Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
OpenInfraDays2019 Mastering Openstack the DevOp...
Search
Scott Liao
November 12, 2019
Technology
310
0
Share
OpenInfraDays2019 Mastering Openstack the DevOps way
Mastering Openstack the DevOps way
Scott Liao
November 12, 2019
More Decks by Scott Liao
See All by Scott Liao
更高效率低成本的 Observability 2.0 時代即將來臨 (Observability 2.0 Why you need know) - DevOpsDays Taiwan 2025
shazi7804
0
550
MOPCON 2019 - HybridCloud 一條通吃的 CI / CD Pipeline
shazi7804
0
450
從傳統 IDC 到 Hybrid Cloud 的演進及架構設計
shazi7804
2
1.4k
DevOps Taiwan CI/CD/Pipeline 大亂鬥 20190420
shazi7804
2
1k
SITCON 2019 - 誰說工程師一定爆肝!一起走入雲端世界吧
shazi7804
1
590
DevOpsDays Taipei 2018 - Puppet 古早味、新感受:改造老牌企業進入自動化時代
shazi7804
0
250
Other Decks in Technology
See All in Technology
AWS運用におけるAI Agent活用術 / JAWS-UG 神戸 #11 LT大会
genda
1
340
ECSのTerraformモジュールにコントリビュートした話
harukasakihara
0
320
権限管理設計を完全に理解した
rsugi
1
150
checker.tsにチキンレースを仕掛けてみた:型エラー(TS2589)が発生する境界線を求めて
hal_spidernight
1
120
ソフトウェアサプライチェーン攻撃対策として今からサクッとできること
flatt_security
2
110
実践 TanStack Start ― 新規プロダクトを開発して確立した、サーバーとクライアント境界の設計パターン / Practical TanStack Start Server-Client Boundary Patterns
kaminashi
2
210
個人最適から組織最適へ — 仕組みで進めるAI推進
rfdnxbro
0
110
ANDPAD Ruby sponsor session in RubyKaigi 2026
andpad
0
120
データ基盤構築・運用の現場から 〜 Snowflake Intelligence 導入で変わった、データ活用の未来 〜
wonohe
0
140
Cortex(Code) を ML モデルの 精度改善サイクルに組み込む.pdf
oimo23
0
260
AWSアップデートから考える継続的な運用改善
toru_kubota
2
360
RubyでRuby拡張を書いたらRubyより35倍速になったってどういうこと??
kazuho
3
550
Featured
See All Featured
Test your architecture with Archunit
thirion
1
2.2k
Art, The Web, and Tiny UX
lynnandtonic
304
21k
Navigating Algorithm Shifts & AI Overviews - #SMXNext
aleyda
1
1.2k
Agile that works and the tools we love
rasmusluckow
331
21k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
32
2.9k
A designer walks into a library…
pauljervisheath
211
24k
Optimising Largest Contentful Paint
csswizardry
37
3.7k
Between Models and Reality
mayunak
4
290
Ruling the World: When Life Gets Gamed
codingconduct
0
230
How to train your dragon (web standard)
notwaldorf
97
6.6k
10 Git Anti Patterns You Should be Aware of
lemiorhan
PRO
659
62k
The Spectacular Lies of Maps
axbom
PRO
1
760
Transcript
Mastering OpenStack the DevOps Way Scott.liao , Mr. 沙先⽣
HELLO! I’m ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我 •
IT 鐵⼈賽第九屆:Puppet 從入⾨就放棄 • DevOpsDays Taipei 2018 Speaker • SITCON 2019 Speaker • DevOps Taiwan CI/CD/Pipeline Tools Speaker • Cloud Summit 2019 Speaker • MOPCON 2019 Unconference Speaker Scott
None
None
What Problem We Facing Quality Efficiency Control People
None
None
High Yield Rate )PX5P
$* 3FWJFX 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT $* $PEF
0QT
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
*OGSBTUSVDUVSFBT$PEF • Manage • Coding • Clean Infrastructure • Testing
8IJDI*B$ • Description-Base • API-Base
%FTDSJQUJPO#BTF*B$5PPMT • Ansible • Puppet • Chef • Saltstack •
CloudFormation
"1*#BTF*B$5PPMT • Terraform • Pulumi • AWS CDK
resource "openstack_compute_instance_v2" "basic" { name = "server" image_id = “ad091b-d20dw…”
flavor_id = "t2.nano" network { name = “my_network" } }
$PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF *OTUBODF 4FDVSJUZ(SPVQ /FUXPSL 7PMVNF *NBHF
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
4UBCMF*OGSBTUSVDUVSF • Production don’t Allow access • Change Management •
Infrastructure as code Now, Testing and review it.
Prod Role-Base
3PMF#BTFPG1FSNJTTJPO • Always read only. • Write of Change Management
Process. • Change Process without Humans. • Deployment of platform.
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Terratest
5FSSBUFTUJODMVEJOH • Terraform, Packer, Docker • Executing commands on servers
over SSH. • AWS, GCP, Azure, Kubernetes APIs. • Helm Charts. • HTTP requests. • Shell commands. • More ..
5FSSBUFTUXPSLJOH • Write tests. • Run Terratest tasks. • IsWorks
or Failed. • Destroy.
%FWFMPQFS
5FSSBUFTU/PUFT • Not funcation test. • Terratest is real deployment.
• More resource for testing. • Difference Networks. • Difference Role. • Everything destroy after deployment
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Auditing )PX5P
None
0QFO1PMJDZ"HFOU • Release v0.15.0 latest • Terraform, Docker, Kubernetes. •
SSH, sudo • Kafka, Ceph protection • Elastic filtering
44)
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
(JU0QT • Always collaboration used Git. • PR reviews before
deployment. • Everything Testing of deployment. • Document on READMD or Comments.
High Yield Rate
I do it ? 4IPVME
DevOps
*B$SFRVJSF4LJMMT • Git • Ops(80%), Dev(20%) • Passion • No
Wife
*B$SFRVJSF.FNCFST • DevOps n+1 • Members 4+
3FGFSFODF • Mastering IaC the DevOps Way @smalltown • https://github.com/gruntwork-io/terratest
• https://www.openpolicyagent.org/
5IBOLT • facebook.com/shazi.liao • github/shazi7804 • https://shazi.info "OZ2VFTUJPOT