Puppet and Software Delivery

Puppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software deliveryPuppet and Software delivery
Shipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet codeShipping your product with Puppet code
Julien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien PivottoJulien Pivotto
FLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps SpringFLOSS UK DevOps Spring
March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015March 25, 2015

$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user$::user
• Open-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.euOpen-Source consultant at inuits.eu
• Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011Puppet User since 2011
• Speaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at PuppetcampsSpeaker/attendee at Puppetcamps
• Puppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributorPuppet core contributor
• Puppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributorPuppet(labs) modules contributor
• @roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie on irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/githubon irc/twitter/github

IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)IT Nowadays (?)
• VVVVVVVVVVVVVVVVVirtualization, Containers, Cloud
• IIIIIIIIIIIIIIIIInfrastructure as Code
• PPPPPPPPPPPPPPPPPay for services, not software

Providing a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a serviceProviding a service
• YYYYYYYYYYYYYYYYYou know the environment
• YYYYYYYYYYYYYYYYYou do the maintenance
• YYYYYYYYYYYYYYYYYou do the upgrades

Shipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a softwareShipping a software
• WWWWWWWWWWWWWWWWWhat is the environment?
• HHHHHHHHHHHHHHHHHow was it setup?
• DDDDDDDDDDDDDDDDDid you change someting?
• WWWWWWWWWWWWWWWWWill someone maintain it? Monitor it?

Two different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worldsTwo different worlds
• MMMMMMMMMMMMMMMMManaging everything vs delegating
• KKKKKKKKKKKKKKKKKnown environment vs Fixed environment
• RRRRRRRRRRRRRRRRRolling updates vs Updates at will
• MMMMMMMMMMMMMMMMMonitoring vs end-users complains

Shipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped SoftwaresShipped Softwares
• SSSSSSSSSSSSSSSSSelf-hosted
• CCCCCCCCCCCCCCCCComplexity
• MMMMMMMMMMMMMMMMMultiple components
• SSSSSSSSSSSSSSSSScalable
• LLLLLLLLLLLLLLLLLots of requirements
• LLLLLLLLLLLLLLLLLots of dependencies

DistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistributionDistribution
• SSSSSSSSSSSSSSSSSoftware (Source code or binaries)
• UUUUUUUUUUUUUUUUUser guide
• IIIIIIIIIIIIIIIIInstallation guide
• PPPPPPPPPPPPPPPPPeople who install the software

Challenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distributionChallenges of SW distribution
• AAAAAAAAAAAAAAAAArtifacts
• CCCCCCCCCCCCCCCCConfiguration
• SSSSSSSSSSSSSSSSSecurity
• HHHHHHHHHHHHHHHHHW requirements
• SSSSSSSSSSSSSSSSSW requirements
• UUUUUUUUUUUUUUUUUpgrades, Maintenance
• MMMMMMMMMMMMMMMMMonitoring

ArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifactsArtifacts
Licensed under a Creative Commons Attribution-ShareAlike 2.0 License
https://www.flickr.com/photos/halfbisqued/2353845688

Distributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing SoftwareDistributing Software
• Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)Plain FTP (+SCM)
• TarballTarballTarballTarballTarballTarballTarballTarballTarballTarballTarballTarballTarballTarballTarballTarballTarball
• Self-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarballSelf-extracting tarball
• curl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bashcurl|bash
• Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?Containers? What's inside?
• Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)Packages (.deb, .rpm,…)

PackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackagingPackaging
• Consistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file listsConsistency checks, file lists
• Dependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolvingDependencies resolving
• RepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositoriesRepositories
• GPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-SigningGPG-Signing
• Lots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of toolsLots of tools
• VersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioningVersioning
• Unique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible buildUnique artifacts, reproducible build
• CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)CfgMgmt integration (Puppet, Chef…)

DependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependenciesDependencies
• Packaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged alsoPackaged also
• In versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositoriesIn versioned repositories
• Test your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependenciesTest your dependencies
• Distribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packagesDistribution, Upstream packages
• Mirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream reposMirror and cherry pick from upstream repos
• Limit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependenciesLimit the number of dependencies

AutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomationAutomation
• AAAAAAAAAAAAAAAAAutomate all the things
• OOOOOOOOOOOOOOOOOS, Monitoring, Application
• RRRRRRRRRRRRRRRRReproducible builds
• RRRRRRRRRRRRRRRRRepositories management

Cultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changesCultural changes
• NNNNNNNNNNNNNNNNNo more manual work
• UUUUUUUUUUUUUUUUUse an appropriate toolchain
• EEEEEEEEEEEEEEEEEach manual action has risks and cost
• WWWWWWWWWWWWWWWWWhat did I change 3 years ago?

