Ansible role reuse - promising but hard
•Download as PPTX, PDF•
0 likes•1,746 views
Role reuse: promising but hard - Martin Maisey. - Why we love Ansible - Why Galaxy doesn’t always work for us at the moment - What makes a good role? - How could we/Ansible Inc make Galaxy and Ansible’s metadata format better? Presented at Ansible Meetup London 27/11/14 - see http://www.meetup.com/Ansible-London/events/218679344/
Recommended
Recommended
More Related Content
What's hot
What's hot (11)
Similar to Ansible role reuse - promising but hard
Similar to Ansible role reuse - promising but hard (20)
Recently uploaded
Recently uploaded (20)
Ansible role reuse - promising but hard
- 1. Role reuse: promising, but hard Ansible London meet up 26th November 2014 Martin Maisey, BJSS (Southern) CTO, @mjmaisey
- 2. Who are BJSS / who am I? © BJSS 2014 • Software engineer/architect background, early Apache Ant adopter • Stumbled into infrastructure automation working for BJSS 2003-2005 • Co-founder/technical director of Opsview (then Opsera) • Detica NetReveal big data / analytics / cybersecurity • Returned to BJSS as CTO in 2010 • Ansible user since mid 2013 for www.closethedoor.org.uk • Disgustingly proud dad • ~500 awesome technologists, ~20% YoY growth, lots of prizes, yada yada • Historically used a lot of Puppet; started adopting Ansible Dec 2013 • Redeveloped NHS Spine • Redeveloped low latency trading engine one for the world’s largest FX venues • Various large-scale data center/virtualised infrastructure/internal cloud engineering projects
- 3. Why we love Ansible © BJSS 2014 Obvious, even to a manager Easy as pie to learn 2 a.m. proof (mostly) Oddly beautiful
- 4. + Galaxy looks promising for avoiding work © BJSS 2014 …or whatever’s your thing, really.
- 5. © BJSS 2014 However ...
- 6. Many, many candidate roles © BJSS 2014 Too. Much. Choice.
- 7. Roles are of variable quality © BJSS 2014 Sensibly versioned Idempotent? Tested ? Documented ? Cross-platform? Parameterise d? Continuously built? ? Friendly license?
- 8. Roles are abandoned © BJSS 2014
- 9. Roles don’t reuse each other © BJSS 2014
- 10. Only option right now is to fork, fix, resubmit © BJSS 2014 Just adds more noise
- 11. © BJSS 2014 Coalesce community efforts around a few, high quality roles Make them easy to find What would be better?
- 12. How could we/Ansible Inc do this? Extra metadata Capture intent to: • Keep role up to date • Use semantic versioning • Be idempotent • Update in response to security issues • Fix bugs/accept pull requests • Capture licenses of installed software as well as roles themselves Take notice of https://galaxy.ansible.com/intro © BJSS 2014 Galaxy features • Show number of downloads / github stars / GitHub watchers • Better search / ranking of roles and authors • Web of Trust • License walking • Abandonment workflow • Automatic workflow if no commits on GitHub and open issues exist • Or user-initiated • Email owner, encourage them to a/ certify the role is still maintained b/ mark abandoned, nominate a maintained fork if one exists • If they don’t, do it for them or documented REST API to allow others to do this
- 13. Thoughts / Questions? @mjmaisey uk.linkedin.com/in/mjmaisey martin.maisey@bjss.com http://mjm.name © BJSS 2014 http://www.bjss.com
Editor's Notes
- BJSS Just over 21 years old –could say we’re – technically - a proper grown-up company now Formed by co-founders who were annoyed at being managed by idiots, still privately owned, ethos remains First gig was writing Solaris device drivers for Emulex HBAs, then got into trading systems, now do pretty much everything Don’t ask what the name stands for, but we like to call ourselves a full service consulting company Automating infrastructure well before the term DevOps existed Used Puppet, mostly on large projects, for a number of years Started adopting Ansible about a year ago, and it would probably now be a company standard if we had things like that Redeveloped NHS Spine on Python / Riak / Tornado (El Reg passim.), went live recently without a fuss/hitting the front pages, saving the taxpayer a lot of money, providing a solid platform for new functionality Also sent a major FX trading system from rebuild live, as a big bang, without anyone noticing – including reverse engineering undocumented terminal protocols and engineering in bug-for-bug compatibility Both of the above built on DevOps principles from the start Have been doing infra work for years, but formalised this four years back with an Infrastructure consulting group – now Infrastructure & Security For a very large precision manufacturing firm, scope and managed a multi-year enterprise datacentre migration programme – including core network build-out, shared infrastructure, P2V, legacy application migration and updates to supported platforms, lift+shift of legacy boxes – for all mission-critical enterprise services Before OpenStack resembled anything you’d want to touch with a bargepole