DevOps and Cloud: Tips and Techniques to …dw.connect.sys-con.com/session/2541/Andi_Mann.pdfDevOps...

DevOps and Cloud: Tips and Techniques to Revolutionize Your SDLC

Andi MannVP of Strategic Solutions, Office of the CTOCA Technologies

@AndiMann

[email protected]

2 © 2014 CA. ALL RIGHTS RESERVED.

Abstract (hidden slide)DevOps and Cloud: Tips and Techniques to Revolutionize Your SDLC

Cloud computing started a technology revolution; now DevOps is driving that revolution forward. By enabling new approaches to service delivery, cloud and DevOps together are delivering even greater speed, agility, and efficiency. No wonder leading innovators are adopting DevOps and cloud together!

This session will explore the synergies in these two approaches, with practical tips, techniques, research data, war stories, case studies, and recommendations on how to:

• Embrace, source, consume, and expose shared services across the SDLC• Apply automation lessons from the cloud to deliver 'software-defined everything'• Accelerate time from ideation to release for new applications and services• Drive service efficiency and scalability while better managing cost and risk• Establish more effective feedback loops, from pre-planning to post-production• Secure rapid access to cloud infrastructure, platform, and software services

Whether you are a startup or an enterprise; using private cloud, public cloud, or no cloud; an Agile n00b or a DevOps pro; struggling with core banking systems, or building a new social/local/mobile app that will change the world (!); this session will give you actionable ideas on using cloud and DevOps together to revolutionize your software and service delivery lifecycle.

Cloud and DevOps


Cloud computing

“A model for enabling ubiquitous, convenient,

on-demand network access to a shared pool of

configurable computing resources …

(e.g., networks, servers, storage, applications,

and services)

… that can be rapidly provisioned and released

with minimal management effort or service

provider interaction.”

Source: NIST Special Publication 800-145 “The NIST Definition of Cloud Computing” – Peter Mell, Timothy Grace


Improve collaboration between dev

and ops…

to accelerate the release of new

capabilities …

… and translate operational insight

into continuous improvement …

across the software lifecycle.

DevOps


DevOps: Succeed in the Application Economy

… of respondents belonging to a DevOps-oriented team reported better collaboration among their colleagues.1

1 TechInsights Report: What Smart Businesses Know About DevOps“The Accenture 2013 CIO Mobility Survey CIOs worldwide see mobility as key revenue generator and primary channel for customer engagement” Puppet Labs: 2013 State of DevOps Report

48%

17%

18%

20%

21%

21%

22%

22%

23%

The Benefits of DevOpsPercent improvements in business areas

COLLABORATION

APP QUALITY

CUSTOMERS

NEW SERVICES

TIME TO MARKET

REVENUE

COST SAVINGS

DEPLOY FREQUENCY


CAMS – as close to prescriptive as DevOps gets

Culture Automation Measurement Sharing

Culture


DevOps is fundamentally about people and process

Breaking down barriers between teams – and empires

New roles, new titles, new (and shared) responsibilities

Capturing and converting tribal knowledge

Focus on business service, not technology

Trust in each other, in technology, in process


Cloud and DevOps both require culture change

Common attributes - trust, sharing, collaboration, automation

Cloud enables culture change too – via A, M, S

Biggest benefit of cloud is agility

DevOps builds on Agile development

Tip: DevOps & Cloud both start with culture change. Find your cultural roadblocks and fix them first.

Automation


Cloud and DevOps both require Automation

Accelerate workflowsSmooth handoffsEliminate errors

Reduce risk

Self-serviceScalability

MeasurementReduce risk


Automation helps ‘shift left’ on your project timeline

Former Release Cycle

wk5 wk6 wk7 wk11wk8 wk9 wk10 wk12 wk15wk13 wk14 wk16 wk17 wk18 wk19

Data Setup

Integration Test

Regression (100%)

UAT Pass 1Dev Unit

Mainframe ST

Projects

System Test

MF Delivery

UAT Pass 2Setup

L/P Test


Automation accelerates time from idea to product

PLAN DEPLOYTEST

Lines of Business

Application Development

ProdOperations

BUILD OPERATE


Automation enables 'software-defined services'

Software-defined service - faster, more agile, more flexible

– Software-defined Infrastructure (as a Service)

– Software-defined Platform (as a Service)

– Software-defined Networks (aka SDN)

– Software-defined Storage (as a Service)


“I can’t test or QA anything until I have access to

everything!”

Example: Parallel dev, test, QA with Service Virtualization

Data Center Systems

Cloud Services

Partner Services

Your new mobile app!

