DevOps:TransformtheCulturefromControltoEnablementNathanAkerInforma(on Systems Manager @ Symphony Talent

2

Percep(on Problem

Credit:JamesBe.eley@devopsnet.com

3

•  Sales•  Innova:on•  MarketShareIncrease•  Differen:a:on•  CustomerSa:sfac:on/Reten:on•  Expansion•  BrandBuilding•  Profitability

Business Goals

Growth

4

•  Availability•  Security•  Stability•  Performance•  Efficiency•  RepeatableProcesses•  Metrics

IT Goals

Control

5

•  Development–Op:mizethefunc:onalityoftheservice•  Opera:ons–Op:mizetheefficiencyandstabilityoftheservice•  QA–Op:mizethequalityoftheservice•  Security–Op:mizetheconfiden:ality,integrity,andavailability

IT Func(onal Org Separa(ons

6

Strengths:-  Closesttobusinessneeds-  Delivernewcapabili:es-  Protectuserexperience-  Experiencedautomators

Weaknesses:-  Losefocusonscalability,stability,andsupportabilityat:mes

-  Typicallyunderpressuretodeliverquickly

-  Securitynotalwaystopofmind-  Notalwaysexperiencedop:mizers

Tradi(onal Development Group

Development

7

Strengths:-  Experiencedop:mizers-  Costconscience-  Focusonstabilityandavailability-  Tendtoconsidercross-func:onalimpacts-  Experienceddataandperformanceanalysts

-  Championdocumenta:on

Weaknesses:-  Typicallymanualprocessintensive-  Underpressuretominimizechange-  Catchinguponautoma:on-  OXenviewedasabo.lenecktoagility

Tradi(onal Opera(ons Group

Opera:ons

8

Strengths:-  Focusonquality(obviously)-  Experiencedincrea:ngtestcases-  Considerallusers/personas-  Collaboratorsbynecessity

Weaknesses:-  OXenrequireheavyguidancefromdevelopmentteam

-  OXenheavilyfunc:onalfocused(attheexpenseofload,performance,andsecuritytes:ng)

-  Usuallythemosttosufferina:melinecrunch

Tradi(onal QA Group

QualityAssurance

9

Strengths:-  Experiencediniden:fyingunintendedinterfaces,ports,orexecu:onmechanisms

-  Keenunderstandingofnetworkroutes&communica:onchannels

-  Uptospeedoncommona.ackvectors-  Strongskillsincomplianceandstandardiza:on-  Greatunderstandingofriskanalysis

Weaknesses:-  OXenstronglynetworkfocused-  Frequentlymoresecre:ve-  Tendencytosay“No”insteadof“Let’sfindasolu:on”

Tradi(onal Security Group

Security

10

DevOpsseekstoremovethesilosbychangingtheculturefromamyopicfunc:onalperspec:vetoamoreinclusivecollabora:vemindset.

Enter DevOps

Development Opera:ons

QualityAssurance Security

DevOps(DevSecOps)

11

•  Isitanorganiza:onal/teamre-alignment?•  Isitcloudinfrastructureautoma:on?•  Isitconfigura:onmanagement?•  IsitCICD/deploymentautoma:on?•  Isittes:ngautoma:on?•  Isitsecurityautoma:on?

What is DevOps?

12

•  DevOpsisamindset–builtonthefollowingfounda:ons:•  FocusonBusinessEnablement•  Collabora:on•  Automa:on•  Scalability•  Quality•  Velocity&Agility•  Con:nuousFeedback&Improvement

•  KeyObjec:ve•  Reliablyreduce:mefromIdeatoValueRealiza:on(withoutimpac:ngquality,performance,availability,security,orscalability)

DevOps is a Mindset

13

1.  AutomatealltheThings

2.  IntegratetheTeams

3.  ReduceTimetoValue

DevOps is a Mindset

14

•  Mindset/CultureChange

•  OrgChanges

•  SkillsetChanges

•  FocusonDecreasingTimetoValue

What does DevOps Involve?

People Process Technology

•  Dev/Ops/QA/SECProcessChanges

•  Automa:onofProcess(requiresunderstanding/documenta:on)

•  AccountabilityChanges

•  New/UpdatedRoles

•  Configura:onManagement

•  Con:nuousDelivery

•  Automa:onU:li:es/Scrip:ng

•  AutomatedTes:ng

•  SecurityAutoma:on

15

•  InfrastructureCreaCon•  Automa:callycreateinfrastructurecomponentsandserverinstances.

•  ConfiguraConManagement•  Configureserverinstancestohardened/definedspecswithnecessarycomponentsinstalled.

•  ConCnuousIntegraCon/ConCnuousDelivery•  Automatethedeliveryofapplica:onreleasesfromDevtoProduc:on.

•  SourceControl•  CentralizedcodemanagementforAppsandInfrastructure.

