced entrepreneur is no higher than lending to a non-displaced person. And in some countries, it's actually higher, the repayment rate. So we also studied over 180 different investors, deals, grantors, to understand who's active in this space. And what we found is that there's more deals being done than we thought. We've uncovered about 80 active deals, as well as closed ones, and 300 other deals in pipeline development now. So this is really what we see as the frontier in the beginning of a new investment thesis. There's a need to shift into an investment and long-term approach inclusive of displaced communities. And I am so honored and lucky to be here today with Ruma and Bert, two people that are leading this field. So Ruma, why is this necessary? Why should we be doing this? Well, thank you, John. I want to just start by congratulating you for launching this report because as somebody who's been working in this field for several years, you've shown this incredible leadership to mobilize all of us and just bring all this information and help us understand what these use cases are. And I want to thank you sincerely for that. In terms of why should we invest? I mean, if you just look at the numbers, 67 million refugees, which is up from 60 million just three years ago, that number is just going up. Half of them are under the age of 18. There are, the last time I checked, two million women who are pregnant. So we're now going to start seeing kids that just grow up within this refugee crisis. And we all understand the limitations of aid and the potential of what business can do. So I can't think of a better way to think about how to deploy social capital to help solve this crisis. I think what's important in terms of understanding how to invest is to understand the actual journey of the refugees, which are, it's different for different regions of the world. And, you know, it's staged, there are several stages and different solutions at every stage of the way. But I think if you look at it through the lens of journey mapping, what you'll see is there are many aspects of the refugees journey that are very similar to any immigrant that immigrates to another country. And the needs and the services and the products that they need are very similar to what you and I need and what new immigrants coming into a new country need, whether it's shelter, financial services, you know, nutrition, like, you know, the list goes on. So I think that sometimes it can be very intimidating because we think about refugees as this vulnerable population that isn't a customer, doesn't know, you know, doesn't have an opportunity to really engage in a business setting, and they can. They're very resilient individuals, they make great employees, they make great entrepreneurs, and they are customers. Well, so, you know, maybe Bert, you can give us an example of your work that reinforces roomist points about this. Has this been done before? Is this, you know, something totally new? It has been done before for the reasons that you also mentioned, both the motivation, the desire to make a successful start after having been in many cases displaced without any money whatsoever. And we can talk about some specific entrepreneurs that we've invested in. We certainly look at the lens, like the refugee investment network has built in us, to look at companies that both provide products and services disproportionately to the refugees and who better to be able to offer those than the entrepreneurs who are from that community themselves. Because backing up just a little bit, CIF for 30 years has been investing in the emerging markets where what we believe is that sustainable development really is best achieved by backing local entrepreneurs. Now, the challenge with refugees and migrant entrepreneurs is that many times they have to develop their whole contact network in a new country where they wind up with. But what we've seen is just the motivation, obviously, of arriving without any assets whatsoever. So I'll tell you about one story about a refugee from Bosnia. He actually was a Serb who was kicked out of Bosnia and was placed into Northeast Serbia in the Banat region, very poor region, not much was going on. He had no money and what he did, he borrowed a truck and began to provide goods and services to local mama-pop supermarkets. He was a highly hard-working, integrity-filled guy and over time, and this was during the transition for Serbia, which was, as you know, not the world's favorite nation after the Balkan conflict. And so what he was able to do was develop a local network of sourcing. He began to supply them to mama-pops. Ultimately, the mama-pops found this all too complicated. They asked him to take the stores over. And by the time we saw him in 2008, he had 15 stores. He had a couple of trucks and about 200 people working for him. We invested a million euro. Ten years later, he has 100 million euro in sales, 2000 employees, and he still sources 90% from local stuff. So incredible, the community really thanks this guy so much. And I think why that was, was of his need to rebuild the community. Why that was was because he understood the security, the insecurity of many of the people. And he's been a terrific employer understanding those needs and fears. Many times, the employees were also non-skilled or semi-skilled high school. We've seen this there. We've been in Bangladesh and in Turkey. Turkey where a lot of Syrian refugees, well educated, even commercially very sophisticated, and yet they come and they're not allowed to work. It turns out that they obviously speak Arabic. Many Turks don't. So setting up a call center for Arabic language services, disproportionately hires well educated Syrian refugees. I find so many times, as Aruma is saying, these refugees are stigmatized by not having a chance to make a contribution.  