Configuration Management For future infrastructure Gareth Rushgrove - - PowerPoint PPT Presentation

▶
configuration management
SMART_READER_LITE
LIVE PREVIEW

Configuration Management For future infrastructure Gareth Rushgrove - - PowerPoint PPT Presentation

Aug 23, 2022 237 likes •1.25k views

Configuration Management For future infrastructure Gareth Rushgrove Puppet Labs @garethr Gareth Rushgrove Gareth Rushgrove What is configuration management? Any input to your infrastructure is configuration Gareth Rushgrove

slide-1
SLIDE 1

Configuration Management

Puppet Labs Gareth Rushgrove

For future infrastructure

slide-2
SLIDE 2

@garethr

slide-3
SLIDE 3

Gareth Rushgrove

slide-4
SLIDE 4

Gareth Rushgrove

slide-5
SLIDE 5

What is configuration management?

slide-6
SLIDE 6

Any input to your infrastructure is configuration

Gareth Rushgrove

slide-7
SLIDE 7

Configuration management is about managing all of those inputs over time

Gareth Rushgrove

slide-8
SLIDE 8

Configuration management is about managing all of those inputs over time

Gareth Rushgrove

slide-9
SLIDE 9

This talk

slide-10
SLIDE 10

A little history

Gareth Rushgrove

slide-11
SLIDE 11

Emerging patterns

Gareth Rushgrove

slide-12
SLIDE 12

Immutable infrastructure Infrastructure APIs Autonomous systems Simpler hosts

Gareth Rushgrove

slide-13
SLIDE 13

Immutable infrastructure Infrastructure APIs Autonomous systems Simpler hosts

Gareth Rushgrove

slide-14
SLIDE 14

Immutable infrastructure Infrastructure APIs Autonomous systems Simpler hosts

Gareth Rushgrove

slide-15
SLIDE 15

Immutable infrastructure Infrastructure APIs Autonomous systems Simpler hosts

Gareth Rushgrove

slide-16
SLIDE 16

Future infrastructure as code

Gareth Rushgrove

slide-17
SLIDE 17

A little history

slide-18
SLIDE 18

1950s research, 1960s 480 series, 1991 MIL- HDBK-61, 1998 ANSI- EIA-649

Gareth Rushgrove

slide-19
SLIDE 19

Military Handbook Configuration Management Guidance MIL-HDBK-61B

Gareth Rushgrove

slide-20
SLIDE 20

Identification Control Status accounting Verification and audit

Gareth Rushgrove

slide-21
SLIDE 21

National Consensus Standard for Configuration Management EIA-649

Gareth Rushgrove

slide-22
SLIDE 22

Configuration management verifies that a system is identified and documented in sufficient detail

Gareth Rushgrove

slide-23
SLIDE 23

Configuration management verifies that a system performs as intended

Gareth Rushgrove

slide-24
SLIDE 24

Service management, ITIL, ISO 20000

Gareth Rushgrove

slide-25
SLIDE 25

Infrastructure as code

Gareth Rushgrove

slide-26
SLIDE 26

Gareth Rushgrove

slide-27
SLIDE 27

Immutable infrastructure

slide-28
SLIDE 28

Build once, run many times

Gareth Rushgrove

slide-29
SLIDE 29

Amazon Machine Images

Gareth Rushgrove

slide-30
SLIDE 30

End-to-end automation to avoid the golden image problem

Gareth Rushgrove

slide-31
SLIDE 31

Gareth Rushgrove

slide-32
SLIDE 32

Containers

Gareth Rushgrove

slide-33
SLIDE 33

Gareth Rushgrove

slide-34
SLIDE 34

Docker as the user interface

Gareth Rushgrove

slide-35
SLIDE 35

How immutable are your docker containers?

