RootStack - Devfactory
0 likes75 views
The document discusses requirements and considerations for selecting open source tools for container orchestration and runtime. It evaluates Ansible, Terraform, Puppet, Kubernetes, and Nomad for orchestration and decides on Nomad for its ease of use and low learning curve. It also selects Consul for service discovery. The document outlines the installation process and architecture, showing how Consul, Nomad, Traefik, Prometheus, Grafana, Loki, and Minio would integrate together. It provides version details and screenshots of the setup. It suggests next steps like full testing and Raspberry Pi support. Managed options from Devfactory are also discussed.
RootStack - Devfactory
- 1. Experts in Linux & Open Source Solutions RootStack Devfactory OSS
- 2. Experts in Linux & Open Source Solutions What? A runtime scheduler for containers, VMs and native binaries, with full observability.
- 3. Experts in Linux & Open Source Solutions Why? The cost of starting a new team and their tooling is way too high. This allows for a fast, cheap and repeatable buildout.
- 4. Experts in Linux & Open Source Solutions Requirements
- 5. Experts in Linux & Open Source Solutions What were the requirements? ◇ Spin up workloads easily, cheap and across architectures (RPi) ◇ Low learning curve ◇ Worry-free about ⋄ SSL encryption ⋄ Storage sharing ⋄ Logging ⋄ Audit ◇ Repeatable without much hassle ◇ Small footprint
- 6. Experts in Linux & Open Source Solutions Questions… ◇ What tools, 2 big deciders: Runtime, Orchestration. ◇ Are they available on arm64? ◇ Can they integrate? ◇ Free, open source? ◇ Automatable? ◇ Complexity?
- 7. Experts in Linux & Open Source Solutions Orchestration considered ● Terraform ○ only useful cloud-native, cannot setup the environment ● Ansible ○ Easy to install, low learning curve ● Puppet ○ Learning curve, extra server, slow development
- 8. Experts in Linux & Open Source Solutions Runtime considered ● Kubernetes ○ Complex to install, learning curve to steep ● k3s ○ Easy to install, steep learning curve ● Nomad ○ Easy to install, low learning curve
- 9. Experts in Linux & Open Source Solutions Integrations
- 10. Experts in Linux & Open Source Solutions Architecture
- 11. Experts in Linux & Open Source Solutions
- 12. Experts in Linux & Open Source Solutions
- 13. Experts in Linux & Open Source Solutions Versions ● Consul: 1.11.4 ● Nomad: 1.2.6 ● Traefik: 2.6.2 ● Prometheus: ● Grafana Loki & promtail: 1.16.2 ● Grafana: 8.4.4 ● Minio: 2022-03-26T06-49-28Z
- 14. Experts in Linux & Open Source Solutions Installation Flow
- 15. Experts in Linux & Open Source Solutions Installation flow ● Docker + Consul setup ● Nomad setup ● Observability and Ingress stack
- 16. Experts in Linux & Open Source Solutions
- 17. Experts in Linux & Open Source Solutions
- 18. Experts in Linux & Open Source Solutions
- 19. Experts in Linux & Open Source Solutions
- 20. Experts in Linux & Open Source Solutions
- 21. Experts in Linux & Open Source Solutions Screenshots setup
- 22. Experts in Linux & Open Source Solutions Screenshots setup
- 23. Experts in Linux & Open Source Solutions How to test? ● Run the molecule scenarios ○ Rocky Linux 8 ○ Ubuntu 20.04 LTS ● Create minimal inventory (see docs) & buildout on internal environment.
- 24. Experts in Linux & Open Source Solutions Next steps open source version… ● Full test suite for environment buildout ● Merge the RPI setup with the current OSS version ○ Document the requirements ○ Document the devices needed ● Full mTLS support internal tools (Consul + Nomad mostly) ● Authentication + Authorization? ● … What would you like to see?
- 25. Experts in Linux & Open Source Solutions Devfactory - Managed ● Adds Vault to the environment as credential store ○ Hashicorp Vault Open Source ○ Azure/AWS/GCP Key Vault for unseal ● Adds Boundary to the environment for access and gating ○ extra dependencies → PostgreSQL → Ansible boundary collection
- 26. Experts in Linux & Open Source Solutions
- 27. Experts in Linux & Open Source Solutions Questions?