Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Bungwe la National Environmental Satellite Data Information Service (NESDIS) lachepetsa mitengo yake yoyendetsera Red Hat Enterprise Linux (RHEL) ndi 35% posamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Mu kanema "momwe tidachitira" vidiyoyi, injiniya wamakina Michael Rau akufotokoza za kusamuka uku, ndikugawana malangizo othandiza ndi maphunziro omwe taphunzira kuchokera ku SCM kupita ku ina.

Kuchokera muvidiyoyi muphunzira:

  • momwe mungadzilungamitsire kuwongolera kuthekera kosintha kuchoka ku Bizinesi ya Zidole kupita ku Ansible Tower;
  • ndi njira ziti zomwe mungagwiritse ntchito kuti kusinthaku kukhale kosavuta momwe mungathere;
  • malangizo a transcoding PE akuwonekera mu Ansible Playbook;
  • Malangizo pakuyika bwino kwa Ansible Tower.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Moni nonse, dzina langa ndine Michael Rau, ndine Senior Systems Engineer ku ActioNet, yemwe amagwira ntchito ku National Oceanic and Atmospheric Administration (NOAA) NESDIS service. Lero tikambirana za kudula zingwe - zomwe ndakumana nazo posamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Mutu wankhani imeneyi ndi wakuti β€œyang’anani zipsera zanga” zomwe zinatsala nditasintha izi kumayambiriro kwa chaka. Ndikufuna kugawana zomwe ndaphunzira kudzera munjira iyi. Kotero pamene mutenga chinachake chonga ichi, pogwiritsa ntchito zomwe ndakumana nazo, mukhoza kusintha popanda ntchito yowonjezera.

Mukuwona zithunzi zofanana ndi izi kumayambiriro kwa chiwonetsero chilichonse pa Ansible Fest. Silayidi iyi ikufotokoza mbiri yamakampani anga. Sindine watsopano ku izi chifukwa ndakhala ndikugwiritsa ntchito Bizinesi ya Zidole kuyambira 2007. Ndinayamba kugwira ntchito ndi Ansible mu 2016, ndipo monga ena ambiri ogwiritsa ntchito mankhwalawa, ndinakopeka ndi kuthekera kwa "zidule" pogwiritsa ntchito mzere wa malamulo ndi zolemba zosavuta (mabuku ochezera). Kumapeto kwa 2017, ndinapita kwa oyang'anira anga za zifukwa zomveka zosamukira ku Ansible Tower. Mumphindi imodzi ndikuuzani zifukwa zomwe zinandipangitsa kuti ndichite izi. Nditalandira chilolezo cha oyang'anira, zinatenga miyezi ingapo kuti ndimalize dongosololi, ndipo ndinasintha mu January-February chaka chino. Chifukwa chake, tidasiya Chidole kwathunthu m'malo mwa Ansible, ndipo ndichinthu chabwino.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Chomwe chimandisangalatsa kwambiri pa Ansible ndikutha kulemba ndikugwiritsa ntchito maudindo ndi mabuku osewerera. Maudindo ndi abwino kupanga ntchito zosiyana koma zogwirizana ndikuyika zonse zokhudzana ndi ntchitozo pamalo amodzi. Buku losewera ndi YAML syntax, fayilo yomwe imalongosola zochita za munthu m'modzi kapena angapo. Ndimauza ogwiritsa ntchito za izi, makamaka opanga mapulogalamu. Ansible Tower imakupatsani mwayi woti, "ayi, mulibe mwayi wopeza zipolopolo, koma ndimakupatsani mwayi woyendetsa njira zonse za Tower ndikuyambitsanso ntchito mukafuna." Ndikuuzani za malo ogwira ntchito ndi zipangizo zomwe timagwiritsa ntchito.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Iyi ndi LAN ya federal, masamba 7 olumikizidwa kudzera pamtambo MPLS, ma seva a 140 RHEL, 99% omwe ali pafupifupi (vSphere), SuperMicro hardware, NexentaStore network yosungirako, seti ya Cisco, Arista ndi Cumulus masiwichi ndi Fortinet UTM kasamalidwe kowopsa kogwirizana. zida patsamba lililonse .

