Agile + DevOps East 2018 - DevOps/ Continuous Delivery
Monday, November 5
Introducing Docker and Kubernetes to your DevOps Toolchain
As organizations look to improve the speed with which they deliver software, they increasingly turn to microservices and infrastructure-as-code for software architecture and delivery techniques to help leverage value from their DevOps adoptions. Docker, an industry standard containerization tool, facilitates moving processes into isolated environments that can be frozen into images, with an ecosystem that helps developers across organizations build and share these containers. Kubernetes builds on these capabilities and allows a software team to break down their application into small,...
Tools for DevSecOps
NewDevOps is about creating alignment across the value stream for an application, service, or product. DevSecOps integrates security into this process, making the entire team responsible for delivering secure code that works and can be deployed and used securely. But how do you actually do that? What tools do you add to your DevOps pipeline to help make your software secure and provide your stakeholders with a high level of confidence that the software meets all security requirements & standards? In this tutorial Tom Stiehm will explore what security tools you can add to your DevOps...
Tuesday, November 6
Continuous Delivery in Practice: A Hands-On DevOps Workshop
Sold Out!For many organizations, delivering software into production has become increasingly more complex with long testing cycles and a division between development and operations teams. DevOps is a cultural movement that is breaking down those barriers. Focusing on automation, collaboration, tools, and knowledge sharing, DevOps is showing that developers and system engineers have much to learn from each other. Through a series of hands-on exercises, Danilo Sato will use a sample web application to demonstrate how to automate its build and deployment pipeline, using infrastructure and pipeline as...
What DevOps Means for Testers and Testing
DevOps is more than a buzzword or a passing fad. It's a radically new approach to rapidly deliver high-quality software applications. However, many organizations don’t fully grasp the magnitude of this change or what it means for everyone involved in the software development lifecycle. Jeffery Payne says that DevOps—when done right—drives higher quality and efficiency into software development, software testing, and application management activities. It empowers teams to remove impediments to quality and productivity throughout the entire software lifecycle. However, when DevOps is done...
Introduction to DevOps with Chocolate and Legos
Preview NewAn organizational change could cause confusion, bring havoc and face strong resistance. Learn how you can help your teams and management, experience the value of a DevOps culture by participating in this workshop! The workshop simulates the pre-DevOps life of a large enterprise whose teams (development, operations and business) have very different goals. Workshop participants will use role cards, Legos, and chocolate to experience the goals misalignment, simulate a product development flow, and make bottlenecks visible. Through debriefing and group discussions participants will...
Agile Project Failures: Root Causes and Corrective Actions
Agile initiatives always begin with high expectations—accelerate delivery, meet customer needs, and improve software quality. The truth is that many agile projects do not deliver on some or all of these expectations. If you want help to ensure the success of your agile project or to get an agile project back on track, this tutorial is for you. Jeffery Payne discusses the most common causes of agile project failure and how you can avoid these issues or mitigate their damaging effects. Poor project management, ineffective requirements development, failed communications, software development...
Strategic Foundations for Scaling Agile
New Sold Out!Are you a leader tasked with leading a digital transformation, or are you part of a guiding team that is preparing your organization for big change? Scaled agile, lean, agile, DevOps... No matter what methodology your organization intends to use, taking a proactive, strategic approach up front will provide a strong foundation for the journey ahead. Join Claudia Marquette and Francie Van Wirkus to learn why and how to use a proven inquiry strategy, designed to help you and your stakeholders assess the landscape of your organization, have productive discussions about your work, its current...
Wednesday, November 7
Applying Systems Thinking to DevOps Practices at Scale
As enterprises begin to adopt DevOps practices, there can be a tendency for these transformations to err in one of two ways. One model is where everything is driven locally by teams trying new concepts and tools in order to accelerate their delivery. Another model is where a very top-down program is initiated, driven by what leaders believe are the right things for teams to do. Jared Speno will show how Nationwide Insurance applied DevOps concepts at scale to accelerate delivery for the business. Learn how the organization created a structure and culture that empowers teams to own their...
Frequent Releases for Enterprise Mobile: Make It a Reality Without Losing Your Sanity
As companies continue to embrace the mobile-first strategy, many are grappling with a formidable challenge: how to release mobile updates more frequently given the painful and archaic app publishing process. Beyond brute-forcing release cadence, there need to be cultural, technical, and infrastructural changes to make frequent releases a reality. Stacey Yan and Alex Cabanilla will explore these dimensions in depth and provide practical insights on how to boost build infrastructure and reduce build time, improve code quality and merge process and guard against bad code, manage mobile...
