Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie Experts live dtap reinvented, a risk driven approach to release pipelines
Ähnlich wie Experts live dtap reinvented, a risk driven approach to release pipelines (20)
Mehr von Rolf Huisman
Mehr von Rolf Huisman (9)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Experts live dtap reinvented, a risk driven approach to release pipelines
- 1. DEVOPS & AUTOMATION OTAP (DTAP) reinvented, a risk driven approach to release pipelines Rolf Huisman
- 2. DEVOPS & AUTOMATION Disclaimer This talk contains some controversial approaches. Use with care and at your own risk. My opinions are my own and not my employers ☺
- 3. DEVOPS & AUTOMATION Rolf Huisman IT Architect @ InfoSupport @rlrhuisman Rolf.Huisman@infosupport.com https://www.linkedin.com/in/rolfhuisman/
- 7. DEVOPS & AUTOMATION Became DevOps to survive
- 8. DEVOPS & AUTOMATION How to keep knowledge ?
- 9. DEVOPS & AUTOMATION Do companies still use these ? Would a Word document work ?
- 10. DEVOPS & AUTOMATION Do companies still use these ? Would a Word document work ? Or do we need a different approach ?
- 11. DEVOPS & AUTOMATION Do companies still use these ? FORTRAN (1957), COBOL (1959), Python (1990), Java (1995), C# (2000)
- 12. DEVOPS & AUTOMATION Do companies still use these ? FORTRAN (1957), COBOL (1959), Python (1990), Java (1995), C# (2000) While Word documents go to die, Source code will outlive; employments, companies, and people
- 13. DEVOPS & AUTOMATION … as Code Configuration as Code Infrastructure as Code Acceptance as Code Architecture as Code Policies as Code
- 14. DEVOPS & AUTOMATION Shift Left Not only a config file:
- 15. DEVOPS & AUTOMATION Agenda Code from idea to production Non-human code Machine learning and AI Patching Non-code artifacts Content COTS Optimize the flow
- 16. DEVOPS & AUTOMATION DEVOPS & AUTOMATION From code to production ALM SDLC DevOps Development Cycle
- 36. DEVOPS & AUTOMATION Multiple Teams Engineer Team 2
- 37. DEVOPS & AUTOMATION Multiple Teams Engineer Team 2
- 38. DEVOPS & AUTOMATION Merging Infra and Dev Monitoring pack (Dll)
- 39. DEVOPS & AUTOMATION Merging Infra and Dev Base OS (DSC) Monitoring pack (Dll)
- 40. DEVOPS & AUTOMATION Merging Infra and Dev Base OS (DSC) Application + OS (Exe + DSC) Monitoring pack (Dll)
- 41. DEVOPS & AUTOMATION Merging Infra and Dev Artifact Application Required Infra Test Automation (Deploy process*) All can be partly 3rd party Base OS (DSC) Application + OS (Exe + DSC) Monitoring pack (Dll)
- 42. DEVOPS & AUTOMATION Artifact Version A: Of the application Needs Version B Of the stack Needs Version C To test it Artifact Application Required Infra Test Automation (Deploy process*) All can be partly 3rd party
- 43. DEVOPS & AUTOMATION Composing away Base OS (DSC) Paas Stack (DSC) Monitoring pack (DSC) Application + Stack (Exe, DB, DSC)
- 44. DEVOPS & AUTOMATION Composing away Base OS (DSC) Paas Stack (DSC) Monitoring pack (DSC) Application + Stack (Exe, DB, DSC) Tip: https://semver.org/
- 45. DEVOPS & AUTOMATION DEVOPS & AUTOMATION Non-human code Machine learning and AI Patching Bots
- 46. DEVOPS & AUTOMATION Human based development StoriesStoriesStoriesStories Engineer Code
- 47. DEVOPS & AUTOMATION Human based development StoriesStoriesStoriesStories Engineer Code Data Outcome
- 48. DEVOPS & AUTOMATION Machine learning development Data Scientist Data StoriesStoriesStoriesStories Master Data
- 49. DEVOPS & AUTOMATION Machine learning development Data Scientist Code Data Prediction StoriesStoriesStoriesStories Master Data Algorithm Code e.g. R, Python, ONNX
- 50. DEVOPS & AUTOMATION Machine learning development Data Scientist Code Data Prediction StoriesStoriesStoriesStories Master Data Algorithm Master Data Management Master Dataset Version Repository MDM data set ID Algorithm code (Machine model)* Prediction Tests Code e.g. R, Python, ONNX
- 51. DEVOPS & AUTOMATION Have a talk about GDPR (AVG) Are models PII data ? Remove a single person from a model ?
