Introduction to Infrastructure as Code & Automation / Introduction to Chef

Chef Fundamentals by Chef Software, Inc. is licensed under a
Creative Commons Attribution-ShareAlike 4.0 International License.
Intro to Infrastructure as Code
Introduction to Chef
POSSCON – April 2015
http://bit.ly/posscon2015-chef

Nathen Harvey
• Community Director at Chef
• Co-host of the Food Fight Show
• Co-organizer of DevOpsDC meetup
• Occasional farmer – http://bit.ly/farmer-nathen
• Love Eggs – http://eggs.chef.io
• @nathenharvey
• nharvey@chef.io

Hello!
• System Administrator?

Hello!
• Developer?

Hello!
• Developer?
• Ruby developer?

Hello!
• Developer?
• DevOp?

Hello!
• Developer?
• DevOp?
• Business Person?

Are you experienced?
• Experience with Infrastructure as Code or
Configuration Management?

Are you experienced?
• Experience with Infrastructure as Code or
Configuration Management?
• Experience with Chef?

Which version control system do your use?

• cp foo foo.bak

• cp foo{,.`date +%Y%m%d%H%M`}

• cp foo{,.`date +%Y%m%d%H%M`}
• cp foo{,.`date +%Y%m%d%H%M`-`$USER`}

The Sys Admin’s Journey
• ssh

• ssh
• Store notes in ~/server.txt

• ssh
• Move notes to the wiki

• ssh
• Write some scripts (setup.sh, fixit.sh, etc.)

• ssh
• Golden images and snapshots

• ssh
• Remote execution via ssh

• ssh
• Remote execution via ssh
• Policy-driven configuration management

Automation Platform
• Creates a dependable view of your entire network’s
state.
• Can handle complex dependencies among the
nodes of your network.
• Is fault tolerant.
• Is secure.
• Can handle multiple platforms
• Can manage cloud resources
• Provides a foundation for innovation

Infrastructure as Code
• Programmatically
provision and configure
components

• Treat like any other
code base

• Reconstruct business
from code repository,
data backup, and
compute resources

• Programmatically
provision and configure
components
• Treat like any other
code base
• Reconstruct business
from code repository,
data backup, and
compute resources

Policy-based
• You capture the policy for your infrastructure in
code
• A program ensures each node in your
infrastructure complies with the policy
• A control loop keeps the system stable and
allows for change when policy is updated

Sample Infrastructure
Graphite Nagios
Rails
Memcache
Postgres Slaves
Postgres Master

New Compliance Mandate!
Graphite Nagios
Rails
Memcache
Postgres Slaves
Postgres Master

New Compliance Mandate!
Graphite Nagios
Rails
Memcache
Postgres Slaves
Postgres Master
•  Move SSH off of port 22
•  Let’s put it on 2022

6 Golden Images to Update
Graphite Nagios
Rails
Memcache
Postgres Slaves
Postgres Master
1
3
4
5
6
2
/etc/ssh/sshd_config
--- a/sshd_config
+++ b/sshd_config
-Port 22
+Port 2202

12 Instances to replace
Graphite Nagios
Rails
Memcache
Postgres Slaves
Postgres Master
1
3
2
5 6 74
8
10
9
11
12
•  Launch
•  Delete
•  Repeat
•  Typically manually

Done in maintenance window
Graphite Nagios
Rails
Memcache
Postgres Slaves
Postgres Master
1
3
2
5 6 74
8
10
9
11
12
•  High stakes
•  Late hours
•  Risky change

New configurations required?
Graphite Nagios
Rails
Memcache
Postgres Slaves
Postgres Master
Do the new instances
have new IP Addresses?
* Not all connections shown

Chef
Fast, scalable, flexible IT automation

What is Chef
• Open source framework for managing
complexity in your infrastructure through policy-
driven automation code
• A community of professionals
• A company

Chef
https://www.chef.io/chef/

Chef Server – Policy & State

Desired Configuration
Node
Chef
Server
chef-client
What policy should I follow?

