Learning chef

Learning ChefInfrastructure Automation With Chef

Learning Chef

A#er
this
course
you
will
be
able
to:

§  Understand
DevOps
and
what
Chef
is

§  Know
the
role
of
worksta>ons,
nodes,
and
Chef
server

§  Deploy
and
automate
conﬁgura>ons
of
nodes

§  Understanding
of
wri>ng
Recipes
and
Cookbooks

§  Understand
the
Chef
work
ﬂow

§  Use
Chef
to
automate
the
deployment
your
infrastructure

Learning Chef

How
this
course
is
laid
out:

§  Will
learn
Chef
by
working
with
single
nodes
to
start

§  Learning
to
build
cookbooks
will
follow
a
theme
such
as
installing
LAMP

§  Addi>onal
exercises
will
be
found
at
the
end
of
the
course

§  Need
access
to
LinuxAcademy.com
lab
servers
or
your
own
VM
environment

§  VirtualBox

§  VMWare
worksta>on

§  Parallels

§  Have
at
least
one
“node”
(server)
available
to
connect
to

Learning Chef

How
this
course
is
laid
out:

§  Will
learn
Chef
by
working
with
single
nodes
to
start

§  Need
access
to
LinuxAcademy.com
lab
servers
or
your
own
VM
environment

§  VirtualBox

§  VMWare
worksta>on

§  Parallels

§  Have
at
least
one
“node”
(server)
available
to
connect
to

Learning Chef

What
is
DevOps?

§  DevOps
is
about
“How
well
people
work
together
and
how

streamlined
our

Opera6ons
really
are”
–
Adam
Jacob

§  The
applica>on
and
infrastructure
that
runs
on
it
are
not

treated
as
separate
en>>es
to
each
other
and
neither
are
the

teams
that
manage
each

§  DevOps
is
part
of
con>nuous
delivery
where
all
aspects
of
the

deployment
process
are
automated

§  DevOps
is
infrastructure
as
code

Learning Chef

What
is
Chef?

“Chef
turns
infrastructure
into
code.
With
Chef,
you
can
automate
how

you
build,
deploy,
and
manage
your
infrastructure.
Your
infrastructure

becomes
as
versionable,
testable,
and
repeatable
as
applica6on
code.

Chef
relies
on
reusable
defini6ons
known
as
recipes
to
automate

infrastructure
tasks.
Examples
of
recipes
are
instruc6ons
for
configuring

web
servers,
databases
and
load
balancers.
Together,
recipes
describe

what
your
infrastructure
consists
of
and
how
each
part
of
your

infrastructure
should
be
deployed,
configured
and
managed.”

Getchef.com

Learning Chef

What
is
Chef?

§  Recipes
are
created
using
the
Ruby
language
and
while
learning
Chef
we

will
learn
a
lot
of
the
Ruby
language

§  Recipes
rely
primarily
on
resources,
resources
described
a
desired
state
of

an
element
in
the
infrastructure.

§  Packages
to
be
installed

§  Files
to
be
created

§  Directories
to
be
created

§  Services
to
be
started

§  Conﬁg
ﬁles
to
be
updated

§  Commands
to
be
executed

§  Essen>ally
anything
we
need
to
do
on
our
Linux
nodes

Learning Chef

What
is
Chef?

§  Chef
relies
on
either
OpenSource
Chef
server
or
Chef
enterprise
to

host
conﬁgura>on
recipes,
cookbooks,
and
node
authen>ca>on
for

your
infrastructure

§  Nodes
when
performing
a
convergence
will
check
in
with
the
Chef

server,
download
the
required
conﬁgura>on,
then
execu>on
the

recipe
instruc>ons

Learning ChefCommon Chef Terminology

Learning Chef

Common
Chef
Terminology

Recipes:

Fundamental
configura>on
element
within
an
organiza>on

Cookbook:

Defines
a
scenario
and
is
the
fundamental
unit
of
configura>on
and
policy
distribu>on

Chef-‐Client:

Agent
that
runs
locally
on
the
node
that
is
registered
with
the
chef
server

Convergence:

Occurs
when
chef-‐client
configures
the
system/node
based
off
the
informa>on
collected
from
chef-‐
server

