DevOps and Cloud: Tips and Techniques to Revolutionize Your SDLC

DevOps and Cloud: Tips and Techniques to Revolutionize Your SDLC Andi Mann VP of Strategic Solutions, Office of the CTO CA Technologies @AndiMann Andi.Mann@ca.com

Abstract (hidden slide) DevOps and Cloud: Tips and Techniques to Revolutionize Your SDLC Cloud computing started a technology revolution; now DevOps is driving that revolution forward. By enabling new approaches to service delivery, cloud and DevOps together are delivering even greater speed, agility, and efficiency. No wonder leading innovators are adopting DevOps and cloud together! This session will explore the synergies in these two approaches, with practical tips, techniques, research data, war stories, case studies, and recommendations on how to: Embrace, source, consume, and expose shared services across the SDLC Apply automation lessons from the cloud to deliver 'software-defined everything' Accelerate time from ideation to release for new applications and services Drive service efficiency and scalability while better managing cost and risk Establish more effective feedback loops, from pre-planning to post-production Secure rapid access to cloud infrastructure, platform, and software services Whether you are a startup or an enterprise; using private cloud, public cloud, or no cloud; an Agile n00b or a DevOps pro; struggling with core banking systems, or building a new social/local/mobile app that will change the world (!); this session will give you actionable ideas on using cloud and DevOps together to revolutionize your software and service delivery lifecycle. 2 2014 CA. ALL RIGHTS RESERVED.

Cloud and DevOps

Cloud computing A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. Source: NIST Special Publication 800-145 The NIST Definition of Cloud Computing Peter Mell, Timothy Grace 4 2014 CA. ALL RIGHTS RESERVED.

DevOps Improve collaboration between dev and ops to accelerate the release of new capabilities and translate operational insight into continuous improvement across the software lifecycle. 6 2014 CA. ALL RIGHTS RESERVED.

DevOps: Succeed in the Application Economy 48% The Benefits of DevOps Percent improvements in business areas COLLABORATION APP QUALITY 23% 22% of respondents belonging to a DevOps-oriented team reported better collaboration among their colleagues. 1 CUSTOMERS NEW SERVICES TIME TO MARKET REVENUE COST SAVINGS DEPLOY FREQUENCY 22% 21% 21% 20% 18% 17% 1 TechInsights Report: What Smart Businesses Know About DevOps The Accenture 2013 CIO Mobility Survey CIOs worldwide see mobility as key revenue generator and primary channel for customer engagement Puppet Labs: 2013 State of DevOps Report 7 2014 CA. ALL RIGHTS RESERVED.

CAMS

Culture

DevOps is fundamentally about people and process Breaking down barriers between teams and empires New roles, new titles, new (and shared) responsibilities Capturing and converting tribal knowledge Focus on business service, not technology Trust in each other, in technology, in process 11 2014 CA. ALL RIGHTS RESERVED.

Cloud and DevOps both require culture change Common attributes - trust, sharing, collaboration, automation Cloud enables culture change too via A, M, S Biggest benefit of cloud is agility DevOps builds on Agile development Tip: DevOps & Cloud both start with culture change. Find your cultural roadblocks and fix them first. 12 2014 CA. ALL RIGHTS RESERVED.

Automation

Automation helps shift left on your project timeline wk5 wk6 wk7 wk8 wk9 wk10 wk11 wk12 wk13 wk14 wk15 wk16 wk17 wk18 wk19 Projects Integration Test Setup UAT Pass 2 Data Setup Regression (100%) Dev Unit System Test UAT Pass 1 L/P Test Mainframe ST MF Delivery Former Release Cycle 15 2014 CA. ALL RIGHTS RESERVED.

Automation enables 'software-defined services' Software-defined service - faster, more agile, more flexible Software-defined Infrastructure (as a Service) Software-defined Platform (as a Service) Software-defined Networks (aka SDN) Software-defined Storage (as a Service) 17 2014 CA. ALL RIGHTS RESERVED.

Example: Parallel dev, test, QA with Service Virtualization Your new mobile app! I can t test or QA anything until I have access to everything! Middleware Services Data Center Systems Distributed Systems Enterprise Storage Cloud Services Partner Services 18 2014 CA. ALL RIGHTS RESERVED.

Example: Parallel dev, test, QA with Service Virtualization Your new mobile app! Test and QA against softwaredefined services instead faster, better, safer Middleware Services Data Center Systems Distributed Systems Enterprise Storage Cloud Services Partner Services 19 2014 CA. ALL RIGHTS RESERVED.

