By Ilkka Turunen, Sonatype Moving to DevOps in large complex enterprise-IT environments is an incremental process. One that requires culture, process and technology. Technology like Jenkins, Nexus, Puppet, Docker and more. In this session, you’ll hear about first-hand experiences building successful enterprise-scale DevOps practices and specifically look at the role of Jenkins working with other key technologies in the continuous tool chain. Learn about additional practices to support the goal of driving down cycle times. And no DevOps practice is complete without accounting for compliance and security requirements Jenkins can play a key role there too. Learn more.

1. Making Strides towards
Enterprise-­‐Scale DevOps with
Jenkins in Your Tool Chain
Ilkka Turunen
Solutions Architect, Sonatype
@ilkkaturunen

2. The problem: It often does not…. Work.

3. The history of Software Development
Processes

4. The waterfall Model
DEV
OPS
PLAN
REQUIRE-­‐
MENTS
VISION
FINAL PRODUCT

5. ✓ Good at creating repeatable processes
✓ Revolutionized our productivity as we know it
today
✓ Good when all factors are known
✓ Great at managing accounting and
information

6. Long cycle times from plan to production
Hard to adapt to change during production
✕
✕

7. The Agile way
DEV
OPS
PLAN
REQUIRE-­‐
MENTS
VISION
FINAL PRODUCT

8. ✓ Adapts to changing requirements whilst in production
✓ Involves more stakeholders
✓ Tries to facilitate 2-­‐way communication

9. Naïve view of what goes in to an application
In an enterprise setting often only performed
partially within a DEV team✕
✕
Does not take into account governance or any manual
actions… thus they still can grind development to a halt✕

10. Problem: complexity on multiple levels
Libraries
• Dependent modules
• Dependent services
Compliance
• Licensing issues
• Other accreditation
Target
Env
•Dependent
modules
•Config files
•Other issues such
as Software defined
network
Database
• Tests
• Migrations
Config
mgmt
• Environmentals
• Tokens
• Cookbooks / recipes
/ playbooks
Final Product

11. SOFTWARE
SUPPLY
CHAIN

12. Dev vs Ops
Dev Ops

13. 13 7/2/15
Developers
choose
whatever
supplier they
want for any
given part.
Any part can
be chosen
even if it is
outdated or
known to be
unsafe.
If there is a
recall on a
specific part,
no one would
know if the
part was used
or where.
Everyone
realizes there
are some
issues, but
the prevailing
wisdom is
that “it’s good
enough.”
There are no
systems to
inventory and
track the
various parts
that are used.
Due to a lack of software supply chain visibility, processes and automation…

14. A deeper look at the picture today…
7/2/1514

15. Problem: All software must die

16. Statistics from Maven Central
Source: 2015 State of the Software Supply Chain Report

17. Solution: an automated software “Factory”
DEV
OPS
PLAN
REQUIRE-­‐
MENTS
Automate
Automate
Automate
Automate
Automate
Automate
Automate
WL
WL
WL

18. Software Factory
18 7/2/15
Higher
quality parts
Better & fewer
suppliers
Track where they
are used
Automate every
possible step

19. A
U
T
O
M
A
T
I
O
N
G
O
V
E
R
N
A
N
C
E
R
I
S
K
&
A
U
D
I
T
SOFTWARE FACTORY PRINCIPLES
T
R
A
N
S
P
A
R
E
N
C
Y
C
O
L
L
A
B
O
R
A
T
I
O
N
REDUCE REWORK
IMPROVE QUALITY
IMPROVE SECURITY & COMPLIANCE

20. Jenkins is a focal point for all tools in the
chain

21. 7/2/1521

22. True collaboration via Transparency
DevOps

24. Manage Promotions between environments
Deploy
version Z
To
DEV
Deploy
version Y
To
STAGING
Deploy
version X
To
PROD

26. ‘Fossil footprint’ – (re)build and (re)deploy all
historical versions with versioned artifacts

27. Governance reports for every build

29. Results at case enterprises
on deployment
FAILURE RATE MTTR
<10%
50%
Mins
Hours
MANUAL
ACTIONS
<5
100+

30. Improve productivity
30 7/2/15
• Less rework
• Fewer break-­‐fixes
• Less technical debt
• Easier maintenance
• And better quality software!

31. Takeaways
• Shift decision making left
• Automate automate automate
• Jenkins is an ideal tool to facilitate this

32. State of Software supply chain 2015
• http://www.sonatype.com/speedbumps
• @ilkkaturunenon twitter
• Come check us out at the booths!