ss44800 -practical satellite deployments from box to orbit ... · rabobank functional design 19...

SS44800 -Practical Satellite DeploymentsFrom Box to Orbit in 60 minutes

David Caplan Principal Product ManagerRich JerridoTechnical Marketing EngineerJan van der Noll RabobankJune 29, 2016

Digital Transformation

DEVNew ways of developing

and delivering applications

INFRASTRUCTURENew cloud-basedinfrastructure and ways toserve applications

APPLICATIONSNew architectures and

ways to integrate

RED HAT MANAGEMENT

OPSMore agile process tosupport both IT and thebusiness

SATELLITEBUILD A TRUSTED & SECURE REDHAT ENVIRONMENT

Manage the Red Hat LifecycleProvision & Configure at Scale Standardize Your Environment

CLOUDFORMSDELIVER SERVICES ACROSSYOUR HYBRID CLOUD

Hybrid Cloud ManagementSelf-Service Provisioning Policy-driven Compliance

ANSIBLEAUTOMATE YOUR IT PROCESSES& DEPLOYMENTS

Simple & powerful languageNo agents to installScale with Ansible Tower

INSIGHTSPREVENT CRITICAL ISSUESBEFORE THEY OCCUR

Continuous InsightsVerified KnowledgeProactive Resolution

RE

D H

AT

MA

NA

GE

ME

NT

WHY SATELLITE 6

MANAGE RED HATINFRASTRUCTURE

STREAMLINED CONTENTMANAGEMENT

SIMPLIFIED SYSTEMINTEGRATION

ENHANCED DRIFT &CONFIGURATION

MANAGEMENT

MANAGE MULTIPLE RED HATACCOUNTS

BUILT TO SCALE

Satellite 6

Automate Provisioning using PXE, Images, & containers, discoverbare-metal servers & auto-provision with policies

Blend RPMs, Puppet Modules, & Containers in a single versionedconstruct, and promote thru life cycles

Configure using Puppet with fully managed & versioned contentacross your customized environments

Deploy Red Hat content with confidence that your subscriptions aredelivering their full value

SATELLITE 6 ARCHITECTURE

Templates

Content Views

Networking

Satellite Library

QE PRODDEV

Satellite Tools of the TradeProvisioning & Configuration

Compute Resource

Puppet

LocationRBAC

Custom

Satellite Library

Satellite Tools of the TradeCDN, Puppet, and Custom Repos

Custom

Satellite Library

Satellite Tools of the TradeStaging in the Library

Custom

Satellite Tools of the TradeRefining with Content Views

QE PROD

Content Views

DEV

Satellite Tools of the Trade Automation with Templates

Templates

Satellite Tools of the TradeConfiguration

Puppet

Templates

Content Views

Networking

Satellite Tools of the TradeSystem Definition with Host Groups

Puppet

Satellite Tools of the Trade RBAC

RBAC

Satellite Tools of the Trade Compute Resource

Compute Resource

Satellite Tools of the TradeLifecycle Environments

QE PRODDEV

Satellite Tools of the TradeRabobank Provisioning & Configuration

Templates

Content Views

Networking

Satellite Library

QE PRODDEV

Compute Resource

Puppet

LocationRBAC

Custom

Rabobank Provisioning Story

18

● Existing situation (Satellite 5 / CfEngine)– Standard baseline deployment– Application specific configuration with various methods

● Manual● Custom RPM’s● Scripts

● Goals – All configuration executed from configuration database– Split configuration responsibility between OS management team and Application

management team

Rabobank Functional Design

19

● Baseline image build – Satellite 6.1.9 PXE / Kickstart / Puppet– Without various agents / backup config / monitoring

● Delivery of systems for customers– Image based / Puppet / Ansible– Generic base config built as a host-group– Configured with Puppet (centrally managed)

● Deviations are possible– Application specific OS config – Ansible (customer managed)

● Separate host-groups for current system

Rabobank Technical Design

20

● High Availability– VMware SRM for Satellite server HA

● Easy scalable– Initially no separate capsules– Load Balanced Capsules using Reference architecture

● Puppet– Satellite 6 used as External Node Classifier – Puppet Modules managed with R10K (Puppet tooling)

Satellite 6 HA Reference Architecture

07/13/16 22

Discovery

DHCPDNSTFTP

1

2

Remote Execution

TEMPLATE DESIGN ANDVERSIONING PHASE

TEMPLATE HOST ASSIGNMENT,SCHEDULE, AND INVOCATION PHASE

TEMPLATES DELIVERED VIAHTTPS

AGENTLESS EXECUTION OVERSSH

07/13/16 24

Open SCAP Integration

Learn More

Satellite Related Talks and LabsWed -Thurs (Exhibition Hours) Thur 10:15 – 10:45

SS45622 - Sat 6 Power User Tips and Tricks

Wed 3:30 – 4:30 Thur 3:30 – 4:30

Wed 3:30 – 4:30 Thur 3:30 – 4:30

Thur 10:15 – 10:45 Thur 4:45 -5:45SS45622 - Sat 6 Power User Tips and Tricks Satellite Birds of a Feather

UXD Interview for 6.2 Users In the Red HatBooth (Incentives for Interviews)

SS44812: Transitioning from Red HatSatellite 5 to 6

SS42731: Achieving Compliance, SecurityAutomation, and Remediation with Red HatCloudForms , Satellite, and Ansible

SL45190 - Practical OpenSCAP, SecurityStandard Compliance and Reporting

Regulatory Compliance for Red Hatproducts BoF (PCI-DSS, STIG, HIPPA, SOX,FISMA)

Come See Us!

Visit the Foreman TeamIn the Community Booth #508

Visit the Satellite TeamIn the Red HatInfrastructureBooth #508 (A-J)

DEMO