Network ya federal ikutanthauza kuti ndiyenera kugwiritsa ntchito njira zonse zotetezera zomwe zimaperekedwa ndi lamulo. Muyenera kukumbukira kuti Puppet Enterprise sichirikiza zida zambiri zomwe timagwiritsa ntchito. Timakakamizika kugwiritsa ntchito zida za bajeti chifukwa mabungwe aboma ali ndi vuto lopeza ndalama zogulira izi. Ichi ndichifukwa chake timagula zida za SuperMicro ndikusonkhanitsa zida zathu kuchokera kumagulu amodzi, kukonza komwe kumatsimikiziridwa ndi mapangano aboma. Timagwiritsa ntchito Linux ndipo ichi ndi chimodzi mwazifukwa zofunika zosinthira ku Ansible.

Mbiri yathu ndi Chidole ili motere.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Mu 2007, tinali ndi netiweki yaying'ono ya 20-25 node, momwe tidatumiza Chidole. Kwenikweni, mfundozi zinali "mabokosi" a RedHat. Mu 2010, tinayamba kugwiritsa ntchito mawonekedwe a Puppet Dashboard pa ma node 45. Pamene netiweki ikupitilira kukula, tidasamukira ku PE 2014 mu 3.3, ndikupanga kusintha kwathunthu ndikulembanso kowonekera kwa ma node 75. Izi zinayenera kuchitidwa chifukwa Chidole amakonda kusintha malamulo a masewera, ndipo pamenepa adasinthiratu chinenerocho. Chaka chotsatira, chithandizo cha mtundu 3 wa Puppet Enterprise chinatha, tinakakamizika kusamukira ku PE 2015.2. Tidayenera kulembanso chiwonetserochi pamaseva atsopano ndikugula laisensi yokhala ndi ma node 100, ngakhale panthawiyo tinali ndi ma node 85 okha.

Zaka 2 zokha zapita, ndipo tinayeneranso kuchita ntchito zambiri kuti tisamukire ku mtundu watsopano wa PE 2016.4. Tidagula laisensi ya ma node 300, okhala ndi 130 okha. Tinayeneranso kupanga masinthidwe akulu ku manifesto chifukwa mtundu watsopano wa chilankhulocho unali ndi mawu osiyana ndi chilankhulo cha mtundu wa 2015. Zotsatira zake, SCM yathu inasintha kuchoka ku SVN version control kupita ku Bitbucket (Git). Uwu unali "ubale" wathu ndi Chidole.

Chifukwa chake, ndidayenera kufotokozera kwa oyang'anira chifukwa chomwe tidafunikira kusamukira ku SCM yosiyana pogwiritsa ntchito mfundo zotsatirazi. Choyamba ndi mtengo wapamwamba wa utumiki. Ndinayankhula ndi anyamata a RedHat ndipo adanena kuti mtengo woyendetsa 300 node network ndi Ansible Tower ndi theka la mtengo wa Puppet Enterprise. Mukagulanso Ansible Engine, mtengo wake udzakhala wofanana, koma mudzapeza zambiri kuposa PE. Popeza ndife kampani yaboma yolandira ndalama kuchokera ku federal budget, uwu ndi mkangano wamphamvu kwambiri.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Mtsutso wachiwiri ndi wosinthasintha. Chidole chimangogwirizira zida zomwe zili ndi chida cha Zidole. Izi zikutanthauza kuti wothandizira ayenera kuikidwa pa masiwichi onse, ndipo ayenera kukhala mtundu waposachedwa. Ndipo ngati ma switch anu ena amathandizira mtundu wina, ndipo ena amathandizira ina, muyenera kukhazikitsa mtundu watsopano wa PE wothandizira pa iwo kuti onse athe kugwira ntchito mu SCM imodzi.

