SlideShare ist ein Scribd-Unternehmen logo
1 von 18
Downloaden Sie, um offline zu lesen
Friday, February 22, 13
MOZILLA AND PUPPET




Friday, February 22, 13
WHO AM I?
                              BRANDON BURTON
                                  @SOLARCE
                           MOZILLA WEB OPERATIONS
                             LOLCAT ENTHUSIAST




Friday, February 22, 13
TODAY
                                     OVERALL LAYOUT
                          BEST PRACTICES FOR MODULES/MANIFESTS
                                  SCALING PUPPETMASTERS
                                        PUPPETCTL
                                    PUPPET DASHBOARD
                                          NAGIOS




Friday, February 22, 13
FOCUSING ON MOZILLA IT



                          ALSO RELENG - PUPPETAGAIN




Friday, February 22, 13
OVERALL LAYOUT

                            MODULES/
                            |__FILES/
                            |__MANIFESTS/
                            |__TEMPLATES/
                            MANIFESTS/NODES/
                            HIERA/




Friday, February 22, 13
BEST PRACTICES

                           BASED ON PUPPETLABS
                           SVN PRECOMMIT HOOK
                           |__CHECK-PUPPET-SYNTAX
                           |__CHECK-TEMPLATE-
                           SYNTAX
                           PUPPET-LINT




Friday, February 22, 13
SCALING
                           PUPPETMASTERS

                           AT LEAST A PUPPETMASTER PER DC
                                 FRONTEND/BACKENDS
                             FRONTEND DOES ALL SSL ACTIONS
                          NON-SSL ACTIONS PROXIED TO BACKENDS




Friday, February 22, 13
PUPPETCTL

         SCRIPT FOR DISABLING/ENABLING THE PUPPET AGENT
                 HAS ARGUMENTS FOR AMOUNT OF TIME
                             EDITS MOTD
             HTTPS://GITHUB.COM/MOZILLA-IT/PUPPETCTL




Friday, February 22, 13
PUPPET DASHBOARD


                                CHECK FOR ERRORS
                           INFRA TEAM KEEPS AN EYE ON IT
                             HTTP://THEFOREMAN.ORG/




Friday, February 22, 13
NAGIOS


                     PUPPET GENERATES OUR NAGIOS CONFIGS
                   STALENESS CHECK BASED ON PUPPET DASHBOARD




Friday, February 22, 13
WHERE WE'RE GOING

                               SECRETS MODULE
                                     HEIRA
                                   PUPPETDB
                             OPEN SOURCING MODULES




Friday, February 22, 13
SECRETS MODULE

                                PRIVATE REPOSITORY
                                  SSL CERTIFICATES
                                SECRET BINARY FILES
                          JUST A MODULE YOU CAN INCLUDE




Friday, February 22, 13
HEIRA

                          PASSWORDS, CREDENTIALS, SECRETS
                                     HEIRA-GPG
                           PARAMETERIZED CLASS DEFAULTS
                              NOT ENTIRELY DECIDED YET




Friday, February 22, 13
PUPPETDB


                          OVERLAPS WITH INTERNAL INVENTORY TOOL
                          HTTPS://GITHUB.COM/MOZILLA/INVENTORY




Friday, February 22, 13
OPEN SOURCING MODULES

                 DEPENDS ON SECRETS MODULE
                    NOT A GOAL, BUT NEAR IT
           TRYING TO DEVELOP NEW MODULES IN PUBLIC
     E.G. HTTPS://GITHUB.COM/RTUCKER-MOZILLA/PUPPET-
                            SSH-1/




Friday, February 22, 13
WANT TO KNOW MORE?
                           HTTPS://BLOG.MOZILLA.ORG/IT/

                           LCA 2013: PUPPET LIKE AN ADULT

                          PUPPET CONF 2012: SCALING PUPPET

                          HTTPS://GITHUB.COM/MOZILLA-IT




Friday, February 22, 13
KEEP ON ROCKIN'
                           THE FREE WEB




Friday, February 22, 13

Weitere ähnliche Inhalte

Mehr von Puppet

Enforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automationEnforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automation
Puppet
 

Mehr von Puppet (20)

Applying Roles and Profiles method to compliance code
Applying Roles and Profiles method to compliance codeApplying Roles and Profiles method to compliance code
Applying Roles and Profiles method to compliance code
 
KGI compliance as-code approach
KGI compliance as-code approachKGI compliance as-code approach
KGI compliance as-code approach
 
Enforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automationEnforce compliance policy with model-driven automation
Enforce compliance policy with model-driven automation
 
Keynote: Puppet camp compliance
Keynote: Puppet camp complianceKeynote: Puppet camp compliance
Keynote: Puppet camp compliance
 
Automating it management with Puppet + ServiceNow
Automating it management with Puppet + ServiceNowAutomating it management with Puppet + ServiceNow
Automating it management with Puppet + ServiceNow
 
Puppet: The best way to harden Windows
Puppet: The best way to harden WindowsPuppet: The best way to harden Windows
Puppet: The best way to harden Windows
 
Simplified Patch Management with Puppet - Oct. 2020
Simplified Patch Management with Puppet - Oct. 2020Simplified Patch Management with Puppet - Oct. 2020
Simplified Patch Management with Puppet - Oct. 2020
 
Accelerating azure adoption with puppet
Accelerating azure adoption with puppetAccelerating azure adoption with puppet
Accelerating azure adoption with puppet
 
Puppet catalog Diff; Raphael Pinson
Puppet catalog Diff; Raphael PinsonPuppet catalog Diff; Raphael Pinson
Puppet catalog Diff; Raphael Pinson
 
ServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin ReeuwijkServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin Reeuwijk
 