So how can we show that these entrepreneurs, or even the services they provide, make that community productive again? I think that's why investment in entrepreneurs and fast-growing companies that really target these needs and services show such great results. Bert, some people might say that the case of Go-Mex is almost like a unicorn. But you've been at this for 30 years. Is he one and only example? No, not at all. Obviously, Go-Mex is really good. I don't know whether I can say this. We made 15 times our money on that one over 10 years. So it is kind of a unicorn at the SME level. But we've seen this, I mean, the tempo, this Drinkwell, which is a company that's providing a unique source of water, distributed solar for migrants' communities. These are all providing goods and services for a lot of people who have nothing. What we're seeing right now in the Columbia area, 2 million refugees from Venezuela, you provide clean water, you provide food, you provide education. People need it, people want it. And typically governments are far behind, they don't have anybody to execute it. I mean, it's important to say that most of these refugees are not in Istanbul. They're out in the south, near the border of Syria, or they're in southeast Bangladesh near Chittagong, or they're in northeast Serbia. They're not where people are easily, let's say, accessible. And so in those areas, good investments which cater to the needs and demands of people which are right-in-large, not-met, will grow fast and will do well. Of course, you need to select the right entrepreneurs. You need to be there to monitor and structure it. But I think that what we've found out is that people who have been displaced, whether internally or through borders, are so grateful for the chance, are so motivated to succeed that they provide, I would agree with what Kiva has found out, I think they provide better than normal investment opportunities. We're equity, we're not debt, but on the equity side, I think that has been a really very good experience for us. Well, that's good to hear. But not everyone is investing in emerging markets, you know? Correct. And not everyone wants to take that risk. So, Ruma, maybe you can talk to us a little bit about it, some different approaches. What else do you see that's working and moving well? Well, my great hope for this crisis from an investment perspective is technology. I think what is striking when you go to any area of the world that has refugees is that refugees are using 21st century technologies to manage and navigate their lives, and the technologies that they're being met with are just extremely archaic. And I think a big opportunity is, you know, the technology that exists here right in the Bay Area. How do we get the most cutting edge, fastest growing tech companies that are solving big problems in the world to start thinking about the humanitarian sector? So not just think about it not as what are the companies that are exclusively serving refugees, but thinking more in terms of what are their needs and what are the products and services they need, and which are the companies around the world that are the best in the world at doing that. And go to them and try to get them to think about a new market. And I think, you know, there are countless examples and the humanitarian sector, you know, badly needs it. So it's almost like taking an activist approach. So instead of sort of designing a new deal that would somehow improve or incorporate progress for forcibly displaced people, it's taking an existing deal and converting that into something that would benefit displaced people. I mean, think about drone technologies to have the ability to use drone technology to bring food in the most remote parts of the world. Money transfers, health delivery, credit law. I mean, if you think about the journey, just take the Syrian refugees journey.  I mean, there's an opportunity right there. And when they, you know, that journey they take from Turkey to Greece, you know, it's anywhere between three to 5,000 euros per person. So family of four arrives in Greece. They're already 20,000 euros in debt. They're all trying to get themselves to Northern Europe, primarily Germany. They arrive in Germany. They're probably, you know, 30, 40, 50,000 euros in debt. And the German government has done an incredible job of welcoming refugees, and they have many social programs, but the bulk of which is about sending refugees into apprenticeship programs. But what they need is liquidity, and they need to, they need debt. They want to alleviate their debt. So right there, there's an opportunity for a credit company or to come in and alleviate them of their short-term debt and give them opportunities to work, because the government then wonders why a refugee is going into the informal economy. It's because they have a lot of debt. And so if you just think about that, they all care about their health. The health services that exist along this journey and in the camps are just terrible. Why can't we develop insurance products for that? Why don't we have drug delivery that, I mean, there's just so many opportunities around. You mentioned one backstage earlier that really caught my ear, which was Planet Labs. Yes, so I got really excited when I heard about Planet Labs. So I'm sure many of you are familiar with them. They're a micro-satellite company that take images of the planet every hour. So huge commercial applications for that. But