SlideShare a Scribd company logo
Agenda
8:30-9:00 Aamiainen ja tilaisuuden avaus
9:00-9:45 Azure DevOps työkalut – Janne Mattila
9:45-10:30 Azure PaaS projektit ja ketterä kehitys – Sakari Nahi
10:30 Paneelikeskustelu
Lounas
Azure DevOps työkalut
Janne Mattila
Solution Architect – Azure App Dev
janne.p.mattila@microsoft.com
@janne_mattila
Dev tools != Ops tools
Dev: I want change != Ops: I want stability
Dev: Document deployment ->
Ops: Manual implementation
Different orgs, different teams, …
Source: http://devops.com/wp-content/uploads/2014/01/devops-devolution.jpg
Evolution of software development
Evolution of software development
15+ years
ago
10 years
ago
5 years
ago
Today
Source Control Management
Unit testing
Agile
Continuous Integration (CI)
Continuous Delivery (CD)
Telemetry
Infrastructure as Code
DevOps
Git
Expectations for modern applications
15+ years
ago
10 years
ago
5 years
ago
Today
Git – Pull Request & Code Reviews
All source assets under version control
CI – Unit tests, code analyzers (e.g. SonarQube, Fortify, CredScan, BinSkim,
WhiteSource Bolt)
CD – Release tests (e.g. Selenium, API), Security Verification Tests (SVTs) from Secure
DevOps Kit for Azure, OWASP Zed Attack Proxy Scan etc.
Start small and continuously improve
Kysymys:
Missä softan evoluution
vaiheessa te olette?
“DevOps is
development
and operations
collaboration”
“DevOps is
treating your
infrastructure
as code”
“DevOps
is using
automation”
“Kanban
for Ops?”
“DevOps
is feature
switches”
“DevOps
is small
deployments”
https://puppet.com/
https://puppet.com/
People. Process. Products.
What is DevOps?
DevOps is the union of people,
process, and products to
enable continuous delivery of
value to your end users.
“
”
Build
&
Test
Continuous
Delivery
Deploy
Operate
Monitor
&
Learn
Plan
&
Track
Develop
“Janne-Pauli” challenge
Long time employee of company
Has strong expertise in on-premises technologies:
Active Directory
Networks
But…
They are afraid of change:
Azure
DevOps
SQL Server clusters
Kysymys:
Minkälaisia kokemuksia teillä
on vastaavanlaisesta
muutoksesta?
Plan
1 Monitor + Learn
ReleaseDevelop + Test
2
Development Production
4
3
Kysymys:
Onko prosessi muutokset
olleet helppoja?
Kysymys:
Miten paljon te hyödynnätte
telemetriaa?
Enabling
DevOps Practices
cspkg
•
•
•
•
•
•
•
•
•
•
•
•
•
•
http://www.itproguy.com/devops-practices/
Azure DevOps
Deliver value to your users faster
using proven agile tools to plan,
track, and discuss work across
your teams.
Build, test, and deploy with CI/CD that
works with any language, platform,
and cloud. Connect to GitHub or any
other Git provider and deploy
continuously.
Get unlimited, cloud-hosted
private Git repos and collaborate
to build better code with pull
requests and advanced file
management.
Test and ship with confidence
using manual and exploratory
testing tools.
Create, host, and share packages with
your team, and add artifacts to your
CI/CD pipelines with a single click.
Azure Boards Azure ReposAzure Pipelines
Azure Test Plans Azure Artifacts
https://azure.com/devops

