puppet camp portland 2014: masterless puppet in aws

Download Puppet Camp Portland 2014: Masterless Puppet in AWS

Post on 13-Jul-2015

420 views

Category:

Documents

0 download

Embed Size (px)

TRANSCRIPT

  • Masterless Puppet in AWSby Daniel Thornton (relud)

  • AWS ResourcesEC2 instanceEC2 user-dataIAM roleS3 bucket

  • Other ResourcesGithubPuppet ForgeHiera

  • Git RepoModules and non-secret hiera data

    Installed to /etc/puppet

    List forge modules in hiera

  • SecretsStored in S3 bucket

    IAM role for access

  • DeploymentWrite userdata

    Assign role with Facter external fact

    Launch EC2 instance with userdata

  • Live Demohttps://github.com/relud/puppet-demo

  • Improvements Bundle /etc/puppet (except secrets) Store secrets in git and automatically sync

  • Pros Deploy any code version Simple puppet forge integration Scalable No manual approval of servers Puppet only runs once

  • Cons Puppet only runs once Puppetdb and dashboards (like

    TheForeman) dont work well Doesnt translate well outside AWS

  • Questions?