+ All Categories
Home > Technology > Mozilla and Puppet

Mozilla and Puppet

Date post: 27-Jan-2015
Category:
Upload: puppet-labs
View: 109 times
Download: 0 times
Share this document with a friend
Description:
"Mozilla and Puppet" by Brandon Burton at PuppetCamp LA 2013, in conjunction with SCALE11x. Follow Brandon @solarce
Popular Tags:
18
Friday, February 22, 13
Transcript
Page 1: Mozilla and Puppet

Friday, February 22, 13

Page 2: Mozilla and Puppet

MOZILLA AND PUPPET

Friday, February 22, 13

Page 3: Mozilla and Puppet

WHO AM I?BRANDON BURTON

@SOLARCEMOZILLA WEB OPERATIONS

LOLCAT ENTHUSIAST

Friday, February 22, 13

Page 4: Mozilla and Puppet

TODAYOVERALL LAYOUT

BEST PRACTICES FOR MODULES/MANIFESTSSCALING PUPPETMASTERS

PUPPETCTLPUPPET DASHBOARD

NAGIOS

Friday, February 22, 13

Page 5: Mozilla and Puppet

FOCUSING ON MOZILLA IT

ALSO RELENG - PUPPETAGAIN

Friday, February 22, 13

Page 6: Mozilla and Puppet

OVERALL LAYOUT

MODULES/|__FILES/|__MANIFESTS/|__TEMPLATES/MANIFESTS/NODES/HIERA/

Friday, February 22, 13

Page 7: Mozilla and Puppet

BEST PRACTICES

BASED ON PUPPETLABSSVN PRECOMMIT HOOK|__CHECK-PUPPET-SYNTAX|__CHECK-TEMPLATE-SYNTAXPUPPET-LINT

Friday, February 22, 13

Page 8: Mozilla and Puppet

SCALING PUPPETMASTERS

AT LEAST A PUPPETMASTER PER DC FRONTEND/BACKENDS

FRONTEND DOES ALL SSL ACTIONS NON-SSL ACTIONS PROXIED TO BACKENDS

Friday, February 22, 13

Page 9: Mozilla and Puppet

PUPPETCTL

SCRIPT FOR DISABLING/ENABLING THE PUPPET AGENT HAS ARGUMENTS FOR AMOUNT OF TIME

EDITS MOTD HTTPS://GITHUB.COM/MOZILLA-IT/PUPPETCTL

Friday, February 22, 13

Page 10: Mozilla and Puppet

PUPPET DASHBOARD

CHECK FOR ERRORSINFRA TEAM KEEPS AN EYE ON IT

HTTP://THEFOREMAN.ORG/

Friday, February 22, 13

Page 11: Mozilla and Puppet

NAGIOS

PUPPET GENERATES OUR NAGIOS CONFIGS STALENESS CHECK BASED ON PUPPET DASHBOARD

Friday, February 22, 13

Page 12: Mozilla and Puppet

WHERE WE'RE GOING

SECRETS MODULEHEIRA

PUPPETDB OPEN SOURCING MODULES

Friday, February 22, 13

Page 13: Mozilla and Puppet

SECRETS MODULE

PRIVATE REPOSITORYSSL CERTIFICATES

SECRET BINARY FILESJUST A MODULE YOU CAN INCLUDE

Friday, February 22, 13

Page 14: Mozilla and Puppet

HEIRA

PASSWORDS, CREDENTIALS, SECRETSHEIRA-GPG

PARAMETERIZED CLASS DEFAULTSNOT ENTIRELY DECIDED YET

Friday, February 22, 13

Page 15: Mozilla and Puppet

PUPPETDB

OVERLAPS WITH INTERNAL INVENTORY TOOLHTTPS://GITHUB.COM/MOZILLA/INVENTORY

Friday, February 22, 13

Page 16: Mozilla and Puppet

OPEN SOURCING MODULES

DEPENDS ON SECRETS MODULENOT A GOAL, BUT NEAR IT

TRYING TO DEVELOP NEW MODULES IN PUBLICE.G. HTTPS://GITHUB.COM/RTUCKER-MOZILLA/PUPPET-

SSH-1/

Friday, February 22, 13

Page 18: Mozilla and Puppet

KEEP ON ROCKIN'THE FREE WEB

Friday, February 22, 13


Recommended