[SAP] Perforce Administrative Self Services at SAP
-
Upload
perforce -
Category
Technology
-
view
337 -
download
3
description
Transcript of [SAP] Perforce Administrative Self Services at SAP
![Page 1: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/1.jpg)
1
Perforce Administrative Self Services at SAP
Wolfram Kramer Development Architect SAP AG TIP Core ECF & Production
![Page 2: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/2.jpg)
2
SAP today
• 232,000 Customers in more than
• 180 countries
• €16.22bn Revenue
• 64,422 SAP employees worldwide
• SAP offices in more than 130 countries
![Page 3: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/3.jpg)
3
Perforce @SAP
• 1998 Introduction of Perforce at SAP
• 10,000 licensed users
• ~ 100 Perforce server instances
• 2 Perforce server locations
• ~ 2 TB Perforce db.* files altogether
• ~ 10 TB versioned data
• ~ 4·108 files (including branches)
@
![Page 4: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/4.jpg)
4
The iOS development process
deploy and test
idea get SCM Project
Prepare development environment
release and delivery
exchange
Integrate and release +
SAP Mobile Development
Lifecycle
develop
get Libraries e.g. SUP
inhouse delivery
How are developer teams enabled to work with Perforce?
![Page 5: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/5.jpg)
5
Provide Perforce access to developer teams
get SCM Project
• Get a locaGon in Perforce where to put the sources
• Define access groups and protecGons
• Fill the access groups with development team members
means
How?
Central Perforce
Administrator
Phone call
Workflow
Ticket system
Scalable? Agile?
![Page 6: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/6.jpg)
6
Perforce depot structure
3 levels: //depot/project/codeline
The development area, product
Component, subsystem
Branch
Enablement of standardized build and producGon infrastructure.
Empowered by usage of change-‐submit trigger.
![Page 7: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/7.jpg)
7
Permissions and groups
Access group types • dev group (Developers) • patcher group (Quality Managers, Build
Operators) Possible group access ranges • depot level (shown here), even multiple
depots • project level
buildenv-dev
buildenv-patcher
write
read
write
write
write group buildenv-dev * //buildenv/*/ct01_stream/... read group buildenv-dev * //buildenv/*/ct01_publish/... write group buildenv-patcher * //buildenv/*/ct01_stream/... write group buildenv-patcher * //buildenv/*/ct01_publish/...
![Page 8: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/8.jpg)
8
Multi-server landscape at SAP
Many servers at SAP since 2000 (Reasons: Performance) User and Group store per server instance
groups
users
groups
users
groups
users
groups
users
![Page 9: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/9.jpg)
9
Multiple user and group maintenance
Problem: Per-server user and group administration not possible any more Boundary condition: No single-point-of-failure, i.e. authorization Perforce server is not an option
groups
users
groups
users
groups
users
groups
users
Central Perforce Administrator
![Page 10: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/10.jpg)
10
Central user and group storage
User and Group data are maintained in a central application with an SQL database underneath (Perforce Management System, P4MS) User and group data are automatically written by P4MS to dedicated Perforce servers
Perforce Management System (P4MS)
Central Perforce Administrator
![Page 11: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/11.jpg)
11
Perforce Management System (P4MS)
![Page 12: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/12.jpg)
12
Centralized user and group management
Problem: Centralized user and group management does not scale Observation: Decision on granting access rights of new users is taken locally
groups
users
Central Perforce
Administrator
Development team members, project leads
Access requests
![Page 13: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/13.jpg)
13
Admin groups
New group type • admin group (Project Managers) Admin groups exist only in P4MS, not on Perforce servers. Members of an admin group are allowed to modify group members.
buildenv-dev
buildenv-patcher
write
read
write
write
buildenv-admin
modify
modify
![Page 14: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/14.jpg)
14
Decentralized user and group maintenance
Development Team members
Perforce Management System (P4MS)
Access requests
Project lead
Notification
Approval Central
Perforce Administrator
![Page 15: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/15.jpg)
15
Perforce Access Request
Development Team member
Types in Path and Server
Requests access
![Page 16: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/16.jpg)
16
Perforce Access Request Approval
Project lead
Notification Email
Add user to group
![Page 17: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/17.jpg)
17
Centralized project management
Problem: Centralized project management does not scale Observation: Development teams know by themselves which projects and codelines they need
Central Perforce
Administrator
Project leads
Project creation request
Codeline creation request
P4MS Create project
Generate path in
Perforce
![Page 18: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/18.jpg)
18
P4MS administrator frontend for project creation
Project creation frontend in P4MS (Administrators only)
Created project in Perforce
![Page 19: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/19.jpg)
19
Self-service for creating a new project in the Mobile area Self-service for project managers (and other people) to create a new project in the mobile area Current restriction: Only one Perforce server, one depot enabled
Project lead
P4MS
Generate path in
Perforce
Project creation request
Project creaGon
self-‐service
![Page 20: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/20.jpg)
20
Frontend for project creation self-service
Perforce server selection (currently only one possible)
Perforce depot selection (currently only one possible)
Enter team members
![Page 21: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/21.jpg)
21
The future: project creation self-service for all servers and depots
Perforce server
selection Perforce depot
selection
Alternative: “I want the new
project to be created at the same location where I already have
another project”
Create also the given codelines
![Page 22: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/22.jpg)
22
The sophisticated future: free project and codeline permission definition
Select the project
Grant accesses to groups for codelines
of the project
![Page 23: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/23.jpg)
23
The sophisticated future: use-cases for self-services
Project managers
P4MS
Generate path in
Perforce
Project creation
AdministraGve Self-‐services
Codeline creation
Permission maintenance for project
Generate protections in Perforce
Central Perforce Administrator
![Page 24: [SAP] Perforce Administrative Self Services at SAP](https://reader034.fdocuments.us/reader034/viewer/2022051411/5454eef1af7959f56f8b4b33/html5/thumbnails/24.jpg)
24
Major take-aways
• Establish standards and enforce them • Enable the teams • Don‘t be a central bottleneck