Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Down the Ivory Tower towards Agile Architecture #JCON23

Down the Ivory Tower towards Agile Architecture #JCON23

Architecture for agile projects must be defined and described differently, as well as continuously developed and evolved. Not all decisions are made at once, nor are they all known right from the start of the project. This sessions describes various useful and lightweight methods, tools and team topologies that can be applied in (large) agile projects to avoid uncontrolled growth and architectural erosion but without acting from the ivory tower and thus suffocating team autonomy.

M.-Leander Reimer

November 22, 2023
Tweet

More Decks by M.-Leander Reimer

Other Decks in Programming

Transcript

  1. Holistic Software Product Quality is a lot of work! QAware

    | 11 Software Product Quality (ISO 25010) • Modularity • Reusability • Analysability • Modifiability • Testability Maintainability • Confidentiality • Integrity • Non-repudiation • Authenticity • Accountability Security • Adaptability • Installability • Replaceability Portability • Co-existence • Interoperability Compatibility • Maturity • Availability • Fault Tolerance • Recoverability Reliability • Time Behaviour • Resource Utilization • Capacity Efficiency • Completeness • Correctness • Appropriateness Functional Suitability • Operability • Learnability • UI Aesthetics • Accessibility Usability Safety Deployability
  2. The Last Possible Moment != The Last Responsible Moment QAware

    | 17 ▪ The Last Responsible Moment what you should aim for! ▪ Useful questions for responsible decision making – Do we have to take the decision now? – Can we postpone the decision? – What are the consequences if we postpone? – When will the overall complexity become to high? – What are the alternatives? – What are the trade-offs of our decision? – Can we revert a decision? At which costs? ▪ Have no fear of suboptimal decisions! Be brave! ▪ Iterative development, TDD, refactorings, continuous integration and deployment, architecture fitness functions can help to address and reduce the risks involved
  3. The Anatomy of an Architecture Decision Record (ADR) QAware |

    20 # Title ## Context ## Decision ## Status ## Consequences ▪ Short text file; 1-2 pages long, one file per decision ▪ Simple format like Markdown, Asciidoc, TXT, etc. Short noun phrase and number, e.g. ADR 5: AWS as preferred cloud provider Proposed, Accepted, Deprecated, Superseded Describes the forces at play: technology, political, project local. Value neutral, simple facts. Response to the forces with justification. Stated in full sentences, with active voice. "We will …" Describe context, after applying the decision. All consequences should be listed here, not just the "positive" ones.
  4. Architecture fitness functions continuously validate the desired software quality attributes.

    21 https://www.thoughtworks.com/de/radar/techniques/architectural-fitness-function
  5. Fitness-function Driven Development QAware | 22 ▪ Architecture is like

    a product with user journeys ▪ Requirements are defined by all relevant stakeholders – Business – Compliance – Operations – Security – Infrastructure ▪ Often these are exactly the „-illities“ and quality attributes ▪ Acceptances criteria are the formulated using a BDD approach and framework ▪ Fitness tests are executed and validated as part of CI/CD pipelines (continuously or ad hoc) https://www.thoughtworks.com/de/insights/articles/fitness-function-driven-development
  6. Example: Security 25 describe "Security" do describe “Static Analysis” do

    it "should not have plaintext secrets in codebase" do expect(code.has_secrets_in_codebase()).to_not be(true) end end describe “Dynamic Analysis” do it "should not have any of the OWASP Top 10" do expect(zap.has_owasp_top_10_vulnerabilities()).to be(false) end end end
  7. Conceptual Architecture QAware | 28 Packages Package publish update Run

    deploy watch Deploy watch Dev GitOps Build push Checkout Build Test Quality Package Dev Test (E2E, NFA) trigger test Tests Quality Cockpit report PO report Build Status Code Quality Test Results fitness test promote ?
  8. The path from a conceptually clean architecture towards the big

    ball of mud is shorter than you think! QAware | 29
  9. ArchUnit enables easy, automated testing of your software architecture in

    the form of simple unit tests. ▪ https://www.archunit.org/ ▪ Apache v2 licensed. Simple and extensible open source library for software architecture validation as code: Java and .NET/C# are supported. ▪ All major build tools and unit test frameworks are support out-of-the-box. ▪ The library provides a collection of predefined rules for recurring architecture validations: – Styles: rules to validate common architectures (e.g. layered, onion, hexagon) – Slices: detect “cycles” on various layers (e.g. classes, packages, modules) – General: collection of rules for good coding practices (e.g. naming, logging, exceptions) – UML: rules to validate the codebase with a given PlantUML architecture model – Freezing: allows the definition of a violation baseline, especially useful to manage the technical debts of legacy projects QAware | 30
  10. Just a few lines of code allow to validate your

    architecture continuously and repeatedly with every build. 31 @AnalyzeClasses(packages = {"de.qaware.archunit.example.onion"}) public class OnionArchitectureFitnessTest { @ArchTest static final ArchRule onion_architecture_is_respected = onionArchitecture() .domainModels("..domain.model..") .domainServices("..domain.service..") .applicationServices("..application..") .adapter("cli", "..adapter.cli..") .adapter("persistence", "..adapter.persistence..") .adapter("rest", "..adapter.rest.."); }
  11. aim42 can be used to analyse and assess any technical

    debt and improve the software architecture in a structured way. QAware | 33 https://www.aim42.org/
  12. “Too much cognitive load will become a bottleneck for fast

    flow and high productivity for many agile teams.” QAware | 34 ▪ Intrinsic Cognitive Load Relates to fundamental aspects and knowledge in the problem space (e.g. used languages, APIs, frameworks) ▪ Extraneous Cognitive Load Relates to the environment (e.g. console command, deployment, configuration) ▪ Germane Cognitive Load Relates to specific aspects of the business domain (aka. „value added“ thinking)
  13. Collaboration is key. Software architecture should be defined and work

    on at all teams and layers. QAware | 35 https://martinfowler.com/bliki/TeamTopologies.html Architecture
  14. qaware.de QAware GmbH Aschauer Straße 32 81549 München Tel. +49

    89 232315-0 [email protected] twitter.com/qaware linkedin.com/company/qaware-gmbh xing.com/companies/qawaregmbh slideshare.net/qaware github.com/qaware