Foreman in Your Data Center :OSDC 2015
- 1. Foreman in Your Data Center Stephen Benjamin @stbenjam
- 2. Agenda ● Introduction – Provisioning – Configuration – Monitoring ● Demo ● Customizing foreman – Automating with CLI + API – Hooks – Plugins ● Discovery ● Docker ● Katello ● Chef/Salt ● Write your Own
- 3. Foreman's Realm Managing the Lifecycle of your Systems
- 4. Foreman
- 5. ● Provision new machines or containers to (almost) anything – Bare metal, oVirt, Libvirt, vmware, docker, EC2, Rackspace, Digital Ocean, OpenStack, etc. ● If we don't support it today, we can via new plugins
- 6. ● Provisioning types: – PXE - via kickstart, preseed, AutoYAST, etc – Image-based - cloning, configured over SSH or user data (cloudinit) ● For virtualization provider, we create the VM ● For everything we orchestrate related services through Smart Proxies – DNS - DHCP – FreeIPA Realm - Configuration Management
- 7. ● Puppet ● Via plugins: – Chef – Salt ● Automatic registration & setup of clients, including autosigning certs/keys ● Defining: ● Classes / states ● Parameters / pillars ● Inventory data, results of configuration runs
- 8. ● System Inventories – puppet/chef/salt grains/facts. Ability to create trends and charts on the data ● Reports from Puppet runs, or Salt highstate ● More reporting via plugins: ABRT, OpenSCAP
- 9. Distributed Architecture ● Smart Proxies located locally on Foreman itself or independent – used for orchestration of DNS, DHCP, etc.
- 11. Demo
- 12. Customization ● Customize Foreman to support your workflows! – Automation with API + CLI – Foreman Hooks – Foreman Plugins
- 13. API & CLI ● Full RESTful API – Docs at http://foreman.example.com/apidoc on your Foreman server – e.g. curl -k -u admin:changeme -H "Accept: version=2,application/json" https://localhost/salt/api/v2/salt_keys/smartproxy.example.com
- 14. Hammer CLI ● Easy to use, great for working in shell hammer salt-key list --smart-proxy=smartproxy.example.com
- 15. Hooks ● Hooks – Triggered on actions: on action, do X ● host create/update/delete, build complete, etc. ● X could be anything – add to nagios – send an email ● Can be shell, python, ruby, etc. – More info: https://github.com/theforeman/foreman_hooks
- 16. Plugins ● Both the Smart Proxy and Foreman have a pluggable architecture – Foreman ● http://projects.theforeman.org/projects/foreman/wiki/Plugins – Smart Proxy ● http://projects.theforeman.org/projects/foreman/wiki/Smart-Proxy_Plugins ● Plugins written in Ruby, some Rails knowledge needed
- 17. Plugins More Info: http://projects.theforeman.org/projects/foreman/wiki/List_of_Plugins Rich ecosystem of existing plugins
- 18. Discovery ● Metal as a Service
- 19. Discovery ● http://theforeman.org/plugins/foreman_discovery/2. ● Unknown host boots via DHCP/PXE – Becomes available in Foreman as a “Discovered Host” ● Provision with as few as NO clicks – Automatic provisioning via rules on arbitrary facts: ● cpu_count < 8 → web server host group ● cpu_count >= 8 → db box host group
- 20. Discovery Demo
- 21. Docker ● Manage many docker hosts ● Deploy new containers easily & view their status, logs, etc ● Multiple registry support & integration with Katello ● https://github.com/theforeman/foreman-docker
- 22. Katello ● Content Lifecycle Management – http://www.katello.org/ ● Sync RPM, Docker, and Puppet content ● Spin repositories with filters using Content Views
- 23. Katello ● Manage through a lifecycle – Dev → QA → Production ● Patch Management – Emergency Patches – Errata Reports ● And much more!
- 24. Katello Demo
- 25. Salt ● Import reports (state.highstate results) and grains into Foreman ● Bootstrapping nodes ● Define states, pillars via ext_node and ext_pillar ● Full interface to keys/autosign ● API & CLI
- 26. Chef ● Import reports and attributes into Foreman ● Automatic bootstrapping of clients ● Decomission nodes from Chef server when deleted in Foreman
- 27. Write your Own ● More info: – http://projects.theforeman.org/projects/foreman/wiki/How
- 28. What Next? ● Visit us http://theforeman.org/ ● If you do something cool with Foreman, let us know! ● Find us: – IRC: irc.freenode.net ● #theforeman ● #theforeman-dev – Mailing Lists on Google groups ● foreman-users ● foreman-dev
Editor's Notes
- #2: Talk slower
- #3: Introductory talk – first half basic introduction, second half – customizing to fit your own needs in your data center How many people use Foreman today? Puppet? Chef? Salt? Anyone using non-puppet in foreman? TALK SLOWER
- #4: Talk slower
- #5: Talk slower
- #6: Talk slower
- #7: Talk slower
- #8: Talk slower
- #9: Talk slower
- #10: Install a basic foreman – smart-proxy runs on the localhost with foreman
- #11: Talk slower
- #12: Talk slower
- #13: Talk slower
- #14: Talk slower
- #15: Talk slower
- #16: Talk slower
- #17: Talk slower
- #18: Talk slower
- #19: Talk slower
- #20: Talk slower
- #22: Talk slower
- #23: Talk slower
- #24: Talk slower
- #26: Talk slower
- #27: Talk slower
- #28: Talk slower.
- #29: Let us know!