OpenInfraDays2019 Mastering Openstack the DevOps way

Mastering Openstack the DevOps way

Transcript

1. Mastering OpenStack
   the DevOps Way
   Scott.liao , Mr. 沙先⽣
   

   View Slide

2. HELLO! I’m
   ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我
   • IT 鐵⼈賽第九屆：Puppet 從入⾨就放棄
   • DevOpsDays Taipei 2018 Speaker
   • SITCON 2019 Speaker
   • DevOps Taiwan CI/CD/Pipeline Tools Speaker
   • Cloud Summit 2019 Speaker
   • MOPCON 2019 Unconference Speaker
   Scott
   

   View Slide

3. View Slide

4. View Slide

5. What Problem We Facing
   Quality
   Efficiency
   Control
   People
   

   View Slide

6. View Slide

7. View Slide

8. High Yield Rate
   )PX5P
   

   View Slide

9. $*
   3FWJFX
   1FSNJTTJPO
   *B$&SB 6OJU5FTUJOH
   *OUFHSBUJPO
   5FTUJOH
   (JU0QT
   $*
   $PEF 0QT
   

   View Slide

10. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF
    

    View Slide

11. *OGSBTUSVDUVSFBT$PEF
    • Manage
    • Coding
    • Clean Infrastructure
    • Testing
    

    View Slide

12. 8IJDI*B$
    • Description-Base
    • API-Base
    

    View Slide

13. %FTDSJQUJPO#BTF*B$5PPMT
    • Ansible
    • Puppet
    • Chef
    • Saltstack
    • CloudFormation
    

    View Slide

14. "1*#BTF*B$5PPMT
    • Terraform
    • Pulumi
    • AWS CDK
    

    View Slide

15. resource "openstack_compute_instance_v2" "basic" {
    name = "server"
    image_id = “ad091b-d20dw…”
    flavor_id = "t2.nano"
    network { name = “my_network" }
    }
    

    View Slide

16. $PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF
    *OTUBODF 4FDVSJUZ(SPVQ
    /FUXPSL 7PMVNF
    *NBHF
    

    View Slide

17. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF
    

    View Slide

18. 4UBCMF*OGSBTUSVDUVSF
    • Production don’t Allow access
    • Change Management
    • Infrastructure as code Now,
    Testing and review it.
    

    View Slide

19. Prod
    Role-Base
    

    View Slide

20. 3PMF#BTFPG1FSNJTTJPO
    • Always read only.
    • Write of Change Management
    Process.
    • Change Process without Humans.
    • Deployment of platform.
    

    View Slide

21. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF
    

    View Slide

22. Terratest
    

    View Slide

23. 5FSSBUFTUJODMVEJOH
    • Terraform, Packer, Docker
    • Executing commands on servers over
    SSH.
    • AWS, GCP, Azure, Kubernetes APIs.
    • Helm Charts.
    • HTTP requests.
    • Shell commands.
    • More ..
    

    View Slide

24. 5FSSBUFTUXPSLJOH
    • Write tests.
    • Run Terratest tasks.
    • IsWorks or Failed.
    • Destroy.
    

    View Slide

25. %FWFMPQFS
    

    View Slide

26. 5FSSBUFTU/PUFT
    • Not funcation test.
    • Terratest is real deployment.
    • More resource for testing.
    • Difference Networks.
    • Difference Role.
    • Everything destroy after deployment
    

    View Slide

27. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF
    

    View Slide

28. Auditing
    )PX5P
    

    View Slide

29. View Slide

30. 0QFO1PMJDZ"HFOU
    • Release v0.15.0 latest
    • Terraform, Docker, Kubernetes.
    • SSH, sudo
    • Kafka, Ceph protection
    • Elastic filtering
    

    View Slide

31. 
    44)
    

    View Slide

32. 
    
    

    View Slide

33. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF
    

    View Slide

34. (JU0QT
    • Always collaboration used Git.
    • PR reviews before deployment.
    • Everything Testing of deployment.
    • Document on READMD or Comments.
    

    View Slide

35. High Yield Rate
    

    View Slide

36. I do it ?
    4IPVME
    

    View Slide

37. DevOps
    
    
    

    View Slide

38. *B$SFRVJSF4LJMMT
    • Git
    • Ops(80%), Dev(20%)
    • Passion
    • No Wife
    

    View Slide

39. *B$SFRVJSF.FNCFST
    • DevOps n+1
    • Members 4+
    

    View Slide

40. 3FGFSFODF
    • Mastering IaC the DevOps Way @smalltown
    • https://github.com/gruntwork-io/terratest
    • https://www.openpolicyagent.org/
    

    View Slide

41. 5IBOLT
    • facebook.com/shazi.liao
    • github/shazi7804
    • https://shazi.info
    "OZ2VFTUJPOT
    

    View Slide