Agile + DevOps West 2023 - DevOps
Customize your Agile + DevOps West 2023 experience with sessions covering DevOps.
Monday, June 5
A Quality Engineering Introduction to AI and Machine Learning
NewAlthough there are several controversies and misunderstandings surrounding AI and machine learning, one thing is apparent — people have quality concerns about the safety, reliability, and trustworthiness of these types of systems. Not only are ML-based systems shrouded in mystery due to their largely black-box nature, they also tend to be unpredictable since they can adapt and learn new things at runtime. Validating ML systems is challenging and requires a cross-section of knowledge, skills, and experience from areas such as mathematics, data science, software engineering, cyber-security,...
How to DevOps Your Testing Strategy – An Exercise in Value Stream Analysis
NewThe DevOps movement is here. Companies across many industries are breaking down siloed IT departments and federating them into product development teams. Testing and its practices are at the heart of these changes. Traditionally, IT organizations have been staffed with mostly manual testers and a limited number of automation and performance engineers. To keep pace with development in the new “you build it, you own it” environment, testing teams and individuals must develop new technical skills and even embrace coding to stay relevant and add greater value to the business. DevOps really...
Tuesday, June 6
Prioritizing Like a Pro: Designing and Executing Defensible Ordering Strategies
NewEffective prioritization is critical to wring the most out of agility. When you’re just delivering once, ordering matters little. However, when the option to release on a regular basis is available, what you do sooner rather than later can have huge impacts on value realization, risk mitigation, and more. However, prioritization is much easier in theory than in practice for most organizations. Arlen has been a practicing agilist for over two decades. Working with hundreds of clients and teaching thousands of students how to effectively prioritize is one of the most frequently raised topics...
What DevOps Means for Testers and Testing
DevOps is more than a buzzword or a passing fad. It's a radically new approach to rapidly deliver high-quality software applications. However, many organizations don’t fully grasp the magnitude of this change or what it means for everyone involved in the software development lifecycle. Jeffery Payne says that DevOps—when done right—drives higher quality and efficiency into software development, software testing, and application management activities. It empowers teams to remove impediments to quality and productivity throughout the entire software lifecycle. However, when DevOps is done...
Designing (Much) Better Agile Meetings
NewMany teams have been following the same few patterns for facilitating sessions such as Daily Scrums, Sprint Reviews, Retrospectives, and backlog refinement events for decades now. However, while these well-trodden approaches can be good starting points, there are ways to make them tremendously more effective with minimal effort. You will learn to design agile meetings that account for your particular circumstances and goals while wasting as little time as possible. First, Arlene will cover Exploring the True Purpose of Agile Meetings – Is the Daily Scrum more about status or planning? Is...
Wednesday, June 7
.jpg%3Fitok=owdvb9yS&sc=99410af1980838bc65014bc2b12db659)
The Art of Defensive Programming
With every commit, the threat landscape increases. One single vulnerability is all a hacker needs. Vulnerabilities have multiple sources, and you must have a plan for securing each potential risk vector and identify vulnerabilities early. In this session, we will describe defensive coding techniques you can use as a daily practice and how you can build a security champion program. We will practically cover ways of identifying security vulnerabilities in your IDE using CodeQL as a Static Code Analysis tool. This is an important step in the pre-commit stage to identify security...
Reimagining Digital Cloud Transformation: Automation and DevOps Pipeline
Organizations face numerous challenges during their journey to Digital Cloud Transformation—the most pressing challenges are frequent failures and the absence of a “big-picture” mindset. Driven by KPMG’s quest to deliver a superior customer experience, their Digital Cloud Transformation framework delivers improved quality, reduced time to market, reliability, and sustainable Cloud Transformation. Moving away from the archaic approach from replicating traditional regression onto cloud integration validations, KPMG has helped customers minimize risk and increase test coverage by E2E...
