Roles and Profiles
by Ger Apeldoorn
Puppet
LOADING AWESOME
[ whoami ]
Freelance Puppet Consultant
LOADING AWESOME
Freelance Puppet Trainer
Agenda
Roles & Profiles
Why Roles and Profiles?
- Installing component modules
- Using Hieradata to customize modules
Overview
Example: Base profile
- Creating the Profile
- Creating the role
- Creating resources using Hiera
Example: Lamp server
Node classification
- What are component modules
- Roles and Profiles Theory
Why?
Because we can
Manageability
Manage groups
Best Practice
Not using Roles and Profiles will lead to more complexity and failures.
Keep your infrastructure Manageable!
Roles and Profiles is extremely common and a Best Practice.
Don't manage individual machines, manage logical groups of servers!
LOADING AWESOME
Component modules
Examples
LOADING AWESOME
LOADING AWESOME
LOADING AWESOME
LOADING AWESOME
'Composable'
- The Magic word
- Should mind it's own business
Pre-fab building blocks
- Easy to share
- Download from the Forge
- Has all the components to manage a single piece of software
LOADING AWESOME
Component modules
Examples
LOADING AWESOME
LOADING AWESOME
LOADING AWESOME
LOADING AWESOME
Why Forge modules?
- Downloading is faster
- Updates maintained by author
- Documentation
- Flexibility!
https://forge.puppet.com
Overview
The Theory of Roles & Profiles
Business layer
LOADING AWESOME
Implementation layer
Component modules
Base profile
The fundamentals
Settings for all servers
- NTP
- DNS
- Motd
- System users
LOADING AWESOME
Base profile
The fundamentals
Generic
- NTP
- DNS
- Motd
LOADING AWESOME
Split by platform
- Yumrepos
- Kernel parameters
- Registry values
- System users
webserver
Setting up a role and profile
role::web
profile::lamp
profile::base
ntp
motd
apache
mysql
apache::vhost
mysql_database
user
Node classification
Server based
Web interface
Custom fact
Can be dangerous!
Deployed with OS installation
Make immutable to avoid tampering
Client based
Hiera data
Create a Hiera file for each host
Centralized
Roles and Profiles
Thank you!
