DevopsDaysBerlin 2016

Chef & Ansible

@rpelisse

Romain

@francoisledroff

François

Demo Mode

Open

No Trolling ?

Deep Dive

A Web server• Motd• Customized Motd

• Http server• Nginx• Customized doc root• Reverser proxy• SSL offloading• HTTP query validation

• A REST micro service • Powered by Java• Security Manager

• All of that part of a CD pipeline• Elastic and Dynamic configuration

Let’s do it

Job done ?• Motd

• Customized Motd• Http server

• Nginx• Customized doc root• Reverser proxy• SSL offloading• HTTP query validation

• A REST micro service • Powered by Java• Security Manager

• All of that part of a CD pipeline• Elastic and Dynamic configuration

The Code is on githubhttps://github.com/francoisledroff/devopsdayberlin2016https://github.com/francoisledroff/devopsdayBerlin2016JavaAppThe slide will be on slidehare at http://www.slideshare.net/francoisledroff

@francoisledroff @rpelisse

Questions ?

More ?

UX/Dev/QA/Ops

devQA prodstage

Chef-server

https RSA private key Auth

chef-clientchef-client chef-client chef-client

https RSA private key Auth • Chef encrypted data bags

• Encrypted for• admin users• whitelisted nodes

• Managed by chef-vault ruby gem

Chef-vault

Git

UX/Dev/QA/Ops

devQA prodstage

Chef-server

https RSA private key Auth

chef-clientchef-client chef-client chef-client

https RSA private key Auth • Org Segregation• Chef Server Security• Elasticity

https://wiki.jenkins-ci.org/display/JENKINS/chef-identity+plugin

Chef-vault

Non prod organization

prod organization

workstation

Git

github

Artifact Repository

webjarrubygem

Chef-server nodes

RSA key Auth

ssh

https

maven redhat

RSA key Auth

opscode npm

Secure Dependency Management