Dongosolo la Ansible Tower limagwira ntchito mosiyana chifukwa liribe othandizira, koma lili ndi ma module omwe amathandizira kusintha kwa Cisco ndi masiwichi ena onse. SCM iyi imathandizira Qubes OS, Linux ndi 4.NET UTM. Ansible Tower imathandiziranso NexentaStore owongolera ma network osungira kutengera Illumos kernel, makina otsegulira a Unix. Izi ndizothandiza pang'ono, koma Ansible Tower imachitabe.

Mtsutso wachitatu, womwe ndi wofunikira kwambiri kwa ine komanso kwa oyang'anira athu, ndiwosavuta kugwiritsa ntchito. Ndinakhala zaka 10 ndikudziΕ΅a ma module a Zidole ndi zizindikiro zowonetsera, koma ndinaphunzira Ansible mkati mwa sabata chifukwa SCM iyi ndiyosavuta kugwira nayo ntchito. Ngati mumayendetsa mafayilo omwe angathe kuchitidwa, ndithudi, pokhapokha mutachita mosafunikira, ndiye kuti ogwira ntchito anzeru komanso omvera amagwira nawo ntchito. Mabuku osewerera a YAML ndi osavuta kuphunzira komanso ofulumira kugwiritsa ntchito. Iwo omwe sanamvepo za YAML m'mbuyomu amatha kuwerenga zolembazo ndikumvetsetsa momwe zimagwirira ntchito.

Kunena zowona, Chidole chimapangitsa kuti ntchito yanu yomanga ikhale yovuta kwambiri chifukwa imachokera pakugwiritsa ntchito Puppet Master. Ndi makina okhawo omwe amaloledwa kulankhulana ndi othandizira Zidole. Ngati mwasintha chilichonse pa chiwonetserochi ndipo mukufuna kuyesa nambala yanu, muyenera kulembanso kachidindo ka Puppet Master, ndiye kuti, sinthani fayilo ya Puppet Master / etc/hosts kuti mulumikizane ndi makasitomala onse ndikuyamba ntchito ya Puppet Server. Pokhapokha mudzatha kuyesa kugwiritsa ntchito zida zapaintaneti pagulu limodzi. Iyi ndi njira yowawa kwambiri.
Chilichonse ndichosavuta mu Ansible. Zomwe muyenera kuchita ndikupanga nambala yamakina omwe amatha kulumikizana kudzera pa SSH ndi wolandirayo poyesedwa. Izi ndizosavuta kugwira ntchito.

Ubwino wotsatira wa Ansible Tower ndikutha kupititsa patsogolo dongosolo lanu lothandizira ndikusunga makina anu omwe alipo. SCM iyi imagwiritsa ntchito zidziwitso zonse zomwe zilipo za zomangamanga ndi zida zanu, makina enieni, maseva, ndi zina zambiri popanda njira zina zowonjezera. Itha kuyankhula ndi ma seva anu a RH Satellite, ngati muli nawo, ndikukupatsani zophatikizira zomwe simungapeze ndi Chidole.

Chinthu china chofunikira ndikuwongolera mwatsatanetsatane. Mukudziwa kuti Chidole ndi modular system, ndi pulogalamu ya kasitomala-server, chifukwa chake muyenera kufotokozera zomwe zilipo pamakina anu onse pachiwonetsero chimodzi chachitali. Pankhaniyi, chikhalidwe cha munthu aliyense wa dongosolo ayenera kuyesedwa theka la ola - iyi ndi nthawi yosasintha. Umu ndi momwe Chidole chimagwirira ntchito.

Tower imakupulumutsani ku zimenezo. Mutha kuyendetsa njira zosiyanasiyana pazida zosiyanasiyana popanda zoletsa; mutha kugwira ntchito zoyambira, kuyendetsa njira zina zofunika, kukhazikitsa chitetezo, ndikugwira ntchito ndi nkhokwe. Mutha kuchita chilichonse chomwe chili chovuta mu Puppet Enterprise. Chifukwa chake, ngati mwaikonza pa wolandila m'modzi, zidzatenga nthawi kuti zosinthazo zichitike pa otsalira otsalawo. Mu Ansible, zosintha zonse zimachitika nthawi imodzi.