Impact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentationImpact on documentation
• NNNNNNNNNNNNNNNNNo more complex install guides
• PPPPPPPPPPPPPPPPPuppet training needed
• VVVVVVVVVVVVVVVVValid for several products
• IIIIIIIIIIIIIIIIInspect the catalogs

Licensed under a Creative Commons Attribution 2.0 License
https://www.flickr.com/photos/jimmcd/4859841581

PuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppetPuppet
• WWWWWWWWWWWWWWWWWidely used Automation tool
• VVVVVVVVVVVVVVVVVery mature
• CCCCCCCCCCCCCCCCClient/Server mode
• SSSSSSSSSSSSSSSSStandalone mode
• DDDDDDDDDDDDDDDDDeclarative
• SSSSSSSSSSSSSSSSScales

What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?What to automate?
Application
Reverse Proxy / Databases
Monitoring
Operation System
Platform

To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?To manage or not?
You have to be able to chose which
part you will setup with Puppet.
Customers have different culture or want to get control of
parts of your application.

Use Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modulesUse Puppet modules
Use separate meta-modules for OS,
Dependencies, Monitoring,
Application… And include them only
of needed.

Yes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noopYes, no or noop
• IIIIIIIIIIIIIIIIInclude or not each class
• YYYYYYYYYYYYYYYYYou can put a whole class in no-op
• include myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_osinclude myapp_os
• class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}class {'myapp_os': noop => true,}
• Usecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are metUsecase: check that preconditions are met

Puppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet ModulesPuppet Modules

External modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modulesExternal modules
• PPPPPPPPPPPPPPPPPick the best ones
• PPPPPPPPPPPPPPPPPuppetlabs modules
• UUUUUUUUUUUUUUUUUpstream modules
• MMMMMMMMMMMMMMMMModules active on Github
• FFFFFFFFFFFFFFFFForge rating
• TTTTTTTTTTTTTTTTTesting, documentation
• MMMMMMMMMMMMMMMMModules that fit your usecase

Review the modules you plan to include.
You do not want bad code in your
application, why would you want it in the
code that deploys it?

Contribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute backContribute back
• GGGGGGGGGGGGGGGGGet feedback (peer review)
• EEEEEEEEEEEEEEEEEasier to maintain in long term
• FFFFFFFFFFFFFFFFForces you to write tests
• HHHHHHHHHHHHHHHHHelp other people
• PPPPPPPPPPPPPPPPPuppet is not your core business

Your own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modulesYour own modules
• EEEEEEEEEEEEEEEEEveryone has write access (Devs, Ops, …)
• FFFFFFFFFFFFFFFFFollow Puppet code standards (style guide)
• BBBBBBBBBBBBBBBBBe future-proof (follow best practices)
• SSSSSSSSSSSSSSSSSeparate code and data (hiera)
• IIIIIIIIIIIIIIIIIf not you core business: Publish it!

Your puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet treeYour puppet tree
• YYYYYYYYYYYYYYYYYour tree is next to your product code
• SSSSSSSSSSSSSSSSSubmodules of your main repository
• GGGGGGGGGGGGGGGGGets the same version number
• PPPPPPPPPPPPPPPPParameters matches your product
parameters

Distribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your treeDistribute your tree
• PPPPPPPPPPPPPPPPPackage the whole tree in a package
• UUUUUUUUUUUUUUUUUse package dependencies to pull puppet
• MMMMMMMMMMMMMMMMMaybe add a helper script for the first run

HieraHieraHieraHieraHieraHieraHieraHieraHieraHieraHieraHieraHieraHieraHieraHieraHiera
• DDDDDDDDDDDDDDDDData separation
• YYYYYYYYYYYYYYYYYou classes should have a stable API
• YYYYYYYYYYYYYYYYYour main class dispatches to other
modules
• UUUUUUUUUUUUUUUUUse functions:
▶ cccccccccccccccccreate_resource
▶ dddddddddddddddddeepmerge

Data separationData separationData separationData separationData separationData separationData separationData separationData separationData separationData separationData separationData separationData separationData separationData separationData separation
Your code should be flexible enough:
Hiera code is the only thing that
should differ between your customers.

Automatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter LookupAutomatic Parameter Lookup
• class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"class::param: "foobar"
• AAAAAAAAAAAAAAAAAvailable in Puppet 3+
• SSSSSSSSSSSSSSSSShould be avoided (obscurification)
• NNNNNNNNNNNNNNNNNice to have for edge cases

Going liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing liveGoing live
Licensed under a Creative Commons Attribution-ShareAlike 2.0 License
https://www.flickr.com/photos/colink/15096002421

Puppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterlessPuppet Agent or masterless
• PPPPPPPPPPPPPPPPPuppet has 2 modes
• AAAAAAAAAAAAAAAAAgent mode: pull your catalog
• MMMMMMMMMMMMMMMMMasterless mode: apply it from files
• BBBBBBBBBBBBBBBBBoth have advantages
• DDDDDDDDDDDDDDDDDepends on what you want

Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)Masterless mode (puppet apply)
• OOOOOOOOOOOOOOOOOne-time run
• RRRRRRRRRRRRRRRRRequires hiera data on every host
▶ HHHHHHHHHHHHHHHHHiera data should be consistent accross hosts
▶ NNNNNNNNNNNNNNNNNo single source of truth
• NNNNNNNNNNNNNNNNNo daemon running
• NNNNNNNNNNNNNNNNNo need for a Puppet master
• NNNNNNNNNNNNNNNNNo exported resources
• EEEEEEEEEEEEEEEEExtra work needed for PuppetDB

