devops from control to enablement
TRANSCRIPT
DevOps:TransformtheCulturefromControltoEnablementNathanAkerInforma(on Systems Manager @ Symphony Talent
3
• Sales• Innova:on• MarketShareIncrease• Differen:a:on• CustomerSa:sfac:on/Reten:on• Expansion• BrandBuilding• Profitability
Business Goals
Growth
4
• Availability• Security• Stability• Performance• Efficiency• RepeatableProcesses• Metrics
IT Goals
Control
5
• Development–Op:mizethefunc:onalityoftheservice• Opera:ons–Op:mizetheefficiencyandstabilityoftheservice• QA–Op:mizethequalityoftheservice• Security–Op:mizetheconfiden:ality,integrity,andavailability
IT Func(onal Org Separa(ons
6
Strengths:- Closesttobusinessneeds- Delivernewcapabili:es- Protectuserexperience- Experiencedautomators
Weaknesses:- Losefocusonscalability,stability,andsupportabilityat:mes
- Typicallyunderpressuretodeliverquickly
- Securitynotalwaystopofmind- Notalwaysexperiencedop:mizers
Tradi(onal Development Group
Development
7
Strengths:- Experiencedop:mizers- Costconscience- Focusonstabilityandavailability- Tendtoconsidercross-func:onalimpacts- Experienceddataandperformanceanalysts
- Championdocumenta:on
Weaknesses:- Typicallymanualprocessintensive- Underpressuretominimizechange- Catchinguponautoma:on- OXenviewedasabo.lenecktoagility
Tradi(onal Opera(ons Group
Opera:ons
8
Strengths:- Focusonquality(obviously)- Experiencedincrea:ngtestcases- Considerallusers/personas- Collaboratorsbynecessity
Weaknesses:- OXenrequireheavyguidancefromdevelopmentteam
- OXenheavilyfunc:onalfocused(attheexpenseofload,performance,andsecuritytes:ng)
- Usuallythemosttosufferina:melinecrunch
Tradi(onal QA Group
QualityAssurance
9
Strengths:- Experiencediniden:fyingunintendedinterfaces,ports,orexecu:onmechanisms
- Keenunderstandingofnetworkroutes&communica:onchannels
- Uptospeedoncommona.ackvectors- Strongskillsincomplianceandstandardiza:on- Greatunderstandingofriskanalysis
Weaknesses:- OXenstronglynetworkfocused- Frequentlymoresecre:ve- Tendencytosay“No”insteadof“Let’sfindasolu:on”
Tradi(onal Security Group
Security
10
DevOpsseekstoremovethesilosbychangingtheculturefromamyopicfunc:onalperspec:vetoamoreinclusivecollabora:vemindset.
Enter DevOps
Development Opera:ons
QualityAssurance Security
DevOps(DevSecOps)
11
• Isitanorganiza:onal/teamre-alignment?• Isitcloudinfrastructureautoma:on?• Isitconfigura:onmanagement?• IsitCICD/deploymentautoma:on?• Isittes:ngautoma:on?• Isitsecurityautoma:on?
What is DevOps?
12
• DevOpsisamindset–builtonthefollowingfounda:ons:• FocusonBusinessEnablement• Collabora:on• Automa:on• Scalability• Quality• Velocity&Agility• Con:nuousFeedback&Improvement
• KeyObjec:ve• Reliablyreduce:mefromIdeatoValueRealiza:on(withoutimpac:ngquality,performance,availability,security,orscalability)
DevOps is a Mindset
13
1. AutomatealltheThings
2. IntegratetheTeams
3. ReduceTimetoValue
DevOps is a Mindset
14
• Mindset/CultureChange
• OrgChanges
• SkillsetChanges
• FocusonDecreasingTimetoValue
What does DevOps Involve?
People Process Technology
• Dev/Ops/QA/SECProcessChanges
• Automa:onofProcess(requiresunderstanding/documenta:on)
• AccountabilityChanges
• New/UpdatedRoles
• Configura:onManagement
• Con:nuousDelivery
• Automa:onU:li:es/Scrip:ng
• AutomatedTes:ng
• SecurityAutoma:on
15
• InfrastructureCreaCon• Automa:callycreateinfrastructurecomponentsandserverinstances.
• ConfiguraConManagement• Configureserverinstancestohardened/definedspecswithnecessarycomponentsinstalled.
• ConCnuousIntegraCon/ConCnuousDelivery• Automatethedeliveryofapplica:onreleasesfromDevtoProduc:on.
• SourceControl• CentralizedcodemanagementforAppsandInfrastructure.
