Agile + DevOps East 2019 - Test Automation Engineer
Customize your Agile + DevOps East 2019 experience with sessions covering test automation for engineers.
Monday, November 4
Continuous Delivery in Practice: A Hands-On DevOps Workshop
For many organizations, delivering software into production has become increasingly more complex with long testing cycles and a division between development and operations teams. DevOps is a cultural movement that is breaking down those barriers. Focusing on automation, collaboration, tools, and knowledge sharing, DevOps is showing that developers and system engineers have much to learn from each other. Through a series of hands-on exercises, Danilo Sato will use a sample web application to demonstrate how to automate its build and deployment pipeline, using infrastructure and pipeline as...
Test Design for CI/CD Delivery
PreviewImagine this … As soon as any developed functionality is submitted into the code repository, it is automatically subjected to the appropriate battery of tests and then released straight into production. Setting up the pipeline capable of doing just that is becoming more and more common and something you need to know about. But most organizations hit the same stumbling block—just what IS the appropriate battery of tests? Automated build architectures don't always lend themselves well to the traditional stages of testing. In this hands-on tutorial, Melissa Benua introduces you to key...
Learning How to Lead High-Performing Agile Teams
Currently much of agile adoption—coaching, advice, techniques, training, and even the empathy—revolves around the agile teams. Leaders are typically ignored, marginalized at best, and in the worst cases even vilified. But Bob Galen and Mary Thorn contend that there is a central and important role for managers and leaders within agile environments. Join Bob and Mary as they explore the patterns of mature agile managers and leaders. Examine why those who understand servant leadership know how to effectively support, grow, coach, and empower their agile teams in ways that increase the team's...
Continuous Testing with Containers
Preview NewContainers. Every manager thinks they want them, but few teams have experience in knowing what to DO with them. Used thoughtfully, containerization of your services can transform the way your organization thinks about testing. Gone can be the days of maintaining X different compute environments with Y different configurations. Imagine instead spinning up just the code you need, on the machine type it needs, and only for as long as you need it. In this technical training, Melissa will walk through what containerization means for a legacy code base attempting to practice continuous...
Tuesday, November 5
Introducing Docker and Kubernetes to Your DevOps Toolchain
As organizations look to improve the speed with which they deliver software, they increasingly turn to microservices and infrastructure-as-code for software architecture and delivery techniques to help leverage value from their DevOps adoptions. Docker, an industry standard containerization tool, facilitates moving processes into isolated environments that can be frozen into images, with an ecosystem that helps developers across organizations build and share these containers. Kubernetes builds on these capabilities and allows a software team to break down their application into small,...
Tools for DevSecOps
DevOps is about creating alignment across the value stream for an application, service, or product. DevSecOps integrates security into this process, making the entire team responsible for delivering secure code that works and can be deployed and used securely. But how do you actually do that? What tools do you add to your DevOps pipeline to help make your software secure and provide your stakeholders with a high level of confidence that the software meets all security requirements & standards? In this tutorial Tom Stiehm will explore what security tools you can add to your DevOps...
The Tester's (New) Role in Agile Development
Avoiding siloed development is a tricky business. It’s so easy for agile teams to fall into the rut in which testers only do traditional testing activities, and programmers strictly do their time-worn coding activities. Rob Sabourin shares a number of examples of how testing skills can be applied to a wide variety of activities in an agile project. Testers are among the most skilled team members in story grooming, elicitation, and exploration. Risk analysis in self-organized agile teams empowers testers to drive design decisions. A tester’s affinity analysis skills help clear the way for...
Introduction to DevOps with Chocolate and LEGOs
PreviewOrganizations today can no longer afford to deliver new features to their respective markets once a year or even once a quarter. In the attempt to catch up with the competition, they jump onto DevOps journey starting with the "How" and losing the sight of "Why" and "What". Join this gamified simulation tutorial to gain a solid understanding of foundational principles of the DevOps culture. Experience the benefits of DevOps transformation even before initiating one in your enterprise! This tutorial is ideally designed for organizations that are evaluating their approach to DevOps...
