SlideShare une entreprise Scribd logo
1  sur  18
Télécharger pour lire hors ligne
Friday, February 22, 13
MOZILLA AND PUPPET




Friday, February 22, 13
WHO AM I?
                              BRANDON BURTON
                                  @SOLARCE
                           MOZILLA WEB OPERATIONS
                             LOLCAT ENTHUSIAST




Friday, February 22, 13
TODAY
                                     OVERALL LAYOUT
                          BEST PRACTICES FOR MODULES/MANIFESTS
                                  SCALING PUPPETMASTERS
                                        PUPPETCTL
                                    PUPPET DASHBOARD
                                          NAGIOS




Friday, February 22, 13
FOCUSING ON MOZILLA IT



                          ALSO RELENG - PUPPETAGAIN




Friday, February 22, 13
OVERALL LAYOUT

                            MODULES/
                            |__FILES/
                            |__MANIFESTS/
                            |__TEMPLATES/
                            MANIFESTS/NODES/
                            HIERA/




Friday, February 22, 13
BEST PRACTICES

                           BASED ON PUPPETLABS
                           SVN PRECOMMIT HOOK
                           |__CHECK-PUPPET-SYNTAX
                           |__CHECK-TEMPLATE-
                           SYNTAX
                           PUPPET-LINT




Friday, February 22, 13
SCALING
                           PUPPETMASTERS

                           AT LEAST A PUPPETMASTER PER DC
                                 FRONTEND/BACKENDS
                             FRONTEND DOES ALL SSL ACTIONS
                          NON-SSL ACTIONS PROXIED TO BACKENDS




Friday, February 22, 13
PUPPETCTL

         SCRIPT FOR DISABLING/ENABLING THE PUPPET AGENT
                 HAS ARGUMENTS FOR AMOUNT OF TIME
                             EDITS MOTD
             HTTPS://GITHUB.COM/MOZILLA-IT/PUPPETCTL




Friday, February 22, 13
PUPPET DASHBOARD


                                CHECK FOR ERRORS
                           INFRA TEAM KEEPS AN EYE ON IT
                             HTTP://THEFOREMAN.ORG/




Friday, February 22, 13
NAGIOS


                     PUPPET GENERATES OUR NAGIOS CONFIGS
                   STALENESS CHECK BASED ON PUPPET DASHBOARD




Friday, February 22, 13
WHERE WE'RE GOING

                               SECRETS MODULE
                                     HEIRA
                                   PUPPETDB
                             OPEN SOURCING MODULES




Friday, February 22, 13
SECRETS MODULE

                                PRIVATE REPOSITORY
                                  SSL CERTIFICATES
                                SECRET BINARY FILES
                          JUST A MODULE YOU CAN INCLUDE




Friday, February 22, 13
HEIRA

                          PASSWORDS, CREDENTIALS, SECRETS
                                     HEIRA-GPG
                           PARAMETERIZED CLASS DEFAULTS
                              NOT ENTIRELY DECIDED YET




Friday, February 22, 13
PUPPETDB


                          OVERLAPS WITH INTERNAL INVENTORY TOOL
                          HTTPS://GITHUB.COM/MOZILLA/INVENTORY




Friday, February 22, 13
OPEN SOURCING MODULES

                 DEPENDS ON SECRETS MODULE
                    NOT A GOAL, BUT NEAR IT
           TRYING TO DEVELOP NEW MODULES IN PUBLIC
     E.G. HTTPS://GITHUB.COM/RTUCKER-MOZILLA/PUPPET-
                            SSH-1/




Friday, February 22, 13
WANT TO KNOW MORE?
                           HTTPS://BLOG.MOZILLA.ORG/IT/

                           LCA 2013: PUPPET LIKE AN ADULT

                          PUPPET CONF 2012: SCALING PUPPET

                          HTTPS://GITHUB.COM/MOZILLA-IT




Friday, February 22, 13
KEEP ON ROCKIN'
                           THE FREE WEB




Friday, February 22, 13

Contenu connexe

Plus de Puppet

Enforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automationEnforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automation
Puppet
 

Plus de Puppet (20)

Applying Roles and Profiles method to compliance code
Applying Roles and Profiles method to compliance codeApplying Roles and Profiles method to compliance code
Applying Roles and Profiles method to compliance code
 
KGI compliance as-code approach
KGI compliance as-code approachKGI compliance as-code approach
KGI compliance as-code approach
 
Enforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automationEnforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automation
 
Keynote: Puppet camp compliance
Keynote: Puppet camp complianceKeynote: Puppet camp compliance
Keynote: Puppet camp compliance
 
Automating it management with Puppet + ServiceNow
Automating it management with Puppet + ServiceNowAutomating it management with Puppet + ServiceNow
Automating it management with Puppet + ServiceNow
 
Puppet: The best way to harden Windows
Puppet: The best way to harden WindowsPuppet: The best way to harden Windows
Puppet: The best way to harden Windows
 
Simplified Patch Management with Puppet - Oct. 2020
Simplified Patch Management with Puppet - Oct. 2020Simplified Patch Management with Puppet - Oct. 2020
Simplified Patch Management with Puppet - Oct. 2020
 
Accelerating azure adoption with puppet
Accelerating azure adoption with puppetAccelerating azure adoption with puppet
Accelerating azure adoption with puppet
 
Puppet catalog Diff; Raphael Pinson
Puppet catalog Diff; Raphael PinsonPuppet catalog Diff; Raphael Pinson
Puppet catalog Diff; Raphael Pinson
 
ServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin ReeuwijkServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin Reeuwijk
 
Take control of your dev ops dumping ground
Take control of your  dev ops dumping groundTake control of your  dev ops dumping ground
Take control of your dev ops dumping ground
 
100% Puppet Cloud Deployment of Legacy Software
100% Puppet Cloud Deployment of Legacy Software100% Puppet Cloud Deployment of Legacy Software
100% Puppet Cloud Deployment of Legacy Software
 
Puppet User Group
Puppet User GroupPuppet User Group
Puppet User Group
 
Continuous Compliance and DevSecOps
Continuous Compliance and DevSecOpsContinuous Compliance and DevSecOps
Continuous Compliance and DevSecOps
 
The Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick Maludy
The Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick MaludyThe Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick Maludy
The Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick Maludy
 
ServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin ReeuwijkServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin Reeuwijk
 
Puppet in k8s, Miroslav Hadzhiev
Puppet in k8s, Miroslav HadzhievPuppet in k8s, Miroslav Hadzhiev
Puppet in k8s, Miroslav Hadzhiev
 
Bolt on Windows - James Pogran
Bolt on Windows - James PogranBolt on Windows - James Pogran
Bolt on Windows - James Pogran
 
The Business Value of Modernizing your Windows Infrastructure and Bringing Li...
The Business Value of Modernizing your Windows Infrastructure and Bringing Li...The Business Value of Modernizing your Windows Infrastructure and Bringing Li...
The Business Value of Modernizing your Windows Infrastructure and Bringing Li...
 
Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020
Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020
Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020
 

Dernier

Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
vu2urc
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
Earley Information Science
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
Joaquim Jorge
 

Dernier (20)

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
 
Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdf
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfThe Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreter
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
How to convert PDF to text with Nanonets
How to convert PDF to text with NanonetsHow to convert PDF to text with Nanonets
How to convert PDF to text with Nanonets
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 

Mozilla and Puppet

  • 2. MOZILLA AND PUPPET Friday, February 22, 13
  • 3. WHO AM I? BRANDON BURTON @SOLARCE MOZILLA WEB OPERATIONS LOLCAT ENTHUSIAST Friday, February 22, 13
  • 4. TODAY OVERALL LAYOUT BEST PRACTICES FOR MODULES/MANIFESTS SCALING PUPPETMASTERS PUPPETCTL PUPPET DASHBOARD NAGIOS Friday, February 22, 13
  • 5. FOCUSING ON MOZILLA IT ALSO RELENG - PUPPETAGAIN Friday, February 22, 13
  • 6. OVERALL LAYOUT MODULES/ |__FILES/ |__MANIFESTS/ |__TEMPLATES/ MANIFESTS/NODES/ HIERA/ Friday, February 22, 13
  • 7. BEST PRACTICES BASED ON PUPPETLABS SVN PRECOMMIT HOOK |__CHECK-PUPPET-SYNTAX |__CHECK-TEMPLATE- SYNTAX PUPPET-LINT Friday, February 22, 13
  • 8. SCALING PUPPETMASTERS AT LEAST A PUPPETMASTER PER DC FRONTEND/BACKENDS FRONTEND DOES ALL SSL ACTIONS NON-SSL ACTIONS PROXIED TO BACKENDS Friday, February 22, 13
  • 9. PUPPETCTL SCRIPT FOR DISABLING/ENABLING THE PUPPET AGENT HAS ARGUMENTS FOR AMOUNT OF TIME EDITS MOTD HTTPS://GITHUB.COM/MOZILLA-IT/PUPPETCTL Friday, February 22, 13
  • 10. PUPPET DASHBOARD CHECK FOR ERRORS INFRA TEAM KEEPS AN EYE ON IT HTTP://THEFOREMAN.ORG/ Friday, February 22, 13
  • 11. NAGIOS PUPPET GENERATES OUR NAGIOS CONFIGS STALENESS CHECK BASED ON PUPPET DASHBOARD Friday, February 22, 13
  • 12. WHERE WE'RE GOING SECRETS MODULE HEIRA PUPPETDB OPEN SOURCING MODULES Friday, February 22, 13
  • 13. SECRETS MODULE PRIVATE REPOSITORY SSL CERTIFICATES SECRET BINARY FILES JUST A MODULE YOU CAN INCLUDE Friday, February 22, 13
  • 14. HEIRA PASSWORDS, CREDENTIALS, SECRETS HEIRA-GPG PARAMETERIZED CLASS DEFAULTS NOT ENTIRELY DECIDED YET Friday, February 22, 13
  • 15. PUPPETDB OVERLAPS WITH INTERNAL INVENTORY TOOL HTTPS://GITHUB.COM/MOZILLA/INVENTORY Friday, February 22, 13
  • 16. OPEN SOURCING MODULES DEPENDS ON SECRETS MODULE NOT A GOAL, BUT NEAR IT TRYING TO DEVELOP NEW MODULES IN PUBLIC E.G. HTTPS://GITHUB.COM/RTUCKER-MOZILLA/PUPPET- SSH-1/ Friday, February 22, 13
  • 17. WANT TO KNOW MORE? HTTPS://BLOG.MOZILLA.ORG/IT/ LCA 2013: PUPPET LIKE AN ADULT PUPPET CONF 2012: SCALING PUPPET HTTPS://GITHUB.COM/MOZILLA-IT Friday, February 22, 13
  • 18. KEEP ON ROCKIN' THE FREE WEB Friday, February 22, 13