- 52. DEVOPS & AUTOMATION Have a talk about GDPR (AVG) Are models PII data ? Remove a single person from a model ? No consensus yet. Be prepared to rewrite history
- 57. DEVOPS & AUTOMATION Patching WSUS & SCCM has a rest API MSDN Microsoft Security Update API https://portal.msrc.microsoft.com/en-us/developer
- 58. DEVOPS & AUTOMATION Patching (Example office) Configuration BaseOfficeMachines { Node 'NodeName' { xHotfix HotfixInstall { Ensure = "Present" Path = "http://hotfixv4.microsoft.com/.../358323_intl_x64_zip.exe" Id = "KB2937982" } } }
- 59. DEVOPS & AUTOMATION Patching (Example office) Configuration BaseOfficeMachines { Node 'NodeName' { xHotfix HotfixInstall { Ensure = "Present" Path = "http://hotfixv4.microsoft.com/.../358323_intl_x64_zip.exe" Id = "KB2937982" } } } Tip: Make two commits; 1. Absent 2. Present Allows you to test and roll back quicker and easier
- 60. DEVOPS & AUTOMATION Patching Make use of existing test automation “Be patched within hours of a security patch release”
- 61. DEVOPS & AUTOMATION Patching Example Team A: Team B: Dev Test Acc Prod Dev Test Acc Prod
- 62. DEVOPS & AUTOMATION Patching Example (Normal) Team A: Team B: Dev Test Acc Prod Dev Test Acc Prod
- 63. DEVOPS & AUTOMATION Patching Example (Normal) Team A: Team B: Dev Test Acc Prod Dev Test Acc Prod Ring 0 Ring 1 Ring 2 Ring 3
- 64. DEVOPS & AUTOMATION Patching Example (Simple) Team A: Team B: Dev Test Acc Prod Dev Test Acc Prod
- 65. DEVOPS & AUTOMATION Patching Example (Simple) Team A: Team B: Dev Test Acc Prod Dev Test Acc Prod
- 66. DEVOPS & AUTOMATION Patching What about WSUS and SCCM ?
- 67. DEVOPS & AUTOMATION Patching What about WSUS and SCCM ? Use them for machines which get left behind and reporting. “They are part of governance”
- 68. DEVOPS & AUTOMATION DEVOPS & AUTOMATION Non-Source code artifacts Business Content Comercial Of The Shelf (COTS)
- 69. DEVOPS & AUTOMATION Handling content Things made by business users E.g. text and images on the CMS website. Ad hoc reports.
- 70. DEVOPS & AUTOMATION Handling content While you can combine it in the pipeline. Do you want to ? • Content approval hindering patches. • Content changes pushing unintended functionality Usually ends up in delays or branch hell.
- 71. DEVOPS & AUTOMATION DTAP (OTAP) Technical & Business Development Test Acceptance Production
- 73. DEVOPS & AUTOMATION DTA-ASP (OTA-ASP) Technical Development Test & Acceptance Business Authoring Staging Publishing Production
- 74. DEVOPS & AUTOMATION Example BPM Tool A Technical Development Test & Acceptance Business Authoring Staging Publishing Production Java Script processors Upgrade testing Custom reports Custom validators Deployment scripts
- 75. DEVOPS & AUTOMATION Example BPM Tool A Technical Development Test & Acceptance Business Authoring Staging Publishing Production Authoring New Processes Review in staging Publishing means corporate standard
- 76. DEVOPS & AUTOMATION Example BPM Tool A Technical Development Test & Acceptance Business Authoring Staging Publishing Production Authoring New Processes Review in staging Publishing means corporate standard Export Import
- 77. DEVOPS & AUTOMATION COTS Commercial of the Shelf (COTS)
- 78. DEVOPS & AUTOMATION COTS Commercial of the Shelf (COTS) Artifact Application Required Infra Test Automation (Deploy process*)
- 79. DEVOPS & AUTOMATION COTS Commercial of the Shelf (COTS) “My tool/vendor does not support it” Artifact Application Required Infra Test Automation (Deploy process*)
- 80. DEVOPS & AUTOMATION COTS Read documentation Talk to supplier Tooling like MSIX to rewrap
- 81. DEVOPS & AUTOMATION COTS Read documentation Talk to supplier Tooling like MSIX to rewrap If fails: contact procurement/legal
- 82. DEVOPS & AUTOMATION COTS Main requirement: “Patches and Releases are presented by the supplier in such way that these can be integrated in the continuous delivery pipeline.”
- 83. DEVOPS & AUTOMATION COTS Service and patch requirements: “Patches and Releases are enabled and supported by the supplier to be able to be; released, deployed, and rolled out without human intervention using an automated process using the continuous delivery pipeline within the agreed timeframe (…)”
- 84. DEVOPS & AUTOMATION COTS For content applications: “Supplier commits to be able to support export, merge, and import of all models, processes and data using; command line tooling or rest api’s, to facilitate automated content delivery processes, across environments.”