What DevOps Means for Testers and Testing
DevOps is more than a buzzword or a passing fad. It's a radically new approach to rapidly deliver high-quality software applications. However, many organizations don’t fully grasp the magnitude of this change or what it means for everyone involved in the software development lifecycle. Jeffery Payne says that DevOps—when done right—drives higher quality and efficiency into software development, software testing, and application management activities. It empowers teams to remove impediments to quality and productivity throughout the entire software lifecycle. However, when DevOps is done...
Wednesday, November 6
Where Does Data Come From?
With all the tools available on the market, it can be overwhelming to figure out which ones might meet your needs and which ones will work best for you to create a high-performing team. Join Jennifer Bonine as she explains the relationship between the DevOps cycle and your environment, and how a hub-and-spoke model can link all your different data sets and tools together. She'll identify opportunities for applying test data analytics across the engineering and test landscape, ranging from high-value test cases to dynamically generated regression test suites. She will review ways to...
Wabi-Sabi Your DevSecOps
The ability of DevSecOps to produce secure code requires the merging of two very different cultures: AppSec and DevOps. While AppSec lives in a black-and-white world of secure or not secure that would cause “Hello World” to take six months to release, DevOps knows that the reality of software development is actually shades of gray, especially as demands are increasingly placed on development teams to produce more, faster. Brittany Greenfield will teach you how to apply the Japanese concept of wabi-sabi, which accepts imperfections in the things that we create, to DevSecOps, allowing you to...
Continuous Delivery Dojo: From Doing Agile to Being Agile
PreviewState Farm adopted an innovative approach to a common problem many organizations face with agile transformation: How do you influence, nurture, and support a whole scale culture of agility? How do you move from doing agile to being agile? The solution was to institute a continuous delivery dojo. State Farm is going on its third year of supporting delivery teams at scale in enhancing agile maturity and establishing a continuous delivery culture. The dojo represents a dedicated place to work with teams to change mindsets, skill sets, and toolsets. It also represents an opportunity to...
An Agile Fireside Chat with Linda Rising
Come get your questions answered by an agile expert! We won't have an actual fireside, but Linda Rising will be on hand to answer your questions and discuss the topics that are most important to you. Linda is an internationally known presenter on topics related to agile development, patterns, retrospectives, the change process, and the connection between the latest neuroscience and software development. And she wants to discuss whatever interests you. Bring your questions and be ready for a lively, interactive discussion.
Selenium Tests at the Speed of Headless
Testing is shifting left. Developers want instant feedback on the quality of their code, and testers want to incorporate tests earlier in the pipeline without slowing down development efforts. Testing in full browsers is great when you’re near the end of the pipeline and need to confirm cross-browser compatibility, but for the scale and speed required for these early pipeline tests, there is a need for a more effective solution. Enter headless browsers, an emerging trend that allows you to run your early pipeline tests at scale. Headless offers a lightweight option that gives developers...
Testing Serverless Applications
Serverless cloud applications are rapidly moving into the mainstream. In this model, teams focus on developing and deploying code on a known technology stack and runtime, with fixed interfaces for application, database, and network. It offers the advantage of lower costs, faster development, and elastic growth. But testing serverless applications also brings significant challenges to testers. Because the stack is maintained by the cloud provider, it is updated with new versions and security patches on a regular basis. Testers have to continuously test the stack interfaces to make sure that...
You Build It, You Own It!
The days of writing software and throwing it over the proverbial wall to operations and production support teams are over. It’s time we, as software development teams, become more accountable and take pride and ownership in what we do. The results will be better transparency, more autonomy, and reduced risk (among other things). Join Sean and Suresh as they walk through how Capital One tackled one particular project by leveraging DevOps and forming their "you build it, you own it" principles. You'll gain a better understanding of how to improve quality within your agile teams and how to...