if you think about how migration patterns are determined today within the NGO and UN system, literally people are sitting around a room with a whiteboard and speculating where they think migrants and refugees are going to go next. If you take the example of the Rohingyas coming from Myanmar to Bangladesh, you may all remember there was a time when the Rohingyas were complaining that generals were burning their villages. And there was never any evidence of that until Planet Labs formed a partnership with Amnesty International, and they were able to produce the evidence that this was actually happening. And now there's a case, right? But without that technology, it wouldn't have happened because our systems are so archaic. Now our systems are very challenged, but how do we get companies like Planet Labs to start thinking about using their technologies in these areas that otherwise they wouldn't have thought of? In some ways, you're asking investors to kind of lean into their existing portfolios and find applications, right? Because as an investor, you have an opportunity to influence the companies and sort of bring to bear what you care about and how can you facilitate and help them do the things that you think are right. I think one takeaway in this context is that even though we may find ourselves on another side of the planet from forced migration or far away from some of these markets, one, we have to understand that this affects everything that we do. Forced migration connects to 13 out of the 17 UN Sustainable Development Goals. If we want to achieve the SDGs, we have to invest in long-term solutions of forced migration. Two, that there are opportunities for every investor, regardless of your geographic interest, your sectoral interest, the scale of the deal you're looking at or whether you're interested in investing in tech companies here in the US or in emerging markets through SME opportunities overseas. As we think about this, we've got 189 different capital sources that we profiled in the report. About 52% of those are active in the space, meaning they've executed at least one deal. Not all of that is through intention or design. Some of it was actually by accident. We just unearthed the fact that they had impacted positively some displaced communities. How do we shift the scale? How do we create this paradigm shift that allows investors to see that they are active and necessary agents to solving perhaps the most urgent and defining social crisis of our time? Well, I think one of the issues is how do investors approach that? There's not a mutual fund for that. There's not a ready understanding of how that money that an investor wants to benefit the theme that you're outlining. How does it get there? How does it trace there? How can I make sure that my money is there? We've had to develop, I think, a flex account which in a sense allows investors to say, I only want my money to be invested in refugees or refugee themes in these countries. If you don't find a good deal for that one, then don't charge me. Don't bring up my money there. If you do find something, then bring it in. I think Keev has done a great job personalizing the connection between the investor and the object, the desire of the investor to really show to make a difference. Old products, blind pools, put my money in, get it back eight years later. I think it doesn't really do justice to the impact that people want to create. So I think new products like the flex account are ways at the same time to provide responsibility to tax structuring, to monitoring the political protection as well for the investment capital that I think people deserve and want to do before they're ready to commit money. So the thought is there. I think a lot of people want to. You have to, however, find a responsible mechanism through which their money can be directly associated with the themes we're talking about here. There are many thoughts on how the SOCAP community and the broader impact investing community can get engaged. I think that we need to do a better job of talking about this in a language that more people understand. I think when we have success stories is what you've described earlier. We need to be out there and sharing that so more people hear about it. This Planet Lab story, everyone should know about it. I think the power of storytelling is very, very strong. But what I would encourage everyone in this audience to do is look at your current portfolios and see are there any companies that can actually have an impact. And if so, talk to them about it. And talk to me about it because I'd love to hear. But just we need more people to engage. This is one of the biggest crisis of our lifetime. And we need people to just want to do more. And a good way to start is look at what your existing investments are and are there any opportunities for those companies to start doing something? Well, there you have it. Ruma has thrown the gauntlet down to SoCAP. And I'd like to respond to that and say that we're about to light a spark here, which I hope will inspire you and encourage you to become active participants in writing a new narrative and a new story about including forcibly displaced people. I'm giving an opportunity for every person to matter where they come from to have a pathway to dignified and purposeful life. So with that, we're going to kick off some announcements. We have some surprises for you. We have eight wonderful people that are coming and share their commitments, how they're going to be participating in this to build a movement for refugee lens investing. And we hope that you will join them. So without any further ado, I'd like