Agile + DevOps East 2018 - DevOps

DevOps is about creating alignment across the value stream for an application, service, or product. DevSecOps integrates security into this process, making the entire team responsible for delivering secure code that works and can be deployed and used securely. But how do you actually do that? What tools do you add to your DevOps pipeline to help make your software secure and provide your stakeholders with a high level of confidence that the software meets all security requirements & standards? In this tutorial Tom Stiehm will explore what security tools you can add to your DevOps...

As companies continue to embrace the mobile-first strategy, many are grappling with a formidable challenge: how to release mobile updates more frequently given the painful and archaic app publishing process. Beyond brute-forcing release cadence, there need to be cultural, technical, and infrastructural changes to make frequent releases a reality. Stacey Yan and Alex Cabanilla will explore these dimensions in depth and provide practical insights on how to boost build infrastructure and reduce build time, improve code quality and merge process and guard against bad code, manage mobile...

Security specialists, especially at large organizations, believe that better security comes from robust independent gating. On the other hand, DevOps has proven that you can safely deploy orders of magnitude faster than human gating can achieve. What's needed to add security to DevOps are tools that work well with rapid-cycle CI/CD pipelines and an approach that reinforces the DevOps culture and process changes. This requires that security specialists become self-service toolsmiths and advisors and stop thinking of themselves as gatekeepers. Larry guides you through the characteristics of...

Every day we deal with complexity in our systems and multiple layers of dependencies. This complexity makes it difficult to predict when one service or dependency might go rogue for a specific circumstance during a delivery workflow. That's where chaos engineering comes in. Chaos engineering creates these "random" scenarios on purpose and builds resiliency into a system while increasing the velocity at which value is delivered to consumers. Shahzad Zafar will discuss his company's journey into chaos engineering, the principles behind it, how to plan for introducing chaos, and why a culture...

When an e-commerce platform is going through a digital and cloud transformation, the DevOps and performance engineering team has various responsibilities: prepare the workload, execute tests, measure and analyze performance KPIs, baseline, and store performance-related data. Current tools and process often impact the speed and quality of delivery, as most of the steps require manual intervention. Join Safi Mohamed and Aftab Alam as they walk through how they built a Docker-based integrated performance engineering framework using AWS, JMeter, Docker, Jenkins, Python, and Splunk to automate...

When developing software, teams can often get bogged down with mundane tasks such as code linting, manual testing, or even just deploying code to a particular environment. Everyone dreams of setting up continuous integration to automate this work, but they believe it to be too time-consuming for their current budget. Join Brian Thompson as he discusses how, after many years of manually performing repetitive tasks and occasionally making a mistake in mundane work, he learned to embrace the robot overlords. Learn about a variety of different continuous integration services such as CircleCI,...

Are parts of your organization embracing agile while others become more resistant, disconnected, or frustrated by the idea? Or maybe your team wants to be more agile but it isn’t sure how to get started because it’s not a typical development team. Agile has been moving out of software and being embraced by nondevelopment teams for years, but it’s not always a great experience. How can we make the best parts of agility relevant to any team? This hands-on session will show you how to start teams down the path to “being agile” by taking a teamwork-centered approach. With examples from a...

The Second City, an improvisational comedy club that launched the careers of comedians such as Chris Farley, Tina Fey, and Steve Carell, has delivered a successful product to audiences nightly for almost sixty years. How do they do it? By recognizing the power of feedback. Brian Eno, a pioneer in the music industry who produced albums for U2 and Coldplay, relies on a feedback generation system to ensure the best performances of the bands he works with. Likewise, the lean startup movement has uncovered a similar pattern of organizations that thrive on experimentation and learning. John...

Distributed teams are the norm in Fortune 100 and 500 companies, crossing many time zones and multiple cultures. These teams seldom communicate directly, instead using a point of contact to relay information. While teams don't need to be collocated to deliver significant business value, they must use their DevOps pipeline to their advantage. Through continuous integration and automated testing, stories can be swarmed by distributed teams and completed in a fraction of the time it typically takes. Treasa Overton will discuss how this distributed model allows for faster delivery of business...

As the adoption of agile and DevOps have been steadily growing over the years, many organizations have been taking a proactive approach to prepare for the changes needed for success. This means giving people the skills and resources they need to be successful, working with customers and users for improved collaboration and transparency, and providing teams with the tools and infrastructure to enable continuous flow of value. Are there commonalities across organizations that others can learn from to support their journeys? Join Robin Yeman and Suzette Johnson as they provide an interactive...

As IT shops look to move their workloads into containers and the cloud, their initial concerns often center around the security implications. Containers do force us to change how we think about securing our application, but they also offer exciting new opportunities. Curtis Yanko will explore the security concerns that come along with containers and take a deep dive into container composability and how modern tooling makes it possible to automate security and compliance concerns across the entire application stack. Curtis will share a project via GitHub that has a reference Jenkins...

Every one of us has the potential to be limitless in our careers, personal life, and everything in between! Yet most of us—yes, including you—are only achieving a fraction of what you are capable of. We all want more, but we aren’t sure how to go get it. This session will be an interactive and practical guide to breaking through all the things that limit you and will kickstart your journey to a limitless life. Jessica Soroky will introduce activities from the personal development program Limitless by Choice and address the potential all teams have to be high-performing when they start...

United Flight 232 should have crashed with all 296 lives lost. Asiana Flight 214 should not have crashed at all. However, the actual outcomes were very different. Peter Varhol and Gerie Owen explain that the critical difference between the two flights was the interactions of their respective aircrews. Cockpit crew members work together to best utilize the skills of every team member to make flights safe. Using these principles, a DevOps team can bring their project safely home. The leader of a team is the final authority, but leaders must acknowledge team members’ knowledge and experience...