•  ContainerizaCon•  Hostapplica:ons/componentswithinlogicalcontainerswithinavirtual/physicalhost

•  TesCngAutomaCon•  Automatefunc:onal,integra:on,regression,andsecuritytes:ng

DevOps Technology Areas

16

Infrastructure Delivery - Old Way

17

Infrastructure Delivery - DevOps

18

Code Deployment - Old Way

19

Code Deployment - DevOps

20

DevOps Mindset Impacts all IT

•  Development•  Gainastakeinwhatittakestorunandsupporttheapplica:onatscale.•  Embedsecurity/QAtes:ngintotheSDLC.•  AssistsOps,QA,andSecuritywithautoma:onoftheirprocesses.•  Begintobuildperformanceandstabilitymetricsintodeliverypipeline.•  Youbuildit–yousupportitmentality(sharedaccountability).

•  Opera:ons•  Begintoautomaterepeatableandstandardizedprocesses.•  Starttomanageinfrastructureascode.•  Becomeinvolvedinapplica:onqualityprocess.•  Be.eringrainsecurityhardeningintoinfrastructure.•  Gainunderstandingofwhatcode/applica:onisdoingontheirboxes.

21

DevOps Mindset Impacts all IT

•  QA•  Automatetes:ngsoitcanbeperformedatscale.•  Collaboratewithdevelopmentgrouponbusinesscontextandneeds.•  Includesecuritychecksintotes:ngloops.•  Begintobecomescalable.

•  Security•  Ensureimmediatecompliancebycollabora:ngoninfrastructureautoma:onandCICD.•  Reduceorganiza:onalriskbyintegra:ngintotheSDLC.•  Shareexperienceandknowledgeofcommona.ackvectorswithDev&Ops.•  Increaseconfidencethattheenvironmentis“known”.•  Becomeenablersinsteadofblockers.

22

Phoenix Project

NovelbyGeneKim,GeorgeSpafford,andKevinBehr

AnalogyofITbeinglikeafactoryproducConfloor:•  ProcessFlow•  Inputs/Outputs•  WaitTimes•  Bo.leNecks•  Con:nualImprovement/Automa:on

23

1.  Culture–AboveallDevOpsisaMindset.•  Educa:on•  OrgChanges•  Champions•  SkillAddi:ons•  Consul:ng

2.  ProcessChanges–StartSmall•  Iden:fyakeyservicewiththehighestvalueproposi:onandlimitedrisk•  Rememberthemanufacturingfactoryanalogy.Iden:fyabo.leneckorpain

point.•  Leanmindsetwithrealis:cgoalsandcon:nuousimprovementloops.

I’m Ready for DevOps – Where to Start?

24

•  Tools–Cultureandprocesschangeswillleadyoutotools.•  InfrastructureCreaCon

•  Terramark,AWSCloudForma:on,CloudServiceBroker,VMWare

•  ConfiguraConManagement•  Chef,Puppet,Ansible,Salt

•  ConCnuousIntegraCon/ConCnuousDelivery•  Jenkins,TeamCity,Bamboo,Maven

•  SourceControl•  Git,GitHub,BitBucket

•  ContainerizaCon•  Docker

•  TesCngAutomaCon•  Selenium,Appium,QMetry

I’m Ready for DevOps – Tools

25

•  StrongOS,Scrip:ng,andInfrastructureSkillswithDevelopmentCompetence•  Strongdesiretoautomate(obviously)•  Tinkerer•  Con:nuallyseekingtounderstandthe"Why"behindthe"What”•  IntrinsicallyMo:vated–Wanttobuildgreatthings•  Typicallyoutinfrontoftheirorganiza:on

(Hint:pickupgreattalentfrustratedwithslowculturalmovementofcurrentemployer)

•  Con:nuallytryingtoautomatethemselvesoutoftheprocess.•  HATESrepe::vetasks(Healthyleveloflaziness)•  Enjoyschangeandnewtools

Prac(cal – Traits of a Great DevOps Engineer

26

•  ReduceTimetoValue•  TurnITfromacontrollingbo.lenecktoabusinessenabler•  Buildresiliency&scalabilityintoyourinfrastructure•  Enablenewcapabili:es•  Leveragethingslikeon-demandandserver-lesscompu:ngtosaveinfrastructurecosts

•  EmbedsecurityandQAtes:ngintothedeliverylifecycle.•  IncreasedQuality•  ReducedRisk

•  Helpdrivemeaningfulbusinessgrowth

Recap – Why DevOps?

27

• Itwillputmeoutofajob• Myappisuniqueandcannotbeautomated• Idon'thave:me• Wedon'thavetheskillset• Mysecurityteamwillnotallowit• WejustmadeaheavyinvestmentinHardwareassets

Misnomers of DevOps

28

MonthlymeetupgroupfocusingoncloudinfrastructureinAWSwithregulardiscussionsonDevOps,CICD,andAutoma:ontopics.www.meetup.com/Oklahoma-City-AWS-User-Group/

Connect & Learn

29

We’realwayslookingfortalentedDevOpsprofessionals

Emailnathan@symphonytalent.com

Shameless Plug

30

Email:

nathan@symphonytalent.comConnectonLinkedIn:

h.ps://www.linkedin.com/in/nathanaker

Ques(ons?