to call up Chris Jancy from Amplio Ventures. Chris, please join us on stage. Come on out, sir. Good morning. So four years ago, my wife and I started a staffing company placing refugees into jobs here in the U.S. We started this in a suburb outside of Atlanta, Georgia in a community known as the most diverse square mile in the world called Clarkston. And over time over the past four years, as the business has grown, we've been able to place individuals in Dallas and Houston and Raleigh and set up offices in those locations around the U.S. But we looked up and we said, okay, we've helped about 3,000 refugees who've come to the U.S. find full-time employment. And as excited as we were about that achievement, we looked around the world and we said, we've barely scratched the surface. We recognize that only 1% of refugees have made it to the U.S. And so there's got to be some other solution. We said job placement works really well in developed economies. But if we want to move the needle on a global scale, then we have to think more about job creation. So over the last several months, we've been working for this moment where we get to announce the launch of a venture capital firm. And so I want to make that announcement right now if that's okay with you. But I'm going to need you to participate. So we're filming this, obviously it's being filmed by SoCAP. We're filming it as well. We want to share this video around the world and let people know that we're excited. And there are people with us, standing with us that are excited about investing in refugee entrepreneurs. So as I say this next sentence, if you'll help me, stand to your feet and just erupt in jubilation so that we can share this message around the globe. Okay, so not ready. You're not ready. Okay, here we go. Next sentence, get ready. It is with great anticipation that we're excited to announce in partnership with the Refugee Investment Network our commitment to launch a growth scale and venture capital firm where we can invest in businesses who are restoring refugee stability. So this will be Amplio Ventures. Thank you. So our commitment is to deploy $100 million in capital by 2030 into refugee entrepreneurs and companies that are investing in refugees on a global scale. And we're excited to partner with Refugee Investment Network to do that. And as well as with the seven others who are coming after me. So I need you to give just as much excitement and energy and applause to them as they come out and share their commitments as well. Thank you. Come over here. If you'll just stand behind us. I'm going to ask everyone to stay on stage and you'll see why later. Hi, everyone. Good morning. My name is Agnes Dosevich and in 1989 I joined CIF who you just heard all about as one of its first employees. Right now I'm one of their newest board members. So it's really amazing what CIF has done in the last three decades. In 1989 they've actually raised and managed funds in 17 countries which have been affected by conflict. Including places like Afghanistan, the Balkans, Peru, Colombia, Turkey, Bangladesh. So it's really my pleasure to announce that through funds and managed accounts that CIF has under management and through products that it will raise, CIF intends to invest 50 million dollars into the placed person lens enterprises by the end of the year 2020. And CIF is pledging this as part of the Refugee Investment Network which we're incredibly proud to be part of. Thank you very much and we really look forward to working with all of you. Jay Kim from the Ascent Fund. Good morning. My name is Jay Kim and I'm with the Juicera Foundation and as part of the Refugee Investment Network the Juicera Foundation is committed to the first impact investment fund in Greece working around refugee issues. The Ascent Venture Fund will be investing in companies in SMEs that will create jobs for refugees and vulnerable host community members. It will do so by following the investment thesis of combining the need for SME lending which is the market opportunity that we have identified in Greece where banks are saddled with 46% non-performing loans and using that to incentivize companies to create jobs for refugees. We have found a very strong pipeline of companies that are willing to work with refugees because there is no SME financing or growth capital for these companies. On the labor on the labor supply side we'll also be complimenting the fund with a side-card technical assistance vehicle to be able to identify train and match refugees with the employment opportunities. I think what's exciting about this is that we have now been able to raise about 80% of the funds that we need to launch this impact investment fund in Greece by the first quarter of 2019. For every $10 million invested we project being able to create $25 million of incremental income for refugees. I think even the fact that much of Europe is saddled with high unemployment rates and social integration of refugees is one of the most urgent issues facing the continent and having global implications as you guys are all aware. We believe that this is a really exciting product in order to change the narrative and show that refugees can add value to these host communities not just by producing and integrating socially but also by becoming economic contributors to the economy. So in any case as you guys know one of the biggest challenges with this space and the work that John is trying to do is that it's a nascent space. There's not really a marketplace. So I guess my call to action would be if there's anyone in this room who is interested in using impact investment tools to create and address refugee