This presentation covers the architecture of Pup

1. Puppet:
Orchestration Framework?
Tuesday, February 26, 13

2. Dan Bode
dan@puppetlabs
bodepd on <twitter,freenode>
Tuesday, February 26, 13

3. Puppet
Tuesday, February 26, 13

4. ensures
consistency...
Puppet
Master
DB1 DB2 Tomcat1 Tomcat2
Tuesday, February 26, 13

5. With Resources
Tuesday, February 26, 13

6. Describe the configuration state of elements
user { ‘dan’:
ensure => present,
shell => ‘/bin/bash’,
}
Tuesday, February 26, 13

7. user { ‘dan’: # a user named dan
...
Tuesday, February 26, 13

8. user { ‘dan’: # a user named dan
ensure => present, # should exist
...
Tuesday, February 26, 13

9. user { ‘dan’: # a user named dan
ensure => present, # should exist
shell => ‘/bin/bash’, # with this shell
}
Tuesday, February 26, 13

10. Properties
user { ‘dan’:
ensure => present, # existence
shell => ‘/bin/bash’, # shell
}
Tuesday, February 26, 13

11. Implementing
Properties
retrieve current state
converge to desired state
Tuesday, February 26, 13

12. Puppet’s
Model
Tuesday, February 26, 13

13. dpkg-query --search git
current desired package { ‘git’:
ensure => present
rpm -q git
state state }
Tuesday, February 26, 13

14. Idempotent
dpkg-query --search git
current desired package { ‘git’:
ensure => present
rpm -q git
state state }
absent ==? present
Tuesday, February 26, 13

15. Events
dpkg-query --search git
current desired package { ‘git’:
ensure => present
rpm -q git
state state }
absent ==? present
apt-get install git transition
yum install git
Sync Event absent -> present
Tuesday, February 26, 13

16. Noop
dpkg-query --search git
current desired package { ‘git’:
ensure => present
rpm -q git
state state }
absent ==? present
potential transition
Event absent -> present
Tuesday, February 26, 13

17. Puppet DSL and
Resources
Tuesday, February 26, 13

18. Puppet DSL
Composes collections of resources.
Tuesday, February 26, 13

19. Package/File/Service
class webserver {
package { ‘apache2’: ... }
file { ‘/etc/apache2/apache2.conf’:
...
require => Package[‘apache2’],
}
service { ‘apache2’:
...
subscribe => File[‘/etc/apache2/apache2.conf’]
}
}
Tuesday, February 26, 13

20. configure a node
include webserver
Tuesday, February 26, 13

21. Catalogs
Package
File
(refresh)
Service
Tuesday, February 26, 13

22. Text is awesome
Tuesday, February 26, 13

23. Text is awesome
Integrates with version control
Easy to share/collaborate
Tuesday, February 26, 13

24. Application stacks
Tuesday, February 26, 13

25. ensure
consistency?
Puppet
IaaS
Endpoint
Tuesday, February 26, 13

26. With Resources?
Tuesday, February 26, 13

27. GCE example
Express stacks as:
* VM Instances
* Networks
* Firewalls
* Disks
Tuesday, February 26, 13

28. GCE as resources?
Tuesday, February 26, 13

29. class app_stack {
...
Tuesday, February 26, 13

30. class app_stack {
gce_network { ‘dansnetwork’:
ensure => present,
gateway => '10.0.1.1',
range => '10.0.1.0/24’,
} ->
...
Tuesday, February 26, 13

31. class app_stack {
gce_network { ‘dansnetwork’:
ensure => present,
gateway => '10.0.1.1',
range => '10.0.1.0/24’,
} ->
gce_firewall { ‘webhttp’:
ensure => present,
allowed => 'tcp:80’,
network => ‘appnet’,
} ->
...
Tuesday, February 26, 13

32. class app_stack {
gce_network { ‘dansnetwork’:
ensure => present,
gateway => '10.0.1.1',
range => '10.0.1.0/24’,
} ->
gce_firewall { ‘webhttp’:
ensure => present,
allowed => 'tcp:80’,
network => ‘appnet’,
} ->
gce_instance { ‘server1’:
ensure => present,
network => ‘appnet’
}
}
Tuesday, February 26, 13

33. infrastructure only
exists to be consumed
Tuesday, February 26, 13

34. Puppet assigns roles
Tuesday, February 26, 13

35. Step 1: distribute
content
gce_instance { ‘dansinstance’:
ensure => present,
…
modules =>
[‘mysql’, ‘memcached’]
}
Tuesday, February 26, 13

36. forge.puppetlabs.com
I get all of
my content
from the
forge!
Tuesday, February 26, 13

37. Step 2: classify
gce_instance { ‘dansinstance’:
ensure => present,
…
classes => {
‘mysql’ => {bind_address => 0.0.0.0}
},
}
Tuesday, February 26, 13

38. Awesomeness
Tuesday, February 26, 13

39. Composable
Standard
Configuration
Language
Tuesday, February 26, 13

40. Idempotency
Tuesday, February 26, 13

41. Noop
Tuesday, February 26, 13

42. Limitations/
unknowns
Tuesday, February 26, 13

43. Parallel processing
of Catalogs
VLAN
DB1 DB1
VM1 VM2 VM2 ... VMN
LB
Tuesday, February 26, 13

44. Proxy Nodes
(credential
management)
Tuesday, February 26, 13

45. Application Stacks
are
Persistent
Tuesday, February 26, 13

46. Master vs.
Masterless?
Tuesday, February 26, 13