Node
Chef
Server
chef-client
"recipe[ntp::client]"
"recipe[users]"
"role[webserver]"

Chef
Server
chef-client
"recipe[ntp::client]"
"recipe[users]"
"role[webserver]"

HA Proxy Configuration
Webservers
HA Proxy

Webservers
HA ProxyChef
Server

Webservers
HA ProxyChef
Server
Webservers?

Webservers
HA ProxyChef
Server
Webservers?
{
"web01" : {
"hostname" : "web01",
"ipaddress" : "10.1.1.1"
},
"web02" : {
"ipaddress" : "10.1.1.2"
},
"web03" : {
"ipaddress" : "10.1.1.3"
},
"web04" : {
"ipaddress" : "10.1.1.4"
}

Webservers
HA ProxyChef
Server
Webservers?
{
"web01" : {
"ipaddress" : "10.1.1.1"
},
"web02" : {
"ipaddress" : "10.1.1.2"
},
"web03" : {
"ipaddress" : "10.1.1.3"
},
"web04" : {
"ipaddress" : "10.1.1.4"
}
pool_members
{
"web01" : {
"ipaddress" : "10.1.1.1"
},
"web02" : {
"ipaddress" : "10.1.1.2"
},
"web03" : {
"ipaddress" : "10.1.1.3"
},
"web04" : {
"ipaddress" : "10.1.1.4"
}

Webservers
HA Proxy
haproxy.cfg
server web01 10.1.1.1 weight 1 maxconn 1 check
pool_members
{
"web01" : {
"ipaddress" : "10.1.1.1"
},
"web02" : {
"ipaddress" : "10.1.1.2"
},
"web03" : {
"ipaddress" : "10.1.1.3"
},
"web04" : {
"ipaddress" : "10.1.1.4"
}

Building your policy
Resources and Recipes

Resources
• Piece of the system and its desired state

Resources - Package
Package that should be
installed
package "mysql-server" do
action :install
end

Resources - Service
Service that should be
running and restarted
on reboot
service "iptables" do
action [ :start, :enable ]
end

Resources - Service
File that should be
generated
file "/etc/motd" do
content "Property of Chef Software"
end

Resources - Cron
Cron job that should be
configured
cron "restart webserver" do
hour '2'
minute '0'
command 'service httpd restart'
end

Resources - User
User that should be
managed
user "nginx" do
comment "Nginx user <nginx@example.com>"
uid 500
gid 500
supports :manage_home => true
end

Resources - DSC
DSC resource that
should be run
dsc_script 'emacs' do
code <<-EOH
Environment 'texteditor'
{
Name = 'EDITOR'
Value = 'c:emacsbinemacs.exe'
}
EOH
end

Resources – Registry Key
Registry key that should
be created
registry_key "HKEY_LOCAL_MACHINE
SOFTWAREMicrosoftWindows
CurrentVersionPoliciesSystem"
do
values [{
:name => "EnableLUA",
:type => :dword,
:data => 0
}]
action :create
end

Resources
• Piece of the system and its desired state
• http://docs.chef.io/chef/resources.html

Lab – Install a text editor
• Problem: Our workstation does not have
$EDITOR installed
• Success Criteria: You can edit files with
$EDITOR
• $EDITOR is your favorite command line text
editor: vim, emacs, or nano

What’s up with the card?
• http://bit.ly/posscon-workstations
• Login: chef
• Password: [REDACTED]

$
The authenticity of host '54.165.227.226
(54.165.227.226)' can't be established.
RSA key fingerprint is c1:ec:ab:66:fb:22:4a:
8f:c2:c5:9b:26:77:f3:dd:b3.
Are you sure you want to continue connecting
(yes/no)? yes
Warning: Permanently added
'54.165.227.226' (RSA) to the list of known
hosts.
chef@54.165.227.226's password:
Login to your lab machine
ssh chef@54.164.75.30

Welcome to your workstation
• ChefDK version 0.4.0 is installed
• chef --version
• Chef user has passwordless sudo access
• sudo cat /etc/shadow

