Upgrade to Pro — share decks privately, control downloads, hide ads and more …

OpenInfraDays2019 Mastering Openstack the DevOps way

OpenInfraDays2019 Mastering Openstack the DevOps way

Mastering Openstack the DevOps way

scott.liao (Mr. 沙先生)

November 12, 2019
Tweet

More Decks by scott.liao (Mr. 沙先生)

Other Decks in Technology

Transcript

  1. Mastering OpenStack
    the DevOps Way
    Scott.liao , Mr. 沙先⽣

    View full-size slide

  2. HELLO! I’m
    ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我
    • IT 鐵⼈賽第九屆:Puppet 從入⾨就放棄
    • DevOpsDays Taipei 2018 Speaker
    • SITCON 2019 Speaker
    • DevOps Taiwan CI/CD/Pipeline Tools Speaker
    • Cloud Summit 2019 Speaker
    • MOPCON 2019 Unconference Speaker
    Scott

    View full-size slide

  3. What Problem We Facing
    Quality
    Efficiency
    Control
    People

    View full-size slide

  4. High Yield Rate
    )PX5P

    View full-size slide

  5. $*
    3FWJFX
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF 0QT

    View full-size slide

  6. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View full-size slide

  7. *OGSBTUSVDUVSFBT$PEF
    • Manage
    • Coding
    • Clean Infrastructure
    • Testing

    View full-size slide

  8. 8IJDI*B$
    • Description-Base
    • API-Base

    View full-size slide

  9. %FTDSJQUJPO#BTF*B$5PPMT
    • Ansible
    • Puppet
    • Chef
    • Saltstack
    • CloudFormation

    View full-size slide

  10. "1*#BTF*B$5PPMT
    • Terraform
    • Pulumi
    • AWS CDK

    View full-size slide

  11. resource "openstack_compute_instance_v2" "basic" {
    name = "server"
    image_id = “ad091b-d20dw…”
    flavor_id = "t2.nano"
    network { name = “my_network" }
    }

    View full-size slide

  12. $PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF
    *OTUBODF 4FDVSJUZ(SPVQ
    /FUXPSL 7PMVNF
    *NBHF

    View full-size slide

  13. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View full-size slide

  14. 4UBCMF*OGSBTUSVDUVSF
    • Production don’t Allow access
    • Change Management
    • Infrastructure as code Now,
    Testing and review it.

    View full-size slide

  15. Prod
    Role-Base

    View full-size slide

  16. 3PMF#BTFPG1FSNJTTJPO
    • Always read only.
    • Write of Change Management
    Process.
    • Change Process without Humans.
    • Deployment of platform.

    View full-size slide

  17. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View full-size slide

  18. 5FSSBUFTUJODMVEJOH
    • Terraform, Packer, Docker
    • Executing commands on servers over
    SSH.
    • AWS, GCP, Azure, Kubernetes APIs.
    • Helm Charts.
    • HTTP requests.
    • Shell commands.
    • More ..

    View full-size slide

  19. 5FSSBUFTUXPSLJOH
    • Write tests.
    • Run Terratest tasks.
    • IsWorks or Failed.
    • Destroy.

    View full-size slide

  20. 5FSSBUFTU/PUFT
    • Not funcation test.
    • Terratest is real deployment.
    • More resource for testing.
    • Difference Networks.
    • Difference Role.
    • Everything destroy after deployment

    View full-size slide

  21. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View full-size slide

  22. Auditing
    )PX5P

    View full-size slide

  23. 0QFO1PMJDZ"HFOU
    • Release v0.15.0 latest
    • Terraform, Docker, Kubernetes.
    • SSH, sudo
    • Kafka, Ceph protection
    • Elastic filtering

    View full-size slide

  24. $*
    3FWJFX
    23
    SEP
    1FSNJTTJPO
    *B$&SB 6OJU5FTUJOH
    *OUFHSBUJPO
    5FTUJOH
    (JU0QT
    $*
    $PEF

    View full-size slide

  25. (JU0QT
    • Always collaboration used Git.
    • PR reviews before deployment.
    • Everything Testing of deployment.
    • Document on READMD or Comments.

    View full-size slide

  26. High Yield Rate

    View full-size slide

  27. I do it ?
    4IPVME

    View full-size slide

  28. *B$SFRVJSF4LJMMT
    • Git
    • Ops(80%), Dev(20%)
    • Passion
    • No Wife

    View full-size slide

  29. *B$SFRVJSF.FNCFST
    • DevOps n+1
    • Members 4+

    View full-size slide

  30. 3FGFSFODF
    • Mastering IaC the DevOps Way @smalltown
    • https://github.com/gruntwork-io/terratest
    • https://www.openpolicyagent.org/

    View full-size slide

  31. 5IBOLT
    • facebook.com/shazi.liao
    • github/shazi7804
    • https://shazi.info
    "OZ2VFTUJPOT

    View full-size slide