Cooking Up Windows with Chef Automate

Cooking Up Windows with Chef
Automate
Perth MS Cloud Computing User Group
November 14, 2017
Matt Ray
Chef Manager/Solutions Architect APJ
matt@chef.io

Matt Ray
Manager/Solutions Architect – APJ
Chef Software
matt@chef.io
@mattray
Software Defined Talk

We’re no longer an airline.We’re a software
company with wings.
–Veresh Sita, CIO,Alaska Airlines
Every business is a software business

Velocity: time from idea to ship
Continuous automation success metrics
Quantifying outcomes to deliver software at speed
Deployment
frequency
Time from
commit to deploy
Mean time
to resolve
Time deploying
remediation
Change failure
rate
SPEED
Measure of rate
of software change
EFFICIENCY
Measure of effectiveness
of software change
RISK
Measure of quality
of software change
Compliance audit
frequency
Idea Ship

The Chef Automate Platform
Continuous Automation for High Velocity IT
Workflow • Local development • Integration • Tooling (APIs & SDKs)
COLLABORATE
▪ Package
▪ Test
▪ Approve
BUILD
▪ Provision
▪ Configure
▪ Execute
▪ Update
DEPLOY
▪ Secure
▪ Comply
▪ Audit
▪ Measure
▪ Log
MANAGE
Infrastructure Automation Compliance AutomationApplication Automation
OSS AUTOMATION ENGINES
Increase Speed
▪ Package infrastructure and app
configuration as code
▪ Continuously automate
infrastructure and app updates
Improve Efficiency
▪ Define and execute standard
workflows and automation
▪ Audit and measure
effectiveness of automation
Decrease Risk
▪ Define compliance rules as
code
▪ Deliver continuous compliance
as part of standard workflow

Chef
▪ Manages deployment
and on-going automation
▪ Define reusable resources
and infrastructure state as code
▪ Scale elegantly from one to tens of
thousands of managed nodes across
multiple complex environments
▪ Community, Certified Partner, and
Chef supported content available
for all common automation tasks
Infrastructure automation
and delivery at scale
windows_feature ‘IIS-WebServerRole’ do
action :install
end
windows_feature ‘IIS-ASPNET’ do
action :install
end
iis_pool FooBarPool do
runtime_version “4.0”
action :add
end
package "apache" do
action :install
end
template “/etc/httpd/https.conf” do
source “httpd.conf.erb”
mode 0075
owner “root”
group “root”
end
service “apache2” do
action :start
end

PART OF A PROCESS OF CONTINUOUS COMPLIANCE
Scan for
Compliance
Build & Test
Locally
Build & Test
CI/CD Remediate Verify
A SIMPLE EXAMPLE OF AN INSPEC CIS RULE
InSpec
▪ Translate compliance into Code
▪ Clearly express statements of policy
▪ Move risk to build/test from runtime
▪ Find issues early
▪ Write code quickly
▪ Run code anywhere
▪ Inspect machines, data, APIs, and
Cloud platforms
Turn security and
compliance into code
control 'windows-base-201' do
title 'Strong Windows NTLMv2 Authentication Enabled;
Weak LM Disabled'
desc 'http://support.microsoft.com/en-us/kb/823659'
impact 1.0
describe registry_key
('HKLMSystemCurrentControlSetControlLsa') do
it { should exist }
its('LmCompatibilityLevel') { should eq 4 }
end

Habitat
▪ Ease the burden of managing microservice
apps and bring benefits of apps architected
for microservices to traditional applications
▪ Gain consistent management of new
and traditional applications across their lifecycle
▪ Provides application portability for new and
traditional apps
▪ Autonomous nodes self-manage runtime state
of application based upon policy you define
▪ APIs expose application behaviors
as data for better management
▪ Works in tandem with infrastructure automation
▪ Makes applications running on containers,
PaaS, virtual machines, bare metal, … better
Automation that travels with the app

A single platform to Detect, Correct, and Automate
Chef Automate enables the entire journey
Detect
▪ Test against industry benchmarks
▪ Report and address audit needs
Correct
▪ Close detect/correct loop in one platform
▪ Develop baselines for automation
Automate
▪ Detect and correct before production
▪ Single language across DevOps, InfoSec
Chef Automate is a single platform to support the entire journey

Chef and Microsoft Integrations
• Chef Automate now live on the Azure Marketplace and Azure Gov Cloud
• Supports Azure Stack
• Continue to enhance Chef VM Extension (Linux & Windows)
• OMS integration with Chef client and server
• Knife, Test Kitchen, and InSpec plugins for Azure
Azure/OMS
• Support for PowerShell DSC since 2014, WMF 5.0 support added
• New Chef Client resources added, continued focus to bring popular resources into the “core” Chef Client
• Windows Server 2016 and Nano Server as supported platforms as well as Windows Container support
• ChefDK is now supported on Client and Server platforms
• Chef Supermarket contains Windows-specific cookbooks
• Test Kitchen support for Windows via WinRM and SSH
• InSpec resources for Windows
• Habitat support for Windows
Windows
• Chef VSCode extension for syntax and tooling plugins
• Chef and InSpec Extensions for Visual Studio Team Services (VSTS)
• Working with Visual Studio engineering team on other possible integrations/white space, possibly around InSpec &
Habitat
Visual Studio

Cooking Up Windows with Chef Automate

Chef Automate is at the heart of software delivery
The vendors you trust, trust Chef for continuous automation
Workflow • Local development • Integration • Tooling (APIs & SDKs)
COLLABORATE
▪ Package
▪ Test
BUILD
▪ Secure
▪ Comply
MANAGE
Infrastructure
Automation
Compliance
Automation
Application
Automation
OSS AUTOMATION ENGINES
▪ Provision
▪ Configure
DEPLOY
MANAGEMENT
RUNTIME
WORKFLOW
ENVIRONMENT
SECURITY AND
GOVERNANCE

inspec-azure
● https://github.com/chef/inspec-azure
● Azure Ruby SDK
● Will be merged into core InSpec

Dig into the new way of learning about
Chef, Automation, and DevOps.
Self-paced training on Linux and Windows and much more!
learn.chef.io

Cooking Up Windows with Chef Automate

Recommended

More Related Content

What's hot (19)

Similar to Cooking Up Windows with Chef Automate (20)

More from Matt Ray (20)

Recently uploaded (20)

Cooking Up Windows with Chef Automate