livelihood issues. Please come see me or find me or email me at the JUSTA foundation website. Thank you. John Lev Flaves from Kiva. Great. Thanks everyone. As part of the refugee investment network we at Kiva have been trying to solve the problem that refugees seek economic opportunities but they're largely financially excluded. Local financial institutions around the world are unwilling to lend to refugees because they're perceived as too risky. So at Kiva we set out three years ago using our crowdfunding platform. For those of you who have visited the website to make a loan it's a social investment. You're putting in $25 and you're not getting a return on that. It's a social return and you're also taking on the risk of default. So because of that we channeled that funding to local financial institutions around the world who were in countries with high refugee populations and it's providing them with the capital they need to go out and pilot refugee lending. It's giving them the R&D capital they need to overcome the challenge of refugees being perceived as too risky for refugees. And we've done this to over 11,000 refugees over $10 million in loans and what we're really excited about is that the repayment rate that we're seeing for these 11,000 refugees matches the repayment rate for non-refugees. And for us and for our local financial institutions that we're working with this is huge because it shows that refugees are viable credit clients and so that's allowing us to move on and take the next step today. So I'm going to hand it over to Premal so we're really pleased to announce something that is very new for Kiva which is for the first time ever if you're a return-seeking investor you can invest side by side with the Kiva crowdfunding platform that has never provided a return on that billion dollars that's been lent through it on a select number of opportunities that we feel now have been de-risk in refugee financial inclusion. Why is this important? Because our local field partners now that are seeing the business case for lending to refugees that this can actually be profitable they're still pioneer firms in their market and if we can help scale up that lending program we believe other firms other banks in the market will take notice and ideally we can flip the market towards true refugee financial inclusion not just for the pioneer firm not just for the pioneer bank that's doing it with R&D capital from crowdfunding but really multiple options for people who are looking to create livelihoods and need capital to get that started so we'd love your feedback as we are on our own learning journey around this first-time investment vehicle we're seeking to raise $50 million we are deep in conversations with a $20 million anchor and as was shown on the slide the IRR expectation should be between 1 and 5% the loan term is a debt capital loan term what we're seeking is people who are willing to put partner money with us between 3 and 10 years to raise the risk refugee financial inclusion opportunities we look forward to your feedback thank you thank you guys next up is Gustavo Bernal from Terra Blanca Buenos dias after having worked with the support of the Rockefeller Foundation and the Kellogg School of Management Sustainable Investing Fellowship Terra Blanca is now ready to pilot the Rural Displacement Fund so as part of the refugee investment network we are committed to piloting in 2019 the Rural Displacement Fund we will acquire at least 100 acres of land in post-conflict rural Columbia and parcel it into smaller farming units construct prefabricated modular houses and allow displaced families to return as smallholder farmers we believe that secure land rights are the key to break that cycle of violence and poverty so our objective is to provide them with access to finance through rural leases so that they can acquire land, they can construct their houses but most importantly we're also going to help them access international markets we want them to better sell their produce and effectively use international trade as a development tool so at the moment we're currently raising $1 million to start the pilot next year hopefully we can secure layers of intent by long-term investors before SOCAP ends we just need investors to understand that this is in many ways very similar to a mortgage but it's still a long-term initiative and at the end of the day we at Terra Blanca want to help the displaced communities in post-conflict Colombia to restart the livelihoods and rebuild ownership of their lands thank you yeah thank you Gustavo John Morris 17 Asset Manager thank you, good morning I'm representing Good Capital Project one of intentional media's brands which we in partnership with Jordan UNDP six months ago launched Seventeen Jordan a platform to catalyze and create design sessions around the best investments that could rise the level of humanity through the refugees and achieve the most progress for SDGs that has led to creating Seventeen Asset Management a firm in partnership with UNDP or UNCDF in which we will look to deploy our first fund in Jordan through in the network of refugee investment network looking at a refugee lens to create as much employment and growth in Jordan over the next six months so 30% of the capital will be going into refugee communities or their host communities thank you next up is Seth Hodel from Post Road Foundation Seth, good morning we are the Post Road Foundation and we focus on helping disadvantaged communities bring modern 21st century infrastructure to themselves so we focus on fiber optic networks that can provide digital access to those communities that don't have modern