Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Building a Service Delivery Infrastructure

Building a Service Delivery Infrastructure

Originally presented at Grace Hopper Celebration, 2019. Resilient, scalable, secure, and automated infrastructure accelerates the delivery of business value from software. How can we build an ecosystem that supports such mythical delivery? This session applies software
engineering and agile techniques to building a delivery ecosystem as a set of software products that serve the needs of software engineers and operations teams.

Rosemary Wang

October 02, 2019
Tweet

More Decks by Rosemary Wang

Other Decks in Technology

Transcript

  1. 9 Given an identifier associated with a customer, When I

    call an API endpoint Then I should get the customer’s name. #GHC19 Deliver Me, "Hello Customer!"
  2. 10 Given an identifier associated with a customer, When I

    call an API endpoint Then I should get the customer’s name. #GHC19 Deliver Me, "Hello Customer!" I need to...
  3. 13 As a ... I want ... So that …

    More / less detail Consider acceptance criteria #GHC19 Use Narratives to Describe Needs
  4. 14 As a developer I want to use CPU and

    memory resources So that I can deliver some business capability. #GHC19 Example: Core Compute
  5. 15 As a developer I want to securely manage my

    secrets So that I can mitigate exposure to passwords. #GHC19 Example: Secrets Management
  6. 16 #GHC19 CORE COMPUTE BUILD PIPELINES NETWORKING DATA PERSISTENCE WORKLOAD

    ORCHESTRATION OBSERVABILITY ARTIFACT REGISTRY EXTERNAL DEPENDENCIES (SAAS/DC) IDENTITY & ACCESS SECRETS MANAGEMENT VULNERABILITY MANAGEMENT Ecosystem Products and Journeys
  7. 17 #GHC19 CORE COMPUTE BUILD PIPELINES NETWORKING DATA PERSISTENCE WORKLOAD

    ORCHESTRATION OBSERVABILITY ARTIFACT REGISTRY EXTERNAL DEPENDENCIES (SAAS/DC) IDENTITY & ACCESS SECRETS MANAGEMENT VULNERABILITY MANAGEMENT Ecosystem Products and Journeys PATH TO PRODUCTION (“Hello Customer” P2P) PATH TO REPAIR (“Hello Customer” P2R) PATH TO COMPLIANCE (“Hello Customer” P2C)
  8. 21 As a developer / infrastructure engineer I want to

    deliver my service / infrastructure in an automated way So that it is secure, compliant, and ready for my customer. #GHC19 Example: Deployment Pipeline
  9. 22 #GHC19 Infrastructure Deployment Pipeline UNIT Check configurations Example: terraform

    plan BUILD Automation Example: terraform apply TEST Check integrations Example: pytest,inspec- gcp, awspec SECURE Check security conformance Example: scout2, g- scout MONITOR Check monitoring exists Example: pytest PERFORM Check performance Example: locust, pumba PROMOTE Ready for next environment Conformance Tests, can run asynchronously
  10. 25 security 0 high vulnerabilities resiliency less than 1% error

    rate for new deployment auditability less than 90 days since last audit #GHC19 https://www.thoughtworks.com/insights/blog/fitness-function-driven-development Architecture Fitness Functions
  11. 28 #GHC19 A Balancing Act Evolvability Vendor Lock-In Build vs.

    Buy Autonomy Cost Fixed vs. On- Demand Capacity Compliance Complexity Vendor Management Global vs. Regional
  12. 29 Mean Time to Recovery Deployment Failure Rate Deployment Frequency

    Lead Deployment Time The 4 Horsemen of the DevOp-ocalypse
  13. 32 #GHC19 As an individual... remember your customer experiment read

    examples re-purpose join/ build a community
  14. Please remember to complete the session survey in the mobile

    app. THANK YOU YOU CAN FOLLOW US@ #GHC19 Paula Paul [email protected] @paulapaultweets Rosemary Wang [email protected] @joatmon08