Remember this? wk5 wk6 wk7 wk8 wk9 wk10 wk11 wk12 wk13 wk14 wk15 wk16 wk17 wk18 wk19 Projects Integration Test Setup UAT Pass 2 Data Setup Regression (100%) Dev Unit System Test UAT Pass 1 L/P Test Mainframe ST MF Delivery Former Release Cycle 20 2014 CA. ALL RIGHTS RESERVED.

The same timeline with service virtualization in action 350% more defects found 30% savings 2-week calendar savings wk5 wk6 wk7 wk8 wk9 wk10 wk11 wk12 wk13 wk14 wk15 wk16 wk17 wk18 wk19 Projects Integration Test Setup UAT Pass 2 40% Time savings 60% More scenarios covered Data Setup Regression (100%) Dev Unit System Test UAT Pass 1 L/P Test Mainframe ST MF Delivery 8-week Release Cycle Former Release Cycle 388% more defects found 60% savings Early Load & Performance Testing 21 2014 CA. ALL RIGHTS RESERVED.

Service Virtualization outcomes - Union Bank We are seeing immediate benefit from Service Virtualization. We are able to realize agile, parallel development and increase the quality of the products we deliver for our customers. Finding areas for improvement earlier in the lifecycle is reducing our risk. Dana W. Edwards, CTO, Union Bank 22 2014 CA. ALL RIGHTS RESERVED.

Example: Automated Config and Provisioning Application Development Test and Acceptance Production Reqs Coding Delivery Integration Performance Acceptance Production Configuration Requirements Configuration Management Infrastructure Provisioning Change Management DEV TEST/UAT PROD 23 2014 CA. ALL RIGHTS RESERVED.

Example: Continuous delivery with release automation Source Model Promote Deploy Target From existing Build/Continuous Integration To a Continuous Delivery/Release Automation System Onto On-Premises, Hosted, or Cloud Infrastructure 24 2014 CA. ALL RIGHTS RESERVED.

Release Automation outcomes - Tesco TESCO: 8X Speed TOMAS KADLEC GROUP INFRASTRUCTURE IT DIRECTOR, TESCO Since implementing Release Automation, we ve deployed our online business into eight different countries, which wouldn t have been possible before that means the same team can deliver eight or nine times the volume of releases. 25 2014 CA. ALL RIGHTS RESERVED.

Measurement

How do you know when you deliver what you promise? How do you know when you don t? Service Quality Metrics Ensure you deliver the service and quality you promised SLA/Cost Reporting Deliver on line of business expectations for service and cost Customer Feedback Meet customer needs and understand new requirements We delivered the service we promised. IT is delivering on time, on budget IT is meeting their commitments Dev/Ops Organizations Line Of Business Executives Customers and Staff 28 2014 CA. ALL RIGHTS RESERVED.

Management cloud for measurement Agile, scalable, cost-effective Gain insight and simplify management and support with cloud-based solutions for physical, cloud, and mobile application dev, test, and prod BUSINESS STAKEHOLDERS IT LEADERS IT TEAMS INVESTMENTS Plan, Prioritize, Adjust SERVICE Support, Automate, Deliver ASSETS Manage, Secure, Enable allowing for a holistic view into your IT portfolio and investment. EMPLOYEES 29 2014 CA. ALL RIGHTS RESERVED.

Feedback loops enable continuous improvement PLAN BUILD TEST DEPLOY OPERATE Reqs Coding Delivery Integration Performance Acceptance Production FEEDBACK Defect Information Virtual Services Regression TestsRegression Constraint Analysis 30 2014 CA. ALL RIGHTS RESERVED.

Feedback loops give insight into quality, cost, experience Front Office Back Office End User (Person) P2M M2M Management Cloud (Machine) Production Cloud (Machine) P2P M2P Support (Person) 31 2014 CA. ALL RIGHTS RESERVED.

Example: Detect and remediate problem in Dev and Ops DEVS OPS BACK END Application Application USER CLOUD NETWORK FRONT END Application Firewall Load Balancer Portal MIDDLEWARE WAN/ WWW Router Switch Web Server App Server Mainframe Database End User 3 rd Party Applications Database Web Service 32 2014 CA. ALL RIGHTS RESERVED.

