Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
OpenInfraDays2019 Mastering Openstack the DevOp...
Search
scott.liao (Mr. 沙先生)
November 12, 2019
Technology
0
230
OpenInfraDays2019 Mastering Openstack the DevOps way
Mastering Openstack the DevOps way
scott.liao (Mr. 沙先生)
November 12, 2019
Tweet
Share
More Decks by scott.liao (Mr. 沙先生)
See All by scott.liao (Mr. 沙先生)
MOPCON 2019 - HybridCloud 一條通吃的 CI / CD Pipeline
shazi7804
0
350
從傳統 IDC 到 Hybrid Cloud 的演進及架構設計
shazi7804
2
1.4k
DevOps Taiwan CI/CD/Pipeline 大亂鬥 20190420
shazi7804
2
920
SITCON 2019 - 誰說工程師一定爆肝!一起走入雲端世界吧
shazi7804
1
480
DevOpsDays Taipei 2018 - Puppet 古早味、新感受:改造老牌企業進入自動化時代
shazi7804
0
150
Other Decks in Technology
See All in Technology
エンジニアが一生困らない ドキュメント作成の基本
naohiro_nakata
2
160
State of Open Source Web Mapping Libraries
dayjournal
0
230
Amazon CloudWatch Network Monitor のススメ
yuki_ink
0
160
OCI Data Integration技術情報 / ocidi_technical_jp
oracle4engineer
PRO
1
2.6k
QAEチームが辿った3年 ボクらが改善業務にスクラムを選んだワケ / 20241108_cloudsign_ques23
bengo4com
0
1.3k
TypeScript、上達の瞬間
sadnessojisan
31
8.1k
Lexical Analysis
shigashiyama
1
140
Going down the RAT hole: Deep dive into the Vuln-derland of APT-class RAT Tools
nttcom
0
240
株式会社ログラス − エンジニア向け会社説明資料 / Loglass Comapany Deck for Engineer
loglass2019
3
28k
形式手法の 10 メートル手前 #kernelvm / Kernel VM Study Hokuriku Part 7
ytaka23
5
820
強いチームと開発生産性
onk
PRO
25
8.6k
Amplify Gen2 Deep Dive / バックエンドの型をいかにしてフロントエンドへ伝えるか #TSKaigi #TSKaigiKansai #AWSAmplifyJP
tacck
PRO
0
170
Featured
See All Featured
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
191
16k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
126
18k
No one is an island. Learnings from fostering a developers community.
thoeni
19
3k
Java REST API Framework Comparison - PWX 2021
mraible
PRO
28
8.2k
Reflections from 52 weeks, 52 projects
jeffersonlam
346
20k
Code Review Best Practice
trishagee
64
17k
GraphQLとの向き合い方2022年版
quramy
43
13k
Fashionably flexible responsive web design (full day workshop)
malarkey
405
65k
Writing Fast Ruby
sferik
627
61k
Dealing with People You Can't Stand - Big Design 2015
cassininazir
364
24k
Teambox: Starting and Learning
jrom
133
8.8k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
sstephenson
159
15k
Transcript
Mastering OpenStack the DevOps Way Scott.liao , Mr. 沙先⽣
HELLO! I’m ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我 •
IT 鐵⼈賽第九屆:Puppet 從入⾨就放棄 • DevOpsDays Taipei 2018 Speaker • SITCON 2019 Speaker • DevOps Taiwan CI/CD/Pipeline Tools Speaker • Cloud Summit 2019 Speaker • MOPCON 2019 Unconference Speaker Scott
None
None
What Problem We Facing Quality Efficiency Control People
None
None
High Yield Rate )PX5P
$* 3FWJFX 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT $* $PEF
0QT
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
*OGSBTUSVDUVSFBT$PEF • Manage • Coding • Clean Infrastructure • Testing
8IJDI*B$ • Description-Base • API-Base
%FTDSJQUJPO#BTF*B$5PPMT • Ansible • Puppet • Chef • Saltstack •
CloudFormation
"1*#BTF*B$5PPMT • Terraform • Pulumi • AWS CDK
resource "openstack_compute_instance_v2" "basic" { name = "server" image_id = “ad091b-d20dw…”
flavor_id = "t2.nano" network { name = “my_network" } }
$PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF *OTUBODF 4FDVSJUZ(SPVQ /FUXPSL 7PMVNF *NBHF
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
4UBCMF*OGSBTUSVDUVSF • Production don’t Allow access • Change Management •
Infrastructure as code Now, Testing and review it.
Prod Role-Base
3PMF#BTFPG1FSNJTTJPO • Always read only. • Write of Change Management
Process. • Change Process without Humans. • Deployment of platform.
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Terratest
5FSSBUFTUJODMVEJOH • Terraform, Packer, Docker • Executing commands on servers
over SSH. • AWS, GCP, Azure, Kubernetes APIs. • Helm Charts. • HTTP requests. • Shell commands. • More ..
5FSSBUFTUXPSLJOH • Write tests. • Run Terratest tasks. • IsWorks
or Failed. • Destroy.
%FWFMPQFS
5FSSBUFTU/PUFT • Not funcation test. • Terratest is real deployment.
• More resource for testing. • Difference Networks. • Difference Role. • Everything destroy after deployment
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Auditing )PX5P
None
0QFO1PMJDZ"HFOU • Release v0.15.0 latest • Terraform, Docker, Kubernetes. •
SSH, sudo • Kafka, Ceph protection • Elastic filtering
44)
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
(JU0QT • Always collaboration used Git. • PR reviews before
deployment. • Everything Testing of deployment. • Document on READMD or Comments.
High Yield Rate
I do it ? 4IPVME
DevOps
*B$SFRVJSF4LJMMT • Git • Ops(80%), Dev(20%) • Passion • No
Wife
*B$SFRVJSF.FNCFST • DevOps n+1 • Members 4+
3FGFSFODF • Mastering IaC the DevOps Way @smalltown • https://github.com/gruntwork-io/terratest
• https://www.openpolicyagent.org/
5IBOLT • facebook.com/shazi.liao • github/shazi7804 • https://shazi.info "OZ2VFTUJPOT