Pomaliza, tiyeni tiwone gawo lachitetezo. Ansible Tower imagwiritsa ntchito modabwitsa, molunjika komanso mosamala kwambiri. Mutha kupatsa ogwiritsa ntchito mwayi wopeza ntchito zinazake kapena kwa omwe akulandira. Ndimachita izi ndi antchito anga omwe amazolowera kugwira ntchito pa Windows, ndikuchepetsa mwayi wawo ku chipolopolo cha Linux. Ndimaonetsetsa kuti ali ndi mwayi wopita ku Tower kuti azitha kugwira ntchitoyo ndikungoyendetsa ntchito zomwe zili zoyenera kwa iwo.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Tiyeni tiwone zomwe muyenera kuchita pasadakhale kuti kusintha kwanu kupita ku Ansible Tower kukhale kosavuta. Choyamba, muyenera kukonzekera zida zanu. Ngati zina mwazinthu zanu sizili kale mu database, muyenera kuziwonjezera pamenepo. Pali machitidwe omwe sasintha mawonekedwe awo ndipo chifukwa chake sali mu database ya Zidole, koma ngati simuwawonjezera pamenepo musanasamukire ku Tower, mudzataya zabwino zingapo. Izi zitha kukhala "zonyansa", zoyambira, koma ziyenera kukhala ndi chidziwitso cha zida zonse zomwe muli nazo. Chifukwa chake, muyenera kulemba script yamphamvu ya Hardware yomwe imangokankhira zosintha zonse zachitukuko mu nkhokwe, ndiye Ansible adzadziwa omwe ali ndi makamu omwe ayenera kukhalapo padongosolo latsopano. Simudzafunika kuuza SCM kuti ndi ati omwe mwawawonjeza komanso omwe sakhalapo, chifukwa idziwa zonse izi zokha. Zambiri zomwe zili mu database, Ansible idzakhala yothandiza komanso yosinthika. Zimagwira ntchito ngati kuti zimangowerenga barcode ya hardware kuchokera ku database.

Khalani ndi nthawi yodziwa mzere wolamula mu Ansible. Pangani malamulo ena kuti muyese script ya hardware, lembani ndi kuyendetsa zolemba zosavuta koma zothandiza, gwiritsani ntchito ma tempuleti a Jinja2 ngati kuli koyenera. Yesani kulemba ntchito ndi script pazovuta, njira zambirimbiri pogwiritsa ntchito makonzedwe a hardware omwe nthawi zambiri amakumana nawo. Sewerani ndi zinthu izi, yesani momwe zimagwirira ntchito. Mwanjira iyi muphunzira momwe mungagwiritsire ntchito zida zopangira laibulale zomwe zimagwiritsidwa ntchito mu Tower. Ndanena kale kuti zinanditengera pafupifupi miyezi itatu kukonzekera kusintha. Ndikuganiza kuti kutengera zomwe ndakumana nazo, mudzatha kuchita izi mwachangu. Musaganize kuti nthawiyi yawonongeka, chifukwa pambuyo pake mudzapeza phindu lonse la ntchito yomwe mwachita.

Kenako, muyenera kusankha zomwe mukuyembekezera kuchokera ku Ansible Tower, zomwe dongosololi likuyenera kukuchitirani.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Kodi muyenera kuyika dongosololi pazida zopanda kanthu, pamakina opanda kanthu? Kapena mukufuna kukhalabe ndi momwe amagwirira ntchito ndi zoikamo za zida zomwe zilipo kale? Ichi ndi gawo lofunikira kwambiri kumakampani aboma, chifukwa chake muyenera kutsimikiza kuti mutha kusamuka ndikuyika Ansible pamasinthidwe anu omwe alipo. Dziwani njira zoyendetsera zomwe mukufuna kupanga zokha. Dziwani ngati mukufuna kutumiza mapulogalamu ndi mautumiki ena padongosolo latsopano. Lembani mndandanda wa zomwe mukufuna kuchita ndikuziyika patsogolo.

