moving from trying to managing change to practical change ... · – testing your configs ... –...
TRANSCRIPT
![Page 1: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/1.jpg)
UKUUG 2011
Snakes, Gems, Butlers, Shoes, Vegetables and Hamsters
Moving from trying to managing change to practical Change Management.
![Page 2: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/2.jpg)
UKUUG 2011
What's this about then?● Where do you start?
● What's next?
– Change Management– Configuration Management– Testing your configs– Building Systems– Auditing
● Announcing Edison
● What does the future hold?
![Page 3: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/3.jpg)
UKUUG 2011
Where do you start?
![Page 4: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/4.jpg)
UKUUG 2011
Stabilise the patient...● Visible Ops Handbook
– If you don't triage, how do you know what to tackle first?
– Treat the cause, not the symptoms
![Page 5: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/5.jpg)
UKUUG 2011
Don't Change Anything!● Take Stock of your
current systems
● Plan your recovery from the current state
● Set obtainable goals
![Page 6: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/6.jpg)
UKUUG 2011
What's Next?
![Page 7: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/7.jpg)
UKUUG 2011
Have a roadmap...● If you don't know where you're going, how do you
know when you've arrived?
● If your goals aren't realistic, you'll only spread disillusionment among your teams and colleagues
● Send the roadmap to all senior management
![Page 8: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/8.jpg)
UKUUG 2011
Establish Change ManagementAnd enforce(!)
● If it's not written down, it didn't happen
● Make it easy to add a change request
– Webbased (part of the intranet?)● Make it easy to approve requests
– Not everything needs approval at board level!
● Make it difficult to avoid change management
– “It wasn't an approved change, we won't support it”
![Page 9: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/9.jpg)
UKUUG 2011
Enforcing Change Management● Maintain System State
– Puppet– Chef– CfEngine
● Management buyin
● Revoke access for breaches of policy
![Page 10: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/10.jpg)
UKUUG 2011
Configuration Management● Use Source Control
● Check the commit logs
● Review Regularly
● Don't release on a Friday!
![Page 11: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/11.jpg)
UKUUG 2011
Testing Configurations● Continuous Integration
isn't just for developers!
● LibVirt is your friend
● Cucumber and friends can be used for testing systems as well as applications
![Page 12: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/12.jpg)
UKUUG 2011
Building Systems● Systems should always
be built in the same way
● Automate it!
● Just deploy the base OS, let Puppet/Chef/cfEngine take care of the rest...
![Page 13: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/13.jpg)
UKUUG 2011
Auditing● It's not about blame
● You already have the components
– Git logs– Puppet runs– Hudson Build logs
● Just tie them all together...
– But how?
![Page 14: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/14.jpg)
UKUUG 2011
Announcing Edison● External Node Classifier
● Kickstart Provider
● CMDB
● Change Management (linked to SCM)
● Auditing Framework
● And that's just the start...
![Page 15: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/15.jpg)
UKUUG 2011
What does the future hold?● Systems Administrators will be developers
● Intimate hardware knowledge will be replaced with scripting knowledge and an understanding of APIs
● It doesn't matter if it's called “Cloud”, “Utility Computing” or “Clustering” it's here to stay.
– Unfortunately, so are all the acronyms...
![Page 16: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/16.jpg)
UKUUG 2011
Questions?
![Page 17: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration](https://reader036.vdocuments.mx/reader036/viewer/2022071214/60435a521951185e7052ede7/html5/thumbnails/17.jpg)
UKUUG 2011
Contact Details
@proffalken
github.com/proffalken
www.threedrunkkensysadsonthe.net