Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
OpenInfraDays2019 Mastering Openstack the DevOp...
Search
scott.liao (Mr. 沙先生)
November 12, 2019
Technology
0
270
OpenInfraDays2019 Mastering Openstack the DevOps way
Mastering Openstack the DevOps way
scott.liao (Mr. 沙先生)
November 12, 2019
Tweet
Share
More Decks by scott.liao (Mr. 沙先生)
See All by scott.liao (Mr. 沙先生)
MOPCON 2019 - HybridCloud 一條通吃的 CI / CD Pipeline
shazi7804
0
400
從傳統 IDC 到 Hybrid Cloud 的演進及架構設計
shazi7804
2
1.4k
DevOps Taiwan CI/CD/Pipeline 大亂鬥 20190420
shazi7804
2
960
SITCON 2019 - 誰說工程師一定爆肝!一起走入雲端世界吧
shazi7804
1
540
DevOpsDays Taipei 2018 - Puppet 古早味、新感受:改造老牌企業進入自動化時代
shazi7804
0
190
Other Decks in Technology
See All in Technology
Nstockの一人目エンジニアが 3年間かけて向き合ってきた セキュリティのこととこれから〜あれから半年〜
yo41sawada
0
110
「魔法少女まどか☆マギカ Magia Exedra」での負荷試験の実践と学び
gree_tech
PRO
0
420
衝突して強くなる! BLUE GIANTと アジャイルチームの共通点とは ― いきいきと活気に満ちたグルーヴあるチームを作るコツ ― / BLUE GIANT and Agile Teams
naitosatoshi
0
280
【5分でわかる】セーフィー エンジニア向け会社紹介
safie_recruit
0
30k
トヨタ生産方式(TPS)入門
recruitengineers
PRO
5
1.4k
『FailNet~やらかし共有SNS~』エレベーターピッチ
yokomachi
1
190
Grafana Meetup Japan Vol. 6
kaedemalu
1
190
Webアクセシビリティ入門
recruitengineers
PRO
3
1.4k
microCMS 最新リリース情報(microCMS Meetup 2025)
microcms
0
380
AWS環境のリソース調査を Claude Code で効率化 / aws investigate with cc devio2025
masahirokawahara
2
970
ヒューリスティック評価を用いたゲームQA実践事例
gree_tech
PRO
0
410
「魔法少女まどか☆マギカ Magia Exedra」の必殺技演出を徹底解剖! -キャラクターの魅力を最大限にファンに届けるためのこだわり-
gree_tech
PRO
0
420
Featured
See All Featured
Art, The Web, and Tiny UX
lynnandtonic
302
21k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.8k
Testing 201, or: Great Expectations
jmmastey
45
7.6k
Typedesign – Prime Four
hannesfritz
42
2.8k
Put a Button on it: Removing Barriers to Going Fast.
kastner
60
4k
[RailsConf 2023] Rails as a piece of cake
palkan
56
5.8k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
23
1.4k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
sstephenson
161
15k
The Illustrated Children's Guide to Kubernetes
chrisshort
48
50k
The Language of Interfaces
destraynor
160
25k
How To Stay Up To Date on Web Technology
chriscoyier
790
250k
The World Runs on Bad Software
bkeepers
PRO
70
11k
Transcript
Mastering OpenStack the DevOps Way Scott.liao , Mr. 沙先⽣
HELLO! I’m ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我 •
IT 鐵⼈賽第九屆:Puppet 從入⾨就放棄 • DevOpsDays Taipei 2018 Speaker • SITCON 2019 Speaker • DevOps Taiwan CI/CD/Pipeline Tools Speaker • Cloud Summit 2019 Speaker • MOPCON 2019 Unconference Speaker Scott
None
None
What Problem We Facing Quality Efficiency Control People
None
None
High Yield Rate )PX5P
$* 3FWJFX 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT $* $PEF
0QT
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
*OGSBTUSVDUVSFBT$PEF • Manage • Coding • Clean Infrastructure • Testing
8IJDI*B$ • Description-Base • API-Base
%FTDSJQUJPO#BTF*B$5PPMT • Ansible • Puppet • Chef • Saltstack •
CloudFormation
"1*#BTF*B$5PPMT • Terraform • Pulumi • AWS CDK
resource "openstack_compute_instance_v2" "basic" { name = "server" image_id = “ad091b-d20dw…”
flavor_id = "t2.nano" network { name = “my_network" } }
$PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF *OTUBODF 4FDVSJUZ(SPVQ /FUXPSL 7PMVNF *NBHF
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
4UBCMF*OGSBTUSVDUVSF • Production don’t Allow access • Change Management •
Infrastructure as code Now, Testing and review it.
Prod Role-Base
3PMF#BTFPG1FSNJTTJPO • Always read only. • Write of Change Management
Process. • Change Process without Humans. • Deployment of platform.
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Terratest
5FSSBUFTUJODMVEJOH • Terraform, Packer, Docker • Executing commands on servers
over SSH. • AWS, GCP, Azure, Kubernetes APIs. • Helm Charts. • HTTP requests. • Shell commands. • More ..
5FSSBUFTUXPSLJOH • Write tests. • Run Terratest tasks. • IsWorks
or Failed. • Destroy.
%FWFMPQFS
5FSSBUFTU/PUFT • Not funcation test. • Terratest is real deployment.
• More resource for testing. • Difference Networks. • Difference Role. • Everything destroy after deployment
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Auditing )PX5P
None
0QFO1PMJDZ"HFOU • Release v0.15.0 latest • Terraform, Docker, Kubernetes. •
SSH, sudo • Kafka, Ceph protection • Elastic filtering
44)
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
(JU0QT • Always collaboration used Git. • PR reviews before
deployment. • Everything Testing of deployment. • Document on READMD or Comments.
High Yield Rate
I do it ? 4IPVME
DevOps
*B$SFRVJSF4LJMMT • Git • Ops(80%), Dev(20%) • Passion • No
Wife
*B$SFRVJSF.FNCFST • DevOps n+1 • Members 4+
3FGFSFODF • Mastering IaC the DevOps Way @smalltown • https://github.com/gruntwork-io/terratest
• https://www.openpolicyagent.org/
5IBOLT • facebook.com/shazi.liao • github/shazi7804 • https://shazi.info "OZ2VFTUJPOT