Take control of your dev ops dumping ground
Take control of your  dev ops dumping groundTake control of your  dev ops dumping ground
Take control of your dev ops dumping ground
 
100% Puppet Cloud Deployment of Legacy Software
100% Puppet Cloud Deployment of Legacy Software100% Puppet Cloud Deployment of Legacy Software
100% Puppet Cloud Deployment of Legacy Software
 
Puppet User Group
Puppet User GroupPuppet User Group
Puppet User Group
 
Continuous Compliance and DevSecOps
Continuous Compliance and DevSecOpsContinuous Compliance and DevSecOps
Continuous Compliance and DevSecOps
 
The Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick Maludy
The Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick MaludyThe Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick Maludy
The Dynamic Duo of Puppet and Vault tame SSL Certificates, Nick Maludy
 
ServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin ReeuwijkServiceNow and Puppet- better together, Kevin Reeuwijk
ServiceNow and Puppet- better together, Kevin Reeuwijk
 
Puppet in k8s, Miroslav Hadzhiev
Puppet in k8s, Miroslav HadzhievPuppet in k8s, Miroslav Hadzhiev
Puppet in k8s, Miroslav Hadzhiev
 
Bolt on Windows - James Pogran
Bolt on Windows - James PogranBolt on Windows - James Pogran
Bolt on Windows - James Pogran
 
The Business Value of Modernizing your Windows Infrastructure and Bringing Li...
The Business Value of Modernizing your Windows Infrastructure and Bringing Li...The Business Value of Modernizing your Windows Infrastructure and Bringing Li...
The Business Value of Modernizing your Windows Infrastructure and Bringing Li...
 
Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020
Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020
Manage your Windows Infrastructure with Puppet Bolt - August 26 - 2020
 

Kürzlich hochgeladen

IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI Solutions
Enterprise Knowledge
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Service
giselly40
 

Kürzlich hochgeladen (20)

Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI Solutions
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024
 
Advantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your BusinessAdvantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your Business
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
How to convert PDF to text with Nanonets
How to convert PDF to text with NanonetsHow to convert PDF to text with Nanonets
How to convert PDF to text with Nanonets
 
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfThe Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Service
 

Mozilla and Puppet

  • 2. MOZILLA AND PUPPET Friday, February 22, 13
  • 3. WHO AM I? BRANDON BURTON @SOLARCE MOZILLA WEB OPERATIONS LOLCAT ENTHUSIAST Friday, February 22, 13
  • 4. TODAY OVERALL LAYOUT BEST PRACTICES FOR MODULES/MANIFESTS SCALING PUPPETMASTERS PUPPETCTL PUPPET DASHBOARD NAGIOS Friday, February 22, 13
  • 5. FOCUSING ON MOZILLA IT ALSO RELENG - PUPPETAGAIN Friday, February 22, 13
  • 6. OVERALL LAYOUT MODULES/ |__FILES/ |__MANIFESTS/ |__TEMPLATES/ MANIFESTS/NODES/ HIERA/ Friday, February 22, 13
  • 7. BEST PRACTICES BASED ON PUPPETLABS SVN PRECOMMIT HOOK |__CHECK-PUPPET-SYNTAX |__CHECK-TEMPLATE- SYNTAX PUPPET-LINT Friday, February 22, 13
  • 8. SCALING PUPPETMASTERS AT LEAST A PUPPETMASTER PER DC FRONTEND/BACKENDS FRONTEND DOES ALL SSL ACTIONS NON-SSL ACTIONS PROXIED TO BACKENDS Friday, February 22, 13
  • 9. PUPPETCTL SCRIPT FOR DISABLING/ENABLING THE PUPPET AGENT HAS ARGUMENTS FOR AMOUNT OF TIME EDITS MOTD HTTPS://GITHUB.COM/MOZILLA-IT/PUPPETCTL Friday, February 22, 13
  • 10. PUPPET DASHBOARD CHECK FOR ERRORS INFRA TEAM KEEPS AN EYE ON IT HTTP://THEFOREMAN.ORG/ Friday, February 22, 13
  • 11. NAGIOS PUPPET GENERATES OUR NAGIOS CONFIGS STALENESS CHECK BASED ON PUPPET DASHBOARD Friday, February 22, 13
  • 12. WHERE WE'RE GOING SECRETS MODULE HEIRA PUPPETDB OPEN SOURCING MODULES Friday, February 22, 13
  • 13. SECRETS MODULE PRIVATE REPOSITORY SSL CERTIFICATES SECRET BINARY FILES JUST A MODULE YOU CAN INCLUDE Friday, February 22, 13
  • 14. HEIRA PASSWORDS, CREDENTIALS, SECRETS HEIRA-GPG PARAMETERIZED CLASS DEFAULTS NOT ENTIRELY DECIDED YET Friday, February 22, 13
  • 15. PUPPETDB OVERLAPS WITH INTERNAL INVENTORY TOOL HTTPS://GITHUB.COM/MOZILLA/INVENTORY Friday, February 22, 13
  • 16. OPEN SOURCING MODULES DEPENDS ON SECRETS MODULE NOT A GOAL, BUT NEAR IT TRYING TO DEVELOP NEW MODULES IN PUBLIC E.G. HTTPS://GITHUB.COM/RTUCKER-MOZILLA/PUPPET- SSH-1/ Friday, February 22, 13
  • 17. WANT TO KNOW MORE? HTTPS://BLOG.MOZILLA.ORG/IT/ LCA 2013: PUPPET LIKE AN ADULT PUPPET CONF 2012: SCALING PUPPET HTTPS://GITHUB.COM/MOZILLA-IT Friday, February 22, 13
  • 18. KEEP ON ROCKIN' THE FREE WEB Friday, February 22, 13