Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Fast SAP system provisioning based on CloudStack
1. BIT.Group GmbH · www.bitgroup.de PAGE 1Klassifizierung: Öffentlich | Autor: Henry Flack | Version: 1.5 | Datum: 17. Januar 2014
FAST SAP SYSTEM
PROVISIONING BASED ON
CLOUDSTACK
Consulting. Support. Integrated Solutions.Results
in time.
2. BIT.Group GmbH · www.bitgroup.de PAGE 2
Ingo Jochim
Service Lead BIT.Cloud
Team Lead „Cloud Implementation“
CloudStack user since 2014
Email: ingo.jochim@bitgroup.de
Web: bitgroup.de
Twitter: @ingojochim
ABOUT ME
About
Me
3. BIT.Group GmbH · www.bitgroup.de PAGE 3
ABOUT BIT.GROUP GMBH
About
BIT.Gro
up
GmbH
Optimization of SAP
operation and
implementation of
automation scenarios
IT Consulting
Preventive and reactive
problem solving as well as
support in day-to-day
business
Service & Support
Implementation of
individual
requirements with SAP
solutions
Development
Planning, provision and
optimization of operator
models
Infrastructure Management
4. BIT.Group GmbH · www.bitgroup.de PAGE 4
implementation / operation of large cloud environments
tool development
BIT.Cloud: private / public cloud
ABOUT BIT.GROUP GMBH
About
BIT.Gro
up
GmbH
Infrastructure Management
5. BIT.Group GmbH · www.bitgroup.de PAGE 5
• Focus
• Challenge
• What do we build? – Demo
• What is automated?
• Under the hood
• Apache CloudStack
• Ceph Storage
• Ansible
• SAP automated installation
AGENDA
Agenda
6. BIT.Group GmbH · www.bitgroup.de PAGE 6
• High dynamic infrastructure landscapes
• Fast deployment
• Infrastructure setup
• Application setup
• Make it ready for operations (backup, monitoring)
FOCUS
Focus
7. BIT.Group GmbH · www.bitgroup.de PAGE 7
• Many steps and teams needed to set up a SAP system
• network team
• server management
• SAP basis
• application management
• Usual workflow with tickets from team to team
• Why not automate this into a single process?
CHALLENGE
Challen
ge
8. BIT.Group GmbH · www.bitgroup.de PAGE 8
CENTRAL SERVICES
Central
‚Service
s
LDAP git Backup ansible Check_mk
9. BIT.Group GmbH · www.bitgroup.de PAGE 9
WHAT DO WE BUILD?
Build
SAP Netweaver
Orchestration VM
- LDAP
- git
- ansible
- Check_mk
- Backup
10. BIT.Group GmbH · www.bitgroup.de PAGE 10Klassifizierung: Öffentlich | Autor: Henry Flack | Version: 1.5 | Datum: 17. Januar 2014
LET’S BUILD IT
Demo
11. BIT.Group GmbH · www.bitgroup.de PAGE 11
WHAT IS AUTOMATED?
Automa
tion list
• virtual machines
• Storage
• filesystem layout, folder structure
• security, central auth, users, groups
• central services: LDAP, git, ansible, monitoring, backup
• firewall
• OS settings for application
• application installation
12. BIT.Group GmbH · www.bitgroup.de PAGE 12
UNDER THE HOOD
Under
the
hood
13. BIT.Group GmbH · www.bitgroup.de PAGE 13
APACHE CLOUDSTACK
ACS
• ACS is a cloud computing software
• creating, managing and deploying infrastructure cloud services
• manage
• physical and virtual servers
• storage
• network
• OpenSource
14. BIT.Group GmbH · www.bitgroup.de PAGE 14
APACHE CLOUDSTACK @ BIT
ACS@
BIT
• Why are we using CloudStack?
• evaluated a few cloud management platforms
• scope: free, easy to use, multi-tenancy also for administration
• Learned lessons:
• works for small operation teams
• easy to upgrade – in 30 minutes
• active community
15. BIT.Group GmbH · www.bitgroup.de PAGE 15Klassifizierung: Öffentlich | Autor: Henry Flack | Version: 1.5 | Datum: 17. Januar 2014
BACK TO DEMO
Demo
17. BIT.Group GmbH · www.bitgroup.de PAGE 17
CEPH STORAGE
Ceph
• Distributed storage system
• Run‘s on commodity hardware
• Selfhealing
• OpenSource
• CloudStack integration (by Wido den Hollander)
• Lessons learned:
• previous storage system was too unflexible
• cloud environments need to scale online
• no downtime for maintenance
• hard disk failure over easter weekend – monitoring works, disk
change later
18. BIT.Group GmbH · www.bitgroup.de PAGE 18
ANSIBLE
Ansible
• Orchestration, configuration and administration
• Evaluated a few configuration management systems
• Why did we choose ansible?
• easy to use and easy to get started
• but powerful
• good to implement for multi tenant environment
• many CloudStack modules (by René Moser)
• OpenSource
19. BIT.Group GmbH · www.bitgroup.de PAGE 19
SAP INSTALLATION AUTOMATION
SAP
• Complex installations in many variations
• Time consuming – large install files
• Pro and Con – Templates vs. Scripting
• Templates:
• faster to deploy
• much effort to maintain
• unflexible, high storage usage
• Automation:
• very adaptive
• installation takes time
• XML file based unattended automation replace wizard
• Adaption of XML with hostname, SID, …
20. BIT.Group GmbH · www.bitgroup.de PAGE 20Klassifizierung: Öffentlich | Autor: Henry Flack | Version: 1.5 | Datum: 17. Januar 2014
INSTALLATION COMPLETE ?
Demo
almost 100 %
21. BIT.Group GmbH · www.bitgroup.de PAGE 21
SUMMARY
Summa
ry
• Performance by automation of full stack
• Standardized landscapes – consistent configurations
• Reduced operations effort
• Higher quality
• Lessons learned
• different worlds
• different automation