$
/usr/bin/which: no vim in (/opt/
chefdk/bin:/home/chef/.chefdk/gem/
ruby/2.1.0/bin:/opt/chefdk/embedded/
bin:/usr/local/bin:/bin:/usr/bin:/
usr/local/sbin:/usr/sbin:/sbin:/
home/chef/bin)
Is $EDITOR installed?
which vim

chef-apply
• chef-apply is an executable program that allows
you to work with resources
• Is included as part of the ChefDK
• A great way to explore resources
• NOT how you’ll eventually use Chef in
production

$
Recipe: (chef-apply cookbook)::(chef-apply recipe)
* package[vim] action install
- install version 7.2.411-1.8.el6 of package vim-enhanced
Install vim
sudo chef-apply -e "package 'vim'"

$
* package[emacs] action install
- install version 23.1-25.el6 of package emacs
Install emacs
sudo chef-apply -e "package 'emacs'"

$
Recipe: (chef-apply cookbook)::(chef-apply
recipe)
* package[nano] action install
- install version 2.0.9-7.el6 of package nano
Install nano
sudo chef-apply -e "package 'nano'"

Resources
• Describe the desired state
• Do not need to tell Chef how to get there
• What happens if you re-run the chef-apply
command?

$
Recipe: (chef-apply cookbook)::(chef-apply
recipe)
* package[vim] action install (up to date)
Install $EDITOR again with chef-apply
sudo chef-apply -e "package 'vim'"

Test and Repair
Resources follow a test
and repair model
package "vim"

Test and Repair
and repair model
package "vim"
Is vim installed?

Test and Repair
and repair model
package "vim"
Is vim installed?
Yes

Test and Repair
and repair model
package "vim"
Is vim installed?
Done
Yes

Test and Repair
and repair model
package "vim"
Is vim installed?
Done
Yes No

Test and Repair
and repair model
package "vim"
Is vim installed?
Done Install it
Yes No

Resources – Test and Repair
• Resources follow a test and repair model
• Resource currently in the desired state? (test)
• Yes – Do nothing
• No – Bring the resource into the desired state
(repair)

Resources
• package
• template
• service
• directory
• user
• group
• dsc_script
• registry_key
• powershell_script
• cron
• mount
• route
• …and more!

OPEN IN EDITOR:
SAVE FILE!
Hello, Chef!
file "/tmp/hello_chef.txt" do
content "Hello, Chef"
mode "0777"
end
~/hello_chef.rb

$
* file[/tmp/hello_chef.txt] action create
- create new file /tmp/hello_chef.txt
- update content in file /tmp/hello_chef.txt from none to 79c290
--- /tmp/hello_chef.txt 2014-10-22 19:59:04.000000000 -0400
+++ /tmp/.hello_chef.txt20141022-23075-19aelx1 2014-10-22
19:59:04.000000000 -0400
@@ -1 +1,2 @@
+Hello, Chef
- change mode from '' to '0777'
Apply the policy
sudo chef-apply hello_chef.rb

Resources
• Describe the desired state
• Do not need to tell Chef how to get there
• What happens when you re-apply the policy?

$
* file[/tmp/hello_chef.txt] action create (up to date)
Apply the policy

Resources
• A piece of the system
• Its desired state
file "/tmp/hello_chef.txt" do
content "Hello, Chef"
mode "0777"
end

$
Change the state of the system
echo “Hello, #posscon” > /tmp/hello_chef.txt

$
* file[/tmp/hello_chef.txt] action create
- update content in file /tmp/hello_chef.txt from e453df to 79c290
--- /tmp/hello_chef.txt 2014-10-22 20:00:20.000000000 -0400
+++ /tmp/.hello_chef.txt20141022-23340-17a7m5t 2014-10-22
20:00:50.000000000 -0400
@@ -1,2 +1,2 @@
-“Hello, #posscon”
+Hello, Chef
Apply the policy

Resources – Test and Repair
• Resources use a test and repair model
• Resource currently in the desired state?
• Yes – Do nothing
• No – Bring the resource into the desired state (repair)

Built-in Resources
• package
• template
• service
• cron
• directory
• mount
• user
• group
• registry_key
• remote_directory
• route
• and many more…
docs.chef.io/chef/resources.html

Recipes
• Policy is defined as a collection of resources in
recipes. There are lots of abstractions on top of
this but resources are the basic building blocks.

