No two companies' build pipelines are alike. Some are cloud-first and some work entirely behind the firewall. In each type of organization, and in all of those in-between, there is a need to efficiently scale up and out their continuous delivery infrastructure as the organization matures. Technical Account Managers (TAMs) like Matt Shelton work with loads of enterprise customers and get a birds'-eye view of the myriad challenges they face. Join him for a discussion of scaling continuous delivery while balancing the demands of risk and compliance against the pressures of a shrinking time to market. He'll show how products like Bamboo, Bitbucket Pipelines, and per-build containers align best with different organizational needs in the pursuit of DevOps perfection.

1. MATT SHELTON | SR TECHNICAL ACCOUNT MANAGER | ATLASSIAN | @MATTSHELTON
How to Power Continuous Deployment
at Any Scale with Atlassian

2. Charting the course

3. Agile Practices
Agility at Scale
DevOps is Culture First
Reduce Time to Market
You build it, you run it
Automation at all levels
DEVOPS VALUABLE

4. Problems… Struggles! Solutions? Friends.

5. Problems… Struggles! Solutions? Friends.

6. TO DO IN RELEASE DONEIN PROGRESS IN REVIEW

7. WRONG PRIORITY
MERGE CONFLICT
BROKEN BUILD
PRODUCTION BUG
TO DO IN RELEASE DONEIN PROGRESS IN REVIEW

8. MERGE CONFLICT
BROKEN BUILD
PRODUCTION BUG
CONTINUOUS INTEGRATION
TO DO IN RELEASE DONEIN PROGRESS IN REVIEW

9. BROKEN BUILD
PRODUCTION BUG
CONTINUOUS INTEGRATION
CONTINUOUS DEPLOYMENT
TO DO IN RELEASE DONEIN PROGRESS IN REVIEW

10. PRODUCTION BUG
CONTINUOUS INTEGRATION
CONTINUOUS DEPLOYMENT
CONTINUOUS DELIVERY
TO DO IN RELEASE DONEIN PROGRESS IN REVIEW

11. PRODUCTION BUG
CONTINUOUS INTEGRATION
CONTINUOUS DEPLOYMENT
CONTINUOUS DELIVERY
TO DO IN RELEASE DONEIN PROGRESS IN REVIEW

12. SO I HEAR YOU WANT TO
SHIFT LEFT?

13. TO DO IN RELEASE DONEIN PROGRESS IN REVIEW

14. Problems… Struggles! Solutions? Friends.

15. As Cloud Native environments get more and more attraction, the
tooling around these environments continue to evolve to fit the
various needs.
MUSTAFA AKIN, ATLASSIAN OPSGENIE
The objective is to improve speed and stability by optimizing the
pipeline by leveraging Cloud Native model at each step, from
coding to production, by making use of tools, such as containers
and orchestrators, combined with additional tooling.
Cloud Native is a new approach to build and run applications that
can leverage the cloud computing delivery model.

16. THE STRUGGLE IS REAL…

17. THE STRUGGLE IS REAL…

18. OK SO THEN WHAT?

19. Problems… Struggles! Solutions? Friends.

20. Risk Tolerance
Flexibility
High
Low
Low High

21. High
Low
Low High
Risk Tolerance
Flexibility

22. High
Low
Low High
RiskTolerance
Flexibility

23. High
Low
Low High
RiskTolerance
Flexibility

24. Who?
- Newer non-public companies
- Industries that move very quickly
High
Low
Low High
RiskTolerance
Flexibility

25. Driving force is the team
- Team or product drives technology decisions.
- Teams may build/run it themselves.
Who?
- Newer non-public companies
- Industries that move very quickly
High
Low
Low High
RiskTolerance
Flexibility

26. Driving force is the team
- Team or product drives technology decisions.
- Teams may build/run it themselves.
Other Considerations
- Cloud deployment
- Prepare for future habits
- Shared Responsibility
Who?
- Newer non-public companies
- Industries that move very quickly
High
Low
Low High
RiskTolerance
Flexibility