Configura9on
Dri;:

Occurs
when
the
node
state
does
not
reflect
the
updated
state
of
polices/configura>ons
on
the
chef

server

Resources:

A
statement
of
configura>on
policy
within
a
recipe

Describes
the
desired
state
of
an
element
in
the
infrastructure
and
steps
needed
to
configure

Learning Chef

Common
Chef
Terminology

Provider:

Defines
the
steps
that
are
needed
to
bring
the
piece
of
the
system
from
its
current
state
to
the

desired
state

A?ributes:

Specific
details
about
the
node,
used
by
chef-‐client
to
understand
current
state
of
the
node,
the
state
of
the

node
on
the
previous
chef-‐client
run,
and
the
state
of
the
node
at
the
end
of
the
client
run

Data-‐bags:

A
global
variables
stored
as
JSON
data
and
is
accessible
from
the
Chef
server

Worksta9on:

A
computer
configured
with
Knife
and
used
to
synchronize
with
chef-‐repo
and
interact
with
chef
server

Chef
Server:

Chef
server
is
the
hub
for
all
configura>on
data,
stores
cookbooks,
and
the
policies
applied
to
the
node

Knife:

Command
line
tool
which
provides
an
interface
between
the
local
chef-‐repo
and
chef-‐server

client.rb:

Configura>on
file
for
chef-‐client
located
at
/etc/chef/client.rb
on
each
node

Ohai:

Tool
used
to
detect
a_ributes
on
a
node
and
then
provide
a_ributes
to
chef-‐client
at
the
start
of

every
chef-‐client
run

Learning Chef

Common
Chef
Terminology

Node
Object:

Consists
of
run-‐list
and
node
a_ributes
that
describe
states
of
the
node

Chef-‐Repo:

Located
on
the
worksta>on
and
installed
with
the
starter
kit,
should
be
synchronized
with
a
version

control
system
and
stores
Cookbooks,
roles,
data
bags,
environments,
and
conﬁgura>on
ﬁles

Organiza9on:

Used
in
chef
enterprise
server
to
restrict
access
to
objects,
nodes
environments,
roles,
data-‐bags
etc

Environments:

Used
to
organize
environments
(Prod/Staging/Dev/QA)
generally
used
with
cookbook
versions

Idempotence:

Means
a
recipe
can
run
mul>ple
>mes
on
the
same
system
and
the
results
will
always
be
iden>cal

Learning Chef

Chef
Server

Two
types
of
Chef-‐server:

1.  OpenSource
Chef-‐server

§  Free
version
of
Chef

§  Each
instance
of
the
server
must
be
conﬁgured
and
managed
locally
(includes
all
aspects
of

managing
the
server,
updates,
migra>ons,
scalability,
etc.

2.  Chef-‐server
enterprise
(hosted)

§  Scalable
by
design

§  Available
organiza>ons

§  Always
available

§  Resource-‐based
access
control

3.  Chef-‐server
enterprise
(on-‐premise)

§  Scalable
by
design

§  Available
organiza>ons

§  Hosted
on-‐premise
behind
your
ﬁrewall

§  Managed
yourself

Learning Chef

Chef
Server:
Enterprise

§  Allows
crea>on
of
organiza>ons

§  Organiza>ons

separate
the
infrastructure,
policies,
and
cookbooks

§  Nodes
are
registered
in
organiza>ons

§  Nothing
can
be
shared
between
organiza>ons

§  Enterprise
chef
server
can
contain
many
different
organiza>ons

§  OpenSource
chef
the
local
individual
server
acts
as
an
organiza>on
and
does
not
allow
crea>on
of

organiza>ons

can
represent
different
companies,
department,
infrastructures,
applica>ons,
and
so
forth

§  For
each
organiza>on
in
order
to
start
bootstrapping
nodes
you
need
to
download
the
starter
kit

§  Starter
kit
provides
security
creden>als
(valida>on.pem
keys)
to
authen>cate
each
node
to
the
chef
server

§  Chef
enterprise
scales
by
design
to
handle
thousands
of
nodes
and
different
organiza>ons

