Continuous Verification, by default, means it’s an extension to the existing development and deployment processes that companies already have. That extension focuses on optimizing both the development and deployment experience for those companies by looking at security, performance, and cost. At most companies, some of these steps are done manually or scripted, but hardly ever are they really part of the deployment pipeline. In this session at Serverless Nashville, we’ll look at extending an existing CI/CD pipeline with checks for security, performance, and cost to make a decision on whether we want to deploy our app or not.

1. Confidential │ ©2020 VMware, Inc.
Continuous
Verification In A
Serverless World
Leon Stigter
Cloud Developer Advocate @VMware
Serverless Nashville 2020

2. 2Confidential │ ©2020 VMware, Inc.
Technology Is
Changing Rapidly

3. 3Confidential │ ©2020 VMware, Inc.
Changing
Technology
Means Changing
Infrastructure

4. Confidential │ ©2020 VMware, Inc. 4

5. 5Confidential │ ©2020 VMware, Inc.
https://cloudjourney.io
@CloudJourneyIO

6. Confidential │ ©2020 VMware, Inc. 6
Who Am I?
Developer Advocate
Passionate about Serverless, Containers,
and all things Cloud
I love dadjokes, cheesecake, and Go
@retgits
Leon Stigter, Developer Advocate
retgits.com
go.retgits.com/sls-nashville-20

7. 7Confidential │ ©2020 VMware, Inc.
“Y’all only do VMs
and Kubernetes at
VMware, right?”
- Pretty much everyone, ever

8. 8Confidential │ ©2020 VMware, Inc.
Serverless At VMware

9. Confidential │ ©2020 VMware, Inc. 9
Use Cases
Ø Databases are still tough
Ø Nothing is free
Lessons Learned
Tech Stack
Ø You build it, you run it
Ø Scalability is epic
Why Serverless
VMware Workspace ONE

10. Confidential │ ©2020 VMware, Inc. 10
Use Case
Ø It’s never too late to set up
guidelines
Ø Think about monitoring early
Lessons Learned
Tech Stack
Ø A lot cheaper than EC2
Ø Scalability is epic
Why Serverless
VMware’s Public Cloud Enablement Team

11. 11Confidential │ ©2020 VMware, Inc.
Continuous Verification

12. Confidential │ ©2020 VMware, Inc. 12
CI/CD Pipelines are the vehicle for deployment

13. Confidential │ ©2020 VMware, Inc. 13
Where In The Pipeline Do We Check…
Cost Utilization Security Performance

14. Confidential │ ©2020 VMware, Inc. 14
Most operations checks are done pre or post deployment
Re-deploy
Cost
Utilization
Security
Performance

15. Confidential │ ©2020 VMware, Inc. 15
Increasing efficiency and reducing operational overhead
Traditional Pipeline
Extending Pipeline(s)
External
Actor
External
Actor
Continuous
Verification

16. 16Confidential │ ©2020 VMware, Inc.
“A process of querying
external systems and using
information from the
response to make
decisions to improve the
development and
deployment process.”
The Missing Link to Fully Automate Your Pipeline

17. 17Confidential │ ©2020 VMware, Inc.
“Automating your entire
pipeline, including cost
and governance, gives you
more time to spend on the
beach”
#BeachOps

18. Confidential │ ©2020 VMware, Inc. 18
Continuous Verification Scenario
Do we have capacity &
budget in the
project/account/etc? Do we follow best
practices and
security guidelines
for accounts and
permissions?
Look at performance
stats in test/dev
environment
AWS Lambda AWS Lambda
Are my dependencies
secure?

19. 19Confidential │ ©2020 VMware, Inc.
Let’s See This In Action

20. Confidential │ ©2020 VMware, Inc. 20
We do more than
“just” VMs at VMware
In your pipeline think
about cost,
performance, and
security
To Recap…

21. 21Confidential │ ©2020 VMware, Inc.
Thank you!
@retgits
The awesome icons in this deck are made by Freepik and Flat Icons from www.flaticon.com
retgits.com
go.retgits.com/sls-nashville-20