![Puppet Enterprise: Configuration
Improve agility and productivity through defining and enforcing a desired state
1. Define the desired state
service { ‘ssh’:
ensure => running,
enable => true,
subscribe => File[‘/etc/sshd_config’]
}
2. Simulate configuration changes
4. Report on differences and
any changes made
PUPPET
ENTERPRISE
Current State
Desired State
3. Enforce the deployed desired
state – automatically](https://image.slidesharecdn.com/puppet-overview-131204211724-phpapp02/85/Puppet-overview-22-320.jpg)
Puppet overview
- 2. A Quick Poll
- 8. How Can Organizations Achieve High Performance? HIGH PERFORMING ORGANIZATIONS SHARE TWO COMMON PRACTICES use version control for infrastructure management use automated code deployments Get the 2013 State of DevOps Report at https://puppetlabs.com/solutions/ devops/
- 11. New Approach: Software Defined Infrastructure 2. SIMULATE } 1. DEFINE Re-usable infrastructure-as-code 4. REPORT Before deploying changes 3. ENFORCE CURRENT STATE DESIRED STATE Insight into changes Automatically and reliably
- 12. Lifecycle of a Puppet Run 1. Facts The node sends data about its state to the puppet master server. Node# 2.#Catalog# Puppet&uses&the&facts&to&compile&a& Catalog&that&specifies&how&the&node& should&be&configured.& 1 Facts 2 Catalog# 3 Report# 3.#&Report# Configura9on&changes&are&reported& back&to&the&Puppet&Master. 4.#&Report# Puppet's&open&API&can&also&send&data& to&3rd&party&tools.& 4 Report# Report#Collector#
- 13. Puppet Architecture PUPPET FORGE CONTENT MARKETPLACE PUPPET MASTER SERVER Reporting GUI & Workflows Content Admin & Security PUPPET OPEN SOURCE PLATFORM PUPPET AGENT PUPPET AGENT PUPPET AGENT Web Server Application Server Database Server Hardware Virtual Machine Cloud
- 14. Community Growth 1,700 modules 550 module authors 2.1 million downloads on the Puppet Forge 80,000 people have downloaded Puppet, PE, MCollective or the Learning VM 5,000+ people have attended Puppet training classes
- 15. Easy to Get Involved • Help with Documentation • Ask/Answer questions • http://ask.puppetlabs.com • mailing lists • IRC • Help with bug triage • Contribute code • Contribute modules on the Forge puppetlabs.com/community
- 17. Innovation & Reliability: Open Source & Puppet Enterprise Upstream Open Source Projects PUPPET MCOLLECTIVE FACTER +40 SMALLER PUPPETDB Commercial Product HIERA Environment for Nurturing Innovation • ~8,000 members • Latest technologies • Rapid release cycles • ~1000s of changes / week • Community support (IRC, forums) FOSS PROJECTS PUPPET ENTERPRISE IT Automation for Business-Critical Apps • Commercial-only functionality • Single, integrated solution • Graphical User Interface • Installer & upgrader • QA’d & security hardened • Performance tuning • API guarantees • Support & maintenance • Training & services
- 19. Puppet Enterprise IT automation for end-to-end infrastructure lifecycle management Discovery of nodes, resources, and status using real-time data Provisioning of bare metal, virtual, and cloud capacity IT Automation Configuration installation and configuration of operating systems and applications and automated enforcement Orchestration of multi-step operations to targeted collections of nodes Reporting of all state changes of all resources across all nodes
- 20. Puppet Enterprise: Discovery Dynamic, real-time discovery of nodes, resources, and state Address all nodes simultaneously Query any data source on a node ! % mco find –S “environment=QA and !dept=sales” Nodes Puppet Classes & Facts Files & Databases System Queries PUPPET ENTERPRISE Cloud Service APIs (eg, EC2) No More Outdated CMDBs Current deployment = source of truth Ask Specific Questions Focus queries using booleans and regular expressions Scalable, Real-time Responses Asynchronous message busbased architecture
- 21. Puppet Enterprise: Provisioning Quickly stand-up private and public cloud infrastructure Provisions instances and install agents Agents register with master PUPPET ENTERPRISE Agents apply configurations Leverage Existing Work Re-use on-premise configs for cloud deployments Many Clouds, One Solution Avoid lock-in to cloud vendor-specific APIs Prevent Cloud Drift Maintain consistent environments between onpremise and the cloud
- 22. Puppet Enterprise: Configuration Improve agility and productivity through defining and enforcing a desired state 1. Define the desired state service { ‘ssh’: ensure => running, enable => true, subscribe => File[‘/etc/sshd_config’] } 2. Simulate configuration changes 4. Report on differences and any changes made PUPPET ENTERPRISE Current State Desired State 3. Enforce the deployed desired state – automatically
- 23. Puppet Enterprise: Orchestration Controlled, multi-step operations to targeted collections of nodes Goal: update Apache on all QA nodes Update next 20% Update 10% of nodes Wait 20 min 100% of nodes updated Wait 20 min Puppet Enterprise Dynamic Multi-step Operations Chain the outputs of one operation into the next Manage Change Rate Progressively apply changes to sub-sets of nodes Control Change Scope Apply changes only to specifically tagged nodes