Learning Chef

Chef
Server:
Role
of
the
server

§  Stores
system
configura>on
informa>on
(policies
for
nodes)

§  Authen>cates
worksta>ons
and
nodes

§  Delivers
configura>ons
to
nodes

§  Chef
server
holds
the
configura>on
and
the
node
checks-‐in
to
receive
instruc>ons
on
its
desired
state

§  The
node
downloads
configura>on
instruc>ons
from
the
server
and
does
all
of
the
work

Learning Chef

Chef
Worksta>on

§  Developing
cookbooks
and
recipes

§  Synchronizing
chef-‐repo
with
git/svn
(source
control)

§  Using
knife
to
upload
and
manage
node
and
chef
server
conﬁgura>ons
and

policies


§  Nodes

§  Environments

§  Data
bags

Learning Chef

Chef
Worksta>on:
Organiza>on
Starter
Kit

§  Each
organiza>on
has
a
starter
kit
which
provides
the
chef-‐repo
as
well
as

security
creden>als
for
communica>ng
with
the
server

§  Knife.rb
conﬁgura>on
ﬁle
is
located
in
the
chef-‐repo
(starter
kit)

§  Starter
kit
can
be
re-‐downloaded
from
the
chef-‐server

Learning Chef

Chef
Worksta>on:
Organiza>on
Starter
Kit

§  Each
>me
you
download
a
new
starter
kit
the
security
keys
for
that
repo
to
the

server
are
reset

§ 
As
a
result
you
have
to
redistribute
the
security
keys
to
other
team
members
if
a

new
starter
kit
for
the
organiza>on
is
downloaded

§  During
bootstrap
oragniza>on-‐validator.pem
is
copied
to
the
node
as

valida>on.pem

§  During
the
ﬁrst
chef-‐client
run
the
valida>on.pem
signs
the
client.pem
key
which

is
used
to
authen>cate
the
node
against
the
chef
server

Learning Chef

Chef
Worksta>on:
Organiza>on
Starter
Kit

§  Security
considera>ons
for
valida>on.pem

§  It
should
be
removed
first
when
the
chef-‐client
convergence
runs

§  If
chef-‐client
locks
then
key
is
located
on
node
if
node
is
compromised

then
your
en>re
infrastructure
is

§  Chef-‐client
(super
market
cookbook)
provides
this
func>onality

§  Can
always
write
your
own
recipe
to
remove
valida>on.pem
and
run
it

first
in
the
run_list

§  file
"/etc/chef/valida>on.pem"
do

§ 
ac>on
:delete

§  End

Learning Chef

Chef
Worksta>on:
Knife

Knife
is
the
command
line
tool
used
to
provide
an
interface
between
your
local

chef-‐repo
and
the
chef-‐server

§  Crea>ng
cookbooks

§  Uploading
cookbooks
to
chef
server

§  Managing
roles
and
run_lists

§  Searching
chef-‐server
node
object
data

§  Bootstrapping
nodes

§  Essen>ally
everything
we
need
to
do
as
a
DevOps
admin

Learning Chef

Chef
Worksta>on:
Knife

Chef
and
knife
interface
can
be
installed
to
OSX
and
Linux:

curl
–L
h_ps://www.opscode.com/chef/install.sh
|
sudo
bash

Download
and
install
Chef
manually
for
windows:

h_p://www.getchef.com/chef/install/

This
course
will
use
a
Linux
CentOS
6.5
Image
as
the
worksta>on

Learning Chef

Chef
Worksta>on:
Knife
configura>on
file
(knife.rb)

§  Is
found
inside
the
chef-‐repo
which
is
available
inside
the
starter
kit
of
an

organiza>on

§  Configure
proxy
selngs
here
if
worksta>on
is
behind
a
proxy

Learning Chef

Chef
Worksta>on:
Using
knife
to
bootstrap
a
node

Bootstrapping
connects
the
worksta>on
to
the
node
to
install:

§  Installs
knife

§  Ohai:

Used
to
detect
a_ributes
on
a
node
and
report
them
to
chef-‐client
at
the
start
of

every
client
run
it
is
required
for
chef-‐client
to
work
and
it
builds
the
node
object

