Meetup devops
0 likes82 views
The document discusses DevOps at ForgeRock. It outlines the pillars of DevOps including automation, communication, monitoring and collaboration. It also discusses ForgeRock's focus on making their products stateless and container friendly to support infrastructure as code. The document demonstrates using tools like Ansible and Kubernetes to deploy and manage ForgeRock identity platforms in a DevOps way.
Meetup devops
- 1. © 2016 ForgeRock. All rights reserved. DevOps@Forgerock Meetup Septembre 2017 1
- 2. © 2016 ForgeRock. All rights reserved. Why DevOps? • Developer: “I want a development box” • QA tester: “I want to test a complex configuration that mirrors production” • Sys Admin: “I want a reliable, repeatable production configuration” • Potential Customer: “I want a demonstration of how your product works” • ForgeRock University “I want to quickly create lab environments for 30 students” Copyright © Identity Summit 2015, all rights reserved.
- 3. © 2016 ForgeRock. All rights reserved. DevOps pillars • Automation • Deployment, configuration, CI/CD • Communication • Between Ops and dev, but also with quality and management • Social tools • Monitoring • Instrumentation, supervision, tests • Collaboration • Continuous learning, experimentation, positive failure
- 4. © 2016 ForgeRock. All rights reserved. ForgeRock - Key DevOps Focus Areas • Core engineering required to make products “12Factor” like • Prefer Stateless vs. Stateful, more like Cattle, less like Pets • Container friendly • Easy to deploy in Docker, Cloud Foundry, etc. • Support Infrastructure as Code • Configuration import / export (json / yaml)
- 5. © 2016 ForgeRock. All rights reserved. Infrastructure as Code Treat configuration just like source code. • Store it as text (json, yaml) • Process it with tools (perl, python, jq, etc.) • Version it, tag it • Promote configuration from one environment to another • Put it through a development CI/CD pipeline • GUIs are configuration editors ! What is the difference between QA and Production? git checkout qa git diff production
- 6. © 2016 ForgeRock. All rights reserved. Tools
- 7. © 2016 ForgeRock. All rights reserved. Ansible Demo
- 8. © 2016 ForgeRock. All rights reserved. Sample OpenAM HA with Ansible • HA Proxy : Load balancer • Internal Config • External CTS • External Users • Replication for all DJ • Vagrant/VirtualBox/Ubuntu
- 9. © 2016 ForgeRock. All rights reserved. Docker Support - 5.x Release • Sample Dockerfiles provided for all products • Backstage account required • Youmust build your own docker images from backstage binaries • Sample Kubernetes manifests for dev / test / QA environments
- 10. © 2016 ForgeRock. All rights reserved. What is Kubernetes? A virtual cloud in a box (software defined cloud) • Auto-Scaling, monitoring, high availability, bin-packing, service discovery, load balancing, self healing, storage management, secret distribution, ... • Insulates applications from cloud & platform specifics • Deploy the same application on AWS, GCP, Azure, Bare Metal, VMWare…. • Amazon EC2 virtualizes hardware. Kubernetes virtualizes AWS • Helm : A package manager for Kubernetes manifests • Templating capabilities
- 11. © 2016 ForgeRock. All rights reserved. Kubernetes
- 12. © 2016 ForgeRock. All rights reserved. OpenAMOpenAM OpenAM DJ DJ DJ OpenIDM OpenIDM OpenIDM OpenIGOpenIG PV SSD kind: Deployment spec: replicas: 1 template: metadata: name: openig labels: name: openig spec: containers: - name: openig image: forgerock/openig volumes: - name: keystore secret: secretName: openig manifests describe components and their relationships kind: Service name: opendj ports: - port: 389 name: ldap targetPort: 389 persistent volumes abstract storage The same manifest works on any cloud AWS, Azure, Google, VMWare, etc. Manifests describe a “virtual” ForgeRock Deployment
- 13. © 2016 ForgeRock. All rights reserved. Resources https://goo.gl/DOD9pv • Backstage - DevOps Guide https://backstage.forgerock.com/docs/platform/5/devops-guide • ForgeRock DevOps Forum: https://forum.forgerock.com/forum/devops/
- 14. © 2016 ForgeRock. All rights reserved. Sample OpenAM Deployment
- 15. © 2016 ForgeRock. All rights reserved. Kubernetes Demo
- 16. © 2016 ForgeRock. All rights reserved. Thank You
- 17. © 2016 ForgeRock. All rights reserved. ForgeRock ForgeRock ForgeRockIdentity ForgeRock Forgerock.com Forgerock.com/blog