17
UKUUG 2011 Snakes, Gems, Butlers, Shoes, Vegetables and Hamsters Moving from trying to managing change to practical Change Management.

Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Snakes, Gems, Butlers, Shoes, Vegetables and Hamsters 

Moving from trying to managing change to practical Change Management.

Page 2: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

What's this about then?● Where do you start?

● What's next?

– Change Management– Configuration Management– Testing your configs– Building Systems– Auditing

● Announcing Edison

● What does the future hold?

Page 3: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Where do you start?

Page 4: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Stabilise the patient...● Visible Ops Handbook

– If you don't triage, how do you know what to tackle first?

– Treat the cause, not the symptoms

Page 5: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Don't Change Anything!● Take Stock of your 

current systems

● Plan your recovery from the current state

● Set obtainable goals

Page 6: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

What's Next?

Page 7: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Have a roadmap...● If you don't know where you're going, how do you 

know when you've arrived?

● If your goals aren't realistic, you'll only spread disillusionment among your teams and colleagues

● Send the roadmap to all senior management

Page 8: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Establish Change ManagementAnd enforce(!)

● If it's not written down, it didn't happen

● Make it easy to add a change request

– Web­based (part of the intranet?)● Make it easy to approve requests

– Not everything needs approval at board level!

● Make it difficult to avoid change management

– “It wasn't an approved change, we won't support it”

Page 9: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Enforcing Change Management● Maintain System State

– Puppet– Chef– CfEngine

● Management buy­in

● Revoke access for breaches of policy

Page 10: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Configuration Management● Use Source Control

● Check the commit logs

● Review Regularly

● Don't release on a Friday!

Page 11: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Testing Configurations● Continuous Integration 

isn't just for developers!

● LibVirt is your friend

● Cucumber and friends can be used for testing systems as well as applications

Page 12: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Building Systems● Systems should always 

be built in the same way

● Automate it!

● Just deploy the base OS, let Puppet/Chef/cfEngine take care of the rest...

Page 13: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Auditing● It's not about blame

● You already have the components

– Git logs– Puppet runs– Hudson Build logs

● Just tie them all together...

– But how?

Page 14: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Announcing Edison● External Node Classifier

● Kickstart Provider

● CMDB

● Change Management (linked to SCM)

● Auditing Framework

● And that's just the start...

Page 15: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

What does the future hold?● Systems Administrators will be developers

● Intimate hardware knowledge will be replaced with scripting knowledge and an understanding of APIs

● It doesn't matter if it's called “Cloud”, “Utility Computing” or “Clustering” ­ it's here to stay.

– Unfortunately, so are all the acronyms...

Page 16: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Questions?

Page 17: Moving from trying to managing change to practical Change ... · – Testing your configs ... – CfEngine Management buyin Revoke access for breaches of policy. UKUUG 2011 Configuration

UKUUG 2011

Contact Details

@proffalken

[email protected]

github.com/proffalken

www.threedrunkkensysadsonthe.net