Enterprise Storage

Middleware Services

Distributed Systems


Example: Parallel dev, test, QA with Service Virtualization

Data Center Systems

Cloud Services

Partner Services

Enterprise Storage

Middleware Services

Distributed Systems

Test and QA against software-defined services instead – faster,

better, safer

Your new mobile app!


Remember this?



Data Setup

Integration Test

Regression (100%)

UAT Pass 1Dev Unit

Mainframe ST

Projects

System Test

MF Delivery

UAT Pass 2Setup

L/P Test


The same timeline with service virtualization in action



Data Setup

Integration Test

Regression (100%)

UAT Pass 1Dev Unit

Mainframe ST

Projects

8-week Release Cycle

System Test

MF Delivery

UAT Pass 2Setup

L/P Test

40% Time savings60% More scenarios covered

30% savings350% more

defects found2-week

calendar savings

60% savings388% more defects found

Early Load & Performance Testing


Service Virtualization outcomes - Union Bank

“We are seeing immediate benefit from … Service

Virtualization. We are able to realize agile, parallel

development and increase the quality of the products

we deliver for our customers. Finding areas for

improvement earlier in the lifecycle is reducing our risk.”

Dana W. Edwards, CTO, Union Bank


ConfigurationRequirements

Example: Automated Config and Provisioning

Integration AcceptanceCoding Production

Application Development Test and Acceptance Production

Reqs Delivery Performance

Configuration Management

Infrastructure Provisioning

Change Management

DEV TEST/UAT PROD


Example: Continuous delivery with release automation

Model

From existing Build/Continuous

Integration

To a Continuous Delivery/Release

Automation System

Onto On-Premises, Hosted, or

Cloud Infrastructure

Promote Deploy TargetSource


“Since implementing … Release Automation, we’ve deployed our online business into eight different countries, which wouldn’t have been possible before – that means the same team can deliver eight or nine times the volume of releases.”

TOMAS KADLECGROUP

INFRASTRUCTUREIT DIRECTOR, TESCO

TESCO: 8X Speed

Release Automation outcomes - Tesco

Measurement


Cloud and DevOps both require Measurement

“Measured service“ is an essential characteristic of cloud

“Measurement” is core to a CAMS approach to DevOps


How do you know when you deliver what you promise?How do you know when you don’t?

Service Quality Metrics

Ensure you deliver the service and

quality you promised

We delivered the service we promised.

Dev/Ops Organizations

SLA/Cost Reporting

Deliver on line of business

expectations for service and cost

IT is delivering on time, on budget

Line Of Business Executives

Customer Feedback

Meet customer needs and understand new

requirements

IT is meeting their commitments

Customers and Staff


Management cloud for measurementAgile, scalable, cost-effective

Gain insight and simplify

management and support with

cloud-based solutions …

… for physical, cloud, and mobile

application dev, test, and prod …

… allowing for a holistic view into

your IT portfolio and investment.

INVESTMENTSPlan, Prioritize, Adjust

SERVICESupport,

Automate,Deliver

ASSETSManage,Secure,Enable

BUSINESSSTAKEHOLDERS

IT LEADERS IT TEAMS

EMPLOYEES


Feedback loops enable continuous improvement

AcceptanceIntegration ProductionCoding

Regression TestsRegression Constraint Analysis

PLAN

FEEDBACK

Reqs Delivery Performance

BUILD TEST DEPLOY OPERATE

Defect Information Virtual Services


Feedback loops give insight into quality, cost, experience

P2P

M2M

P2M

M2P

End User (Person)

Support (Person)

ManagementCloud

(Machine)

ProductionCloud

(Machine)

Front Office Back Office


Example: Detect and remediate problem in Dev and Ops

CLOUD

BACK END

FRONT ENDNETWORKUSER

EndUser

WAN/WWW

Router

Firewall

Switch

LoadBalancer

WebServer

Portal

ApplicationApplication

Application

Mainframe

WebService

Database3rd Party

Applications

AppServer

MIDDLEWARE

Database

DEVS OPS


Dev, test, and prod monitoring results - ANZ Bank

“ANZ Bank’s project teams

went from 10-15 high-

severity incidents to 1-2

per release by using …

Application Performance

Management ”

Adam Cartwright, Head of IT Security and Operations,ANZ Bank

Source: Customer Obsessed: ANZ Bank Continues to Make Customer Service and Employee Satisfaction a Top Priority, Smart Enterprise, 2014

