elizabeth k. joseph @pleia2 - princessleia.com
TRANSCRIPT
![Page 1: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/1.jpg)
Open Source Systems Administration
Elizabeth K. Joseph@pleia2
HPOpenStack Infrastructure Team
All Things Open, 22 October 2014
![Page 2: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/2.jpg)
Elizabeth K. Joseph
● Linux Systems Administrator● Ubuntu Community Council Member & Co-
author of The Official Ubuntu Book, 8th Edition● Director for the non-profit Partimus.org● Really likes open source software
![Page 3: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/3.jpg)
Elizabeth K. Joseph | @pleia2 3
The OpenStack Infrastructure team maintains the servers OpenStack developers use worldwide to
contribute to OpenStack
![Page 4: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/4.jpg)
Elizabeth K. Joseph | @pleia2 4
The OpenStack Infrastructure is also an Open Source project
(Other projects and companies even use it!)
![Page 5: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/5.jpg)
Elizabeth K. Joseph | @pleia2 5
All code repositories are available online:https://git.openstack.org/cgit/openstack-infra
![Page 6: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/6.jpg)
Elizabeth K. Joseph | @pleia2 6
Changes are proposed by anyone through a public code review system (Gerrit):
https://review.openstack.org/
![Page 7: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/7.jpg)
Elizabeth K. Joseph | @pleia2 7
We use OpenStack's CI Infrastructure
● Launchpad (coming soon: StoryBoard)
● Git● Gerrit● Zuul*● Gearman● Jenkins (with jenkins-job-builder*)● Nodepool* (with devstack-gate*)
* Started by the OpenStack Infrastructure team
![Page 8: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/8.jpg)
Elizabeth K. Joseph | @pleia2 8
OpenStack CI Workflow
Local changes submitted via
git-review
Gerrit code review Zuul
Jenkins (gearman-plugin)
pipy mirrors & other semi-privileged servers
Git repository
Jenkins01,02... ubuntu, fedora, centos &
devstack slaves
Github mirror git.openstack.org mirror
Gearman Server
![Page 9: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/9.jpg)
Elizabeth K. Joseph | @pleia2 9
As a user: git-review and Gerrit
elizabeth@r2d2$:~/git/openstackinfra$ git clone git://git.openstack.org/openstackinfra/publicationselizabeth@r2d2$:~/git/openstackinfra/publications$ vim index.htmlelizabeth@r2d2$:~/git/openstackinfra/publications$ git commit a[toolsconfigs/updates 0c63f4a] Update tools and review purposes. 1 file changed, 4 insertions(+)elizabeth@r2d2$:~/git/openstackinfra/publications$ git reviewAmending the commit to add a gerrit change id.remote: Resolving deltas: 100% (2/2)remote: Processing changes: new: 1, refs: 1, done remote: remote: New Changes:remote: https://review.openstack.org/128722remote: To ssh://[email protected]:29418/openstackinfra/publications.git * [new branch] HEAD > refs/publish/sysadmincodereview/toolsconfigs/updates
![Page 10: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/10.jpg)
Elizabeth K. Joseph | @pleia2 10
![Page 11: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/11.jpg)
Elizabeth K. Joseph | @pleia2 11
![Page 12: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/12.jpg)
Elizabeth K. Joseph | @pleia2 12
What uses this CI system
All core OpenStack projectsStackForge projects
DocumentationTranslations importsProject specifications
Systems Administration
![Page 13: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/13.jpg)
Elizabeth K. Joseph | @pleia2 13
What we do as OpenStack Infrastructure Systems Administrators
![Page 14: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/14.jpg)
Elizabeth K. Joseph | @pleia2 14
![Page 15: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/15.jpg)
Elizabeth K. Joseph | @pleia2 15
![Page 16: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/16.jpg)
Elizabeth K. Joseph | @pleia2 16
Maintain a bunch of stuff
● Continuous Integration systems● Cacti● Elasticsearch, Logstash and Kibana● IRC Bots● Etherpad● Git● Paste● Planet● Puppetboard● Mailing Lists● Various smaller web services● Wiki
![Page 17: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/17.jpg)
Elizabeth K. Joseph | @pleia2 17
Test our patches
● flake8 (pep 8 and pyflakes)● bashate● puppet parser validate● puppet-lint● Beaker● XML● Alphabetized project files
![Page 18: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/18.jpg)
Elizabeth K. Joseph | @pleia2 18
Code review benefits: Peer review
● Multiple eyes on changes prior to merging● Good infrastructure for developing new
solutions (particularly for a distributed team)● No special process to go through for commit
access● Trains us to be collaborative by default
![Page 19: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/19.jpg)
Elizabeth K. Joseph | @pleia2 19
How do you know what's going on with your servers?
![Page 21: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/21.jpg)
Elizabeth K. Joseph | @pleia2 21
Puppetboard: http://puppetboard.openstack.org/
![Page 23: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/23.jpg)
Elizabeth K. Joseph | @pleia2 23
Security
The whole world knows what we run and how we run it.
We need to be diligent about locking down services that believe they live behind an authentication wall.
And when we're not? Be aware of the risks and prepared to deal with the consequences.
![Page 24: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/24.jpg)
Elizabeth K. Joseph | @pleia2 24
We need to fully trust some people
We can't give access to everything to everyone on the Internet and we can't do everything through code review
Some shell access is still required(viewing logs, migrations, unusual service failures)
Private management of sensitive data(keys, certificates, passwords)
Core reviewers have the power to push anything that passes tests through(self-approval, patch ninja-ing)
![Page 25: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/25.jpg)
Elizabeth K. Joseph | @pleia2 25
Questions?
Documentation: http://ci.openstack.org/
Contact me: [email protected]
![Page 26: Elizabeth K. Joseph @pleia2 - PrincessLeia.com](https://reader030.vdocuments.mx/reader030/viewer/2022020621/61e9f8a2604c6876197347de/html5/thumbnails/26.jpg)
Elizabeth K. Joseph | @pleia2 26
Credits
CC BY-SA slide background source: "The gate's unlocked!!! by Tripp"
https://www.flickr.com/photos/trippchicago/3769904793
The whole OpenStack Infrastructure team for the extraordinary work being done!