InfraKit is a toolkit for creating and managing declarative, self-healing infrastructure. It breaks infrastructure automation down into simple, pluggable components. These components work together to actively ensure the infrastructure state matches the user's specifications. Although InfraKit emphasizes primitives for building self-healing infrastructure, it also can be used passively like conventional tools.
To get started, try the tutorial.
InfraKit at the core consists of a set of collaborating, active processes. These components are called plugins.
InfraKit supports composing different plugins to meet different needs. These plugins are active controllers that can look at current infrastructure state and take action when the state diverges from user specification.
Initially, we implement these plugins as servers listening on unix sockets and communicate using HTTP. By nature, the plugin interface definitions are language agnostic so it's possible to implement a plugin in a language other than Go. Plugins can be packaged and deployed differently, such as Docker containers.
Plugins are the active components that provide the behavior for the primitives that InfraKit supports. These primitives are described below.
InfraKit supports these primitives: groups, instances, and flavors. They are active components running as plugins.
When managing infrastructure like computing clusters, Groups make good abstraction, and working with groups is easier than managing individual instances. For example, a group can be made up of a collection of machines as individual instances. The machines in a group can have identical configurations (replicas, or cattle). They can also have slightly different properties like identity and ordering (as members of a quorum or pets).
InfraKit provides primitives to manage Groups: a group has a given size and can shrink or grow based on some specification, whether it's human generated or machine computed. Group members can also be updated in a rolling fashion so that the configuration of the instance members reflect a new desired state. Operators can focus on Groups while InfraKit handles the necessary coordination of Instances.
Since InfraKit emphasizes on declarative infrastructure, there are no operations to move machines or Groups from one state to another. Instead, you declare your desired state of the infrastructure. InfraKit is responsible for converging towards, and maintaining, that desired state.
Therefore, a group plugin manages Groups of Instances and exposes the operations that are of interest to a user:
- watch/ unwatch a group (start / stop managing a group)
- inspect a group
- trigger an update the configuration of a group - like changing its size or underlying properties of instances.
- stop an update
- destroy a group
InfraKit provides a default Group plugin implementation, intended to suit common use cases. The default Group plugin manages Instances of a specific Flavor. Instance and Flavor plugins can be composed to manage different types of services on different infrastructure providers.
While it's generally simplest to use the default Group plugin, custom implementations may be valuable to adapt another infrastructure management system. This would allow you to use InfraKit tooling to perform basic operations on widely different infrastructure using the same interface.
| plugin | description |
|---|---|
| infrakit/group | supports Instance and Flavor plugins, rolling updates |
Instances are members of a group. An instance plugin manages some physical resource instances. It knows only about individual instances and nothing about Groups. Instance is technically defined by the plugin, and need not be a physical machine at all.
| plugin | description |
|---|---|
| infrakit/file | A simple plugin for development and testing. Uses a local disk file as instance. |
| infrakit/terraform | A plugin to provision using Terraform |
| infrakit/vagrant | A plugin that provisions Vagrant VMs |
For compute, for example, instances can be VM instances of identical spec. Instances support the notions of attachment to auxiliary resources. Instances are taggable and tags are assumed to be persistent which allows the state of the cluster to be inferred and computed.
In some cases, instances can be identical, while in other cases the members of a group require stronger identities and persistent, stable state. These properties are captured via the flavors of the instances.
Flavors help distinguish members of one group from another by describing how these members should be treated. A flavor plugin can be thought of as defining what runs on an Instance. It is responsible for dictating commands to run services, and check the health of those services.
Flavors allow a group of instances to have different characteristics. In a group of cattle, all members are treated identically and individual members do not have strong identity. In a group of pets, however, the members may require special handling and demand stronger notions of identity and state.
| plugin | description |
|---|---|
| vanilla | A vanilla flavor that lets you configure by user data and labels |
| zookeeper | For handling of zookeeper ensemble members |
| swarm | configures instances with Docker in Swarm mode |
Make sure you check out the project following a convention for building Go projects. For example,
# Install Go - https://golang.org/dl/
# Assuming your go compiler is in /usr/local/go
export PATH=/usr/local/go/bin:$PATH
# Your dev environment
mkdir -p ~/go
export GOPATH=!$
export PATH=$GOPATH/bin:$PATH
mkdir -p ~/go/src/github.com/docker
cd !$
git clone git@github.com:docker/infrakit.git
cd infrakit
Also install a few tools
go get -u github.com/kardianos/govendor # the dependency manager
go get -u github.com/golang/lint/golint # if you're running testsNow you are ready to go.
$ make ci$ make binariesExecutables will be placed in the ./build directory.