Install git
• The package git should be installed
• The file named '/home/chef/.gitconfig'
should be created.
• It should be owned by the chef user and group.
• It should have the content:
[user]n name=John Doen email=jdoe@examplen

OPEN IN EDITOR:
SAVE FILE!
Install git
package 'git' do
action :install
end
file '/home/chef/.gitconfig' do
content "[user]n name=John Doen email=jdoe@examplen"
user 'chef'
group 'chef'
end
~/git.rb

$
* package[git] action install
- install version 1.7.1-3.el6_4.1 of package git
* file[/home/chef/.gitconfig] action create
- create new file /home/chef/.gitconfig
- update content in file /home/chef/.gitconfig from none to 259950
--- /home/chef/.gitconfig 2014-09-24 00:24:13.558127555 +0000
+++ /tmp/..gitconfig20140924-10180-1ij68vq 2014-09-24 00:24:13.559127555 +0000
@@ -1 +1,4 @@
+[user]
+ name=John Doe
+ email=jdoe@example.com
- change owner from '' to 'chef'
- change group from '' to 'chef'
- restore selinux security context
Install git
sudo chef-apply ~/git.rb

Test-driven Infrastructure
Change policy with confidence

Our process
• Write policy
• Apply policy
• Verify policy
• Not bad for the simple case, will quickly get
untenable

Faster Feedback
• Speed-up the feedback loops with automated
testing.
• Have confidence in your changes before you run
them in production

Chef Testing
• Did chef-client complete successfully?
• Did the recipe put the node in the desired state?
• Are the resources properly defined?
• Does the code follow our style guide?

Test-driving infrastructure
• We are going to use a relatively simple scenario
• We are going to explore many facets of testing
• We are going to follow a test-first, test-driven
model

Our Scenario
• We want a custom home page available on the
web.

$
Compiling Cookbooks...
Recipe: code_generator::cookbook
* directory[/home/chef/chef-repo/cookbooks/apache] action create
- create new directory /home/chef/chef-repo/cookbooks/apache
* template[/home/chef/chef-repo/cookbooks/apache/metadata.rb] action
create_if_missing
- create new file /home/chef/chef-repo/cookbooks/apache/metadata.rb
- update content in file /home/chef/chef-repo/cookbooks/apache/
metadata.rb from none to 4c0e2d
(diff output suppressed by config)
* template[/home/chef/chef-repo/cookbooks/apache/README.md] action
create_if_missing
Create an apache cookbook
chef generate cookbook cookbooks/apache

Questions to ask when testing
• Did chef-client complete successfully?
• Does the code following our style guide?

Chef client success status
• Requirements to verify chef-client success:
• A place to store the cookbook artifact

• A chef-client with access to the cookbook

• A target server running the same OS as production

Test Kitchen
• Test harness to execute code on one
or more platforms
• Driver plugins to allow your code to
run on various cloud and virtualization
providers
• Includes support for many testing
frameworks
• Included with ChefDK

Test Matrix
• Two operating systems ubuntu-12.04
centos-6.4

Test Matrix
• Two operating systems
• One recipe
default
ubuntu-12.04 apache::default
centos-6.4 apache::default

Test Matrix
• Two operating systems
• Two recipes
default ssl
ubuntu-12.04 apache::default apache::ssl
centos-6.4 apache::default apache::ssl

Test Matrix
• Three operating
systems
• Two recipes
default ssl

OPEN IN EDITOR:
SAVE FILE!
Configuring the Kitchen
---
driver:
name: vagrant
provisioner:
name: chef_zero
platforms:
- name: ubuntu-12.04
- name: centos-6.4
suites:
- name: default
run_list:
- recipe[apache::default]
attributes:
apache/.kitchen.yml

.kitchen.yml
• driver - virtualization or
cloud provider
---
driver:
name: vagrant
provisioner:
name: chef_zero
platforms:
- name: centos-6.4
suites:
- name: default
run_list:
attributes:

.kitchen.yml
• provisioner -
application to configure
the node
---
driver:
name: vagrant
provisioner:
name: chef_zero
platforms:
- name: centos-6.4
suites:
- name: default
run_list:
attributes:

.kitchen.yml
• platforms - target
operating systems
---
driver:
name: vagrant
provisioner:
name: chef_zero
platforms:
- name: centos-6.4
suites:
- name: default
run_list:
attributes:

.kitchen.yml
• suites - target
configurations
---
driver:
name: vagrant
provisioner:
name: chef_zero
platforms:
- name: centos-6.4
suites:
- name: default
run_list:
attributes:

.kitchen.yml
---
driver:
name: vagrant
provisioner:
name: chef_zero
platforms:
- name: centos-6.4
suites:
- name: default
run_list:
default
ubuntu-12.04 apache::default
centos-6.4 apache::default

.kitchen.yml
---
driver:
name: vagrant
provisioner:
name: chef_zero
platforms:
- name: centos-6.4
suites:
- name: default
run_list:
- name: ssl
run_list:
- recipe[apache::ssl]
default ssl

$
Move to the apache cookbook directory
cd ~/chef-repo/cookbooks/apache

OPEN IN EDITOR:
SAVE FILE!
Update .kitchen.yml
---
driver:
name: docker
provisioner:
name: chef_zero
platforms:
- name: centos-6.5
suites:
- name: default
run_list:
attributes:
.kitchen.yml

$
Instance Driver Provisioner Last Action
default-centos-65 Docker ChefZero <Not Created>
List the Test Kitchens
kitchen list

$
-----> Starting Kitchen (v1.2.1)
-----> Creating <default-centos-64>...
Step 0 : FROM centos:centos6
---> 68eb857ffb51
Step 1 : RUN yum clean all
---> Running in cdf3952a3f18
Loaded plugins: fastestmirror
Cleaning repos: base extras libselinux updates
Cleaning up Everything
---> b1cccd25ce55
Removing intermediate container cdf3952a3f18
Step 2 : RUN yum install -y sudo openssh-server openssh-clients which curl
---> Running in 9db69ace459d
Loaded plugins: fastestmirror
Create the kitchen
kitchen create

$
kitchen@localhost's password:
Login to the kitchen
kitchen login

$
kitchen login
kitchen

$
Last login: Wed Sep 24 04:30:29 2014 from 172.17.42.1
kitchen login
kitchen

Kitchen login
[chef@ip-172-31-44-173 apache]$ kitchen login

Kitchen login
ssh

Kitchen login
[kitchen@5379d310dc59 ~]$
ssh

• A target server running the same OS as production

Lab – Apply our policy
• Problem: We have not applied our policy to the
test environment.
• Success Criteria: The default apache recipe
will be applied in the test environment

$
logout
Connection to localhost closed.
Leave the kitchen
exit

$
Go to the right place

$
-----> Starting Kitchen (v1.2.1)
-----> Converging <default-centos-64>...
Preparing files for transfer
Resolving cookbook dependencies with Berkshelf 3.1.5...
Removing non-cookbook files before transfer
-----> Installing Chef Omnibus (true)
downloading https://www.getchef.com/chef/install.sh
to file /tmp/install.sh
trying curl...
Apply our policy
kitchen converge

Kitchen converge
Install Chef
Upload cookbooks
Apply the run_list

Questions to ask when testing
ü  Did chef-client complete successfully?

Verifying node state
Serverspec

Chef Testing

$
Manually inspect the test node
kitchen login

$
kitchen login
kitchen

$
Last login: Wed Sep 24 04:30:29 2014 from 172.17.42.1
kitchen login
kitchen

$
curl: (7) couldn't connect to host
curl http://localhost

Kitchen login
[kitchen@5379d310dc59 ~]$ curl http://localhost
curl: (7) couldn't connect to host
ssh

Lab – Verify node state
• Problem: Manually verifying the state of the test
node is tedious and error-prone.
• Success Criteria: The end state of the node is
automatically tested.