accessibility to the internet and that can also provide smart grid systems and other smart utility systems for energy and water to provide environmental benefit so as part of the refugee investment network we commit to pilot a new model for developing high speed internet infrastructure for displaced and other disadvantaged communities including Native American communities thank you thank you Seth Alice Bosley from 5.1 Labs hello everybody I feel like you've heard a lot of us but I'm really excited to be here today I'm Alice the executive director of 5.1 Labs and we are a start up incubator for displaced and conflict affected entrepreneurs based in the Kurdistan region of Iraq incredible people like Fatima who has displaced from Fallujah lost her savings lost her ability to rebuild but was a total badass taught herself how to code and wanted to launch her own business so we helped her launch a coding school for kids and she went through our incubator she's just one of the many people we work with so we are excited to be here with the refugee investment network we are making a commitment that in the next year we will launch the female founders program working with other amazing people like Fatima to help them scale their businesses and in addition we are planning on launching the RIN tech award for the best tech business that goes through our incubator they are going to get $10,000 from the amazing people that we are standing on stage with today so thank you all thanks Alice a round of applause for all of our market leaders here thank you all so much for leading the way this is an invitation for all of you and for the investment community beyond SoCAP to get into this sector it is a necessary, urgent and very promising space and we hope that you will come build this field with us as the session winds down after the close of the session I'd like to invite anyone out there who is part of the field considers themselves part of the community of people building the field in refugee and forced migration investing so if you are an ecosystem builder an entrepreneur, a displaced person a funder, a development finance institution who is doing this work please come join us we are going to take a field builders photograph which we will be able to track over the next few years as our community and market grows so thank you so much you all have a wonderful afternoon so we have come to the close of the morning session I want to make sure that you all have this opportunity to document what is happening it is important that we see and that we state who is at the table at the beginning at the ideation stage as we move forward and this opportunity for us to join to collaborate which is actually the true nature of our being this is how we live on the planet by connecting with other beings by connecting with other ways of thinking and collaborating and regenerating so thank you for this work thank you so as we transition into the midday of the session it is really just my joy to thank you for allowing me to hold some space to just steward a bit of the time with you this morning my counterpart beautiful co-MC will be joining you this afternoon and I just want to remind you of this opportunity to come back at 2 come back at 2pm there are some gifts of course for you to pick up at SoCAP I think this is our third year of having the pint glasses if you are a person who collects the swag from SoCAP be sure to do that it's at the bookstore there is a party tonight I'm all about the party SoCAP is such a fabulous party at the end so be sure to keep up with that but what's happening this afternoon the programming is I think going to be particularly spicy because one of the bad boys of all time Mr. Andre Agassi is presenting this afternoon and his newest work in the whole social impact sphere and there's also a conversation panel discussion on the unexpected impact of technology so here we are kind of like in this bastion of the tech world all eyes continue to be on the Bay Area and there's so much to be said around different aspects of technology I really I think it's going to be a good conversation so please come back for that and then in closing I just have really my closing thought is around just the special tender place that we are in right now this is a potent and very smooth opportunity for us to like investigate ourselves and that we're here in a society in our communities and our families you know at our own kitchen tables and you know all the blinders are off it's like we actually have to look at ourselves and that this actual regeneration this innovation that we go out to the world and like represent you know to everyone and hope that they join us first in inner journey and then that's a lot of the conversation that is being you know pulled apart and investigated here at Socap and so the work that we do has to continue to be mindful it has to be restorative it has to be reflective and personal it has to be forgiving and I would also offer that it has to center the stories the lives of the people most impacted by the ills of our society that we've created I would offer that that work has to center the lives of people of color of women of color in particular and that you allow yourself to question what that work might look like for you personally it's hard work it's long work but we must do it we must do it so the time is up for any of those who are not up for that the blinds are off and I thank you for your your attention and for your beautiful spirit and for your openness and willingness to be part of this collaboration as we look at the intersection of money and meaning at Socap thank you for your time and for your morning