§  Ruby


§  A
few
other
addi>onal
items

Learning Chef

Chef
Worksta>on:
Using
knife
to
bootstrap
a
node

Knife
bootstrap
<address>
-‐x
user
–P
password
–N
nodename

§  For
star>ng
in
this
course
we
will
deﬁne
a
node
name

§  In
produc>on
it
is
best
prac>ce
not
to
deﬁne
–N
and
let
the
FQDN

work
as
the
node
name

Note:
For
linuxacademy.com
lab
servers
when
bootstrapping
use
your

public
hostname

Learning ChefChef Server & Nodes

Learning Chef

Chef
Server
&
Nodes

A
node
can
be
anything
that
can
run
the
chef-‐client
agent

•  Smart
phones

•  Switches

•  APIs

•  FreeBSD
servers

•  Unix
Servers

•  Windows
Servers

•  Linux
Servers

•  Etc.

Learning Chef

Chef
Server
&
Nodes

Chef
server
stores
all
policy
and
conﬁgura>on
informa>on
for
nodes

The
node
uses
the
client.pem
ﬁle
(created
by
validator.pem)
during
the
chef-‐
client
run
in
order
to
authen>cate
against
the
chef
server

Chef-‐client
run:

•  Authen>cate
against
the
chef-‐server
using
client.pem

•  Builds
the
node
object
and
runs
ohai

•  Syncronizes
with
the
chef-‐server
(sends
node
object
informa>on
and
receives

cookbooks/policies)

•  Executes/compiles
the
desired
policies

•  Runs
the
node
object

•  Completes

Learning ChefChef Configuration Concepts

Learning Chef

Chef
Configura>on
Concepts

Policy:

§  A
collec>on
of
system
configura>ons
that
you
define
(roles/data
bags/
environments)

§  The
policy
states
the
state
that
each
resources
should
be
in
but
not
how
to
get

there

will
pull
the
policy
and
configure
the
node
so
that
it
matches
the

state
of
the
policy

§  Policy
concept
examples:

§  If
it
should
be
installed

§  If
it
is
not
installed
then
install
it

§  If
it
is
already
installed
then
do
nothing

§  A
file
should
exist
if
not
create
it

§  If
a
file
exists
but
does
not
have
correct
content

Learning Chef

Chef
Configura>on
Concepts

Resources:
Defines
the
desired
state
for
a
single
configura9on
item
present
on
a

node
that
is
under
management
by
Chef

§  Does
the
configura>on
on
a
node
and
maps
to
providers

§  Recipes
are
stored
in
cookbooks

§  Represent
a
piece
of
the
system
and
its
desired
state

§  Building
blocks
of
Chef
configura>on

§  When
chef-‐client
is
run
on
a
node
the
resource
is
executed
by
the

provider
which
is
handled
by
Chef
and
the
OS
itself

§  Informa>on
as
to
what
provider
to
use
(ie
what
package
manager
to
use)

is
populated
when
ohai
is
run
at
the
start
of
each
chef-‐client
run

Learning Chef

Chef
Conﬁgura>on
Concepts

Most
common
resources
in
conﬁgura>on
management

Package:

Used
to
manage
packages
such
as
installing
a
required
package

Template:

Used
to
manage
the
contents
of
a
Ruby
template
in
the
cookbook

Service:

Manage
system
services

What
run-‐levels
to
start
the
service
in

Current
state
of
the
service
(running/stopped/etc)

Learning Chef

Chef-‐client
nodes
concepts

§  Nodes
can
be
configured
to
automa>cally
running
chef-‐client
in
intervals

§  When
convergence
occurs
the
node
can
put
itself
back
into
compliance

(desired
state
and
how
to
get
there)

§  Chef
server
does
not
know
the
status
of
a
node
un>l
a
convergence
is
run

§  Something
could
happen
to
cause
the
node
to
get
out
of
compliance
but

a
convergence
will
check
policies/configura>on
and
put
the
node
back

into
compliance
based
off
your
defined
configura>ons

Learning Chef

Key
concepts:

Recipes
are
made
up
of
a
collec>on
of
resources

Cookbooks
are
made
up
of
a
collec>on
of
recipes

Nodes
receive
their
policy
based
off
of
roles
and
individual
node
configura>ons

A
run
list
defines
the
order
in
which
you
want
your
recipes
to
run
during
convergence

Configura>on
dri#
occurs
when
the
desired
state
of
the
node
does
not
match
the

desired
state
as
defined
in
the
policies
on
the
chef
server

Configura>on
dri#
can
be
resolved
by
automa>ng/running
the
chef-‐client
agent

Learning ChefAttribute Precedence

Learning Chef

Key
concepts:

A_ributes
are
specific
details
about
a
node

A_ributes
describe:

•  The
current
state
of
the
node

•  What
the
sate
of
the
node
was
at
the
end
of
the
previous
chef-‐client
run

•  What
the
state
of
the
node
should
be
at
the
end
of
the
current
chef-‐client
run

A_ributes
can
be
defined
by:

•  The
state
of
the
node
(ohai)

•  Cookbooks
(Our
a_ribute
files)

•  Roles

•  Environments

Learning Chef

A_ribute
Precedence

A#er
the
node
object
is
rebuilt
in
the
chef
run,
all
a_ributes
loaded
in
the
chef-‐client
are

then
compared.
The
node
is
updated
based
on
a_ribute
precedence
and
at
the
very
end

of
the
convergence
(chef-‐client)
the
node
object
is
uploaded
to
the
chef
server

Node
object
deﬁnes
the
current
state
of
the
node
(made
up
of
a_ributes)

Node
object
is
stored
on
the
chef
server
so
that
it
can
be
searched

Node
object
is
updated
at
each
convergence

If
there
are
a_ributes
with
the
same
names
then
a_ribute
precedence
determines
which

a_ribute
is
applied
to
the
node
and
the
node
object.

Learning Chef

A_ribute
Precedence:
Levels
of
precedence

default:

Automa>cally
reset
at
the
start
of
every
chef
client
run
is
the
lowest
level
of
precedence

force_default:

Used
in
a
cookbook
or
recipe
to
override
an
exis>ng
“default”
a_ribute

Normal:

A
selng
that
persists
in
the
node
object

Override:

Automa>cally
reset
at
the
start
of
every
chef-‐client
most
o#en
should
be
used
only
when
required

force_override:

used
to
ensure
that
an
a_ribute
defined
in
a
cookbook
(by
an
a_ribute
file
or
by
a
recipe)
takes

precedence
over
an
override
a_ribute
set
by
a
role
or
an
environment

Automa9c:

Contains
data
populated
by
Ohai
at
the
beginning
of
every
chef-‐client
run
and
cannot
be
modified
and

always
has
the
highest
a_ribute
precedence

Learning Chef

A_ribute
Precedence:
Levels
of
precedence

Learning Chef

Node
Object

Node
object
is
made
up
of
the
run
lists
which
define
what
recipes
to
run
during
a
chef-‐client
as

well
as
the
aMributes
that
define
informa6on
about
the
node

A_ributes
are
built
during
the
chef-‐client
run
process:

§  Data
about
the
node
is
collected
by
Ohai

§  The
node
object
previously
saved
during
the
last
chef-‐client
run

§  The
rebuilt
node
object
from
the
current
chef-‐client
run

Once
the
node
object
is
rebuilt
all
a_ributes
are
compared
and
then
updated
based
on
a_ribute
precedence

At
the
end
of
every
chef-‐client
run
the
node
object
that
defines
the
current
state
of
the
node
is
uploaded
to

the
chef
server
to
be
searched.

Learning Chef

Environments:
What
are
environments?