Shifting Security Left: The Innovation of DevSecOps
DevSecOps uses application security practices that have existed for a while. The innovation of DevSecOps is incorporating security into the daily workflow of the team rather than leaving it to the end, shifting security left by automating aspects of security testing. DevSecOps leverages DevOps practices to make application security a first-class citizen in the practices of modern software development. But that requires a culture change: DevSecOps starts before the code is even written, using techniques like threat modeling and risk analysis to figure out who will attack you and how. Come...
Thursday, November 7
The Psychology of Chaos Engineering
Chaos engineering, failure injection, and similar practices have verified benefits to the resilience of systems and infrastructure. But can they provide similar resilience to teams and people? What are the effects and impacts on the humans involved in the systems? This talk will delve into both positive and negative outcomes for all the groups of people involved, including users, engineers, product owners, and business owners. Using case studies from organizations where chaos engineering has been implemented, Matty Stratton will explore the changes in attitude that these practices create,...
Stabilizing Continuous Testing in DevOps
PreviewSoftware testing lags behind the pace of features development and digital innovation. Despite recent advancements, testing remains one of the biggest challenges in DevOps. Research shows that DevOps teams have an average of less than 60 percent test automation coverage—and that’s a problem. To scale DevOps and agile and realign the entire software release cycle, Eran Kinsbruner believes there needs to be a better solution. To increase test automation coverage, teams need to match software testing deliveries with the right testing tools, skill sets, and personas. Eran will explain...
Legacy Code and Testing: Let's Energize It!
PreviewDo you want to apply test automation to decade-old spaghetti code but aren't sure where to start? Many teams talk about needing automated tests in order to deliver faster, better quality but don't know just how to get there. Their code was created without a lot of the tools we have today or may have automation that centers on slow, record-and-playback methods. Join Leslie Lowman for an in-depth look at examples of this situation. She'll give some prerequisites, like instituting a solid testing model that focuses on automation, and show how to apply the testing model to older code,...
Effective Test Automation in DevOps
PreviewThe ultimate objective of a DevOps approach is to deliver quality products to your customers as efficiently as possible. DevOps shops that achieved this state point to continuous testing as a key contributor to their success. However, QA and testing have become forgotten along the DevOps journey of many organizations. For groups that have incorporated testing, many have a release cadence that resembles something more like waterfall. The culprit is often the inability to incorporate stable automation into their testing practices. Lee Barnes will discuss how organizations can address...
A DevOps Fireside Chat with Andy Glover
You've got DevOps questions, and we've got Andy Glover to answer them for you. He won't really be sitting by the fire, but he will be on hand to talk about all things DevOps. From his experiences building the Spinnaker continuous delivery platform to writing the open-source BDD framework easyb, Andy wants to talk about the things that worry you or thrill you about DevOps. Bring your questions and be ready for a lively, interactive discussion.
A Fool with a Tool: The Dangers of Ignoring Culture by Overfocusing on Tools
PreviewMany organizations ignore culture and overfocus on picking and implementing the right tools. However, these tools have underlying cultural assumptions. If the current culture does not support these assumptions, then automation will only have limited success, or even fail altogether. So how do you address this problem? By recognizing that overfocusing on tools is a problem in the first place. Start by understanding the cultural assumptions supporting the optimum use of the tools, as well as how your organization measures up in relation to high-performing organizations. Finally,...
Agile+DevOps Feud!
Join us for a game of Agile+DevOps Feud, where two teams of thought leaders compete to name the most popular responses to survey questions to win bragging rights and to share their experiences. Questions and voting will be in the TechWell Hub leading up to the conference, where community members will name their greatest concerns, best practices, etc. Our two teams of panelists, will do their best to guess the community’s viewpoint, and the winning team will get to explain how they deal with those concerns. Our panelists are competing...
So You’re Using Docker. Now What?
