Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Achieving repeatable, extensible and self serve...
Search
Tasdik Rahman
November 16, 2019
Programming
0
2k
Achieving repeatable, extensible and self serve infrastructure
Tasdik Rahman
November 16, 2019
Tweet
Share
More Decks by Tasdik Rahman
See All by Tasdik Rahman
How to make pod assignment to thousands of nodes every day easier
tasdikrahman
0
150
Keeping up with Kubernetes cluster upgrades
tasdikrahman
0
560
TDD: An experience report
tasdikrahman
0
1.3k
Ways of enabling Canary deployments in kubernetes
tasdikrahman
0
4.5k
Kingsly - The Cert Manager
tasdikrahman
0
2.1k
kuberception: Self Hosting kubernetes
tasdikrahman
0
8.1k
Diving deep on how imports work in Python
tasdikrahman
0
3.3k
Introduction to Ansible
tasdikrahman
1
17k
Demystifying how imports work in Python
tasdikrahman
1
3.5k
Other Decks in Programming
See All in Programming
return文におけるstd::moveについて
onihusube
1
950
あれやってみてー駆動から成長を加速させる / areyattemite-driven
nashiusagi
1
200
Scalaから始めるOpenFeature入門 / Scalaわいわい勉強会 #4
arthur1
1
300
RWC 2024 DICOM & ISO/IEC 2022
m_seki
0
210
今年一番支援させていただいたのは認証系サービスでした
satoshi256kbyte
1
250
[JAWS-UG横浜 #76] イケてるアップデートを宇宙いち早く紹介するよ!
maroon1st
0
460
「Chatwork」Android版アプリを 支える単体テストの現在
okuzawats
0
180
開発者とQAの越境で自動テストが増える開発プロセスを実現する
92thunder
1
180
Semantic Kernelのネイティブプラグインで知識拡張をしてみる
tomokusaba
0
180
バグを見つけた?それAppleに直してもらおう!
uetyo
0
180
Beyond ORM
77web
2
330
DevFest Tokyo 2025 - Flutter のアプリアーキテクチャ現在地点
wasabeef
5
900
Featured
See All Featured
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
95
17k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
irinanazarova
5
440
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
28
2.1k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
kevinliebholz
28
4.4k
Building an army of robots
kneath
302
44k
Six Lessons from altMBA
skipperchong
27
3.5k
Building Applications with DynamoDB
mza
91
6.1k
10 Git Anti Patterns You Should be Aware of
lemiorhan
PRO
656
59k
Adopting Sorbet at Scale
ufuk
73
9.1k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
356
29k
What's in a price? How to price your products and services
michaelherold
243
12k
Facilitating Awesome Meetings
lara
50
6.1k
Transcript
Achieving repeatable, extensible and self serve infrastructure
2 tasdikrahman.me @tasdikrahman • Product Engineer @ Gojek • Contributor
to oVirt • Backpacker • Weekend chef • Chelsea FC!!
What does Gojek do? 3
4 Ref: gojek.io
What am I gonna talk about? 5
6 Ref: shutterstock.com
7 Ref: shutterstock.com Evolution of Infrastructure @ Gojek
Travelling back in time 8
Rapid Demand 9
How to deal with it? 10
Central Infrastructure Team 11
Intent? 12
Abstract out Infrastructure For Product Teams 13
Outcome? 14
Adhoc requests 15
“Measure what is measurable, and make measurable what is not
so” - Galileo 16 Credits: biography.com
Service request tickets 17
18 Example service request in our ticket system by a
team (names redacted)
19 Example service request to increase disk size (names redacted)
Number of service requests kept increasing with scale and more
product groups coming in 20
21 Ref: gunshowcomic.com/648
How does one keep up with service requests? 22
Scale your team vertically and keep doing so 23
Sustainable? 24
Very hard to do, but mostly No 25
Eventually, we noticed we were becoming the bottleneck 26
Give access to someone from the product team? 27
Chances of Security loopholes 28
29 Ref: https://blog.codinghorror.com/the-broken-window-theory/
What do we do then? 30
Quick detour 31
Where did systems administration start? 32
Evolution of Automation at Gojek 33
Evolution of Automation at Gojek 34 • Scripts • Chef-cookbooks
• Rundeck • Deployment scripts
Problems with the earlier solutions 35 • Multiple ways around
building and using automation • Managing dependencies for the automation. Eg: people using gcloud/AWS
Problems with the earlier solutions 36 • Lack of convention
leading to meagre contributions to automation from devs. • Adhoc way of managing access to tools like terraform, knife leading to stray accidents. • No central platform for automation.
Number of tickets getting created still not decreasing 37
Clearing infrastructure debts 38
Moving from maintenance to innovation mode 39
Making infrastructure boring for product teams 40
Proctor: Our automation orchestrator 41 Ref: github.com/gojek/proctor
42
43
Installation 44
45 Helm all the way Reference value: stable/proctor-service/values.yaml
Automation using proctor 46
Sample proc to increase disk 47
Sample proc to increase disk 48
Scripts can be added by developers and they get added
to proctor after our review 49
Sample procs in our ecosystem 50
Demo 51
Profit? 52
Outcome of having proctor? 53
Decrease in number of tickets which were mechanical in nature
54
Having terraform inside CI 55 +
But before that 56
Creating the gcloud project 57
58 Sample directory structure
59 .gitlab-yml for the gcloud project in gitlab
60
61 Plan and apply
Private terraform registry consisting of 90+ modules 62
Outcome? 63
Teams managing and provisioning their own infra with our best
practices baked in terraform modules 64
OSS alternatives? 65
66 Reference: runatlantis.io/
Ideal state? 67
68 Ref: Google SRE book: Eliminating toil
Known caveats? 69
Deletion of infra 70
Teams forget what they are using 71
Lessons learnt? 72
Avoid premature automation 73
High service requests for product teams is a smell 74
No Big bang changes 75
Documentation should go hand in hand, would affect productivity directly
76
Reduce steps for onboarding to your tooling, lesser the better
77
Invisible infrastructure 78
Product managers in Infrastructure teams 79
Prioritizing on innovation 80
Links and References • https://github.com/gojek/proctor • https://blog.gojekengineering.com/olympus-terraforming-repeatabl e-and-extensible-infrastructure-at-go-jek-42ad5b0a4f9a • https://learn.hashicorp.com/terraform/development/running-terrafor
m-in-automation • https://lethain.com/product-management-infra-engineering/ 81
82 @tasdikrahman tasdikrahman.me