Kysymys:
Luettele Azure DevOps:in
aikaisemmat nimet?
Mix and match
to create
workflows with
tools from
Microsoft, open
source or your
favorite
3rd party tools
Azure
DevOps lets
developers
choose the
tools and
languages that
are right for
them
Target any cloud, on-prem or both and deploy to the servers you need
Your tools, languages, and clouds
Azure DevOps
An end-to-end solution for organizations looking for an enterprise-grade toolchain
Fully Integrated
with end
to end
traceability
Better together
Scalable to
any team
and project
size
Highly
available,
multi region,
hybrid
cloud &
on-prem
Customer
Support
Consistent
admin
and access
control
https://azure.com/devops
Azure Boards Azure Repos Azure Pipelines Azure Test Plans Azure Artifacts
Track work with Kanban boards, backlogs, team
dashboards, and custom reporting
Azure Boards
https://azure.com/devops
Connected from idea to release
Track all your ideas at every development stage and
keep your team aligned with all code changes linked
directly to work items.
Scrum ready
Use built-in scrum boards and planning tools to help
your teams run sprints, stand-ups, and planning
meetings.
Project insights
Gain new insights into the health and status of your
project with powerful analytics tools and dashboard
widgets.
Unlimited private Git repo hosting and support for
TFVC that scales from a hobby project to the
world’s largest Git repositories
Azure Repos
https://azure.com/devops
Works with your Git client
Securely connect with and push code into your Git
repos from any IDE, editor, or Git client.
Web hooks and API integration
Add validations and extensions from the marketplace
or build your own using web hooks and REST APIs.
Semantic code search
Quickly find what you’re looking for with code-aware
search that understands classes and variables.
Cloud-hosted pipelines for Linux, Windows and
macOS, with unlimited minutes for open source
Azure Pipelines
Any language, any platform, any cloud
Build, test, and deploy Node.js, Python, 
Java, PHP, Ruby,
C/C++, .NET, Android, and iOS apps. Run in parallel on
Linux, macOS, and Windows. Deploy to Azure, AWS,
GCP or on-premises
Extensible
Explore and implement a wide range of community-
built build, test, and deployment tasks, along with
hundreds of extensions from Slack to SonarCloud.
Support for YAML, reporting and more
Best-in-class for open source
Ensure fast continuous integration/continuous delivery
(CI/CD) pipelines for every open source project. Get
unlimited build minutes for all open source projects with
up to 10 free parallel jobs across Linux, macOS and
Windows
https://azure.com/pipelines
Containers and Kubernetes
Easily build and push images to container registries like
Docker Hub and Azure Container Registry. Deploy
containers to individual hosts or Kubernetes.
Get end-to-end traceability. Run tests and log
defects from your browser. Track and assess quality
throughout your testing lifecycle.
Azure Test Plans
Capture rich data
Capture rich scenario data as you execute tests to
make discovered defects actionable. Explore user
stories without test cases or test steps. You can
create test cases directly from your exploratory test
sessions.
Test across web and desktop
Test your application where it lives. Complete
scripted tests across desktop or web scenarios. Test
on-premises application from the cloud and vice-
versa.
Get end-to-end traceability
Leverage the same test tools across your engineers
and user acceptance testing stakeholders. Pay for the
tools only when you need them.
https://azure.com/devops
Create and share Maven, npm, and NuGet package
feeds from public and private sources – fully
integrated into CI/CD pipelines
Azure Artifacts
Manage all package types
Get universal artifact management for Maven, npm,
and NuGet.
Add packages to any pipeline
Share packages, and use built-in CI/CD, versioning,
and testing.
Share code efficiently
Easily share code across small teams and large
enterprises.
https://azure.com/devops
Data: Internal Microsoft engineering system activity, September 2018
372k
Pull Requests per
month
2m
Git commits per month
78,000Deployments per day
4.4m
Builds per month
500m
Test executions per day
500k
Work items updated
per day
5m
Work items viewed per
day
Azure DevOps is the toolchain of choice for Microsoft internal engineering with over 90,000 internal users
https://aka.ms/DevOpsAtMicrosoft
#AzureDevOps
Infrastructure as Code
- PowerShell + ARM Template
Enable local development
No hardcoded parameters
Infra and app deployment
together
Enable overriding any
environment specific values
during deployment
Todays demo – Company web app
App layer
Azure App Services
End users
Azure
Application
Insights
Internet
Supporting Services
App Service
Web Application
Code
Repository
Build
CI
Release
CD
Resource
Group
“Mapping” – From Git to Azure
#AzureDevOps
ARM Deployments can be backtracked to the actual deployment
Things to remember I
Database changes also go together with infra and app
- SQL Server Project in Visual Studio, DbUp, Redgate database DevOps tools, Entity Framework
code migration etc.
Faster does not mean Reckless
- CI: Unit tests, code quality analyzers (e.g. SonarQube), static code analyzers (e.g. Fortify),
Credential Scanners (e.g. CredScan), Binary analyzers (e.g. BinSkim), open source license and
vulnerability scanner (e.g. WhiteSource Bolt) etc.
- CD: Release tests (e.g. Selenium, API), Security Verification Tests (SVTs) from Secure DevOps
Kit for Azure etc.
 Start small and continuously improve
Things to remember II
Automation enables you to clean up resources
- Direct cost savings if you release resources used in lower environments
Automation prevents configuration drift
- Infrastructure-as-Code and automation helps you to fight the “dev does not
equal test does not equal prod environment” battle
Automation enables you to get environments faster and
more reliable manner
- Human doing the “point & click” magic cannot ever beat automated
deployment
- Planning of variable chaining in CD enables easier maintenance
Things to remember III
Things to remember III - Variable chaining in Release
Management
Happy DevOps
DEV OPS Production
Janne Mattila
janne.p.mattila@microsoft.com
https://azure.com/devops
Azure DevOps työkalut - Roundtable 14.3.2019