Sharing


Cloud and DevOps are both about Sharing

Content

Internal or external – private or public

Systems Services Communication


Sharing starts with a shared project and a shared planP

RO

JEC

T TI

MEL

INE

DeliveryDeadline

OperationalInput/Awareness

Stable & inproduction

Requirements Scrum/Sprint System Test Deployment

Architecture Unit Test Acceptance

Ongoing OperationalInput/Awareness

Stable & inproduction

DeliveryDeadline

Requirements Scrum/Sprint System Test Deployment

Architecture Unit Test Acceptance


Source, consume, and expose shared cloud services

ON-PREMISE

SOCIALNETWORKS

FINANCIALMANAGEMENT CONTENT

MANAGEMENT

CRM

PROJECT MANAGEMENT

COLLABORATION

SAAS

SERVICEMANAGEMENT

COMPUTEBACKUP/RECOVERY

CDN STORAGE

IAASANALYTICS

DATASTORE

CODE SERVICES

APITOOLS

PAASIDE

PRIVATECOMMUNITY

PUBLIC

HYBRID


BUT … shared access can create exposure and raise risk

DevOps & Cloud == uncontrolled access and higher risk?

– Access to unauthorized cloud services drives up IT budgets?

– Insecure services allow data loss, cross-site access, hack attacks?

– Sharing IDs and passwords means no separation of Duties?

– Unprotected APIs open up to malwarte, penetration, DoS?


Self-service, role-based access to ‘known good services’

Developers and Operators

Infrastructure Services

Software Services

EnterpriseServices

Platform Services

Identity and Access Management

PartnerServices

AU

THO

RISED

‘KN

OW

N G

OO

D’ SER

VIC

ES

Self-Service

Single Sign-On


Secure shared services with Identity & Access Management

Databases

NetworkAppliances

Windows/MF/UNIX/Linux

IndividualDevs and Ops

SharedPrivileged Identity

Applications

Cloud/VirtualServers

Manual Login

‘Most Privilege’ Access,No Audit or Control

PasswordCheck-In/ Check-Out

Automatic Login via IdM/PUPM

Audit and Control

‘Least Privilege’ Access with Granular Audit and Control

Audit

Password Vault


“We now have a flexible and scalable model that we will extend to thousands of suppliers and other partners. In addition, BT has eliminated the need for 80 point solutions that were being used for user authentication.”

Integrated identity & access management outcomes - BT

Chief Security Architect, BT

Source: BT Saves more than £15 million and improves customer services, CA Technologies

http://www.ca.com/us/collateral/success-stories/emea/bt-saves-more-than-15-million-british-pounts-and-improves-customer-services.aspx


Secure cloud integration with API management & securityA

PP

LICA

TION

AN

D D

ATA

PR

OV

IDER

SInternet of things

Mobile developers

Partners /Divisions

Cloud services

Internal Developers

AP

PLIC

ATIO

N A

ND

DA

TA C

ON

SUM

ERS

Off Premise

On Premise

Secure API Gateway

Infrastructure Services

Software Services

Enterprise Services

Platform Services

Partner Services


“With the … API Gateway in place, Alaska Airlines can now securely expose their APIs to potentially hundreds or even thousands of third party developers whose applications are dramatically expanding Alaska Airlines’ market reach.”

TESCO: 8X Speed

API Management and Security outcomes – Alaska Airlines


More real world outcomes: DevOps transformationCompany Application Release Business ValueBefore/After

Online Grocery and Wine 2.5 Days 20 Minutes Streamlined International Updates of online groceryApps $380K / a month

Fix Income IB division 12 Days 1.5 Minutes

Oil drilling platform application

3 Days 4 Minutes

Business information 90 minutes 3 minutes

On Line Gambling 2 Days 3 Minutes

Online store 2 Days 12 Minutes

$13M annually implement globally

$577K / a month

$1.3M annually

$2.3M annually implement globally

$1.2M annually

Multinational Grocer

Financial Institution

Oil and Gas

Financial Rating

Global Retailer

Online Gambling

Thank You!

Please visit www.ca.com/devopsanytime to learn how CA Technologies can help revolutionize Your SDLC!


VP Strategic Solutions, Office of the CTO

ca.com

Andi Mann

@AndiMann

slideshare.net/CAinc

@cainc

linkedin.com/company/ca-technologies

linkedin.com/in/AndiMann

[email protected]

http://twitter.com/andimann

http://slideshare.net/CAinc

http://twitter.com/cainc

http://linkedin.com/company/ca-technologies

http://linkedin.com/in/AndiMann

mailto:[email protected]

DevOps and Cloud: Tips and Techniques to …dw.connect.sys-con.com/session/2541/Andi_Mann.pdfDevOps...

Documents

Transcript of DevOps and Cloud: Tips and Techniques to …dw.connect.sys-con.com/session/2541/Andi_Mann.pdfDevOps...