Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Achieving repeatable, extensible and self serve...
Search
Tasdik Rahman
November 16, 2019
Programming
0
2.1k
Achieving repeatable, extensible and self serve infrastructure
Tasdik Rahman
November 16, 2019
Tweet
Share
More Decks by Tasdik Rahman
See All by Tasdik Rahman
Resilient Multi-Cloud Strategies: Harnessing Kubernetes, Cluster API and Cell-Based Architecture
tasdikrahman
0
73
How to make pod assignment to thousands of nodes every day easier
tasdikrahman
0
310
Keeping up with Kubernetes cluster upgrades
tasdikrahman
0
660
TDD: An experience report
tasdikrahman
0
1.4k
Ways of enabling Canary deployments in kubernetes
tasdikrahman
0
4.7k
Kingsly - The Cert Manager
tasdikrahman
0
2.3k
kuberception: Self Hosting kubernetes
tasdikrahman
0
8.3k
Diving deep on how imports work in Python
tasdikrahman
0
3.4k
Introduction to Ansible
tasdikrahman
1
17k
Other Decks in Programming
See All in Programming
Prism.parseで 300本以上あるエンドポイントに 接続できる権限の一覧表を作ってみた
hatsu38
1
110
CSC307 Lecture 17
javiergs
PRO
0
110
Cursor AI Agentと伴走する アプリケーションの高速リプレイス
daisuketakeda
1
110
AWS CDKの推しポイント 〜CloudFormationと比較してみた〜
akihisaikeda
3
260
プロダクト開発でも使おう 関数のオーバーロード
yoiwamoto
0
150
LINEヤフー データグループ紹介
lycorp_recruit_jp
0
490
技術懸念に立ち向かい 法改正を穏便に乗り切った話
pop_cashew
0
1.4k
複数アプリケーションを育てていくための共通化戦略
irof
10
3.8k
カクヨムAndroidアプリのリブート
numeroanddev
0
420
WindowInsetsだってテストしたい
ryunen344
1
140
TypeScript LSP の今までとこれから
quramy
1
500
Gleamという選択肢
comamoca
6
710
Featured
See All Featured
The MySQL Ecosystem @ GitHub 2015
samlambert
251
13k
BBQ
matthewcrist
89
9.7k
Become a Pro
speakerdeck
PRO
28
5.4k
Designing for humans not robots
tammielis
253
25k
VelocityConf: Rendering Performance Case Studies
addyosmani
329
24k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
31
2.4k
10 Git Anti Patterns You Should be Aware of
lemiorhan
PRO
657
60k
Why You Should Never Use an ORM
jnunemaker
PRO
56
9.4k
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.5k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
30
2.1k
Into the Great Unknown - MozCon
thekraken
39
1.8k
Making the Leap to Tech Lead
cromwellryan
134
9.3k
Transcript
Achieving repeatable, extensible and self serve infrastructure
2 tasdikrahman.me @tasdikrahman • Product Engineer @ Gojek • Contributor
to oVirt • Backpacker • Weekend chef • Chelsea FC!!
What does Gojek do? 3
4 Ref: gojek.io
What am I gonna talk about? 5
6 Ref: shutterstock.com
7 Ref: shutterstock.com Evolution of Infrastructure @ Gojek
Travelling back in time 8
Rapid Demand 9
How to deal with it? 10
Central Infrastructure Team 11
Intent? 12
Abstract out Infrastructure For Product Teams 13
Outcome? 14
Adhoc requests 15
“Measure what is measurable, and make measurable what is not
so” - Galileo 16 Credits: biography.com
Service request tickets 17
18 Example service request in our ticket system by a
team (names redacted)
19 Example service request to increase disk size (names redacted)
Number of service requests kept increasing with scale and more
product groups coming in 20
21 Ref: gunshowcomic.com/648
How does one keep up with service requests? 22
Scale your team vertically and keep doing so 23
Sustainable? 24
Very hard to do, but mostly No 25
Eventually, we noticed we were becoming the bottleneck 26
Give access to someone from the product team? 27
Chances of Security loopholes 28
29 Ref: https://blog.codinghorror.com/the-broken-window-theory/
What do we do then? 30
Quick detour 31
Where did systems administration start? 32
Evolution of Automation at Gojek 33
Evolution of Automation at Gojek 34 • Scripts • Chef-cookbooks
• Rundeck • Deployment scripts
Problems with the earlier solutions 35 • Multiple ways around
building and using automation • Managing dependencies for the automation. Eg: people using gcloud/AWS
Problems with the earlier solutions 36 • Lack of convention
leading to meagre contributions to automation from devs. • Adhoc way of managing access to tools like terraform, knife leading to stray accidents. • No central platform for automation.
Number of tickets getting created still not decreasing 37
Clearing infrastructure debts 38
Moving from maintenance to innovation mode 39
Making infrastructure boring for product teams 40
Proctor: Our automation orchestrator 41 Ref: github.com/gojek/proctor
42
43
Installation 44
45 Helm all the way Reference value: stable/proctor-service/values.yaml
Automation using proctor 46
Sample proc to increase disk 47
Sample proc to increase disk 48
Scripts can be added by developers and they get added
to proctor after our review 49
Sample procs in our ecosystem 50
Demo 51
Profit? 52
Outcome of having proctor? 53
Decrease in number of tickets which were mechanical in nature
54
Having terraform inside CI 55 +
But before that 56
Creating the gcloud project 57
58 Sample directory structure
59 .gitlab-yml for the gcloud project in gitlab
60
61 Plan and apply
Private terraform registry consisting of 90+ modules 62
Outcome? 63
Teams managing and provisioning their own infra with our best
practices baked in terraform modules 64
OSS alternatives? 65
66 Reference: runatlantis.io/
Ideal state? 67
68 Ref: Google SRE book: Eliminating toil
Known caveats? 69
Deletion of infra 70
Teams forget what they are using 71
Lessons learnt? 72
Avoid premature automation 73
High service requests for product teams is a smell 74
No Big bang changes 75
Documentation should go hand in hand, would affect productivity directly
76
Reduce steps for onboarding to your tooling, lesser the better
77
Invisible infrastructure 78
Product managers in Infrastructure teams 79
Prioritizing on innovation 80
Links and References • https://github.com/gojek/proctor • https://blog.gojekengineering.com/olympus-terraforming-repeatabl e-and-extensible-infrastructure-at-go-jek-42ad5b0a4f9a • https://learn.hashicorp.com/terraform/development/running-terrafor
m-in-automation • https://lethain.com/product-management-infra-engineering/ 81
82 @tasdikrahman tasdikrahman.me