These days everyone wants to containerize their application, but not everyone understands the best way to go about it. You need a tool to manage your containers, you need tools for image security scanning, you need to completely rethink how your application fits into its deployment environment, and most importantly you need to make sure you’re following good DevSecOps practices. Join Ryan Kenney as he discusses how he has addressed these concerns, among others, for various clients. Ryan will discuss options for container orchestration tools like Kubernetes and its competitors. Then, he...
What's Next for QA?
In today’s ever-evolving world of technology, how can QA teams continue to show value? QA isn't going away, but it is evolving again, and it's primed to continue to add value to companies that are willing to change. Derek Zell will outline how traditional compartmentalized roles are becoming a thing of the past and how to position your team (and yourself) to be an integral part of the latest technical evolution. He will cover what these new roles and functions could be, ways to evolve and grow as a tester, and how to pivot within a given skill set, all using real-world examples and case...
Using Lean XP to Supercharge Your Agile Delivery
PreviewMost teams that do agile development start with Scrum. And why not? Scrum is a proven method for focusing your team, ensuring that work adds value, and minimizing the risk with release. Then, after awhile, Scrum becomes stagnant. There are no more speed increases, and the team focuses more on ceremonies than delivery. At this point, Extreme Programming (XP), and Lean XP in particular, is the next step in agile maturity. Lean XP means developing software at the last possible moment ("just-in-time development") using one-week sprints, test driven development, pairing at all levels,...
Contract Testing with Pact: A Different Approach
With the microservice architecture evolving and becoming a golden standard, the necessity of testing the contracts between services appears to be more and more obvious. One of the most interesting solutions here is the Pact tool, which helps with testing and verifying the API contracts in a CI/CD manner and opens up a lot of interesting possibilities. However, the devil is always in the details: the implementation. We need to configure the Pact mock servers, but similar configurations are often needed across all the different parts of testing, from the verification of the providers to end-...
Friday, November 8
Panel Discussion: Effective Integration of Tooling into DevOps
Integrating security tools into a DevOps pipeline is about more than just dropping them into a test environment. It’s about putting them where the business return is greatest. Where fast feedback can be gathered. Picking the right tools for the job. Join DevSecOps experts as they discuss and debate the merits of SAST, DAST, IAST, and RAST tools for your pipeline. Learn about the pros and cons of each type of security testing and how to choose the right tools for your needs. Hear how various organizations have gotten started with DevSecOps tooling and learn tips and trick for implementing...
Taking DevSecOps To The Next Level - Cutting Edge Tools for your Pipeline
DevSecOps is so much more than forcing developers to use legacy scanning tools. In this talk, we will discuss a continuous, effective, and scalable DevSecOps pipeline using free cutting-edge tools. We'll discuss and show IAST (Interactive Application Security Testing) to accurately pinpoint vulnerabilities in both custom code and libraries in real time without scanning. We'll discuss and show RASP (Runtime Application Self-Protection) in production to gain visbility into application attaches and to prevent vulnerabilities from being exploited. And we'll discuss how to integrate the results...
A Practical Approach to Building Security In
The release date is a week away. Development is complete. The code works, and everything looks good. Marketing is ready with the media blitz. Our customers are waiting to get their hands on the new features and are sure to give us good feedback. The only step left is to get the security group to scan the application and give us the approval to release. Cross your fingers- let’s hope we get the green light! Otherwise, I don’t know what we are going to do. DevOps, and more importantly, DevSecOps, promises to do away with rolling the dice at the end and hoping we are allowed to release what...
Panel Discussion: Getting Development and Security To Work Together
DevSecOps is all about getting security teams, practices, processes, and tooling integrated into your DevOps process but often getting a cross-functional team that includes security in place is difficult. Join DevSecOps practitioners in exploring the best ways to get security groups and personnel involved in day-to-day DevOps teams. Learn what role security personnel play in Sprint activities and how to remove compliance from being an end-of-lifecycle hurdle. Hear how leading organizations successfully shift security left and tips and tricks for getting started.