Modern Security with Microservices and the Cloud
It's great that you've moved to microservices, but how are you handling security and distributing secrets? Traditional architectures use perimeter-based security, but you can't exactly wrap the cloud in your own personal firewall. Many organizations are practicing "lift and shift" to leverage the cloud, but then find themselves at the end of failed compliance audits. Seth Vargo will highlight the new security challenges associated with using cloud technologies and microservices, then showcase techniques for solving those challenges. Using HashiCorp Vault, a free and open source secrets...
DevSecOps - Security at the Speed of DevOps
Security specialists, especially at large organizations, believe that better security comes from robust independent gating. On the other hand, DevOps has proven that you can safely deploy orders of magnitude faster than human gating can achieve. What's needed to add security to DevOps are tools that work well with rapid-cycle CI/CD pipelines and an approach that reinforces the DevOps culture and process changes. This requires that security specialists become self-service toolsmiths and advisors and stop thinking of themselves as gatekeepers. Larry guides you through the characteristics of...
Enabling Continuous Testing with Docker and Kubernetes
Quality assurance frequently lags behind the development of new features. One common cause is the difficulty of getting software into a deployable state for testing. Join Arjun Comar as he discusses how Docker containers and Kubernetes can be used to solve this challenge. Arjun will talk about his experiences on recent DevOps efforts where Docker and Kubernetes enabled rapid deployments, and you will learn how to set up short-lived test environments that can shift testing left and permit testing to be performed even prior to developers merging code into the mainline, allowing continuous...
Creating Chaos: Engineering for the Unexpected
Every day we deal with complexity in our systems and multiple layers of dependencies. This complexity makes it difficult to predict when one service or dependency might go rogue for a specific circumstance during a delivery workflow. That's where chaos engineering comes in. Chaos engineering creates these "random" scenarios on purpose and builds resiliency into a system while increasing the velocity at which value is delivered to consumers. Shahzad Zafar will discuss his company's journey into chaos engineering, the principles behind it, how to plan for introducing chaos, and why a culture...
Enterprise DevOps Is Not an Oxymoron
Driving enterprise DevOps transformations is a challenging but massively rewarding job. Larger organizations often struggle to justify the costs of new tooling and training. In fact, larger organizations often fail even to understand what DevOps is and what it means for their business. Putting DevOps into practice also tends to hit serious roadblocks in areas of information security. How can you get buy-in for such a difficult and widespread organizational change? And once you've got it, how do you drive change in a way that stakeholders will stay supportive of it? Join Lee Eason as he...
Optimize Performance Engineering with an Integrated Docker Framework
When an e-commerce platform is going through a digital and cloud transformation, the DevOps and performance engineering team has various responsibilities: prepare the workload, execute tests, measure and analyze performance KPIs, baseline, and store performance-related data. Current tools and process often impact the speed and quality of delivery, as most of the steps require manual intervention. Join Safi Mohamed and Aftab Alam as they walk through how they built a Docker-based integrated performance engineering framework using AWS, JMeter, Docker, Jenkins, Python, and Splunk to automate...
Climbing the Mountain of Continuous Deployment
Trying to reach continuous deployment (CD) can feel like scaling a gigantic mountain full of sheer faces, icy passes, and incredible dropoffs. When a company doesn’t take the proper precautions on its journey to CD, it can result in an overworked engineering organization and high-risk issues reaching the end-users. Join Michele Campbell as she discusses key insights about the journey to CD her company is on right now. In just three short months, the organization has managed to double its number of production releases, without overwhelming teams or causing the quality of the program to...
Thursday, November 8
A Successful DevOps Initiative Starts with Knowing Your Numbers!
IT organizations that don’t know their risk factors and exposure are likely to make investments in DevOps that don’t matter. After working with several teams that lost their DevOps funding after making automation investments in areas that were not business constraints, Anne Hungate's “Know Your Numbers” model emerged. Join Anne to learn how to prioritize your DevOps improvements and demonstrate the impact and value you are delivering. After all, DevOps gets traction and funding when teams can show the business impact of doing it, so if you want your DevOps initiative to take off, be...
Embrace Our Robot Overlords: Make CI Work for You
When developing software, teams can often get bogged down with mundane tasks such as code linting, manual testing, or even just deploying code to a particular environment. Everyone dreams of setting up continuous integration to automate this work, but they believe it to be too time-consuming for their current budget. Join Brian Thompson as he discusses how, after many years of manually performing repetitive tasks and occasionally making a mistake in mundane work, he learned to embrace the robot overlords. Learn about a variety of different continuous integration services such as CircleCI,...
