Successful Practices for Continuous Delivery

nfrastructure as Code and DevOps practices are necessary pre-requisites for safely adopting Continuous Delivery. This talk will explore some of the practices your team will need to adopt to safely move fast, continuously delivering value to your customers. It will include a demonstration of Chef's proven approach to a DevOps workflow including Chef Compliance, Chef Delivery, and more.

This was presented at the Bay Area Chef User Group - http://www.meetup.com/The-Bay-Area-Chef-User-Group/events/231113639/

Transcript

1. Nathen Harvey | VP, Community Development | nharvey@chef.io @nathenharvey
2. Nathen Harvey VP, Community Development at Chef Co-host of the Food Fight Show Podcast Occasional farmer – http://ei.chef.io Love eggs – http://eggs.chef.io Part-time detective - http://bit.ly/detectivedecker @nathenharvey nharvey@chef.io
3. EVERY business is a software business We’re going to be a software company with airplanes. – CIO, Alaska Airlines
4. Quality and innovation, historically a tradeoff QUALITY/COMPLIANCE RATE OF INNOVATION
5. The game changer: rapid time to value Innovation Quality/ Compliance Dynamic Infrastructure
6. Dynamic infrastructure Migrate applications to the cloud and support hybrid and multi-cloud environments. Automate the management of heterogeneous networks, including legacy systems. •  Provisioning and setting up environments •  Dynamic scaling of compute resources •  Migrating legacy workloads to the cloud •  Multi cloud and hybrid cloud deployment •  Support for heterogeneous environments
7. The game changer: rapid time to value Innovation Quality/ Compliance Dynamic Infrastructure Infrastructure as Code Automate the Stack +
8. Infrastructure as Code •  Programmatically provision and configure components •  Treat like any other code base •  Reconstruct business from code repository, data backup, and compute resources
9. Automation Turn infrastructure into code—infrastructure as code is versionable, testable and repeatable. Manual processes become a thing of the past. •  Automated, full-stack application policies •  Package and service installation •  Versionable, testable, repeatable workflow •  Scalable application policies •  Management of interdependencies across nodes
10. Describe Infrastructure as Code httpd_service 'customers' do mpm 'prefork' action [:create, :start] end httpd_config 'customers' do instance 'customers' source 'customers.conf.erb' notifies :restart, 'httpd_service[customers]' end directory '/var/www/customers/public_html' do recursive true end
11. Test the Code describe 'apache::default' do context 'When all attributes are default, on an unspecified platform' do let(:chef_run) do runner = ChefSpec::ServerRunner.new runner.converge(described_recipe) end it 'converges successfully' do expect { chef_run }.to_not raise_error end it 'installs apache' do expect(chef_run).to install_package 'apache2' end end end
12. Version the Code & the Artifact name 'cmgw' maintainer 'Chef Software, Inc.' maintainer_email 'nharvey@chef.io' license 'apache2' description 'Installs/Configures cmgw' long_description 'Installs/Configures cmgw' version '0.1.0'
13. The game changer: rapid time to value Innovation Quality/ Compliance Dynamic Infrastructure Infrastructure as Code Automate the Stack DevOps + +
14. DEVOPS A cultural and professional movement, focused on how we build and operate high velocity organizations, born from the experiences of its practitioners.
15. PEOPLE PRODUCTS COMPANIES
16. WE ARE LEAN •  Eliminate non-value-added action (Waste/Muda) •  Pull over Push •  Kaizen (Continuous Improvement) •  Kaikaku (Disruptive Change) •  Small Batch + Experimentation
18. UBIQUITOUS WORKFLOW AUTOMATION
19. DIVERSITY
20. DevOps workflow & culture Eliminate silos and lower the overhead of IT operations and service management by supporting DevOps culture. Build communities. •  Unified workflow for application and infrastructure •  Integration with version control for dev and ops •  Support for automated testing of infrastructure and applications •  Integration of security and compliance into product development •  Advanced, high-velocity workflow
21. The rewards?* *source: Dr. Nicole Forsgren research on DevOps More deployments Ship faster Faster MTTR after issues More profits, market share, and productivity Market cap goes up
22. Continuous delivery of infrastructure & apps Implement a high-velocity software delivery pipeline that integrates application and infrastructure. Eliminate the risks incurred with large, infrequent releases. •  Rapid provisioning of dev and test environments •  Ensure consistency and repeatability of environments •  Unified pipeline for infrastructure, runtime environments and applications •  Support for large teams with multiple projects •  Advanced, high-velocity workflow
