AWS OpsWorks & Chef at the Hamburg Chef User Group 2014
2 likes3,124 views
An introduction to AWS OpsWorks and how it uses Chef. Differences between OpsWorks and Chef server. Presented by Jonathan Weiss on January 14th 2014 at the Hamburg Chef User Group.
![Discovery: Chef Search
AWS OpsWorks does not offer attribute search
Alternative:
node[:opsworks] with similar capabilities
to partial_search](https://image.slidesharecdn.com/awsopsworkshamburgchefusergroup-140114134833-phpapp01/85/AWS-OpsWorks-Chef-at-the-Hamburg-Chef-User-Group-2014-18-320.jpg)
![AWS OpsWorks Attribute Tree
Find all Rails application servers
rails_servers = node['opsworks']['layers']['rails-app']['instances']
rails_ips = rails_servers.map{|i| i['private_ip'] }
template "/etc/rails-server.conf" do
...
variables({
:ips => rails_server_ips
})
end](https://image.slidesharecdn.com/awsopsworkshamburgchefusergroup-140114134833-phpapp01/85/AWS-OpsWorks-Chef-at-the-Hamburg-Chef-User-Group-2014-19-320.jpg)
![Store Secrets on Amazon S3
Access from instance via instance profiles
bucket = node['acme']['bucket']
key = node['acme']['key']
s3 = AWS::S3.new
obj = s3.buckets[bucket].objects[key]
obj.read](https://image.slidesharecdn.com/awsopsworkshamburgchefusergroup-140114134833-phpapp01/85/AWS-OpsWorks-Chef-at-the-Hamburg-Chef-User-Group-2014-22-320.jpg)
![[Jun AWS 201] Elastic Beanstalk for Startups](https://cdn.slidesharecdn.com/ss_thumbnails/aws201elasticbeanstalkforstartups-130708040156-phpapp02-thumbnail.jpg?width=560&fit=bounds)
More Related Content
What's hot (13)
Similar to AWS OpsWorks & Chef at the Hamburg Chef User Group 2014 (11)
More from Jonathan Weiss (20)
Recently uploaded (20)
AWS OpsWorks & Chef at the Hamburg Chef User Group 2014
- 1. AWS OpsWorks & Chef Jonathan Weiss @jweiss January 14th, 2014 © 2014 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified, or distributed in whole or in part without the express consent of Amazon.com, Inc.
- 3. AWS OpsWorks Integrated Application management on EC2 • EC2, ELB, VPC, EIP, EBS, … • Chef-Solo & Built-in layers • Monitoring with CloudWatch • Auto Scaling, Auto Healing • Fine-grained permissions • App deployment
- 4. AWS Application Management Services Higher-level Services Elastic Beanstalk Convenience OpsWorks Do it yourself CloudFormation EC2 Control
- 5. How does it work?
- 6. The Heart of the Service Agent on each Agent on each Amazon EC2 instance EC2 instance Understands a set of commands that are triggered by AWS OpsWorks. The agent then runs a Chef solo run.
- 8. A Stack
- 9. A Stack with Layers
- 10. A Stack with Layers and Instances
- 12. Chef in AWS OpsWorks vs. Chef Server
- 13. Main Differences • • • • • Chef Setup One run vs. discrete events Push vs. pull Discovery: search & AWS OpsWorks attribute tree Data bags
- 14. Chef Setup Chef Solo & OpsWorks Backend Chef Client & Chef Server
- 15. control simple Customization Options Built-in layers Override Chef attributes via custom JSON Override Chef attributes via custom cookbook Overwrite Chef template file Deploy hooks Provide custom recipe to extend built-in layer Provide custom recipe to create custom layer
- 16. Life Cycle Events • Give you fine-grained control • Faster to execute • Context
- 17. Push vs. Pull • On-demand and automatic • Respond immediately to changes in the stack
- 18. Discovery: Chef Search AWS OpsWorks does not offer attribute search Alternative: node[:opsworks] with similar capabilities to partial_search
- 19. AWS OpsWorks Attribute Tree Find all Rails application servers rails_servers = node['opsworks']['layers']['rails-app']['instances'] rails_ips = rails_servers.map{|i| i['private_ip'] } template "/etc/rails-server.conf" do ... variables({ :ips => rails_server_ips }) end
- 20. Encrypted Data Bags • Upload encrypted JSON to S3 • Have instances access via IAM roles in a recipe
- 21. Custom JSON Arbitrary JSON on stack that is available in Chef { ‘foo‘: { ‘bar‘: true, ‘baz‘: false } } if node.foo.bar ... elsif node.foo.baz ... end
- 22. Store Secrets on Amazon S3 Access from instance via instance profiles bucket = node['acme']['bucket'] key = node['acme']['key'] s3 = AWS::S3.new obj = s3.buckets[bucket].objects[key] obj.read
- 23. The Future
- 24. Better Chef Citizen Chef 11.8 local server mode: • Data bags • (local) Chef search
- 25. More information about AWS OpsWorks • • • • • • • Try it out https://console.aws.amazon.com/opsworks/ Follow us on twitter @AWSOpsWorks Find us on YouTube Blog http://blogs.aws.amazon.com/application-management Docs http://aws.amazon.com/documentation/opsworks/ User tests [email protected] Work with us http://jobs.aws-berlin.com