Deployments We Can Believe In

How 18F is using Cloud Foundry to change government devops

Transcript

1. D E P L O Y M E N T S W E C A N B E L I E V E I N D I E G O L A P I D U Z , 1 8 F
2. W H AT I S 1 8 F ? W H O I S D I E G O ?
3. D E V O P S I S H A R D G O V E R N M E N T D E V O P S I S H A R D E R
4. • C o m p l i a n c e • D o c u m e n t a t i o n • S e c u r i t y • P ro c u re m e n t • P ro v i s i o n i n g • C o n f i g u r a t i o n
5. PA S T
6. P U B L I S H A N A P P L I C AT I O N P R O C U R E S E R V E R S S E T U P A N D C O N F I G U R E C H A N G E M A N A G E M E N T C R E AT E V M S I N S TA L L I M A G E D O C U M E N T P R O C E S S A P P LY A P P C O N F I G U R AT I O N D E P L O Y A P P C O D E S E C U R I T Y S C A N D O C U M E N T A R C H I T E C T U R E A P P R O VA L T O L A U N C H
7. C H A N G E A N A P P L I C AT I O N C H A N G E M A N A G E M E N T A P P LY A P P C O N F I G U R AT I O N D E P L O Y A P P C O D E S E C U R I T Y S C A N A P P R O VA L T O L A U N C H
8. T H E C L O U D
9. P R O C U R E S E R V E R S S E T U P A N D C O N F I G U R E C H A N G E M A N A G E M E N T C R E AT E V M S I N S TA L L I M A G E D O C U M E N T P R O C E S S A P P LY A P P C O N F I G U R AT I O N D E P L O Y A P P C O D E S E C U R I T Y S C A N D O C U M E N T A R C H I T E C T U R E A P P R O VA L T O L A U N C H P U B L I S H A N A P P L I C AT I O N
10. L E T S C H A N G E T H I N G S
11. L AY E R T H E P R O C E S S • C l o u d S e r v e r s • C o m m o n A rc h i t e c t u re • B a s e I m a g e W i t h S e c u r i t y P a t c h e s • A u t o m a t e d S c a n s • D o c s • C o n f i g u r a t i o n M a n a g e m e n t • A p p l i c a t i o n C o d e • D o c s Only Once! Per App
12. S O M E I S S U E S • Update to base image • Inventory • Pains of config management • Billing • Developer productivity
14. P R E S E N T
15. P a a S • Open Source • Language Support • Dev Friendly • Ops Friendly • Multi Infrastructure
16. • M u l t i Te n a n t • P ro d u c t i o n R e a d y • E n t e r p r i s e F r i e n d l y • C o m m o n L a n g u a g e • C o m m u n i t y • F o u n d a t i o n • …
17. B O S H • O p e n S o u rc e M a n i f e s t s • M u l t i D e p l o y m e n t S u p p o r t • A u d i t L o g s • M u l t i I a a S S u p p o r t • S a f e • “ L a y e r i n g ”
18. C F P I L O T • Internal Platform • Multiple Languages and Frameworks • Leverage AWS • Create Small Services • Deploy Production Apps • Reduce DevOps Load
19. C F P I L O T - S TAT U S R E P O R T • 5 months running the platform • ~ 100 app instances • ~ 50 users • Production Apps • Easier User Management • Easier Billing
20. D E V E L O P E R S ❤ C F "With Cloud Foundry I went from punching myself in the face to punching other people in the face" “If you take Cloud Foundry away from us, we will hurt you.” “My judgement was Clouded until I Found Cloud Foundry” "Use Cloud Foundry, they said." “a project spent the better part of a year chasing ATO requirements under a traditional AWS deploy... contrasted with the 3-day ATOs and 2-day deploy setups…”
21. L E A R N I N G S • Developer Happiness / Productivity • Common Architecture • Better Utilization • Spiff Manifests • Document Everything • Contribute Back • Communicate • Don’t be afraid
23. F U T U R E
24. I N P R O G R E S S • CLI Plugins • Monitoring • AWS Services • Reporting • CD for CF • Integrations • Documentation
25. M U LT I T E N A N T D E P L O Y M E N T • Other Groups / Agencies • Automatic Billing • Resource Allocation • More Services • Shared Compliance
26. S E C U R I T Y • Force HTTPS • NIST - CIS • Secure Stemcell • 2 Factor Authentication
27. T H A N K S !
28. @ D L A P I D U Z
29. Q & A W H . G O V / U S D S G I T H U B . C O M / 1 8 F D O C S . 1 8 F. G O V @ D L A P I D U Z