How to Open Source Your Puppet Configuration - Elizabeth Krumbach Joseph, HP

1. How to open source your Puppet
con guration
PuppetConf
23 September 2014
Elizabeth K. Joseph
Automation & Tools Engineer @ HP
lyz@princessleia.com
@pleia2

2. Elizabeth K. Joseph
● Linux hobbyist since 2002
● Professional systems administrator since 2006
● Contributor to Ubuntu, Debian and OpenStack
projects
● But perhaps most importantly...
Elizabeth K. Joseph
@pleia2

3. OpenStack Infrastructure
We have open sourced our infrastructure!
Lots of projects, including ones for con guration
available via:
https://git.openstack.org/cgit/openstack-infra
Elizabeth K. Joseph
@pleia2

4. How this came about
Puppet show, featuring:
Monty Taylor (stick puppet)
James E. Blair (stick puppet)
Elizabeth K. Joseph
@pleia2

5. Why?
Examples are awesome
(I don't want to spend all week guring out how to use
your puppet module)
Elizabeth K. Joseph
@pleia2

6. Why?
Encourages better practices
(our upgrade to Puppet 3 was not so painful)
Elizabeth K. Joseph
@pleia2

7. Why?
Allows others in your organization to suggest
changes
Elizabeth K. Joseph
@pleia2

8. Why?
Sharing is nice
Elizabeth K. Joseph
@pleia2

9. OK, so how?
Elizabeth K. Joseph
@pleia2
● Prepare policies
● Segregate code
● Document
● Share!

10. Have an open source policy
All software used in your infrastructure is
Open Source
...if not, segregate out proprietary
Elizabeth K. Joseph
@pleia2

11. Licenses!
Add a license to your con guration les :)
Seriously.
This is important.
Don't make me email you to ask the license of
your con g.
Elizabeth K. Joseph
@pleia2

12. Puppet: Step 1
Leverage existing modules or write your own
with the intent of sharing
Apache
MySQL
Reviewday
Keep these outside your generic con guration
tree
(You're already doing this, right?)
Elizabeth K. Joseph
@pleia2

13. Puppet: Step 2
Split out:
system con guration
project con guration
This makes it easier to consume by others
Elizabeth K. Joseph
@pleia2

14. Puppet: Step 3
Split out non-sensitive custom con gurations
into your own module
(Parameterized classes and variables are your friends!)
Elizabeth K. Joseph
@pleia2

15. Puppet: Step 4
Use Hiera for sensitive data
(Hiera is my favorite thing ever (except for when it's not))
Elizabeth K. Joseph
@pleia2

16. Puppet: Step 5
Set up PuppetBoard
Allows people in your org/community to see
status without bugging folks with shell access
Elizabeth K. Joseph
@pleia2

17. Document
Elizabeth K. Joseph
@pleia2
● Links to source
● Work Bow for using the con guration
● Contribution instructions
– Direct commits/reviews
– Bug reports
● Bootstrapping and glue

18. Share!
(Oh, and make sure you have a license)
Elizabeth K. Joseph
@pleia2

19. Who else has open source Puppet?
Debian: https://dsa.debian.org/
Mozilla: https://wiki.mozilla.org/ReleaseEngineering/PuppetAgain
Jenkins: http://jenkins-ci.org/content/come-join-infra-team
Elizabeth K. Joseph
@pleia2

20. Resources
OpenStack Project Infrastructure docs:
http://ci.openstack.org/
OpenStack Infrastructure repository:
https://git.openstack.org/cgit/openstack-infra/
OpenStack specs for when we split out some of our con gs:
http://specs.openstack.org/openstack-infra/infra-specs/
specs/con g-repo-split.html
http://specs.openstack.org/openstack-infra/infra-specs/
specs/puppet-modules.html
Elizabeth K. Joseph
@pleia2