27. DevOps Culture
You Build It You Run It

28. Bitbucket Cloud + Pipelines
Make use of the new Bitbucket Pipes!
DevOps Culture
You Build It You Run It

29. WHAT MAKES THAT SO
SPECIAL?

30. ALPINE+JDK
UBUNTU
DOCKER HUB
NODEJS
RUBY
MYIMAGE
CUSTOM
PIPELINES SERVICE
Pipeline
SETUP
BUILD
TEST
DEPLOY
Repository
bitbucket.org/mattshelton/summit

31. ALPINE+JDK
UBUNTU
DOCKER HUB
NODEJS
RUBY
MYIMAGE
CUSTOMALPINE+JDK
PIPELINES SERVICE
Pipeline
SETUP
BUILD
TEST
DEPLOY
Repository
bitbucket.org/mattshelton/summit

34. High
Low
Low High
RiskTolerance
Flexibility

35. Who?
- Public companies
- Startups in healthcare, finance, etc.
High
Low
Low High
RiskTolerance
Flexibility

36. Driving force is team of teams
- Innovation weighed against business needs
Who?
- Public companies
- Startups in healthcare, finance, etc.
High
Low
Low High
RiskTolerance
Flexibility

37. Driving force is team of teams
- Innovation weighed against business needs
Other Considerations
- Cloud deployment?
- Process gates
- Shared Responsibility Model
Who?
- Public companies
- Startups in healthcare, finance, etc.
High
Low
Low High
RiskTolerance
Flexibility

38. DevOps Culture
Shift Left
Shorten Mean Time to Resolution
Bitbucket + Bamboo
Federate Bamboo
w/ Elastic Agents and
Bitbucket Code Insights

40. High
Low
Low High
RiskTolerance
Flexibility

41. Who?
- Public companies
- Industries with tight regulatory controls
- Have been burned before
High
Low
Low High
RiskTolerance
Flexibility

42. Driving force is risk mitigation
- Streamlined and standardized over creative
- Compliance controls rule the day
Who?
- Public companies
- Industries with tight regulatory controls
- Have been burned before
High
Low
Low High
RiskTolerance
Flexibility

43. Driving force is risk mitigation
- Streamlined and standardized over creative
- Compliance controls rule the day
Other Considerations
- Less public more private cloud
- Shared Responsibility Model may be too risky
Who?
- Public companies
- Industries with tight regulatory controls
- Have been burned before
High
Low
Low High
RiskTolerance
Flexibility

44. DevOps Culture
Common Success Metrics
Containerization
Reuse

45. DevOps Culture
Common Success Metrics
Containerization
Reuse
Bitbucket + Bamboo
Bamboo Repository-Stored Specs
Centralized Bamboo
w/ Bamboo Per-build Containers

46. SAY THAT ONE MORE TIME?

47. REMOTE
REMOTE
BD-102
REMOTE
REMOTE

48. REMOTE REMOTE
REMOTE REMOTE
BD-102
SC-003
SC-004
QE-019
AC-001

50. UBUNTU
SIDEKICK POSTGRES9
POSTGRES10
SELENIUM
SCCUSTOM
BDCUSTOM
ALPINE
REGISTRY
ECS
ECS-ORCHESTRATOR

51. BD-102
SC-003
SC-004
UBUNTU
SIDEKICK POSTGRES9
POSTGRES10
SELENIUM
SCCUSTOM
BDCUSTOM
ALPINE
REGISTRY
ECS
ECS-ORCHESTRATOR
SIDEKICK
BDCUSTOM
POSTGRES9SIDEKICK SCCUSTOM
SELENIUM
SIDEKICK SCCUSTOM
SELENIUM

52. BD-102
SC-003
SC-004
UBUNTU
SIDEKICK POSTGRES9
POSTGRES10
SELENIUM
SCCUSTOM
BDCUSTOM
ALPINE
REGISTRY
ECS
ECS-ORCHESTRATOR