Serverspec
• Write tests to verify your servers
• Not dependent on Chef
• Defines many resource types
• package, service, user, etc.
• Works well with Test Kitchen
• http://serverspec.org/

$
logout
Connection to localhost closed.
Leave the Kitchen
exit

$
Move to the proper directory

OPEN IN EDITOR:
SAVE FILE!
Write a Serverspec test
require 'serverspec'
set :backend, :exec
describe 'apache' do
end
test/integration/default/serverspec/default_spec.rb

Generic Expectation Form
describe "<subject>" do
it "<description>" do
expect(thing).to eq result
end
end

OPEN IN EDITOR:
SAVE FILE!
Awesome Expectations
set :backend, :exec
describe "apache::default" do
it "is awesome" do
expect(true).to eq true
end
end

$
-----> Running serverspec test suite
/opt/chef/embedded/bin/ruby -I/tmp/busser/suites/serverspec -I/tmp/
busser/gems/gems/rspec-support-3.1.2/lib:/tmp/busser/gems/gems/rspec-
core-3.1.7/lib /opt/chef/embedded/bin/rspec --pattern /tmp/busser/suites/
serverspec/**/*_spec.rb --color --format documentation --default-path /
tmp/busser/suites/serverspec
apache::default
is awesome
Finished in 0.02823 seconds (files took 0.99875 seconds to load)
1 example, 0 failures
Finished verifying <default-centos-64> (0m5.03s).
Run the serverspec test
kitchen verify

How would you test our criteria?
• We want a custom home page available on the
web.

What is success?
• Package is installed?
• Page is displayed?
• What else?

OPEN IN EDITOR:
SAVE FILE!
Verify package is installed
set :backend, :exec
describe "apache" do
it "is awesome" do
expect(true).to eq true
end
it "is installed" do
expect(package("httpd")).to be_installed
end
end

$
apache
is awesome
is installed (FAILED - 1)
Failures:
1) apache is installed
Failure/Error: expect(package("httpd")).to
be_installed
expected Package "httpd" to be installed
/bin/sh -c rpm -q httpd
package httpd is not installed
Exercise the test
kitchen verify

Test is failing, make it pass
• Test-driven development involves
• Write a test to verify something is working
• Watch the test fail
• Write just enough code to make the test pass
• Repeat

OPEN IN EDITOR:
SAVE FILE!
Update our cookbook
package "httpd"
~/chef-reop/cookbooks/apache/recipes/default.rb

$
-----> Converging <default-centos-64>...
Preparing files for transfer
Resolving cookbook dependencies with Berkshelf 3.1.5...
Removing non-cookbook files before transfer
Transfering files to <default-centos-64>
[2014-11-10T09:20:26+00:00] INFO: Starting chef-zero on host localhost, port 8889
with repository at repository at /tmp/kitchen
One version per cookbook
[2014-11-10T09:20:26+00:00] INFO: Forking chef instance to converge...
Starting Chef Client, version 11.16.4
[2014-11-10T09:20:27+00:00] INFO: *** Chef 11.16.4 ***
[2014-11-10T09:20:27+00:00] INFO: Chef-client pid: 571
...
Converge the node again
kitchen converge

$
apache
is awesome
is installed
Finished in 0.48165 seconds (files took 1.05
seconds to load)
2 examples, 0 failures
Finished verifying <default-centos-64>
(0m5.64s).
-----> Kitchen is finished. (0m11.84s)
Exercise the test
kitchen verify

What else will you test?
• Is the service running?
• Is the port accessible?
• Is the expected content being served?
• Make sure everything works from a fresh
kitchen, too!

Time to hack!
https://www.flickr.com/photos/peterpearson/424047087

OPEN IN EDITOR:
SAVE FILE!
Extend the Serverspec test
describe 'apache' do
it "is installed" do
expect(package 'httpd').to be_installed
end
it "is running" do
expect(service 'httpd').to be_running
end
it "is listening on port 80" do
expect(port 80).to be_listening
end
it "displays a custom home page" do
expect(command("curl localhost").stdout).to match /hello/
end
end

$
apache
is installed
is running
is listening on port 80
displays a custom home page
Finished in 0.3968 seconds
4 examples, 0 failures
Finished verifying <default-centos-64> (0m4.25s).
Verify the kitchen
kitchen verify

Kitchen Workflow
• kitchen create
• kitchen converge
• kitchen verify
• kitchen destroy
• All at once with kitchen test

Chef Testing
ü  Did the recipe put the node in the desired
state?

