Andreas Prins
VP Product Strategy
Disconnected Pipelines: The Missing Link

2
A little background
▪ 6,5 of test consultancy
▪ Lean Consultant
▪ Agile/DevOps Coach
▪ Team manager 4 DevOps teams
▪ VP Product Development
▪ VP Product Strategy

3
Disconnected Pipelines: The Missing Link
▪ XebiaLabs Company and market background
▪ 3 Major impacts of the cloud, that drive the need for DevSecOps
▪ Connecting tools, delivery, and disciplines
▪ Scale it towards the enterprise

4
Hundreds of Companies
deliver software with
XebiaLabs
XebiaLabs DevOps Platform
providing intelligence, automation and control
across the entire software delivery process
Shift to
the Cloud
Migrate to
Containers
Connect all
Pipelines
Connect
CI/CD &
ITSM
Improve
Governance
& Security
SCALE DEVOPS ACROSS THE ENTERPRISE

5
Adoption Timeline
“I lack a clear view of what’s going on in my releases.”
“I need to know when there’s risk to the schedule.”
“We must meet Audit and Compliance requirements.”
“I need CD to fully realize the benefits of agile.”
“My failure rate is too high.”
“I need to enhance legacy apps & modernize my delivery process.”
“I have heterogeneous applications & mainframe apps.”
“We need standardization to ensure consistency & repeatability.”
“Automate all the things!”
“All steps & manual interactions need tracking.”
“Microservices & apps with complex dependencies need to be
delivered consistently.”
“Public/private cloud, hybrid and on-premise all need to be
standardized. We've hit a wall trying to manage everything with
scripts.”
“My developers need self-service.”
“We need to find & eliminate bottlenecks in our process.”
Dev + Ops
Needs
Automation
Efficiency
Speed
Error reduction
Enterprise
Requirements
Integrations
Process
Complexity
Heterogeneous
Systems
Compliance/ Security
Standardization/
Repeatability
Scale
Management +
Business Needs
Visibility/
Analytics
Decision Support
Risk Assessment
Feedback
Enterprise Adoption

Convergence of DevOps and Cloud
Monolithic N-Tier
Physical
Servers
Virtual
Servers
Data Center Hosted
Development Methodologies DevOps
Application Architecture
Application Packaging
Application Infrastructure
Microservices
Containers
Cloud
Waterfall Agile
Application Test Data Quarterly
Refresh
Monthly
Refresh
On-demand
(within minutes)

7
3 Major impacts of a cloud transformation

8
The radical increase of
the number of “pipeline runs”

9
The movement of: “Power to the development
engineers”

10
The impact of corporate thinking:
Multi Cloud, Distributed Risk

11
Be aware, 4 Disconnects that can disturb your
business

12
Connect 1: CI/CD is going lightning fast, but at the
same time, happening in the dark for many

13
Connect 2: So many powerful tools, so little time for
integrations

14
Connect 3: Lack of Focus on Security and Operations
Dev : Sec : Ops
100 : 1 : 10

15
Connect 4: Business Process of delivering value is
not connected to the IT process

16
Building connections: an example of a a
business release and and IT execution

17
Building connections: ITSM into Development
Connect Integrate
Manage
& Scale
Phase 1 Phase 2 Phase 3
Performance Analytics Dashboard
Platform
ALM Octane
Performance Analytics Dashboard
Platform
ALM Octane

18
DevSecOps: CI/CD Merged with ITSM
Example Pipeline with Jira, Jenkins, Sonar, Fortify, ALM, ServiceNow

19
DevOps: CICD Merged with ITSM
Example Pipeline with Jira, Jenkins, Sonar, Fortify, ALM, ServiceNow

20
DevOps: CICD Merged with ITSM
Example Pipeline with Jira, Jenkins, Sonar, Fortify, ALM, ServiceNow

21
DevOps: CI/CD Merged with ITSM
Example Pipeline with Jira, Jenkins, Sonar, Fortify, ALM, ServiceNow

22
DevOps: CI/CD Merged with ITSM
Example Pipeline with Jira, Jenkins, Sonar, Fortify, ALM, ServiceNow

23
OpsDev: build the framework first,
to enable the engineering culture

24
The focus on Connected Pipelines will increase the
speed of business value creation
Focus on the 4 connects:
▪ Getting CI / CD out of the dark
▪ Connecting best of breed tools into the
toolchain
▪ Connecting Operations and Security into
the overall development chain
▪ Connecting the Business Delivery Process
to the IT Delivery Process

25
But how to push it to enterprise scale?

Onboarding and Scaling
How to scale from one team to many… Leverage your rock stars to
create standard and
reusable templates
Convert to blueprints so
that all your teams can
consume in a reliable way
Ensure you leverage tools
that are built for the
Enterprise

Security and Governance
Bake security and governance into your pipelines, don’t include as an afterthought
Strong role and
permission management
to ensure segregation of
duties
Cost controls
(automated rollback, full
cleanup of resources after
each deploy completes)
Protection of cloud
resources as if they were
on-premise
Security checks are
automatically completed
in the pipeline

Visibility and Auditability
Make data available to all users/roles within the organization
Manager:
Visualizing pipelines
Auditors:
Maintaining data compliance
Developer:
Troubleshooting speed

Deployment Plan Generation
Deployment orchestration to all clouds
Release Pipeline Orchestration
All apps, all roles and all environments
App
Code
Deployment
Code
Config
Code
Release
Code
Manage all Source Code
Overcome Cloud DevOps Challenges
Lack of Cloud Expertise
Best practice templates for common cloud services
Developer Experience
Leverage Release Orchestration that integrates with your
Developers’ favorite tools
Security & Governance
Bake security and governance into your pipelines
Onboarding and Scaling
Leverage standard templates and blueprints
Visibility and Auditability
Make data available for reports and audit trails
Connecting all disciplines to drive value creation
…
…
Best Practice Templates
Pre-built template to deploy
most common cloud services
Security & Governance
Security and control are standardized
within the release pipelines
Visibility & Auditability
VSM, pipeline history, predictive
info (ML), and audit control

30
By the focus on connecting all your disciplines, the
speed and control of software delivery will increase