Puppet: Orchestration framework?

Puppet:Orchestration Framework?

Tuesday, February 26, 13

Dan Bodedan@puppetlabs

bodepd on <twitter,freenode>


Puppet


ensures consistency...

PuppetMaster

DB1 DB2 Tomcat1 Tomcat2


With Resources


Describe the configuration state of elements

user { ‘dan’: ensure => present, shell => ‘/bin/bash’, }


user { ‘dan’: # a user named dan ...


user { ‘dan’: # a user named dan ensure => present, # should exist ...


user { ‘dan’: # a user named dan ensure => present, # should exist shell => ‘/bin/bash’, # with this shell}


Properties

user { ‘dan’: ensure => present, # existence shell => ‘/bin/bash’, # shell}


ImplementingProperties

retrieve current state

converge to desired state


Puppet’sModel


desired state

current state

package { ‘git’: ensure => present}

dpkg-query --search git

rpm -q git


desired state

current state

==?



rpm -q git

absent present

Idempotent


desired state

current state

==?

Sync Event



rpm -q git

absent present

apt-get install git

yum install git

transition

absent -> present

Events


Noopdesired state

current state

==?

Event



rpm -q git

absent present

potential transition

absent -> present


Puppet DSL andResources


Puppet DSL

Composes collections of resources.


Package/File/Service

class webserver { package { ‘apache2’: ... } file { ‘/etc/apache2/apache2.conf’: ... require => Package[‘apache2’], } service { ‘apache2’: ... subscribe => File[‘/etc/apache2/apache2.conf’] }}


configure a node

include webserver


Catalogs

Package

File

Service

(refresh)


Text is awesome


Integrates with version control

Easy to share/collaborate

Text is awesome


Application stacks


ensure consistency?

Puppet

IaaSEndpoint


With Resources?


Express stacks as:

* VM Instances

* Networks

* Firewalls

* Disks

GCE example


GCE as resources?


class app_stack {...


class app_stack { gce_network { ‘dansnetwork’: ensure => present, gateway => '10.0.1.1', range => '10.0.1.0/24’, } ->...


class app_stack { gce_network { ‘dansnetwork’: ensure => present, gateway => '10.0.1.1', range => '10.0.1.0/24’, } -> gce_firewall { ‘webhttp’: ensure => present, allowed => 'tcp:80’, network => ‘appnet’, } ->...


class app_stack { gce_network { ‘dansnetwork’: ensure => present, gateway => '10.0.1.1', range => '10.0.1.0/24’, } -> gce_firewall { ‘webhttp’: ensure => present, allowed => 'tcp:80’, network => ‘appnet’, } -> gce_instance { ‘server1’: ensure => present, network => ‘appnet’ }}


infrastructure only

exists to be consumed


Puppet assigns roles


gce_instance { ‘dansinstance’: ensure => present, … modules => [‘mysql’, ‘memcached’]}

Step 1: distribute content


forge.puppetlabs.com

I get all of my content from the

forge!


gce_instance { ‘dansinstance’: ensure => present, …

classes => { ‘mysql’ => {bind_address => 0.0.0.0} },

}

Step 2: classify


Awesomeness


ComposableStandard

ConfigurationLanguage


Idempotency


Noop


Limitations/unknowns


VLAN

VM1 VM2 VM2 VMN...

DB1 DB1

LB

Parallel processing of Catalogs


Proxy Nodes (credential

management)


Application Stacksare

Persistent


Master vs. Masterless?


Puppet: Orchestration framework?

Documents

Transcript of Puppet: Orchestration framework?