Gap assessment kubernetes

Gap Survey, Assessment and Analysis
For
Kubernetes
How to identify and analyze Gaps in Kubernetes practices.
Gap Assessment - Kubernetes Copyright © 2021 by Marc Hornbeek All rights reserved.

WHY?
Gap analysis provides valuable
inputs for formulating a strategy
and roadmap to improve a topic.
2
• Gap Survey is discovery tool used to collect
information about the current state of
practices for a topic.
• Gap Assessment is a process to determine
differences (Gaps) between current practices
and recommended practices for a topic.
• Gap Assessment Workshop is a meeting in
which the Gap Assessment is validated prior
to Gap Analysis.
• Gap Analysis is the process of determining
priorities for reducing Gaps found during a
Gap Assessment.
• Gap Assessment Tool is software that helps
perform Gap Surveys, Gap Assessments and
Gap Analysis.
www.engineeringdevops.com
http://mybook.to/engineeringdevops
Gap Assessment Copyright © 2021 by Marc Hornbeek All rights reserved.

3
1. Pick a
Topic that
you want to
analyze.
3. Enter practices
into the
Gap Assessment
Tool.
4. Determine
who needs to
be surveyed.
5. Gap
Survey
Collect data
with Survey
6.
Perform Gap
Assessment
7.
Perform
Gap
Analysis
2. Determine
Practices for
the Topic.
1. 2. 3. 4. 5. 6. 7.
Gap Assessment Copyright © 2021 by Marc Hornbeek All rights reserved.

• Kubernetes offers efficient and safe delivery software with DevOps value
streams, when best practices are followed.
• To get the value from Kubernetes it is important to use recommended
practices, inclusive of people, process and technologies.
• A Gap Assessment is a great way to efficiently evaluate an organization’s
practices for containers and determine a strategy for improvement.
• The 9 Pillars Gap Assessment Tool greatly speeds up the Gap Survey, Gap
Assessment and Gap Analysis process.
• What follow is an example of the Gap Assessment tool being used for the
topic “Kubernetes” for an organization.
Step 1: Pick a Topic
Gap Assessment for Kubernetes
Gap Assessment – Kubernetes Copyright © 2021 by Marc Hornbeek All rights reserved.

The 9 practice category pillars
are:
• Leadership
• Collaborative Culture
• Design for DevOps
• Continuous Integration
• Continuous Testing
• Continuous Monitoring
• Elastic Infrastructure
• Continuous Delivery
• Continuous Security
Step 2: Determine Practices
for Kubernetes Gap Assessment
For an example Kubernetes
assessment, I used the practices
under 9 practices categories
described in a blog that I co-authored
called “9 Pillars of Kubernetes Best
Practices” .
.
https://containerjournal.com/topics/nine-pillars-of-
kubernetes-best-practices/

Step 3: Enter Kubernetes Practices Into
the Gap Assessment Tool.
A Gap Assessment Tool, pre-
loaded with a sample of
Kubernetes practices in a file
called “Kubernetes
Assessment” can be
downloaded for free from one
of the resource pages found on
www.engineeringdevops.com
Edit the practices categories
and add/delete practices
from each category if you
prefer to make changes.

Step 4: Determine who needs to provide input.
• Business leaders – because they influence culture and budgets for containers.
• Developers – because they need to design in accordance with containers practices.
• Project owners – because they influence product work priorities.
• QA testers - because they need to test in accordance with containers practices.
• Ops - because containers practices affect operations.
• Security – because containers affect security practices.
For the Gap Analysis to be comprehensive, people in roles that are affected by
container practices need to be surveyed, or at least represented to ensure their
perspectives are included. The following are example roles that typically are included.
The survey can be conducted for an individual application, a group of applications, or
all the applications in the enterprise. However, it is important that the Gap
Assessment and Gap Analysis be performed on the organization segment that is being
targeted for improvement.

Step 5: Gap Survey
A Gap Survey should allow each surveyed person to enter an “Importance Level”
score, a “Practice Level” score and Comments. These are all essential for the Gap
Assessment and Gap Analysis.

Step 6: Gap Assessment
The Gap Assessment process requires all the practices scores collected from the
surveys to be collected and assembled to calculate an aggregate set of scores. Gap
scores are calculated using a formula that weights each Practice Level score with the
corresponding Important Level score. A visual representation helps to identify
practices areas and individual practices that have the highest, most important Gaps.
Kubernetes Practices GAP
Summary
(I)
Importance
(P)
Practice Level
(G)
GAP
RANK
Leadership practices (Lead) 4.5 2.8 5.8 8
Collaborative Culture practices (CC) 4.3 3.0 4.3 9
Application Design (DFD) 4.8 2.3 8.5 4
Continuous Integration practices (CI) 4.4 2.0 9.4 1
Continuous Testing practices (CT) 4.8 2.1 9.0 3
Continuous Monitoring practices (CM) 4.4 2.3 7.7 6
Elastric Infrastructure practices (EI) 4.5 2.5 6.6 7
Continuous Delivery / Deployment practices (CD) 4.4 2.3 7.8 5
Continuous Security practices (CS) 4.2 1.8 9.3 2
Overall Assessment (Average) 4.5 2.3 7.6
Importance Practice Level GAP

Step 6b: Gap Assessment Workshop
No matter how well written the practices and score definitions are, it is not
unusual for some people to misunderstand and to enter scores that they would
not have otherwise.
For this reason, it is important to ensure that the data collected is validated before
conducting the Gap Analysis.
The preferred approach is to conduct a Gap Assessment Workshop with key
representatives from each role that participated in the survey.
During the workshop, the scores for each practice that have a high deviation
between survey responses are discussed and if necessary adjusted.

Step 7: Gap Analysis
The Gap Analysis indicates where solution strategies and implementation roadmaps
need to be focused to reduce the most important gaps.
The Gap Analysis process involves extracting the high GAP practices and tagging and
ranking each of them against solution categories that are determined by experts.
Kubernetes Practices GAP Analysis
(I)
Importance
(P)
Practice Level
(G)
GAP
Security
Deployment
Test
Monitoring
Design
9 8 4 3 1
The structure of container images is tested. Testing the structure ensures that all
commands run as you expect them to inside of your container. Testing also lets you
check that specific files are in the correct location and have the correct content.
5 1 15
1 1
Built container images are scanned for vulnerabilities. 5 1 15 1
Kubernetes secrets objects are used to securely store sensitive data.
4 1 12
1
Container images are secured to run on Kubernetes. Use security code scanning tools
to check the containerized code for vulnerabilities that can exist within the container
code itself, as well as in any upstream dependencies on which the image is based.
4 1 12
1
Kubernetes role-based access control (RBAC) policies are used to help guard against
unauthorized access to cluster resources. 5 2 12
1
Kubernetes provides insight into what is happening within an application, making it
easier to identify and fix security problems. 4 2 8
1
Resource quotas help mitigate disruptions caused by denial-of-service attacks by
depriving the rest of the cluster of sufficient resources to run.
4 2 8
1

Marc Hornbeek
a.k.a. DevOps_the_Gray esq.
CEO and Principal Consultant
Engineering DevOps Consulting
Author – Engineering DevOps
mhornbeek@engineeringdevops.com
Learn More

Gap assessment kubernetes

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Gap assessment kubernetes

Similar to Gap assessment kubernetes (20)

More from Marc Hornbeek

More from Marc Hornbeek (7)

Recently uploaded

Recently uploaded (20)

Gap assessment kubernetes