“An
environment
is
a
way
to
map
an
organiza6ons
real-‐life
workflow
to
what
can
be

configured
and
managed
using
the
Chef
server”

Apply
different
cookbook
versions
to
specific
environments
(dev/prod/staging/qa/)

Define
Environment
level
a_ributes

Environments
allow
sharing
of
cookbooks
within
an
organiza>on

Learning Chef

Environments:
Crea>ng
environments

•  Environment
informa>on
can
be
stored
in
JSON
files
or
.rb
files

•  Environments
will
be
located
in
chef-‐repo/environments

•  Example
dev.rb
(development
environment
file)

name
"dev"

descrip>on
”Development
environment”

cookbook
"security",
"=
0.1.0”

cookbook
”motd",
"=
0.2.0"

cookbook
"apache",
"=
0.2.0"

override_a_ributes({

“author"
=>
{

“name"
=>
true

}

})

Learning Chef

Environments:
A_ributes

Two
types
of
a_ribute
precedence
can
be
set
on
the
environment
level

•  default
a
default
a_ribute
defined
in
the
environment
will
take
precedence
over
a

default
a_ribute
defined
in
a
cookbook
a_ribute
file.

•  Override
has
higher
precedence
than
default,
force_default,
and
normal

Learning Chef

Environments:
Methods
of
assigning
a
node
to
an
environment

•  Modify
the
client.rb
ﬁle
with
an
environment
variable

•  Knife-‐ﬂip
to
do
it
from
the
worksta>on

•  Assign
it
manually
on
the
node

Learning Chef

Environments:
Lab
goals

ü  Conﬁgure
two
environments:
Dev/Produc>on

ü  Modify
Apache
cookbooks
with
newer
versions

ü  Set
newer
versions
to
dev
and
older
versions
to
produc>on

ü  Conﬁgure
Client.rb
to
look
at
proper
environment

Learning Chef

Search:

Chef
search
allows
queries
to
be
made
for
any
type
of
data
that
is
indexed
by
the
chef

server.
Search
queries
the
chef
server
for
stored
informa6on.

Can
Search:

§  Data
bags

§  Environments

§  Roles

§  Nodes

Learning Chef

Search:
Methods
of
search

Search
with
Knife:

Syntax:
knife
search
node
“key:pa_ern”
–a
(a_ribute)

§  Search
nested
a_ributes

§  “memory_total:*”
–a
memory.total

§  Can
use
basic
“wild
cards”
in
the
pa_ern
“ipaddress:192.168.*”

§  Can
search
based
oﬀ
ranges
“ipaddress:[192.168.*
TO
192.172.*]”

Search
inside
of
recipes

Example:

Use
Ruby
recipe
to
search
all
nodes
that
are
running
an
outdated
package

Learning Chef

Data
Bags

A
data
bag
is
a
global
variable
that
is
stored
in
JSON
data
and
accessible
from
the
chef
server.
A

data
bag
is
indexed
for
searching
and
can
be
loaded
by
a
recipe
or
accessed
during
search.

Types
of
data
stored
in
a
data
bag:

ü  Users
to
be
added
to
a
system

ü  Admins
to
be
added
to
sudo

ü  API/DB
Creden>als
(More
secure
and
be_er
than
environment
a_ributes
for
creden>als)

ü  Much
more

Learning Chef

Data
Bags

{

"id":
“anthony",

"comment":
”Anthony
admin
user",

"uid":
2005,

"gid":
0,

"home":
"/home/anthony",

"shell":
"/bin/bash"

}

Learning Chef

Roles

“A
role
is
a
way
to
deﬁne
certain
paMerns
and
processes
that
exist
across
nodes
in
an

organiza6on
as
belonging
to
a
single
job
func6on”

§  Up
un>l
this
point
we
have
assigned
recipes
to
be
run
for
each
node

§  Instead
of
upda>ng
run_lists
for
a
node
all
we
have
to
do
is
update
a
role
on

the
server

§  Prevents
us
from
having
to
manually
touch
all
nodes
that
need
the
change

§  A
role
is
essen>ally
a
lis>ng
of
recipes
and
a_ributes
that
are
to
be
executed
on
a

node

§  Instead
of
assigning
a
run
list
for
each
node
we
assign
the
node
a
role

§  A
base
role
can
be
assigned
inside
of
a
roles
run_list

Learning Chef

Roles:
Role
management
with
knife

§  Knife
role
create
role_name

§  Chef-‐repo/roles/rolename.rb

§  Knife
role
from
ﬁle
chef-‐repo/roles/rolename.rb

§  Knife
role
list
–w
(views
a
list
of
roles
on
the
chef
server)

§  Knife
role
delete
role_name

Learning Chef

Roles:
Produc>on

How
can
we
spin
up
new
nodes
(like
auto
scaling)
without
having
to
manually
modify

run_lists
in
a
node?