Gareth Rushgrove

slide-36
SLIDE 36

Infrastructure with APIs

slide-37
SLIDE 37

Infrastructure as a service

Gareth Rushgrove

slide-38
SLIDE 38

Gareth Rushgrove

slide-39
SLIDE 39

Gareth Rushgrove

slide-40
SLIDE 40

Gareth Rushgrove

slide-41
SLIDE 41

Platform as a service

Gareth Rushgrove

slide-42
SLIDE 42

Gareth Rushgrove

slide-43
SLIDE 43

Gareth Rushgrove

slide-44
SLIDE 44

Gareth Rushgrove

slide-45
SLIDE 45

OSv

Gareth Rushgrove

slide-46
SLIDE 46

Gareth Rushgrove

slide-47
SLIDE 47

Not just compute, but network and storage too

Gareth Rushgrove

slide-48
SLIDE 48

Gareth Rushgrove

slide-49
SLIDE 49

Not just *nix

Gareth Rushgrove

slide-50
SLIDE 50

Gareth Rushgrove

slide-51
SLIDE 51

Configuration at a distance

Gareth Rushgrove

slide-52
SLIDE 52

Configuring autonomous systems

slide-53
SLIDE 53

We’re increasingly managing higher level systems

Gareth Rushgrove

slide-54
SLIDE 54

If servers are cattle not pets, we need to talk about fields and farms

Gareth Rushgrove

slide-55
SLIDE 55

Autoscaling groups

Gareth Rushgrove

slide-56
SLIDE 56

Gareth Rushgrove

slide-57
SLIDE 57

Gareth Rushgrove

slide-58
SLIDE 58

Simpler hosts

slide-59
SLIDE 59

Combinatorial package explosion

Gareth Rushgrove

slide-60
SLIDE 60

Gareth Rushgrove

slide-61
SLIDE 61

Gareth Rushgrove

OSTree

slide-62
SLIDE 62

Gareth Rushgrove

slide-63
SLIDE 63

Gareth Rushgrove

slide-64
SLIDE 64

Gareth Rushgrove

slide-65
SLIDE 65

CoreOS is a firmware for running containers

Gareth Rushgrove

John Vincent - http://blog.lusis.org/blog/2014/11/21/a-few-things/

slide-66
SLIDE 66

Moving configuration from hosts to the network

Gareth Rushgrove

slide-67
SLIDE 67

Etcd, Consul, Zookeeper

Gareth Rushgrove

slide-68
SLIDE 68

Future infrastructure as code

slide-69
SLIDE 69

From: Host centric Localised Executable for integration

Gareth Rushgrove

slide-70
SLIDE 70

To: Cluster centric Distributed HTTP for integration

Gareth Rushgrove

slide-71
SLIDE 71

Going from Puppet to etcd

Gareth Rushgrove

slide-72
SLIDE 72

Gareth Rushgrove

slide-73
SLIDE 73

Where similar interfaces exist we can provide abstractions

Gareth Rushgrove

slide-74
SLIDE 74

Gareth Rushgrove

slide-75
SLIDE 75

Gareth Rushgrove

garethr/key_value_config

slide-76
SLIDE 76

Going from etcd to Puppet with Hiera

Gareth Rushgrove

slide-77
SLIDE 77

Gareth Rushgrove

slide-78
SLIDE 78

Gareth Rushgrove

garethr/hiera-etcd

slide-79
SLIDE 79

Installing systems

Gareth Rushgrove

slide-80
SLIDE 80

Gareth Rushgrove

slide-81
SLIDE 81

Gareth Rushgrove

slide-82
SLIDE 82

More interestingly, using systems via APIs

Gareth Rushgrove

slide-83
SLIDE 83

Gareth Rushgrove

slide-84
SLIDE 84

garethr/garethr-docker

Gareth Rushgrove

slide-85
SLIDE 85

Gareth Rushgrove

slide-86
SLIDE 86

Gareth Rushgrove

slide-87
SLIDE 87

puppetlabs/puppetlabs-aws

Gareth Rushgrove

slide-88
SLIDE 88

Gareth Rushgrove

slide-89
SLIDE 89

garethr/digitalocean

Gareth Rushgrove

slide-90
SLIDE 90

Gareth Rushgrove

slide-91
SLIDE 91

Gareth Rushgrove

I want a pony

slide-92
SLIDE 92

Managing an autoscaling CoreOS/Atomic cluster in AWS…

Gareth Rushgrove

slide-93
SLIDE 93

…with configuration in etcd/consul…

Gareth Rushgrove

slide-94
SLIDE 94

…with the network in VPC /Weave…

Gareth Rushgrove

slide-95
SLIDE 95

…with docker containers arranged by Kubernetes…

Gareth Rushgrove

slide-96
SLIDE 96

All from the Puppet DSL

Gareth Rushgrove

slide-97
SLIDE 97

Conclusions

slide-98
SLIDE 98

The future is already here — it's just not very evenly distributed.

Gareth Rushgrove

William Gibson

slide-99
SLIDE 99
  • Manage. Not just provision

Gareth Rushgrove

slide-100
SLIDE 100

Gareth Rushgrove

slide-101
SLIDE 101

Questions?

And thanks for listening