Shifting Left the Right Way–Improving DevSecOps
"Shift left" is the mantra of DevSecOps. The closer to our developers that we can move the prevention of a security vulnerability being introduced to our codebase, the cheaper and faster it is for our organization. However even in 2023 old vulnerabilities find their way into new pull requests and merges. We can't continue to "shift left" and hope for the best. Instead, our focus needs to turn to providing the right tools and resources to our developers at the right time. Proper techniques need to be as friction free as shortcuts, workflows integrated, and correction offered in clear...
You Want to Test What in the Build Pipeline? How to Move Integration, E2E, and Other Large Tests Reliably into the CI/CD Pipeline
Testing automation has a reputation for being slow and unreliable, but automated tests which are not run as a part of the CI/CD pipeline are often ignored or written off when they don't pass. If nobody pays attention to the results though, automated tests are not very useful. Any tests which depend on another system will eventually break, unless special care is taken, keeping the addition of integration (or larger) tests to the build pipeline just out of reach. During this session, John Jenkins will show attendees how these larger tests can be reliably automated, so that these tests can be...
Empowering DevOps with OpenAI
AI is upending everything about the SDLC. For example, Microsoft has monetized GitHub Copilot, their AI development assistant, and now 40% of the code users check into GitHub is written by the AI. However, using Copilot is still highly dependent upon developer adoption and not fully integrated into the CI/CD pipeline and Paul wanted to bring AI into our agile process and DevOps environment. In this session, Paul Klinker will discuss how he and his team decided upon a phased approach for their customers, starting with integrating OpenAI into the CI/CD pipeline to enable greater visibility...
Thursday, June 8
What Does a DevOps Manager Do?
As a DevOps Manager, Jessica Fritsch often finds herself educating people about what she does and why she does it whenever she joins a new team or organization. She also finds engineers have lots of questions about management and if they really want to go down that path in their career. This session will address both of these problems - educating people about what a DevOps Manager's job is like, so that current DevOps Managers and engineers looking to get into management have a answer to the question, "What does a DevOps Manager do?" Highlights from this session will include a day in the...
Balancing Agile and Cybersecurity Implementation
Over the past 25 years, software development has changed drastically due to evolving market demands. To respond to these needs, software development teams must reduce their time to market with releases that are more frequent. This has led the industry to move away from the waterfall methodology to agile development methodologies, thus enabling security to be engaged from inception instead of bolted on at the end of the process. While security methodologies rely more on a systematic and requirement-based approach to development much more conducive to the waterfall methodology, we must...
Best Practices: CI/CD with Micro Services
You have finally split your monolith into microservices. How do you validate a complex application and make it scale? Instead of having just one CI/CD pipeline, you have several. And as the number of microservices increases, so does the quantity of pipelines. As an outcome, managing pipelines for microservice applications can get out of hand, especially when you try to reuse common pipeline parts amongst different applications. If you apply monolithic solutions to microservice problems, you will have a bad time. If you treat microservices like monoliths, you’ll end up with thousands of...
Why Kubernetes Applications Require a New Approach to Testing Using Testkube
Microservices, CI/CD, DevOps, GitOps, cluster networking, etc.—more and more teams are building software fundamentally differently than they did even a few years ago. However, testing approaches and tooling have not caught up yet. At least not until now. What if you could apply the same type of GitOps and DevOps methodologies to your testing activities? Tests could be deployed and stored in a Kubernetes cluster, they could be decoupled from your CI/CD, orchestrated in the cluster in the same way you do with your applications and not in your CI/CD, publish results aggregated in a common...
Scaling Agile and DevOps Capabilities
It is important for businesses to understand scaling agile and DevOps capabilities before considering an agile transformation. In this session, Dr. Tawanna Sargent will share her experience joining a business that wanted to go through an agile transformation, but leadership didn't know how to make this happen. Dr. Sargent quickly learned about the organization and discovered that structure and alignment did not adhere. This session will dive into the key lessons learned including creating synergy and autonomy in teams, SAFe improving DevOps, identifying ineptitudes, and embracing the...