Now for our new mandate
• Update the tests
• Watch them fail
• Update the policy
• See tests pass
• Roll-out changes to production

This is too slow!
• To test our code, we need to spin up a test
kitchen, converge a node, execute some tests.
• Our simple test case takes about 2 minutes to
fully execute.

Properly configured resources
• We need a way to verify that the resources in
our recipes are properly configured
• We want to get faster feedback

Lab – Verify the resources
• Problem: We should be able to catch errors
before we need to converge a node
• Success Criteria: Catch a typo prior to
converge

ChefSpec
• Test before you
converge
• Get feedback on
cookbook changes
without the need for
target servers
http://sethvargo.github.io/chefspec/

$
Make a directory for our ChefSpec tests

OPEN IN EDITOR:
SAVE FILE!
Write a ChefSpec test
require 'spec_helper'
describe 'apache::default' do
context 'When all attributes are default, on an unspecified platform' do
let(:chef_run) do
runner = ChefSpec::ServerRunner.new
runner.converge(described_recipe)
end
it 'converges successfully' do
chef_run # This should not raise an error
end
end
end
spec/unit/recipes/default_spec.rb

$
.
1 example, 0 failures
Run the ChefSpec tests
rspec spec/unit/*.rb

OPEN IN EDITOR:
SAVE FILE!
Break the cookbook
package "http"
service "httpd" do
action :start
end
template "/var/www/html/index.html" do
source "index.html.erb"
end
recipes/default.rb

$
F
Failures:
1) apache::default installs apache
Failure/Error: expect(chef_run).to install_package('httpd')
expected "package[httpd]" with action :install to be in Chef run. Other package resources:
package[http]
# ./spec/unit/default_spec.rb:9:in `block (2 levels) in <top (required)>'
1 example, 1 failure
Failed examples:
rspec ./spec/unit/default_spec.rb:8 # apache::default installs apache
Run the ChefSpec tests
rspec spec/unit/*.rb

OPEN IN EDITOR:
SAVE FILE!
Fix the cookbook
package "httpd"
service "httpd" do
action :start
end
end
recipes/default.rb

Chef Testing
state?
ü  Are the resources properly defined?

Clean code
Follow best practices, avoid mistakes

Foodcritic
• Check cookbooks for
common problems
• Style, correctness,
deprecations, etc.
• Included with ChefDK
http://www.foodcritic.io/

OPEN IN EDITOR:
SAVE FILE!
Change our recipe
package_name = "httpd"
package "#{package_name}"
service "httpd" do
action :start
end
end
recipes/default.rb

$
FC002: Avoid string interpolation
where not required: ./recipes/
default.rb:7
Run Foodcritic
foodcritic .

Chef Testing
state?
ü  Are the resources properly defined?
ü  Does the code following our style guide?

We’ve only scratched the surface
https://www.chef.io/chef/

Build Anything
• Simple internal applications
• Complex external
applications
• Workstations
• Hadoop clusters
• IaaS infrastructure
• PaaS infrastructure
• SaaS applications
• Storage systems
• You name it
http://www.flickr.com/photos/hyku/245010680/

And Manage it Simply
• Automatically
reconfigure everything
• Linux, Windows, Unixes,
BSDs
• Load balancers
• Metrics collection
systems
• Monitoring systems
• Cloud migrations
become trivial
http://www.flickr.com/photos/helico/404640681/

What questions do you have?
• Ask me anything!
• @nathenharvey
• nharvey@chef.io
• Thank you!

Introduction to Infrastructure as Code & Automation / Introduction to Chef

Recommended

More Related Content

What's hot (20)

Viewers also liked (19)

Similar to Introduction to Infrastructure as Code & Automation / Introduction to Chef (20)

More from Nathen Harvey (12)

Recently uploaded (20)

Introduction to Infrastructure as Code & Automation / Introduction to Chef