- 85. DEVOPS & AUTOMATION DEVOPS & AUTOMATION Optimizing the flow How do you speed it up ?
- 86. DEVOPS & AUTOMATION Optimize the flow Suppose you now have that landscape But it keeps growing and becomes slow
- 87. DEVOPS & AUTOMATION Optimize the flow Suppose you now have that landscape But it keeps growing and becomes slow Thought experiment: “What would happen if we would just go to production directly”
- 88. DEVOPS & AUTOMATION Everyone has a testing environment. Lucky ones, have it separate from production Optimize the flow
- 89. DEVOPS & AUTOMATION What is your risk ? Reality: What can you get away with ? What will your customers tolerate ? What does your risk budget handle ?
- 90. DEVOPS & AUTOMATION What is your risk ? Reality: What can you get away with ? What will your customers tolerate ? What does your risk budget handle ? So… what can we do ?
- 94. DEVOPS & AUTOMATION Risk Time Works on my machine ☺
- 95. DEVOPS & AUTOMATION Risk Time Works on my machine ☺
- 96. DEVOPS & AUTOMATION Risk Time Continuous Integration Build Works on my machine ☺
- 97. DEVOPS & AUTOMATION Risk Time Deployment on Pre-Prod Continuous Integration Build Works on my machine ☺
- 98. DEVOPS & AUTOMATION Risk Time Deployment on Pre-Prod Continuous Integration Build Works on my machine ☺ Acceptance Testing
- 99. DEVOPS & AUTOMATION Risk Time How do we deliver quicker ? Ship date
- 100. DEVOPS & AUTOMATION Risk Time Automated Smoke test Ship it ? How do we deliver quicker ?
- 101. DEVOPS & AUTOMATION Optimizing Example Application T: Critical for Blackbelts Requires 5 min to start.
- 102. DEVOPS & AUTOMATION Optimizing Example Application T: Critical for Blackbelts Requires 5 min to start. Automatic production with only 4 tests
- 103. DEVOPS & AUTOMATION Risk Time Full Automated Acceptance Test Ship it ? How do we deliver quicker ?
- 104. DEVOPS & AUTOMATION Feature Toggles Feature toggles (or flags), are a powerful technique, allowing teams to modify system behavior without changing code.
- 105. DEVOPS & AUTOMATION Feature Toggles Toggles introduce complexity Hitting the shipping line before a user test; usually means a team is mature enough to use them
- 106. DEVOPS & AUTOMATION Risk Time 1st Feedback Works on my machine ☺ But quick delivery is one part
- 107. DEVOPS & AUTOMATION Risk Time Time in context switch 1st Feedback Works on my machine ☺
- 108. DEVOPS & AUTOMATION Build Breaks Most breaks are cause by forgot files
- 109. DEVOPS & AUTOMATION Build Breaks Most breaks are cause by forgot files So why not only build and run unit test later?
- 110. DEVOPS & AUTOMATION Risk Time 1st Feedback Works on my machine ☺ But quick delivery is one part 2nd Feedback
- 111. DEVOPS & AUTOMATION Risk Time 1st Feedback Works on my machine ☺ Do I even want all tests ? 2nd Feedback
- 112. DEVOPS & AUTOMATION Optimize the flow Does this test or check bring me enough certainty to justify its time ?
- 115. DEVOPS & AUTOMATION Risk Time 1st Feedback Works on my machine ☺ Do I even want all tests ? 2nd Feedback 3rd Feedback 4th Feedback 5th Feedback Nth Feedback
- 116. DEVOPS & AUTOMATION How extreme can you go ? From push to production under 60 seconds ? Doable
- 118. DEVOPS & AUTOMATION Takeaways 1. “As code” implies code workflows 2. Code does not always imply humans 3. Don’t force code workflow on business 4. By knowing your risk, you can optimize
- 119. DEVOPS & AUTOMATION So let us speed up DevOps Rolf Huisman IT Architect @ InfoSupport @rlrhuisman Rolf.Huisman@infosupport.com https://www.linkedin.com/in/rolfhuisman/
- 120. DEVOPS & AUTOMATION Do you want to gain more knowledge about Microsoft technology? The Future Ready Skills program offers online courseware, online labs, live Q&A’s and expert sessions, so you can acquire your official Microsoft Certificate in the most efficient way. For more information: aka.ms/frsblog FUTURE READY SKILLS
- 121. DEVOPS & AUTOMATION Next Session: 11:30-12:30 NoOps for Noobs; why I think Devs don’t need Ops. Geert van der Cruijsen