24. MANAGE RISK •  Small batches, near term hypothesis •  Validation comes from customers •  Introduce near-term volatility to gain decreased long-term risk
25. CONTINUOUS INTEGRATION •  Always integrate branches to master •  They should be short lived, iterative branches •  Fix the build when it goes red
26. THE FOUR-EYE RULE
27. WRITE TESTS •  Unit test (a single function) •  Integration tests (multiple classes/units) •  Functional tests (user-oriented, high-level, full stack) •  Smoke tests (quickly determine if the system is “working”)
28. ONE PATH FOR CHANGE •  The way change moves through your organization is fixed •  Designed to re-enforce your principles and aid flow •  Flexible at the level of execution
29. CODE GOES THROUGH THE SAME WORKFLOW Applications are code Infrastructure is code
30. Security and compliance at velocity Regulatory compliance and security concerns are facts of life for every enterprise. At the same time, competitive pressures are increasing. Embed requirements into the software delivery pipeline. Code makes compliance at velocity possible. •  Embed compliance into the software delivery pipeline •  Automated checking of compliance criteria with analytics •  Structured review process during development •  Discovery and analysis •  Patch management and remediation
32. SSH Control SSH supports two different protocol versions. The original version, SSHv1, was subject to a number of security issues. Please use SSHv2 instead to avoid these.
37. What We Have Here Is A Communications Problem
39. SSH Version Check describe sshd_config do impact 1.0 title 'SSH Version 2' desc <<-EOF SSH supports two different protocol versions. The original version, SSHv1, was subject to a number of security issues. Please use SSHv2 instead to avoid these. EOF its('Protocol') { should cmp 2 } end
43. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Submit Change
44. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Submit Change
45. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Submit Change Does this code change look good?
46. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Security Quality Publish Lint Syntax Unit Submit Change Does this code change look good?
47. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Security Quality Publish Lint Syntax Unit Provision Deploy Smoke Functional Submit Change Does this code change look good?
48. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Security Quality Publish Lint Syntax Unit Provision Deploy Smoke Functional Submit Change Does this code change look good? Do we want to ship this?
49. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Security Quality Publish Lint Syntax Unit Provision Deploy Smoke Functional Provision Deploy Smoke Functional Submit Change Does this code change look good? Do we want to ship this?
50. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Security Quality Publish Lint Syntax Unit Provision Deploy Smoke Functional Provision Deploy Smoke Functional Provision Deploy Smoke Functional Submit Change Does this code change look good? Do we want to ship this?
51. Unified Pipeline Shape The stages are fixed, and each stage has a fixed set of phases! APPROVE DELIVER Lint Syntax Unit Security Quality Publish Lint Syntax Unit Provision Deploy Smoke Functional Provision Deploy Smoke Functional Provision Deploy Smoke Functional Provision Deploy Smoke Functional Submit Change Does this code change look good? Do we want to ship this?
52. Shared Workflow Delivery’s pipeline is shared across projects and teams
55. Chef Provides a Proven Approach to DevOps ... ... ... Targets/Workloads Collaborative Dev Production Chef Server Chef Server Chef Supermarket Assessment Chef Compliance  Search ^ Audit Ǘ Discover Deploy Chef Delivery! Local Dev ê Model ƨ Build ¿ Test Chef DK Chef Client & Cookbooks
56. 1500 Attendees! 55+ Speakers! Registration Open! Community Celebration! CHEFCONF 2016 AT A GLANCE Workshops & Chef Training Community Summit Partner Summit Welcome Reception Keynotes Technical Sessions Happy Hour Keynotes Technical Sessions Awesome Chef Awards Community Celebration DAY 1 // JULY 11 DAY 2 // JULY 12 DAY 3 // JULY 13 THREE DAYS OF OPPORTUNITY TO ENGAGE THE CHEF CUSTOMERS AND PARTNER ECOSYSTEM chefconf.chef.io! DAY 1 // JULY 11 «  Workshops & Chef Training «  Community Summit «  Partner Summit «  Welcome Reception DAY 2 // JULY 12 «  Keynotes «  Technical Sessions «  Happy Hour DAY 3 // JULY 13 «  Keynotes «  Technical Sessions «  Awesome Chef Awards «  Community Celebration THREE DAYS OF OPPORTUNITY TO ENGAGE THE CHEF CUSTOMERS AND PARTNER ECOSYSTEM
57. What questions can I answer for you?
58. Nathen Harvey VP, Community Development at Chef Co-host of the Food Fight Show Podcast Occasional farmer – http://ei.chef.io Love eggs – http://eggs.chef.io Part-time detective - http://bit.ly/detectivedecker @nathenharvey nharvey@chef.io
59. Nathen Harvey | VP, Community Development | nharvey@chef.io @nathenharvey