Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
OpenInfraDays2019 Mastering Openstack the DevOp...
Search
Scott Liao
November 12, 2019
Technology
320
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
OpenInfraDays2019 Mastering Openstack the DevOps way
Mastering Openstack the DevOps way
Scott Liao
November 12, 2019
More Decks by Scott Liao
See All by Scott Liao
更高效率低成本的 Observability 2.0 時代即將來臨 (Observability 2.0 Why you need know) - DevOpsDays Taiwan 2025
shazi7804
0
580
MOPCON 2019 - HybridCloud 一條通吃的 CI / CD Pipeline
shazi7804
0
460
從傳統 IDC 到 Hybrid Cloud 的演進及架構設計
shazi7804
2
1.5k
DevOps Taiwan CI/CD/Pipeline 大亂鬥 20190420
shazi7804
2
1k
SITCON 2019 - 誰說工程師一定爆肝!一起走入雲端世界吧
shazi7804
1
600
DevOpsDays Taipei 2018 - Puppet 古早味、新感受:改造老牌企業進入自動化時代
shazi7804
0
260
Other Decks in Technology
See All in Technology
カーネルまで探検して理解するふたつの自動計装
sumiyae
0
340
「ミスを許さない手順書」を作ってみた 〜 個人的にはこれ以上できることはあまりなさそう/20260827-ssmjp-operation-procedure-update
opelab
16
17k
AI時代のデータ基盤を考える問い
pacocat
0
760
いかに伝えるか 〜新卒エンジニアの教育のための、ライトノベル活用の一例
ikedon
1
110
APIセキュリティを組織で実現するには~注力する点と設計・実装に入れたい対策~
riiimparm
2
800
Claude Codeで開発以外の業務も爆速化しよう!
minorun365
PRO
12
9.2k
internal/testlog で遊ぼう
rokuosan
0
420
AI駆動開発を組織で促すために
lycorptech_jp
PRO
7
8.9k
tamachi.goを支える技術
rymiyamoto
0
120
形式手法特論:Hyperproperty とモデル検査 #kernelvm / Kernel VM Study Tokyo 19th
ytaka23
1
910
1000⼈規模のClaude Enterprise運⽤を「Oktaのグループ」と「Slack」に集約する
sansantech
PRO
1
520
暗号化?某ファイルストレージはどうなるの!? 3rd Partyとうまく付き合う秘密度ラベル設計
kasada
0
220
Featured
See All Featured
Building a Scalable Design System with Sketch
lauravandoore
463
34k
Building a Modern Day E-commerce SEO Strategy
aleyda
45
9.2k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
35
2.6k
Design in an AI World
tapps
1
290
More Than Pixels: Becoming A User Experience Designer
marktimemedia
3
510
Agile Actions for Facilitating Distributed Teams - ADO2019
mkilby
0
270
Ecommerce SEO: The Keys for Success Now & Beyond - #SERPConf2024
aleyda
1
2.1k
Max Prin - Stacking Signals: How International SEO Comes Together (And Falls Apart)
techseoconnect
PRO
0
430
Ten Tips & Tricks for a 🌱 transition
stuffmc
0
180
Visual Storytelling: How to be a Superhuman Communicator
reverentgeek
2
630
From Legacy to Launchpad: Building Startup-Ready Communities
dugsong
0
310
Scaling GitHub
holman
464
140k
Transcript
Mastering OpenStack the DevOps Way Scott.liao , Mr. 沙先⽣
HELLO! I’m ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我 •
IT 鐵⼈賽第九屆:Puppet 從入⾨就放棄 • DevOpsDays Taipei 2018 Speaker • SITCON 2019 Speaker • DevOps Taiwan CI/CD/Pipeline Tools Speaker • Cloud Summit 2019 Speaker • MOPCON 2019 Unconference Speaker Scott
None
None
What Problem We Facing Quality Efficiency Control People
None
None
High Yield Rate )PX5P
$* 3FWJFX 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT $* $PEF
0QT
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
*OGSBTUSVDUVSFBT$PEF • Manage • Coding • Clean Infrastructure • Testing
8IJDI*B$ • Description-Base • API-Base
%FTDSJQUJPO#BTF*B$5PPMT • Ansible • Puppet • Chef • Saltstack •
CloudFormation
"1*#BTF*B$5PPMT • Terraform • Pulumi • AWS CDK
resource "openstack_compute_instance_v2" "basic" { name = "server" image_id = “ad091b-d20dw…”
flavor_id = "t2.nano" network { name = “my_network" } }
$PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF *OTUBODF 4FDVSJUZ(SPVQ /FUXPSL 7PMVNF *NBHF
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
4UBCMF*OGSBTUSVDUVSF • Production don’t Allow access • Change Management •
Infrastructure as code Now, Testing and review it.
Prod Role-Base
3PMF#BTFPG1FSNJTTJPO • Always read only. • Write of Change Management
Process. • Change Process without Humans. • Deployment of platform.
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Terratest
5FSSBUFTUJODMVEJOH • Terraform, Packer, Docker • Executing commands on servers
over SSH. • AWS, GCP, Azure, Kubernetes APIs. • Helm Charts. • HTTP requests. • Shell commands. • More ..
5FSSBUFTUXPSLJOH • Write tests. • Run Terratest tasks. • IsWorks
or Failed. • Destroy.
%FWFMPQFS
5FSSBUFTU/PUFT • Not funcation test. • Terratest is real deployment.
• More resource for testing. • Difference Networks. • Difference Role. • Everything destroy after deployment
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Auditing )PX5P
None
0QFO1PMJDZ"HFOU • Release v0.15.0 latest • Terraform, Docker, Kubernetes. •
SSH, sudo • Kafka, Ceph protection • Elastic filtering
44)
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
(JU0QT • Always collaboration used Git. • PR reviews before
deployment. • Everything Testing of deployment. • Document on READMD or Comments.
High Yield Rate
I do it ? 4IPVME
DevOps
*B$SFRVJSF4LJMMT • Git • Ops(80%), Dev(20%) • Passion • No
Wife
*B$SFRVJSF.FNCFST • DevOps n+1 • Members 4+
3FGFSFODF • Mastering IaC the DevOps Way @smalltown • https://github.com/gruntwork-io/terratest
• https://www.openpolicyagent.org/
5IBOLT • facebook.com/shazi.liao • github/shazi7804 • https://shazi.info "OZ2VFTUJPOT