§  Pass
in
cloud-‐init
informa>on
about
the
node

§  Create
Virtual
Machine
Images
a#er
a
node
has
been
bootstrapped

§  Do
not
name
the
node
but
instead
let
it
use
the
FQDN
as
the
node
name

§  Modify
/etc/chef/ﬁrst-‐boot.json
to
include
the
“role”
of
the
node

Learning Chef

Knife
Plugins

Knife
can
be
extended
with
the
use
of
plugins

§  Knife-‐ﬂip:
Manage
environments
for
nodes

§  Cloud
plazorms:
azure,
ec2,
google,
linode,
openstack,
rackspace,
etc

§  Custom
plugins

Learning ChefProduction Work Flow & Unattended Installs

Learning Chef

Work
Flow:

§  Nodes
should
be
bootstrapped
and
managed
from
the
worksta>on

§  Nodes
should
be
assigned
roles
and
environments

§  A_ributes
speciﬁc
to
roles/environments
should
be
conﬁgured
accordingly

§  For
auto
scaling
environments
such
as
AWS
“una_ended”
bootstrapping
should
be

used

Learning Chef

Work
Flow:
Una_ended
Bootstrapping

In
order
to
have
an
una_ended
install
the
node
when
first
created
must
meet
the

following
criteria:

§  Must
be
able
to
authen>cate
to
the
chef
server

§  Must
be
able
to
configure
a
run_list

§  Must
be
able
to
access
the
chef-‐validator.pem
so
that
it
may
create
a
new

client.pem
and
iden>ty
on
the
chef
server

§  Must
have
a
unique
node
name

§  Client.rb
file
must
have
proper
configura>on
so
that
it
knows
what
server
to

communicate
with

§  Modify
the
file.json
in
/etc/chef
to
include
the
run_list
for
the
node

§  This
will
ideally
include
a
way
to
automate
the
running
of
chef-‐client

AWS CSA
Certification
Example:
Simple code that when
run will create an S3
bucket.
Version control your infrastructure!
{

"Descrip>on"
:
"This
template
will
create
an
s3bucket",

"Resources"
:
{

"S3Bucket"
:
{

"Type"
:
"AWS::S3::Bucket",

"Proper>es"
:
{

"AccessControl"
:
"PublicRead",

"BucketName"
:
"gigitygumdrops"

}

}

},

"Outputs"
:
{

"BucketName"
:
{

"Value"
:
{
"Ref"
:
"S3Bucket"
},

"Descrip>on"
:
"Created
bucket
for
storing
websites"

}

}

}

PRESENTATION
TITLE
List Title:
Lorem ipsum dolor sit amet,
consectetur adipiscing elit.
Aenean pellentesque facilisis
felis. Suspendisse ipsum erat,
facilisis at euismod vel,
consequat vitae nulla. Curabitur
fringilla, ligula a sagittis
venenatis, odio velit ornare
ligula, non semper ligula eros
eget neque. Ut sagittis vulputate
est, in mollis libero varius eget.
Cras felis felis, feugiat a sem a,
pharetra elementum arcu.
In odio lectus, placerat ut felis
vitae, ullamcorper facilisis elit.
Nam posuere metus et velit
commodo tincidunt.
" Linux List Item Number 1
" AWS List Item Number 1

PRESENTATION
TITLE
Image Title:Content area for image description or caption. Even regular content simply
associated with the image. Content area for image description or caption. Even
regular content simply associated with the image.

PRESENTATION
TITLEChart Title: Lorem ipsum dolor sit amet,
consectetur adipiscing elit.
Aenean pellentesque facilisis
felis. Suspendisse ipsum
erat, facilisis at euismod vel,
consequat vitae nulla.
Lorem
Ipsum
Dolor

Learning chef

Recommended

More Related Content

What's hot (20)

Viewers also liked (17)

Similar to Learning chef (20)

Recently uploaded (20)

Learning chef