ChefConf 2017 - Habitat In Production

The Habitat Supervisor is responsible for deploying, managing, and choreographing running Habitat services. This session will explore a number of the operational concerns that the supervisor enables. See how to manage secrets, store configuration changes in version control systems, update running applications, and choreograph application upgrades. This is the talk for anyone who is ready to run Habitat services in a production environment.

https://github.com/fnichol/talk-chefconf2017-habitat-in-production

Transcript

1. Habitat in Production Fletcher Nichol ChefConf 2017 May 23, 2017 Austin, USA
2. Habitat? is a runtime system for your apps or other services provides realtime service configuration is a reactive system packages software with a deterministic build system distributed build service loves your apps
3. Alert!
6. Habitat Zone! Level 4, behind registration
7. Concepts 1. Topologies 2. Service Bindings 3. Update Strategies 4. Release Channels 5. Keys 6. Service Configuration
8. Topologies
9. Topology 1. Standalone hab svc load abahab/webacus --topology standalone hab svc load abahab/webacus
10. Topology 2. Leader hab svc load abahab/webacus --topology leader
16. Service Binding
17. Bindings 1. Required hab svc load abahab/webacus --bind database:postgresql.default
18. Bindings 2. Optional hab svc load abahab/webacus --bind database:postgresql.default hab svc load abahab/webacus
20. Update Strategies
21. Strategy 1. None hab svc load abahab/webacus --strategy none hab svc load abahab/webacus
22. Strategy 2. AtOnce hab svc load abahab/webacus --strategy at-once
23. Strategy 3. Rolling hab svc load abahab/webacus --strategy rolling
29. Release Channels
31. Keys
34. Key 1. Origin hab origin key generate abahab hab pkg build -k abahab .
36. Key 2. Ring hab ring key generate beyonce hab svc load abahab/webacus hab sup run --ring beyonce hab config apply --ring beyonce webacus.default $ver $config.toml
38. Key 3. Service hab svc key generate webacus.default prod hab svc load abahab/webacus hab sup run --org prod hab config apply \ webacus.default@prod \ $ver \ $config.toml
39. Key 3. Service (With Ring) hab ring key generate beyonce hab svc key generate webacus.default prod hab svc load abahab/webacus hab sup run --org prod --ring beyonce hab config apply \ --ring beyonce \ webacus.default@prod \ $ver \ $config.toml
41. Key 4. User (Future) hab user key generate fnichol hab svc key generate webacus.default prod hab svc load abahab/webacus hab sup run --org prod # encrypt config with fnichol key for webacus.default@prod hab config apply \ webacus.default@prod \ $ver \ $encrypted_config.toml
42. Service Configuration
43. Configuration 1. Environment HAB_WEBACUS='maths_api = "http://maths.api" [app] port = 8080 ' export HAB_WEBACUS hab svc load abahab/webacus hab sup run
44. Configuration 2. File mkdir -p /hab/svc/webacus cat <<__EOF__ > /hab/svc/webacus/user.toml maths_api = "http://maths.api" [app] port = 8080 __EOF__ hab svc load abahab/webacus hab sup run
45. Configuration 3. Config Apply (1) cat <<__EOF__ > /tmp/webacus.toml maths_api = "http://maths.api" [app] port = 8080 __EOF__ hab svc load abahab/webacus hab sup run hab config apply webacus.default $ver /tmp/webacus.toml
46. Configuration 3. Config Apply (2) hab svc load abahab/webacus hab sup run cat <<__EOF__ | hab config apply webacus.default $ver maths_api = "http://maths.api" [app] port = 8080 __EOF__
47. Configuration 3. Config Apply (Aside) ver=$(date +'%s') hab config apply webacus.default $ver /tmp/webacus.toml
48. Versioned Configuration Changes
49. Setup git init habitat-config-ring-beyonce cd habitat-config-ring-beyonce
50. Service Group Config cat <<__EOF__ > webacus.default.toml maths_api = "http://maths.api" [app] port = 8080 __EOF__ git add webacus.default.toml git commit -m "Add webacus.default.toml"
51. Seed Ring (Pseudo Code) find . -name '*.toml' | while read -r config_toml; do service_group="${config_toml%.toml}" hab apply \ --ring beyonce \ "$service_group" \ $(date +'%s') \ "$config_toml" done
52. VCS Post-Merge Hook (Pseudo Code) git diff --name-only "$GIT_SHAS" | while read -r config_toml; do service_group="${config_toml%.toml}" hab apply \ --ring beyonce \ "$service_group" \ $(date +'%s') \ "$config_toml" done
53. We Did It!
54. Habitat Zone: Level 4
56. http://slack.habitat.sh
57. Thank you!