53. ALPINE+JDK
UBUNTU
DOCKER HUB
NODEJS
RUBY
MYIMAGE
CUSTOM
ALPINE+JDK
PIPELINES SERVICE
Pipeline
SETUP
BUILD
TEST
DEPLOY
Repository
bitbucket.org/mattshelton/summit
BD-102
SC-003
SC-004
UBUNTU
SIDEKICK POSTGRES9
POSTGRES10
SELENIUM
SCCUSTOM
BDCUSTOM
ALPINE
REGISTRY
ECS
ECS-ORCHESTRATOR

54. We do peer review because that is how
you build quality in agile - but we enforce
peer review because it helps us manage
the risk and also meet our compliance
obligations.
GUY HERBERT, ATLASSIAN RISK FUTURIST

55. Cascading Peer Review

56. Cascading Peer Review
Code Review
Enforce correct makeup of
reviewers as well as number
of passing builds

57. Pipeline Review
Review Specs and
downstream impacts
Cascading Peer Review
Code Review
Enforce correct makeup of
reviewers as well as number
of passing builds

58. Pipeline Review
Review Specs and
downstream impacts
Cascading Peer Review
Container Review
Review and automate scans
Code Review
Enforce correct makeup of
reviewers as well as number
of passing builds

59. High
Low
Low High
RiskTolerance
Flexibility

60. High
Low
Low High
RiskTolerance
Flexibility

61. Who?
- Mature DevOps-embracing organizations
- Change and Risk understood and embraced
High
Low
Low High
RiskTolerance
Flexibility

62. Driving force is culture
- People/Practice are embraced over a tool
- Requires a lot of self-awareness and honesty
Who?
- Mature DevOps-embracing organizations
- Change and Risk understood and embraced
High
Low
Low High
RiskTolerance
Flexibility

63. Driving force is culture
- People/Practice are embraced over a tool
- Requires a lot of self-awareness and honesty
Other Considerations
- Choose tools to mirror flexibility
Who?
- Mature DevOps-embracing organizations
- Change and Risk understood and embraced
High
Low
Low High
RiskTolerance
Flexibility

64. DevOps Culture
Agility at Scale
Blameless Review
All the things!

65. DevOps Culture
Agility at Scale
Blameless Review
All the things!
Bitbucket + Bamboo + Cloud
Utilize a hybrid approach based on
strong controls and flexible practices

66. Don’t go it alone

67. Don’t go it alone
Team Playbook
atlassian.com/
team-playbook

68. DevOps Microsite
atlassian.com/
devops
Don’t go it alone
Team Playbook
atlassian.com/
team-playbook

69. DevOps Microsite
atlassian.com/
devops
Don’t go it alone
CI/CD Microsite
atlassian.com/
continuous-delivery
Team Playbook
atlassian.com/
team-playbook

70. Problems… Struggles! Solutions? Friends.

71. CONTINUO
US
I
N
TEGRATION
OPERA
TE
DEPL
O
Y
P
LAN
B
UILD
CO
N
TIN
UO
US
FEED
B
ACK
C
O
LLABORATIONANDCOMMUNICATIO
N
C
O
LLABORATIONANDCOMMUNICATIO
N

72. CONTINUO
US
I
N
TEGRATION
OPERA
TE
DEPL
O
Y
P
LAN
B
UILD
CO
N
TIN
UO
US
FEED
B
ACK
C
O
LLABORATIONANDCOMMUNICATIO
N
C
O
LLABORATIONANDCOMMUNICATIO
N

73. AND NOW FOR SOME
PARTING THOUGHTS

74. Before I go…

75. Before I go…
Many Options
from Pipes to Specs…

76. Compliance
Controls don’t need to
prevent creativity
Before I go…
Many Options
from Pipes to Specs…

77. Compliance
Controls don’t need to
prevent creativity
Before I go…
Culture First
before tools
Many Options
from Pipes to Specs…

78. Thank you!
MATT SHELTON | SR TECHNICAL ACCOUNT MANAGER | ATLASSIAN | @MATTSHELTON