Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Compliant by Default - Continuous Delivery at DB Systel - 16.10.2018 - Schlomo Schapiro and Hendrik Pahl

593 views

Published on

Learn about the journey of Deutsche Bahn towards Cloud computing, DevOps and agile transformation, with special focus on our Continuous Delivery strategy and implementation. After a brief overview of what is happening at DB Systel, we will show our Continuous Delivery as-a-Service (CDaaS) approach. CDaaS is an integrative approach to Continuous Delivery ensuring governance and security compliance whilst being fully focused on the user experience. We will show the extensibility and simplicity of CDaaS and how it helps DevOps teams improve code quality.

Key take aways are a profound understanding of the intimate relationship between DevOps, Continuous Delivery and Cloud which enables a truly integrated work environment for our developers. By putting ?Developer Productivity? first we ensure that our teams can focus on developing their features over choosing the right tool or knowing all platform topics in-depth

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Compliant by Default - Continuous Delivery at DB Systel - 16.10.2018 - Schlomo Schapiro and Hendrik Pahl

  1. 1. DB Systel GmbH | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018 This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License Compliant by Default Continuous Delivery at DB Systel ©Christopher Schmidt / flickr © Steve Jurvetson / flickr © Rudolpho Duba / pixelio.de
  2. 2. Why? Customer Sales Team Solution Architects Team Product Manager Team Developer Teams Testing Team Release Manager Team Security / Compliance Officer Admin Team Operator Team Company efficiency to delivery customer value? DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20182
  3. 3. How? Customer Obsession DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20183
  4. 4. Jeff Bezos: 2016 Letter to Shareholders https://www.amazon.com/p/feature/z6o9g6sysxur57t 100% focus on customer value Customer uses our product Customer pays for our product We are valuable DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20184
  5. 5. Biggest Contribution to Customer Value DevOps Productivity = Company Efficiency to Delivery Customer Value Engineer https://upload.wikimedia.org/wikipedia/commons/b/b7/Archimedes_lever.png Customer Sales Team Solution Architects Team Product Manager Team Developer Teams Testing Team Release Manager Team Security / Compliance Officer Admin Team Operator Team DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20185
  6. 6. Customer: Everybody who codes (Dev, Ops, PO …) Value: • Quickly • Simple • Tested • Secure • Compliant • Traceable • With support & consulting • Without deep knowledge everywhere • Easy multi vendor DevOps Engineers as „Customers“ User Experience for „Engineer“ Customers: Developer ExperienceDB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20186
  7. 7. How? DevOps DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20187
  8. 8. DevOps is … if every person uses the same tool for the same job … codified knowledge - everybody contributes his part to common automation … if all people have the same privileges in their tooling … if human error is equally possible for Dev and Ops … replacing people interfaces by automated decisions and processes ... a result DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20188
  9. 9. How? Cloud Platforms In your Data Center: • do you have an API for every function? • can you provide „just enough“ resources and scale up/down without delays? • can you scale costs by usage and achieve full cost transparency? Good cloud platforms can be built on-premise, require extreme scale out. DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20189
  10. 10. How? DevOps Cloud Platforms Continuous Delivery People Technology Effect Changes DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201810
  11. 11. Configuration Software Containers Servers Storage Network Security … DevOps Vision Continuous Delivery DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201811
  12. 12. Configuration Software Containers Servers Storage Network Security … DevOps Vision Continuous Delivery GIT Repo Dev, Ops, PO, ... Automation All Infrastructure Environments und Cloud Platforms AWS, OpenShift, Azure, DB ... G itO ps DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201812
  13. 13. Code, Config & declarative Description of all Components in all Infrastructure Environments Continuous Delivery Value for Engineers G itO ps DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201813
  14. 14. Code, Config & declarative Description of all Components in all Infrastructure Environments Continuous Delivery quickly simple secure compliant tested multi vendor traceable without deep knowledge support & consulting Value for Engineers DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201814
  15. 15. DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018 Team Company Standardization Controllability Security & Governance Economics Ease of Use Focus on development Innovations – benefit from and create 15 Accountability vs. Responsibility
  16. 16. DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018 Team Company Ease of Use Focus on development Innovations – benefit from and create Security & Governance Standardization Controllability Economics Tilt the scale by creating a product - Continuous Delivery as-a-Service (CDaaS) 16
  17. 17. Cloud Providers DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018 gitlab gitlab-ci gitlab runners Docker containers Governance automation frameworks OpenShift / K8S AWS Azure Proxy, DNS,… - DB Services CFN_NAG K8S admission controllers TODO Azure ... Repo Runner Trust federation Manifest (CF eG) Pipeline manifest Run pipeline Run Container Deployment code Governance enforcement Deploy manifest Account 17
  18. 18. CloudFormation Deployment DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018 - CF-Deployment takes 7 lines - Governance & Security checking implicitly included - Declarative Description User doesn‘t need to know „how it works“ 18
  19. 19. CloudFormation Deployment DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201819
  20. 20. DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201820
  21. 21. DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018 From JDBC connection strings to Developer Productivity: The big picture 21
  22. 22. The result: Customer Sales Team Solution Architects Team Product Manager Team Developer Teams Testing Team Release Manager Team Security / Compliance Officer Admin Team Operator Team BusinessTeam BusinessTeam BusinessTeam BusinessTeam BusinessTeam PlatformTeam PlatformTeam Infrastructure Infrastructure Infrastructure Infrastructure Infrastructure Infrastructure Infrastructure Automation DevOps Continuous Delivery Cloud Platforms DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201822
  23. 23. 23
  24. 24. How to start? • Set a goal, e.g. „2 deployments per day“ • Identify impediments • Replace impediments through automation • Believe that you can do it, let failure make you stronger • Repeat until done • Build tools that are useful products: • Continuous Delivery as a Service • Cloud Platform as a Service • Proxy, DNS ... as a Service • Company concerns (security, governance, compliance) must be part of the continuous delivery pipeline24
  25. 25. Time for Questions & Answers Slides go.schapiro.org/slides Contact schlomo.schapiro@deutschebahn.com hendrik.pahl@deutschebahn.com Twitter @schlomoschapiro @hendrik_pahl

×