• ContainerizaCon• Hostapplica:ons/componentswithinlogicalcontainerswithinavirtual/physicalhost
• TesCngAutomaCon• Automatefunc:onal,integra:on,regression,andsecuritytes:ng
DevOps Technology Areas
16
Infrastructure Delivery - Old Way
17
Infrastructure Delivery - DevOps
18
Code Deployment - Old Way
19
Code Deployment - DevOps
20
DevOps Mindset Impacts all IT
• Development• Gainastakeinwhatittakestorunandsupporttheapplica:onatscale.• Embedsecurity/QAtes:ngintotheSDLC.• AssistsOps,QA,andSecuritywithautoma:onoftheirprocesses.• Begintobuildperformanceandstabilitymetricsintodeliverypipeline.• Youbuildit–yousupportitmentality(sharedaccountability).
• Opera:ons• Begintoautomaterepeatableandstandardizedprocesses.• Starttomanageinfrastructureascode.• Becomeinvolvedinapplica:onqualityprocess.• Be.eringrainsecurityhardeningintoinfrastructure.• Gainunderstandingofwhatcode/applica:onisdoingontheirboxes.
21
DevOps Mindset Impacts all IT
• QA• Automatetes:ngsoitcanbeperformedatscale.• Collaboratewithdevelopmentgrouponbusinesscontextandneeds.• Includesecuritychecksintotes:ngloops.• Begintobecomescalable.
• Security• Ensureimmediatecompliancebycollabora:ngoninfrastructureautoma:onandCICD.• Reduceorganiza:onalriskbyintegra:ngintotheSDLC.• Shareexperienceandknowledgeofcommona.ackvectorswithDev&Ops.• Increaseconfidencethattheenvironmentis“known”.• Becomeenablersinsteadofblockers.
22
Phoenix Project
NovelbyGeneKim,GeorgeSpafford,andKevinBehr
AnalogyofITbeinglikeafactoryproducConfloor:• ProcessFlow• Inputs/Outputs• WaitTimes• Bo.leNecks• Con:nualImprovement/Automa:on
23
1. Culture–AboveallDevOpsisaMindset.• Educa:on• OrgChanges• Champions• SkillAddi:ons• Consul:ng
2. ProcessChanges–StartSmall• Iden:fyakeyservicewiththehighestvalueproposi:onandlimitedrisk• Rememberthemanufacturingfactoryanalogy.Iden:fyabo.leneckorpain
point.• Leanmindsetwithrealis:cgoalsandcon:nuousimprovementloops.
I’m Ready for DevOps – Where to Start?
24
• Tools–Cultureandprocesschangeswillleadyoutotools.• InfrastructureCreaCon
• Terramark,AWSCloudForma:on,CloudServiceBroker,VMWare
• ConfiguraConManagement• Chef,Puppet,Ansible,Salt
• ConCnuousIntegraCon/ConCnuousDelivery• Jenkins,TeamCity,Bamboo,Maven
• SourceControl• Git,GitHub,BitBucket
• ContainerizaCon• Docker
• TesCngAutomaCon• Selenium,Appium,QMetry
I’m Ready for DevOps – Tools
25
• StrongOS,Scrip:ng,andInfrastructureSkillswithDevelopmentCompetence• Strongdesiretoautomate(obviously)• Tinkerer• Con:nuallyseekingtounderstandthe"Why"behindthe"What”• IntrinsicallyMo:vated–Wanttobuildgreatthings• Typicallyoutinfrontoftheirorganiza:on
(Hint:pickupgreattalentfrustratedwithslowculturalmovementofcurrentemployer)
• Con:nuallytryingtoautomatethemselvesoutoftheprocess.• HATESrepe::vetasks(Healthyleveloflaziness)• Enjoyschangeandnewtools
Prac(cal – Traits of a Great DevOps Engineer
26
• ReduceTimetoValue• TurnITfromacontrollingbo.lenecktoabusinessenabler• Buildresiliency&scalabilityintoyourinfrastructure• Enablenewcapabili:es• Leveragethingslikeon-demandandserver-lesscompu:ngtosaveinfrastructurecosts
• EmbedsecurityandQAtes:ngintothedeliverylifecycle.• IncreasedQuality• ReducedRisk
• Helpdrivemeaningfulbusinessgrowth
Recap – Why DevOps?
27
• Itwillputmeoutofajob• Myappisuniqueandcannotbeautomated• Idon'thave:me• Wedon'thavetheskillset• Mysecurityteamwillnotallowit• WejustmadeaheavyinvestmentinHardwareassets
Misnomers of DevOps
28
MonthlymeetupgroupfocusingoncloudinfrastructureinAWSwithregulardiscussionsonDevOps,CICD,andAutoma:ontopics.www.meetup.com/Oklahoma-City-AWS-User-Group/
Connect & Learn
