Yes sir, I can GitOps! SDLC automation on a regulated industry

A look into how we put in place an automated compliance solution in our pipelines and a GitOps solution for Feature Flags, within the regulations of our industry.

Transcript

1. THE PAYMENTS BANK FOR THE NEW ECONOMY Yes sir, I can GitOps! SDLC automation in a regulated industry
2. INTRODUCTION Banking Circle 2
3. BACKGROUND Regulated environment => Manual operations Banking Circle 3
4. BACKGROUND Regulated environment => Manual operations Banking Circle 4
5. CHALLENGES Doesn't scale well Individualized solutions across different teams Shadow ops Banking Circle 5
6. CENTRALIZED SOLUTION Standardized Automated Governance, compliance, security, etc. Expert-designed Banking Circle 6
7. PLATFORM-BASED SOLUTION Self-service Stream-aligned team owns process end-to-end, without handovers Banking Circle 7
8. Only 1 approval (from Product Owner) is required • Regulatory requirement EXAMPLE: AUTOMATED CHANGES Banking Circle 8 Build Test Dev Pre-prod Prod Create CR Validate Close CR
9. EXAMPLE: GITOPS FEATURE FLAGS Functionality is released when the flags are enabled on the main branch of a repository Banking Circle 10 Build Deploy Release Blue/Green Feature Flags
10. EXAMPLE: GITOPS FEATURE FLAGS Single source of truth • Easy to see which flags are enabled on each environment • The git log is a release log Enables different people to: • Request a release (creating a PR) • Approve the release (accepting the PR) Banking Circle 11
11. EXAMPLE: GITOPS FEATURE FLAGS Any team can get this solution by cloning a reference Git repository Terraform-based solution, using shared modules All changes are introduced in easy-to-read json files Banking Circle 12
12. LESSONS LEARNED Focus on user experience – Are we making life easier? Onboarding new teams gets incrementally easier People > Process > Product Banking Circle 13
13. CONCLUSION Being compliant, secure and stable does not imply slow process or manual operations Offering capabilities through a Platform is a good way to scale and enable the different Stream-Aligned teams Yes sir, I can GitOps! Banking Circle 14