Shift Left: Continuous Performance Testing in the CI/CD Pipeline
“Fail fast and fail often” is a key tenet of DevOps. It places great emphasis on continuous testing to deliver software with confidence and ensure a positive user experience. As teams embrace the “shift left” methodology, they need to transform the traditional approach that relegates performance testing to later stages of the delivery process. By shifting the performance testing left and conducting it continuously, teams can quickly detect and gain insight into software performance degradations earlier in the lifecycle. Gajan Pathmanathan will discuss the transition a team needs to undergo...
Future-Proofing Testers in the Age of AI, ML, and Bots
We're all hearing the buzzwords of AI, machine learning, chatbots, and next-generation testing. Does this mean that the days of traditional testing as we know and practice it are over? Eran Kinsbruner doesn't think so. Join him to learn about the clear transformation happening toward smarter testing techniques and tools. These approaches will drive better pipeline efficiency and release velocity with high quality, and Eran thinks this means good things for the testing practice and practitioners. You'll discover the key trends that are happening around AI, machine learning, and bots in the...
Dominating DevOps with Distributed Teams
Distributed teams are the norm in Fortune 100 and 500 companies, crossing many time zones and multiple cultures. These teams seldom communicate directly, instead using a point of contact to relay information. While teams don't need to be collocated to deliver significant business value, they must use their DevOps pipeline to their advantage. Through continuous integration and automated testing, stories can be swarmed by distributed teams and completed in a fraction of the time it typically takes. Treasa Overton will discuss how this distributed model allows for faster delivery of business...
Continuous Load Testing for DevOps
Ensuring that each new release delivers a positive user experience is now more critical than ever. But with cloud-native apps, microservices, and other compartmentalized elements, an application involves many highly distributed components, and a performance issue in any of them could have a ripple effect across the entire application. Now that new functionality is being released weekly, daily, or even hourly, each team needs instant insight into whether their incremental changes could negatively affect performance. However, legacy performance testing approaches are too late, too heavy, and...
Commonalities of Agile and DevOps Transformations for Large Organizations
As the adoption of agile and DevOps have been steadily growing over the years, many organizations have been taking a proactive approach to prepare for the changes needed for success. This means giving people the skills and resources they need to be successful, working with customers and users for improved collaboration and transparency, and providing teams with the tools and infrastructure to enable continuous flow of value. Are there commonalities across organizations that others can learn from to support their journeys? Join Robin Yeman and Suzette Johnson as they provide an interactive...
Experiences Bringing Continuous Delivery to the DoD and DHS
Not every continuous delivery initiative starts with someone saying, "Drop everything. Let's do DevOps." Sometimes you have to grow your practice incrementally. Sometimes, you don’t set out to grow a practice at all—you are just fixing problems with your process, trying to make things better. Join Gene Gotimer as he walks through two case studies, one from the Department of Defense and one from the Department of Homeland Security, that took different avenues to get to agile and DevOps. Learn about the journey each organization took, the tools used to build quality into the products,...
DevSecOps in the Age of Containers
As IT shops look to move their workloads into containers and the cloud, their initial concerns often center around the security implications. Containers do force us to change how we think about securing our application, but they also offer exciting new opportunities. Curtis Yanko will explore the security concerns that come along with containers and take a deep dive into container composability and how modern tooling makes it possible to automate security and compliance concerns across the entire application stack. Curtis will share a project via GitHub that has a reference Jenkins...
A DevOps Team's Journey Toward Behavior-Driven Development
PreviewDevOps teams struggle to ensure quality in multiple daily deployments. Traditional testing approaches have often failed in this context, but there are exciting new ways to test. Laurent Py and Vincent Prêtre will explain how, at Hiptest, DevOps teams combine behavior-driven development (BDD) techniques with business metrics analysis to continuously assert the quality of their product. BDD scenarios align teams to a common goal, and users provide feedback to ensure their needs are met. The team transforms usage scenarios into tests that enable developers to deliver the functionality...
Bring Your Team Home Safely: What DevOps Teams Can Learn from Aircrews
United Flight 232 should have crashed with all 296 lives lost. Asiana Flight 214 should not have crashed at all. However, the actual outcomes were very different. Peter Varhol and Gerie Owen explain that the critical difference between the two flights was the interactions of their respective aircrews. Cockpit crew members work together to best utilize the skills of every team member to make flights safe. Using these principles, a DevOps team can bring their project safely home. The leader of a team is the final authority, but leaders must acknowledge team members’ knowledge and experience...
Serverless Security: Overcome Architectural Security Challenges
Serverless architectures take the idea of microservices to the extreme. To implement secure serverless architectures, you have to understand how to compartmentalize programs at the function level. You also need to factor in security practices: Serverless architectures are susceptible to traditional attacks such as SQL injection and command injection, along with a wide variety of privilege escalation and sensitive data disclosure attacks. Developers must consider what would happen if an attacker attempted to invoke each of their functions directly. What if one of those functions were to...