Index

Welcome to the Nubis training documentation. As of this writing this is very much a work in progress. The table of contents is currently designed to help me to design the course content and help me keep track of my progress and what I have left to accomplish. This list will eventually link out to the content covered by each section.

Table of Contents

This section contains the material we will cover in the classroom session. Eventually we hope to develop this into a self-guided training course that a person can work through at their own pace.

1. Introduction
2. On listening to our customers
3. Examples of current state
4. How can we Improve
5. Current operating model
   • Illustration of current challenges
   • List of issues in our current work-flows
   • Tainted resources
   • Lack of package pinning
   • Untested changes to production systems
   • Lack of isolation between applications
   • Too many ways a system can be mutated
   • Puppetmasters ensure eventual consistency
   • Puppet's inability to guarantee symmetry among systems
   • A word on backups
6. User experiences
7. Future Operating Model
   • Specific areas of improvement
   • Automate all the things
   • Built on cloud technology
   • Provide self service opportunities
   • Create standards
   • Treat datacenters as reusable components
   • Exterminate the Human API
   • Use more community resources
   • Revision everything
   • Transition work-flow to GitHub
   • Code Reviews
   • Provide Application isolation
   • Provide a platform that can autoscale
   • Bit for bit repeatable deployments
   • Destroy Tainted resources
   • Reduce time required to stand up a new application
   • Provide analytical and trending monitoring for applications and systems
   • Log / Audit everything
   • Provide transparency into web operations systems and deployment methodologies
   • Provide an open structure that enables us to better support the open web
   • Provide a better customer experience
8. New operating principles
9. New way of thinking
10. Twelve Factor Review
11. Agile Development
12. Symantic versioning
13. Code Reviews
14. Decentralization
15. git and GitHub
16. System level configuration
    • Packer
    • Puppet (masterless)
    • Consul and Confd
17. Image Upgrades
18. To Autoscale or Not to Autoscale
19. Tainted Instances
20. Security Requirements
21. Exercise One
22. Setup
23. Organize into groups
24. Chose a Topic
25. Discuss Improvements
26. Presentations and Discussions
27. Nubis overview
28. What is Nubis
    • Standardized design
    • Security compliance
    • Reduced time-to-market
29. What can Nubis do for me
30. What does Nubis provide
    • Nubis accounts
    • Accounts
      • Account Diagram
      • Multiple environments
    • Quarterly Updates
      • Distribution upgrades
      • Package updates
      • New services
      • Application Image Updates
    • Security Updates
    • Included Services
      • Proxies
      • NATs
      • Consul Integration
      • Fluent Integration
      • Jumphosts
    • User Management
      • MFA
      • aws-vault
      • LDAP Integration
    • Security Integration
      • InfoSec security audit role
      • Network Security Monitoring (NSM)
      • Integrated IP Blacklisting
      • Log Integration with Mozilla Investigator (MIG)
      • CloudTrail Integration
    • Additional Services
      • Cloud Health Integration
      • Billing Support
      • Tainted Resources
      • Platform Monitoring
      • High Availability
    • Nubis deployments
    • Deployment Overview
      • Environments and how to use them
      • Deployment Workflow Diagram
    • Deployment repository
      • Puppet configuration
      • Application Code
    • Terraform modules
    • Recommended practices
    • Architectural design services
      • Example deployments
      • nubis-skel
      • AWS Solutions Architect
    • Community support
    • CI System
    • Rolling Back
    • Custom Monitors
    • nubis-base
    • nubis-builder
    • Build Deploy Diagram
31. Exercise Two
32. Chose a Topic
33. Diagram the deployment
34. Demonstrations
35. Deploy a new application
36. Deploy new application code
37. Continuous Integration work-flow
38. Upgrade an account
39. Troubleshooting
40. Working Labs
41. Setting up your local environment
42. Working with git & GitHub
43. Deploying the Nubis example application Dpaste
44. Deploying your own application using nubis-skel
45. Updating system level packages

Operational Documentation (HOWTOs)

Here are some links to context relevant HOWTOs which are intended to guide you through many of the tasks you will need to perform using Nubis.

1. How do I deploy an app
2. How do I login to AWS?
3. aws-vault overview (still might like a wrapper script for account setup)
4. Walk-through dpaste deploy
5. Build custom app with nubis-skel
6. Detailed working example for git and GitHub
7. How do I build an AMI?
8. Features of nubis-base
   • /etc/nubis.d/*
   • consul integration
9. Puppet masterless
   • Puppet modules
   • librarian-puppet
10. Packer overview
11. nubis-builder overview
    • distrobutions supported
    • project.json file requirements and options
12. How do I launch a jumphost?
13. How do I access instances
14. What is the meaning of immutable
15. What happens when my instance is marked as tainted?
16. How does monitoring work in AWS?
17. How do I upgrade my account to Nubis latest?
18. Terraform overview
19. Consul overview
20. Fluent overview
21. Proxy overview (including nat)
22. Database admin node
23. How do I add and remove users from my account
24. Levels of user permissions

Technical Documents (Design docs)

In this section you will find links to some of our technical and design documentation. This material is intended to help you with troubleshooting. It is also helpfull if you would like to get into helping us with Nubis development.

• NSM monitoring
• IP Blocklist
• Nat setup / HA / State
• User Management