- 24. Puppet Enterprise: Reporting Inventory and change data accessible via GUI and APIs Comprehensive Infrastructure Data Hardware and software inventory, change reports, configuration graphs ! ! Open Standards YAML, JSON, and .dot-formatted data accessible via RESTful API ! ! Rich Ecosystem of Tools Boundary, New Relic, Graphite, GraphViz, Gephi, and many more
- 25. Puppet Enterprise: Event Inspector Quickly understand and act on changes occurring in your infrastructure Know What Changed, Where, & How Visualize infrastructure changes by Node Classes, and Resources ! ! Understand the Impact Drill-down, zoom-out to evaluate the scope of changes ! ! Take Action & Improve Service Levels Get the specifics to address and manage change
- 26. Puppet Enterprise: Role-Based Access Control Read-only, Read-write, and Admin roles Easy Set-up Quickly create new users through the Puppet Enterprise console GUI ! Easy Installation Select from Read-only, Read-write, or Admin roles ! Native Resource Support Users’ activities logged and auditable ! Third-Party Authentication Support LDAP, Active Directory, Google Apps
- 27. The Projects that Make Puppet Awesome
- 28. Puppet • Core project in the Puppet ecosystem • Idempotent, model-based configuration management • A simple language to describe state and an engine for enforcing it • Huge library of reusable modules on the Puppet Forge Puppet Enterprise built on top of Puppet
- 29. MCollective (mco) • • • • • Framework for server orchestration Parallel, real-time job execution Pluggable discovery of resources Target only the systems you want Extensible through simple Ruby agents Drives Orchestration Engine in Puppet Enterprise
- 30. PuppetDB • Foundation for applications that use Puppet data • Central storage for catalogs and facts that are part of your puppet infrastructure • Incredibly fast replacement for existing ActiveRecord stored configs • The most recent facts and catalog for every node Foundation for Puppet / Puppet Enterprise data storage
- 31. Hiera • • • • Simple, pluggable Hierarchical Database Key/value lookup tool for configuration data Keeps site-specific data out of your manifests Puppet classes request data and Hiera will act like a sitewide config file • Makes it easy to configure nodes, re-use Puppet modules and publish your modules Foundation for Puppet / Puppet Enterprise Hierarchical Data
- 32. Facter • Collects Facts about each system and uploads them to the • • • Puppet master, making an inventory system and a way to make decisions in your Puppet code Facts are available as variables in the Puppet DSL, like ‘$operatingsystem’ Super easy to plug-in additional facts in Ruby External Facts let you extend your inventory without Ruby: • shell, batch files or Powershell on windows, raw YAML Foundation for Puppet / Puppet Enterprise Inventory
- 33. Razor Provisioning • Rules-based provisioning for bare metal hardware and • • • • • virtual servers Developed in cooperation with EMC/VMWare Easily deployed via a puppet module from the Forge Automatically brings new servers into your puppet infrastructure Open, pluggable, and programmable Not yet ready for prime time - Help us get there by filing bugs and contributing to the community
- 34. Puppet Forge: Module Repository • By the community ... For the community • Identify and use the best ones • Contribute your own modules Jan 2012 Modules Total Downloads Since Feb 2012 November 2013 260 1735+ 2.1+ million Add Additional Functionality to Puppet / Puppet Enterprise
- 36. Puppet Labs
- 37. Puppet Labs: by the numbers Jan 2012 September 2013 Employees 55 190+ Customer Countries 29 42 Office Space 836 m2 9,000 ft2 2,232 m2 25,000 ft2
- 38. We’re Hiring!
- 41. Training Courses and Certification
- 43. New to Puppet? • https://puppetlabs.com/learn ! ! • http://docs.puppetlabs.com/learning/
- 44. New in Puppet (core) • External CA support (as of 3.2.0) (guide on • • • • docs.puppetlabs.com) OpenWRT OS Support (3.2.0) (Facts, Packages, Services). #19877 ordering setting. Control over ordering when applying catalogs. (docs.puppetlabs.com) (v 3.3.0) HTTP redirection (301, 302, 307). Useful for master’s front-end webserver to send fileserver traffic to closest server. (3.3.0) Module skel directory setting (module_skeleton_dir) for module generate (3.3.0) (module_skeleton_dir)
- 45. New in Puppet (core) 3.4.0 (rc) • • • • • • • 3.4.0 RC1 released December 3 Backward-compatible feature & fix release New “contain” function removes need for “anchor pattern” Policy-based certificate autosigning “priority” setting for puppet agent and puppet apply New $trusted hash with trusted node data (#19514) file resources can opt-out of source permissions (source_permissions attribute)
- 46. New in Puppet (core) 3.4.0 (rc) more • Cached catalogs work again (regression in 3.0.0) • Improvements to error handling class parameter lookups in • • hiera. More informative errors. Windows improvements (symlinks, source perms, versionable packages, group type - add domain users to local admin group, exec improvements - exit codes, installer improvements) rpm provider now supports “install_options” (e.g. —prefix) ! • http://docs.puppetlabs.com/puppet/3/reference/ release_notes.html