Kenako yambani kulemba script code ndi maudindo omwe angathandize ntchito zomwe mukufuna kumaliza. Aphatikize kukhala Mapulojekiti, mndandanda womveka bwino wamabuku ofunikira. Pulojekiti iliyonse idzakhala ya malo osiyana a Git kapena malo ena osiyana malinga ndi woyang'anira ma code omwe mumagwiritsa ntchito. Mutha kuyang'anira zolemba za mabuku osewerera ndi zolemba za mabuku osewerera poziyika pamanja mu Project Base Path pa seva ya Tower, kapena kuyika bukulo mudongosolo lililonse la code source management (SCM) lothandizidwa ndi Tower, kuphatikiza Git, Subversion, Mercurial, ndi Red Hat. Kuzindikira. Mu Project imodzi mutha kuyika zolemba zambiri momwe mukufunira. Mwachitsanzo, ndidapanga Pulojekiti imodzi yofunikira momwe ndidayikamo zolemba za RedHat core element, script ya Linux pachimake, ndi zolemba zina zonse zoyambira. Chifukwa chake, mu projekiti imodzi munali maudindo osiyanasiyana ndi zochitika zomwe zimayendetsedwa kuchokera kunkhokwe imodzi ya Git.

Kuthamanga zinthu zonsezi kudzera mu mzere wolamula ndi njira yabwino yoyesera ntchito zawo. Izi zikukonzekerani kukhazikitsa Tower.

Tiyeni tikambirane pang'ono za transcoding chiwonetsero cha Zidole, chifukwa ndidakhala nthawi yayitali pa izi mpaka ndidazindikira zomwe zikuyenera kuchitika.

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 1

Monga ndanenera kale, Chidole chimasunga zosintha zonse ndi zosankha za hardware mu chiwonetsero chimodzi chachitali, ndipo chiwonetserochi chimasunga zonse zomwe SCM iyi iyenera kuchita. Mukamasintha, simuyenera kuphatikizira ntchito zanu zonse pamndandanda umodzi, m'malo mwake, ganizirani za dongosolo latsopanoli: maudindo, zolemba, ma tag, magulu ndi zomwe ziyenera kupita pamenepo. Zina mwazinthu zodziyimira pawokha zapaintaneti ziyenera kugawidwa m'magulu omwe zolemba zake zitha kupangidwira. Zinthu zovuta zowonjezera zowonongeka zomwe zimaphatikizapo kuchuluka kwa zinthu, kuphatikizapo makalasi odzidalira, zikhoza kuphatikizidwa kukhala maudindo. Musanasamuke, muyenera kusankha pankhaniyi. Ngati mukupanga maudindo akulu kapena zochitika zomwe sizikukwanira pa sikirini imodzi, muyenera kugwiritsa ntchito ma tag kuti muzitha kujambula magawo ena azinthu.

18:00

Kudula ulusi: kusamuka kuchoka ku Puppet Enterprise kupita ku Ansible Tower. Gawo 2

Zotsatsa zina πŸ™‚

Zikomo chifukwa chokhala nafe. Kodi mumakonda zolemba zathu? Mukufuna kuwona zambiri zosangalatsa? Tithandizeni potipatsa oda kapena kulimbikitsa anzathu, mtambo VPS kwa opanga kuchokera ku $ 4.99, ma analogi apadera a ma seva olowera, omwe adakupangirani inu: Chowonadi chonse chokhudza VPS (KVM) E5-2697 v3 (6 Cores) 10GB DDR4 480GB SSD 1Gbps kuchokera $19 kapena momwe mungagawire seva? (ikupezeka ndi RAID1 ndi RAID10, mpaka 24 cores mpaka 40GB DDR4).

Dell R730xd 2x yotsika mtengo ku Equinix Tier IV data center ku Amsterdam? Pokhapokha 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TV kuchokera $199 ku Netherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - kuchokera $99! Werengani za Momwe mungamangire Infrastructure Corp. kalasi pogwiritsa ntchito ma seva a Dell R730xd E5-2650 v4 ofunika ma euro 9000 pa khobiri?

Source: www.habr.com

Kuwonjezera ndemanga