Dev, test, and prod monitoring results - ANZ Bank ANZ Bank s project teams went from 10-15 highseverity incidents to 1-2 per release by using Application Performance Management Adam Cartwright, Head of IT Security and Operations, ANZ Bank Source: Customer Obsessed: ANZ Bank Continues to Make Customer Service and Employee Satisfaction a Top Priority, Smart Enterprise, 2014 33 2014 CA. ALL RIGHTS RESERVED.

Sharing

PROJECT TIMELINE Sharing starts with a shared project and a shared plan Delivery Deadline Architecture Unit Test Acceptance Stable & in production Requirements Scrum/Sprint System Test Deployment Operational Input/Awareness Architecture Unit Test Acceptance Requirements Scrum/Sprint System Test Deployment Ongoing Operational Delivery Input/Awareness Deadline Stable & in production 36 2014 CA. ALL RIGHTS RESERVED.

Source, consume, and expose shared cloud services COMMUNITY PUBLIC COLLABORATION PROJECT MANAGEMENT SOCIAL NETWORKS FINANCIAL MANAGEMENT SAAS ON-PREMISE CRM CONTENT MANAGEMENT PRIVATE API TOOLS ANALYTICS CODE SERVICES PAAS DATA STORE IDE HYBRID CDN BACKUP/ RECOVERY SERVICE MANAGEMENT IAAS STORAGE COMPUTE 37 2014 CA. ALL RIGHTS RESERVED.

BUT shared access can create exposure and raise risk DevOps & Cloud == uncontrolled access and higher risk? Access to unauthorized cloud services drives up IT budgets? Insecure services allow data loss, cross-site access, hack attacks? Sharing IDs and passwords means no separation of Duties? Unprotected APIs open up to malwarte, penetration, DoS? 38 2014 CA. ALL RIGHTS RESERVED.

Self-service, role-based access to known good services Developers and Operators Self-Service Single Sign-On Identity and Access Management Infrastructure Services Platform Services Software Services Partner Services Enterprise Services AUTHORISED KNOWN GOOD SERVICES 39 2014 CA. ALL RIGHTS RESERVED.

Secure shared services with Identity & Access Management Individual Devs and Ops Shared Privileged Identity Windows/MF/ UNIX/Linux Password Check-In/ Check-Out Manual Login Most Privilege Access, No Audit or Control Automatic Login via IdM/PUPM Network Appliances Cloud/Virtual Servers Applications Password Vault 40 2014 CA. ALL RIGHTS RESERVED. Audit and Control Least Privilege Access with Granular Audit and Control Audit Databases

Integrated identity & access management outcomes - BT We now have a flexible and scalable model that we will extend to thousands of suppliers and other partners. In addition, BT has eliminated the need for 80 point solutions that were being used for user authentication. Chief Security Architect, BT Source: BT Saves more than 15 million and improves customer services, CA Technologies 41 2014 CA. ALL RIGHTS RESERVED.

Secure cloud integration with API management & security APPLICATION AND DATA CONSUMERS Internet of things Cloud services Partners /Divisions Mobile developers Internal Developers Off Premise Secure API Gateway On Premise Infrastructure Services Platform Services Software Services Partner Services Enterprise Services APPLICATION AND DATA PROVIDERS 42 2014 CA. ALL RIGHTS RESERVED.

API Management and Security outcomes Alaska Airlines TESCO: 8X Speed With the API Gateway in place, Alaska Airlines can now securely expose their APIs to potentially hundreds or even thousands of third party developers whose applications are dramatically expanding Alaska Airlines market reach. 43 2014 CA. ALL RIGHTS RESERVED.

More real world outcomes: DevOps transformation Company Application Release Business Value Before/After Multinational Grocer Online Grocery and Wine 2.5 Days 20 Minutes Streamlined International Updates of online grocery Apps $380K / a month Financial Institution Fix Income IB division 12 Days 1.5 Minutes $13M annually implement globally Oil and Gas Oil drilling platform application 3 Days 4 Minutes $577K / a month Financial Rating Business information 90 minutes 3 minutes $1.3M annually Online Gambling On Line Gambling 2 Days 3 Minutes $2.3M annually implement globally Global Retailer Online store 2 Days 12 Minutes $1.2M annually 44 2014 CA. ALL RIGHTS RESERVED.

Thank You! Please visit www.ca.com/devops anytime to learn how CA Technologies can help revolutionize Your SDLC!

Andi Mann VP Strategic Solutions, Office of the CTO Andi.Mann@ca.com @AndiMann @cainc slideshare.net/cainc linkedin.com/in/andimann linkedin.com/company/ca-technologies ca.com 46 2014 CA. ALL RIGHTS RESERVED.