Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up for free
OpenInfraDays2019 Mastering Openstack the DevOps way
scott.liao (Mr. 沙先生)
November 12, 2019
Technology
0
180
OpenInfraDays2019 Mastering Openstack the DevOps way
Mastering Openstack the DevOps way
scott.liao (Mr. 沙先生)
November 12, 2019
Tweet
Share
More Decks by scott.liao (Mr. 沙先生)
See All by scott.liao (Mr. 沙先生)
MOPCON 2019 - HybridCloud 一條通吃的 CI / CD Pipeline
shazi7804
0
290
從傳統 IDC 到 Hybrid Cloud 的演進及架構設計
shazi7804
2
1.3k
DevOps Taiwan CI/CD/Pipeline 大亂鬥 20190420
shazi7804
2
840
SITCON 2019 - 誰說工程師一定爆肝!一起走入雲端世界吧
shazi7804
1
410
DevOpsDays Taipei 2018 - Puppet 古早味、新感受:改造老牌企業進入自動化時代
shazi7804
0
77
Other Decks in Technology
See All in Technology
OpsJAWS Meetup21 システム運用アンチパターンのすすめ
yoshiiryo1
0
1.4k
Target SDK Versionを上げない Notification runtime permission対応
napplecomputer
0
120
Oracle Base Database Service 技術詳細
oracle4engineer
PRO
3
8.9k
Camp Digital 2022: tailored advice
kyliehavelock
0
140
データチームの境界を考える
yummydum
0
180
2022年度新卒技術研修「エンジニアマインド」講義
excitejp
PRO
0
340
ソフトウェアライセンス 2022 / Software License 2022
cybozuinsideout
PRO
1
920
Custom GitHub Actions by Java
kazamori
0
280
マネージャーからみたスクラムと自己管理化
shibe23
0
960
トランザクションスクリプトは何がダメなのか?
polidog
2
1.2k
noteの品質課題に立ち上げ直後のQAチームが挑んだ軌跡
hiroki_tanaka
1
200
2022年度新卒技術研修「 ソフトウェアテスト」講義
excitejp
PRO
0
350
Featured
See All Featured
Fantastic passwords and where to find them - at NoRuKo
philnash
27
1.5k
A Philosophy of Restraint
colly
192
15k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
226
15k
How to name files
jennybc
40
60k
VelocityConf: Rendering Performance Case Studies
addyosmani
316
22k
Thoughts on Productivity
jonyablonski
43
2.3k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
sstephenson
151
13k
How STYLIGHT went responsive
nonsquared
85
3.9k
Three Pipe Problems
jasonvnalue
89
8.7k
YesSQL, Process and Tooling at Scale
rocio
157
12k
A better future with KSS
kneath
225
15k
The Cult of Friendly URLs
andyhume
68
4.8k
Transcript
Mastering OpenStack the DevOps Way Scott.liao , Mr. 沙先⽣
HELLO! I’m ⾁搜 Mr. 沙先⽣ 或是 Mr. 礦物先⽣ 找到我 •
IT 鐵⼈賽第九屆:Puppet 從入⾨就放棄 • DevOpsDays Taipei 2018 Speaker • SITCON 2019 Speaker • DevOps Taiwan CI/CD/Pipeline Tools Speaker • Cloud Summit 2019 Speaker • MOPCON 2019 Unconference Speaker Scott
None
None
What Problem We Facing Quality Efficiency Control People
None
None
High Yield Rate )PX5P
$* 3FWJFX 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT $* $PEF
0QT
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
*OGSBTUSVDUVSFBT$PEF • Manage • Coding • Clean Infrastructure • Testing
8IJDI*B$ • Description-Base • API-Base
%FTDSJQUJPO#BTF*B$5PPMT • Ansible • Puppet • Chef • Saltstack •
CloudFormation
"1*#BTF*B$5PPMT • Terraform • Pulumi • AWS CDK
resource "openstack_compute_instance_v2" "basic" { name = "server" image_id = “ad091b-d20dw…”
flavor_id = "t2.nano" network { name = “my_network" } }
$PNQVUF/PEF $PNQVUF/PEF $PNQVUF/PEF *OTUBODF 4FDVSJUZ(SPVQ /FUXPSL 7PMVNF *NBHF
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
4UBCMF*OGSBTUSVDUVSF • Production don’t Allow access • Change Management •
Infrastructure as code Now, Testing and review it.
Prod Role-Base
3PMF#BTFPG1FSNJTTJPO • Always read only. • Write of Change Management
Process. • Change Process without Humans. • Deployment of platform.
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Terratest
5FSSBUFTUJODMVEJOH • Terraform, Packer, Docker • Executing commands on servers
over SSH. • AWS, GCP, Azure, Kubernetes APIs. • Helm Charts. • HTTP requests. • Shell commands. • More ..
5FSSBUFTUXPSLJOH • Write tests. • Run Terratest tasks. • IsWorks
or Failed. • Destroy.
%FWFMPQFS
5FSSBUFTU/PUFT • Not funcation test. • Terratest is real deployment.
• More resource for testing. • Difference Networks. • Difference Role. • Everything destroy after deployment
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
Auditing )PX5P
None
0QFO1PMJDZ"HFOU • Release v0.15.0 latest • Terraform, Docker, Kubernetes. •
SSH, sudo • Kafka, Ceph protection • Elastic filtering
44)
$* 3FWJFX 23 SEP 1FSNJTTJPO *B$&SB 6OJU5FTUJOH *OUFHSBUJPO 5FTUJOH (JU0QT
$* $PEF
(JU0QT • Always collaboration used Git. • PR reviews before
deployment. • Everything Testing of deployment. • Document on READMD or Comments.
High Yield Rate
I do it ? 4IPVME
DevOps
*B$SFRVJSF4LJMMT • Git • Ops(80%), Dev(20%) • Passion • No
Wife
*B$SFRVJSF.FNCFST • DevOps n+1 • Members 4+
3FGFSFODF • Mastering IaC the DevOps Way @smalltown • https://github.com/gruntwork-io/terratest
• https://www.openpolicyagent.org/
5IBOLT • facebook.com/shazi.liao • github/shazi7804 • https://shazi.info "OZ2VFTUJPOT