Agent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent modeAgent mode
• RRRRRRRRRRRRRRRRRun every 30 minutes (to be tuned)
• RRRRRRRRRRRRRRRRRequires one puppet master
• PPPPPPPPPPPPPPPPPuppet Agent daemon running (as root)
• RRRRRRRRRRRRRRRRReports sent to the master
• CCCCCCCCCCCCCCCCConsistency check over time

PuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDBPuppetDB
• SSSSSSSSSSSSSSSSStores facts and reports
• EEEEEEEEEEEEEEEEEasy to query
• DDDDDDDDDDDDDDDDDashboards available
• EEEEEEEEEEEEEEEEExported resources

Deploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet treeDeploy your Puppet tree
• IIIIIIIIIIIIIIIIInstall your puppet tree package
• IIIIIIIIIIIIIIIIInstall the hiera files (versioned?)
• OOOOOOOOOOOOOOOOOne puppet apply to deploy a basic server
• TTTTTTTTTTTTTTTTThen the first agent run to deploy PuppetDB
and the rest
• TTTTTTTTTTTTTTTTThere is no puppetlabs-puppet module
• TTTTTTTTTTTTTTTTTools can help you with that (e.g kafo)

SecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecuritySecurity
• PPPPPPPPPPPPPPPPPuppet agent runs as root (launch it with
cron)
• TTTTTTTTTTTTTTTTThe master runs as "puppet" user
• MMMMMMMMMMMMMMMMMaster is isolated on a separated host
• PPPPPPPPPPPPPPPPPuppetDB/Server only listens to Loopback
• PPPPPPPPPPPPPPPPPut a reverse proxy (even for server)

Security - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/ServerSecurity - Master/Server
• DDDDDDDDDDDDDDDDDo not use autosign
• YYYYYYYYYYYYYYYYYou can rely on external CA
• IIIIIIIIIIIIIIIIIsolate the service from the application
• QQQQQQQQQQQQQQQQQuery PuppetDB from your monitoring tool

Pre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing Puppet

Pre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing PuppetPre Existing Puppet
• TTTTTTTTTTTTTTTTThere might be a puppet setup at customer
• WWWWWWWWWWWWWWWWWork in a separated environment
• PPPPPPPPPPPPPPPPPut your hiera data in a subdirectory
• PPPPPPPPPPPPPPPPPrefix your custom functions
• BBBBBBBBBBBBBBBBBe careful with exported resources

ConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusionConclusion

Shipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet codeShipping with puppet code
• EEEEEEEEEEEEEEEEEveryone gets benefits
• FFFFFFFFFFFFFFFFFrom devs to QA to customers
• NNNNNNNNNNNNNNNNNeed to review how you release
• NNNNNNNNNNNNNNNNNeed to review how you deploy your OS
• PPPPPPPPPPPPPPPPPuppet code is part of your product

AdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantagesAdvantages
• SSSSSSSSSSSSSSSSSetup your product easily (internally and
externally)
• GGGGGGGGGGGGGGGGGet consistent deployments at several
customer
• PPPPPPPPPPPPPPPPPredict what will be deployed
• GGGGGGGGGGGGGGGGGet a clear view of the infrastructure
• SSSSSSSSSSSSSSSSSay bye bye to long procedures

There is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is workThere is work
• BBBBBBBBBBBBBBBBBig cultural changes
▶ RRRRRRRRRRRRRRRRRoot access?
▶ TTTTTTTTTTTTTTTTThe shell script works…
▶ IIIIIIIIIIIIIIIII can't do X anymore…
• PPPPPPPPPPPPPPPPPurge old artifacts on updates
• DDDDDDDDDDDDDDDDDeal with your data
• KKKKKKKKKKKKKKKKKeep that infra up to date

Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!Open the pandora box!
• MMMMMMMMMMMMMMMMMonitoring
• BBBBBBBBBBBBBBBBBest practices enforcement
• RRRRRRRRRRRRRRRRRepositories management
• BBBBBBBBBBBBBBBBBring your own tools

Thank youThank youThank youThank youThank youThank youThank youThank youThank youThank youThank youThank youThank youThank youThank youThank youThank you
Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?Any question?

ContactContactContactContactContactContactContactContactContactContactContactContactContactContactContactContactContact
julien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eujulien@inuits.eu
@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie@roidelapluie
inuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuitsinuits
https://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.euhttps://inuits.eu
info@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.euinfo@inuits.eu
+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636+32 473 441 636

Puppet and Software Delivery

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

En vedette

En vedette (17)

Similaire à Puppet and Software Delivery

Similaire à Puppet and Software Delivery (20)

Plus de Julien Pivotto

Plus de Julien Pivotto (20)

Dernier

Dernier (20)

Puppet and Software Delivery