Upgrade to Pro — share decks privately, control downloads, hide ads and more …

OpenInfraDays2019 Mastering Openstack the DevOps way

OpenInfraDays2019 Mastering Openstack the DevOps way

Mastering Openstack the DevOps way

scott.liao (Mr. 沙先生)

November 12, 2019
Tweet

More Decks by scott.liao (Mr. 沙先生)

Other Decks in Technology

Transcript

  1. Mastering OpenStack
    the DevOps Way
    Scott.liao , Mr. 沙先⽣

    View Slide

  2. HELLO! I’m
    ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我
    • IT 鐵⼈賽第九屆:Puppet 從入⾨就放棄
    • DevOpsDays Taipei 2018 Speaker
    • SITCON 2019 Speaker
    • DevOps Taiwan CI/CD/Pipeline Tools Speaker
    • Cloud Summit 2019 Speaker
    • MOPCON 2019 Unconference Speaker
    Scott

    View Slide

  3. View Slide

  4. View Slide

  5. What Problem We Facing
    Quality
    Efficiency
    Control
    People

    View Slide

  6. View Slide

  7. View Slide

  8. High Yield Rate
    )PX5P

    View Slide

  9. $*
    3FWJFX
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF 0QT

    View Slide

  10. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View Slide

  11. *OGSBTUSVDUVSFBT$PEF
    • Manage
    • Coding
    • Clean Infrastructure
    • Testing

    View Slide

  12. 8IJDI*B$
    • Description-Base
    • API-Base

    View Slide

  13. %FTDSJQUJPO#BTF*B$5PPMT
    • Ansible
    • Puppet
    • Chef
    • Saltstack
    • CloudFormation

    View Slide

  14. "1*#BTF*B$5PPMT
    • Terraform
    • Pulumi
    • AWS CDK

    View Slide

  15. resource "openstack_compute_instance_v2" "basic" {
    name = "server"
    image_id = “ad091b-d20dw…”
    flavor_id = "t2.nano"
    network { name = “my_network" }
    }

    View Slide

  16. $PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF
    *OTUBODF 4FDVSJUZ(SPVQ
    /FUXPSL 7PMVNF
    *NBHF

    View Slide

  17. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View Slide

  18. 4UBCMF*OGSBTUSVDUVSF
    • Production don’t Allow access
    • Change Management
    • Infrastructure as code Now,
    Testing and review it.

    View Slide

  19. Prod
    Role-Base

    View Slide

  20. 3PMF#BTFPG1FSNJTTJPO
    • Always read only.
    • Write of Change Management
    Process.
    • Change Process without Humans.
    • Deployment of platform.

    View Slide

  21. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View Slide

  22. Terratest

    View Slide

  23. 5FSSBUFTUJODMVEJOH
    • Terraform, Packer, Docker
    • Executing commands on servers over
    SSH.
    • AWS, GCP, Azure, Kubernetes APIs.
    • Helm Charts.
    • HTTP requests.
    • Shell commands.
    • More ..

    View Slide

  24. 5FSSBUFTUXPSLJOH
    • Write tests.
    • Run Terratest tasks.
    • IsWorks or Failed.
    • Destroy.

    View Slide

  25. %FWFMPQFS

    View Slide

  26. 5FSSBUFTU/PUFT
    • Not funcation test.
    • Terratest is real deployment.
    • More resource for testing.
    • Difference Networks.
    • Difference Role.
    • Everything destroy after deployment

    View Slide

  27. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View Slide

  28. Auditing
    )PX5P

    View Slide

  29. View Slide

  30. 0QFO1PMJDZ"HFOU
    • Release v0.15.0 latest
    • Terraform, Docker, Kubernetes.
    • SSH, sudo
    • Kafka, Ceph protection
    • Elastic filtering

    View Slide


  31. 44)

    View Slide



  32. View Slide

  33. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View Slide

  34. (JU0QT
    • Always collaboration used Git.
    • PR reviews before deployment.
    • Everything Testing of deployment.
    • Document on READMD or Comments.

    View Slide

  35. High Yield Rate

    View Slide

  36. I do it ?
    4IPVME

    View Slide

  37. DevOps


    View Slide

  38. *B$SFRVJSF4LJMMT
    • Git
    • Ops(80%), Dev(20%)
    • Passion
    • No Wife

    View Slide

  39. *B$SFRVJSF.FNCFST
    • DevOps n+1
    • Members 4+

    View Slide

  40. 3FGFSFODF
    • Mastering IaC the DevOps Way @smalltown
    • https://github.com/gruntwork-io/terratest
    • https://www.openpolicyagent.org/

    View Slide

  41. 5IBOLT
    • facebook.com/shazi.liao
    • github/shazi7804
    • https://shazi.info
    "OZ2VFTUJPOT

    View Slide