Currently, several binaries are available:
build/infrakit, the command line interfacebuild/infrakit-group-default, the default Group pluginbuild/infrakit-instance-file, an Instance plugin using dummy files to represent instancesbuild/infrakit-instance-terraform, an Instance plugin integrating Terraformbuild/infrakit-instance-vagrant, an Instance plugin using Vagrantbuild/infrakit-flavor-vanilla, a Flavor plugin for plain vanilla set up with user data and labelsbuild/infrakit-flavor-zookeeper, a Flavor plugin for Apache ZooKeeper ensemble membersbuild/infrakit-flavor-swarm, a Flavor plugin for Docker in Swarm mode.
There are a few examples of InfraKit plugins:
- Terraform Instance Plugin
- Zookeeper / Vagrant
- README
- [Code] (./plugin/flavor/zookeeper)
InfraKit uses JSON for configuration because it is composable and a widely accepted format for many infrastructure SDKs and tools. Since the system is highly component-driven, our JSON format follows simple patterns to support the composition of components.
A common pattern for a JSON object looks like this:
{
"SomeKey": "ValueForTheKey",
"Properties": {
}
}There is only one Properties field in this JSON and its value is a JSON object. The opaque
JSON value for Properties is decoded via the Go Spec struct defined within the package of the plugin --
for example -- vanilla.Spec.
The JSON above is a value, but the type of the value belongs outside the structure. For example, the default Group Spec is composed of one instance and one flavor plugin:
{
"ID": "name-of-the-group",
"Properties": {
"Instance": {
"Plugin": "name-of-the-instance-plugin",
"Properties": {
}
},
"Flavor": {
"Plugin": "name-of-the-flavor-plugin",
"Properties": {
}
}
}
}The group's Spec has Instance and Flavor fields which are used to indicate the type, and the value of the
fields follow the pattern of <some_key> and Properties as shown above.
As an example, if you wanted to manage a Group of NGINX servers, you could write a custom Group plugin for ultimate customizability. The most concise configuration looks something like this:
{
"ID": "nginx",
"Plugin": "my-nginx-group-plugin",
"Properties": {
"port": 8080
}
}However, you would likely prefer to use the default Group plugin and implement a Flavor plugin to focus on application-specific behavior. This gives you immediate support for any infrastructure that has an Instance plugin. Your resulting configuration might look something like this:
{
"ID": "nginx",
"Plugin": "group",
"Properties": {
"Instance": {
"Plugin": "aws",
"Properties": {
"region": "us-west-2",
"ami": "ami-123456"
}
},
"Flavor": {
"Plugin": "nginx",
"Properties": {
"size": 10,
"port": 8080
}
}
}
}Once the configuration is ready, you will tell a Group plugin to
- watch it
- update it
- destroy it
Watching the group as specified in the configuration means that the Group plugin will create the instances if they don't already exist. New instances will be created if for any reason existing instances have disappeared such that the state doesn't match your specifications.
Updating the group tells the Group plugin that your configuration may have changed. It will then determine the changes necessary to ensure the state of the infrastructure matches the new specification.
InfraKit plugins collaborate with each other to accomplish a set of objectives. Therefore, they need to be able to talk to one another. While many different discovery methods are available, this toolkit implements a simple file-based discovery system the names of the unix socket files in a common directory represents the name of the plugin.
By default the common directory for unix sockets is located at /run/infrakit/plugins.
Make sure this directory exists on your host:
mkdir -p /run/infrakit/plugins
chmod 777 /run/infrakit/plugins
Note that a plugin's name is separate from the type of the plugin, so it's possible to have two file instance plugins running but with different names and configurations (for what they provision or the content they write to disk). For example:
$ build/infrakit-instance-file --listen=unix:///run/infrakit/plugins/another-file.sock --dir=./test
INFO[0000] Starting plugin
INFO[0000] Listening on: unix:///run/infrakit/plugins/another-file.sock
INFO[0000] listener protocol= unix addr= /run/infrakit/plugins/another-file.sock err= <nil>
You can use the CLI to see which plugins are discoverable.
For each binary, you can find out more about it by using the version verb in the command line. For example:
$ build/infrakit-group-default version
{
"name": "GroupPlugin",
"revision": "75d7f4dbc17dbc48aadb9a4abfd87d57fbd7e1f8",
"type": "infra.GroupPlugin/1.0",
"version": "75d7f4d.m"
}So you can have different plugins of the same type (e.g. infrakit.InstancePlugin/1.0) subject to the naming restrictions
of the files in the common plugin directory.
Design docs can be found here.
The maintainers take security seriously. If you discover a security issue, please bring it to their attention right away!
Please DO NOT file a public issue, instead send your report privately to security@docker.com.
Security reports are greatly appreciated and we will publicly thank you for it. We also like to send gifts—if you're into Docker schwag, make sure to let us know. We currently do not offer a paid security bounty program, but are not ruling it out in the future.
Copyright © 2016 Docker, Inc. All rights reserved. Released under the Apache 2.0 license. See LICENSE for the full license text.