Publish Cookbooks to Multiple Chef Infra Servers
Danger
This documentation applies to a deprecated product. Chef Automate includes newer out-of-the-box compliance profiles, an improved compliance scanner with total cloud scanning functionality, better visualizations, role-based access control and many other features. Chef Automate is included as part of the Workflow license agreement and is available via subscription.
The delivery-sugar
cookbook exposes some libraries and a resource that you can use to publish a cookbook (or multiple cookbooks) to multiple Chef servers or organizations. The following examples show how to publish to both a single Chef Infra Server and how to extend that methodology to publish to multiple Chef servers.
Prerequisites
Before you begin, you must copy the config.rb
file and the client key .pem file (referenced as client_key
in config.rb
) to the build nodes/runners that you will use in the build-cookbook. This can be done manually by logging in to the build nodes/runners and copying the files or automated through the use of a secure copy tool like scp
.
The following is an example of a config.rb
file for a test
user that points to the Chef Infra Server chef-test-server.example.com
and the organization your_org
. The test.pem
file is the value specified in the client_key
setting.
current_dir = File.dirname(__FILE__)
log_location STDOUT
node_name 'test'
client_key "#{current_dir}/test.pem"
trusted_certs_dir '/etc/chef/trusted_certs'
chef_server_url 'https://chef-test-server.example.com/organizations/your_org'
Publish a cookbook to a single Chef server
To publish a cookbook to a Chef Infra Server, use the delivery_chef_cookbook
resource and reference the config.rb
file that you copied to your build node/runner.
This example shows how to publish a cookbook called rally
to a single Chef Infra Server.
knife_rb = '/path/to/the/knife_rb/file/in/the/build-node/config.rb'
delivery_chef_cookbook 'rally' do
path '/path/to/the/cookbook/in/the/build-node/rally'
chef_server DeliverySugar::ChefServer.new(knife_rb)
end
Note
delivery_chef_cookbook
is :upload
, so you do not need to explicitly include that in your delivery_chef_cookbook
implementation.Publish Cookbook to Multiple Chef servers
Publishing to multiple servers uses the delivery_chef_cookbook in much the same way as publishing to a single Chef Infra Server except you reference multiple Chef Infra Server objects through an array.
In the following example, imagine you have two Chef servers, one in San Francisco and another one in New York. Also, assume you have copied the correct config.rb
and client_key
files to the build nodes/runners for each Chef Infra Server.
For this particular example, you want the cookbook uploaded at the very end of the workflow pipeline, in the Functional phase of the Delivered Stage. This requires that you modify the Functional recipe (recipes/functional.rb
) of the build-cookbook
within your project, as shown below.
# Run it only in Delivered::Functional
#
# This helper is coming from delivery-sugar
# => https://github.com/chef-cookbooks/delivery-sugar/blob/master/libraries/delivery_dsl.rb#L105,L113
if delivery_environment.eql?('delivered')
# Previously generated config.rb files
ny_knife_rb = '/var/opt/delivery/workspace/chef_servers/ny/config.rb'
sf_knife_rb = '/var/opt/delivery/workspace/chef_servers/sf/config.rb'
# ChefServer Objects
chef_server_ny = DeliverySugar::ChefServer.new(ny_knife_rb)
chef_server_sf = DeliverySugar::ChefServer.new(sf_knife_rb)
delivery_chef_cookbook delivery_project do
path delivery_workspace_repo
chef_server [chef_server_ny, chef_server_sf]
end
end
© Chef Software, Inc.
Licensed under the Creative Commons Attribution 3.0 Unported License.
The Chef™ Mark and Chef Logo are either registered trademarks/service marks or trademarks/servicemarks of Chef, in the United States and other countries and are used with Chef Inc's permission.
We are not affiliated with, endorsed or sponsored by Chef Inc.
https://docs.chef.io/publish_cookbooks_multiple_servers/