The document discusses using Puppet to manage OpenStack deployments. It provides an overview of OpenStack, describes how Puppet can be used to deploy and configure OpenStack services and components, and highlights advantages of Puppet such as its resource abstraction layer, ordering, composability, and active community. It also notes challenges of orchestration, high availability, testing, and keeping Puppet code up to date with new OpenStack releases.

1. Puppet and
OpenStack
Colleen Murphy - Puppet Labs

2. About Me
● Background in system administration and
puppet at Portland State University
● Puppet Labs module engineer
● StackForge puppet core contributor
Colleen Murphy ⚙ freenode/crinkle ⚙ twitter/@pdx_krinkle ⚙ github/cmurphy

3. Overview
● Intro to OpenStack
● Leveraging puppet for OpenStack
● What makes puppet awesome at this
● Challenges we’re facing as puppet users

4. What is OpenStack?
OpenStack is an open source cloud computing
platform.
● Public clouds - Amazon competitors
● Private clouds - Internal infrastructure,
developer support, QA support

5. An OpenStack Deployment
MySQLRabbitMQ

6. An OpenStack Deployment
Keystone
Identity
MySQLRabbitMQ

7. An OpenStack Deployment
Cinder
Block Storage
Designate
DNS
Trove
Database
Zaqar
Messaging
Manila
Shared Files
Horizon
Dashboard
Tempest
QA
Glance
Image
Swift
Object Storage
Ceilometer
Telemetry
Sahara
Data Processing
Neutron
Networking
Heat
Orchestration
Barbican
Key Mgmt
Ironic
Bare Metal
Nova
Compute
Keystone
Identity
MySQLRabbitMQ

8. An OpenStack Deployment
Cinder
Block Storage
Designate
DNS
Trove
Database
Zaqar
Messaging
Manila
Shared Files
Horizon
Dashboard
Tempest
QA
Glance
Image
Swift
Object Storage
Ceilometer
Telemetry
Sahara
Data Processing
Neutron
Networking
Heat
Orchestration
Barbican
Key Mgmt
Ironic
Bare Metal
Nova
Compute
Keystone
Identity
MySQLRabbitMQ

9. Puppetizing OpenStack
Cinder
Block Storage
Designate
DNS
Trove
Database
Zaqar
Messaging
Manila
Shared Files
Horizon
Dashboard
Tempest
QA
Glance
Image
Swift
Object Storage
Ceilometer
Telemetry
Sahara
Data Processing
Neutron
Networking
Heat
Orchestration
Barbican
Key Mgmt
Ironic
Bare Metal
Nova
Compute
Keystone
Identity
MySQLRabbitMQ

10. Puppetizing OpenStack
Cinder
Block Storage
Designate
DNS
Trove
Database
Zaqar
Messaging
Manila
Shared Files
Horizon
Dashboard
Tempest
QA
Glance
Image
Swift
Object Storage
Ceilometer
Telemetry
Sahara
Data Processing
Neutron
Networking
Heat
Orchestration
Barbican
Key Mgmt
Ironic
Bare Metal
Nova
Compute
Keystone
Identity
MySQLRabbitMQ
openstacklib
openstack_extras
apache
firewall
epel
corosync
memcached
ntp
apt

11. StackForge

12. Tools using Puppet for OpenStack
● Fuel
● RDO/PackStack
● TripleO-Puppet-Elements

13. Popularity of Puppet
Source: OpenStack User Survey November 2014

14. Why is puppet great at this?

15. Resource Abstraction Layer
package { 'nova':
ensure => installed,
name => $package_name,
}
file { '/etc/nova/nova.conf':
mode => 0640,
owner => 'nova',
group => 'nova',
require => Package['nova'],
}
service { 'nova-api':
ensure => running,
enable => true,
}

16. Resource Abstraction Layer
keystone_tenant { 'services':
ensure => present,
description => 'Services Tenant',
enabled => true,
}
neutron_subnet { '10.0.0.0/24':
cidr => '10.0.0.0/24',
ip_version => '4',
enable_dhcp => true,
network_name => 'private',
tenant_name => 'services',
dns_nameservers => [$dns],
}
nova_config { 'DEFAULT/default_floating_pool':
value => 'private'
}

17. Resource Ordering

18. Composability and Reusability

19. Active Community

20. Hiera
######## Fixed IPs (controllers)
openstack::controller::address::api: '192.168.11.4'
openstack::controller::address::management: '172.16.33.4'
openstack::storage::address::api: '192.168.11.5'
openstack::storage::address::management: '172.16.33.5'
######## Database
openstack::mysql::root_password: 'spam-gak'
openstack::mysql::service_password: 'fuva-wax'
openstack::mysql::allowed_hosts: ['localhost', '127.0.0.1', '172.16.33.%']
openstack::mysql::keystone::user: 'keystone'
openstack::mysql::keystone::pass: 'fuva-wax'

21. Hiera
node 'control.example.com' {
include ::openstack::role::controller
}
node 'storage.example.com' {
include ::openstack::role::storage
}
node 'network.example.com' {
include ::openstack::role::network
}
node 'compute.example.com' {
include ::openstack::role::compute
}

22. What challenges are there?

23. Orchestration
Image source: f5.com

24. High Availability
Image source: cloudcaboodle.com

25. Testing

26. Keeping up

28. Thanks!
Colleen Murphy ⚙ freenode/crinkle ⚙ twitter/@pdx_krinkle ⚙ github/cmurphy