Intro to Foreman 2017 (cfgmgmtcamp Gent)

Intro to Foreman 2017 (cfgmgmtcamp Gent)

Fe4dc5ea02ac73b9981bcc549a7a288c?s=128

Daniel Lobato García

January 25, 2017
Tweet

Transcript

  1. 2.

    FOREMAN AT PUPPETNYC - 07/30/15 2 Lifecycle management tool for

    physical and virtual servers FOREMAN 101
  2. 4.

    FOREMAN AT PUPPETNYC - 07/30/15 4 BARE METAL VIRTUAL MACHINE

    PXE (vmlinuz + initrd) Optional: discovery (micro image) Image based Optional: Cloud-init FOREMAN 101 Provisioning
  3. 5.

    FOREMAN AT PUPPETNYC - 07/30/15 5 FOREMAN 101 Provisioning •

    DNS • DHCP • AD/IPA realms • PuppetCA autosign
  4. 6.

    FOREMAN AT PUPPETNYC - 07/30/15 6 FOREMAN 101 Configuration Network

    B Network A Smart Proxy Ansible Smart Proxy Puppet master
  5. 7.

    FOREMAN AT PUPPETNYC - 07/30/15 7 FOREMAN 101 Configuration Daemon

    to integrate with existing services • Puppet masters / CA • Salt master • Chef server • AD DNS • Etc... Main tool to make Foreman work in segmented networks Smart Proxy
  6. 8.

    FOREMAN AT PUPPETNYC - 07/30/15 8 FOREMAN 101 Configuration -

    ENC classes: docker: puppetdb::server parameters: puppetmaster: puppetmaster.mylan foreman_env: production foreman_subnets: [] foreman_interfaces: - mac: e6:1f:13:7e:4e:47 ip: 10.16.76.82 type: Interface name: attrs: {} virtual: false link: true identifier: enp0s26u2 managed: true subnet: environment: production
  7. 9.

    FOREMAN AT PUPPETNYC - 07/30/15 9 FOREMAN 101 Monitoring Configuration/system

    inventory • Puppet facts • Puppet reports storage • Salt highstate • Chef reports • ABRT • OpenSCAP
  8. 12.

    CONFERENCIA RAILS 2016 12 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup
  9. 22.

    CONFERENCIA RAILS 2016 22 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically
  10. 25.

    CONFERENCIA RAILS 2016 25 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically 3) After the host is created, Ansible runs automatically to enforce its roles
  11. 27.

    CONFERENCIA RAILS 2016 27 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically 3) After the host is created, Ansible is ran automatically to enforce its role 4) Foreman Remote Execution scheduled jobs keep the host updated. Errata and OpenSCAP policies are checked every night.
  12. 30.

    CONFERENCIA RAILS 2016 30 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically 3) After the host is created, Ansible is ran automatically to enforce its role 4) Foreman Remote Execution scheduled jobs keep the host updated. Errata and OpenSCAP policies are checked every night. 5) Decommissioning of all host “facts.rack_location = C932” • Foreman auto removes DNS entries, DHCP lease, and Puppet CA autosigns.