Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Chef Update - InSpec & Habitat

Nathen Harvey
November 01, 2017

Chef Update - InSpec & Habitat

An update on Chef's latest approach to continuous automation.

This presentation was given at the DevOps ATL meetup.

Nathen Harvey

November 01, 2017

More Decks by Nathen Harvey

Other Decks in Technology


  1. @nathenharvey Introductions •  Hiring? •  Looking for work? •  Attending

    or speaking at a conference? •  Something we all should know? •  Favorite color?
  2. @nathenharvey Continuous Automation for High Velocity IT The Chef Automate

    Platform Workflow • Local development • Integration • Tooling (APIs & SDKs) COLLABORATE ▪  Package ▪  Test ▪  Approve BUILD ▪  Provision ▪  Configure ▪  Execute ▪  Update DEPLOY ▪  Secure ▪  Comply ▪  Audit ▪  Measure ▪  Log MANAGE Infrastructure Automation Compliance Automation Application Automation AUTOMATION ENGINES Increase Speed ▪  Package infrastructure and app configuration as code ▪  Continuously automate infrastructure and app updates Improve Efficiency ▪  Define and execute standard workflows and automation ▪  Audit and measure effectiveness of automation Decrease Risk ▪  Define compliance rules as code ▪  Deliver continuous compliance as part of standard workflow
  3. @nathenharvey The journey to continuous automation Three steps to improvement

    across all dimensions of software success Detect Correct Automate 1. Detect Gain visibility and develop baselines 2. Correct Remediate priority issues 3. Automate Continuously detect & correct
  4. @nathenharvey Yup, I said Windows... control 'windows-base-201' do impact 1.0

    title 'Strong Windows NTLMv2 Authentication Enabled' desc 'http://support.microsoft.com/en-us/kb/823659' describe registry_key('HKLM\System\CurrentControlSet\Control\Lsa') do it { should exist } its('LmCompatibilityLevel') { should cmp 4 } end end
  5. @nathenharvey Test via Chef Client Runs Chef Client Chef Server

    Chef Automate InSpec via "audit" cookbook
  6. @nathenharvey Test via Test Kitchen verifier: name: inspec inspec_tests: -

    name: company-base compliance: company/base-profile - name: app1 compliance: company/app1-profile
  7. @nathenharvey •  Tomorrow •  Crowne Plaza | Atlanta Perimeter at

    Ravinia •  8AM – 1PM – Presentations, demos, lunch •  1PM – 4PM – Hands-on training with Chef Automate and InSpec