More Related Content

What's hot

Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...
Adrian Todorov
 
[JAZUG Tohoku Azure DevOps] Azure DevOps
[JAZUG Tohoku Azure DevOps] Azure DevOps[JAZUG Tohoku Azure DevOps] Azure DevOps
[JAZUG Tohoku Azure DevOps] Azure DevOps
Naoki (Neo) SATO
 
Getting Started with Azure DevOps
Getting Started with Azure DevOpsGetting Started with Azure DevOps
Getting Started with Azure DevOps
Jessica Deen
 
Getting Started with Azure Artifacts
Getting Started with Azure ArtifactsGetting Started with Azure Artifacts
Getting Started with Azure Artifacts
Callon Campbell
 
Drive business outcomes using Azure Devops
Drive business outcomes using Azure DevopsDrive business outcomes using Azure Devops
Drive business outcomes using Azure Devops
Belatrix Software
 
Introducción a Azure Devops Pipelines - Plain Concepts DevOps day
Introducción a Azure Devops Pipelines - Plain Concepts DevOps dayIntroducción a Azure Devops Pipelines - Plain Concepts DevOps day
Introducción a Azure Devops Pipelines - Plain Concepts DevOps day
Plain Concepts
 
Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps  Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps
Chetan Gordhan
 
Microsoft Tech Series 2019 - Azure DevOps
Microsoft Tech Series 2019 - Azure DevOpsMicrosoft Tech Series 2019 - Azure DevOps
Microsoft Tech Series 2019 - Azure DevOps
Tomasz Wisniewski
 
Introduction to Azure Blueprints
Introduction to Azure BlueprintsIntroduction to Azure Blueprints
Introduction to Azure Blueprints
Cheah Eng Soon
 
Azure DevOps Best Practices Webinar
Azure DevOps Best Practices WebinarAzure DevOps Best Practices Webinar
Azure DevOps Best Practices Webinar
Cambay Digital
 
Azure DevOps - Azure Guatemala Meetup
Azure DevOps - Azure Guatemala MeetupAzure DevOps - Azure Guatemala Meetup
Azure DevOps - Azure Guatemala Meetup
Guillermo Zepeda Selman
 
AWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API Calls
AWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API CallsAWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API Calls
AWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API Calls
Amazon Web Services
 
Infrastructure automation with .NET
Infrastructure automation with .NETInfrastructure automation with .NET
Infrastructure automation with .NET
Swaminathan Vetri
 
Securing Systems at Cloud Scale with DevSecOps
Securing Systems at Cloud Scale with DevSecOpsSecuring Systems at Cloud Scale with DevSecOps
Securing Systems at Cloud Scale with DevSecOps
Amazon Web Services
 
Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019
Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019
Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019
Jeffrey Palermo
 
Azure dev ops
Azure dev opsAzure dev ops
Azure dev ops
Swaminathan Vetri
 
Building Azure ARM Templates Lesson 1
Building Azure ARM Templates Lesson 1Building Azure ARM Templates Lesson 1
Building Azure ARM Templates Lesson 1
Jonathan Wade
 
Understanding AWS Managed Database and Analytics Services | AWS Public Sector...
Understanding AWS Managed Database and Analytics Services | AWS Public Sector...Understanding AWS Managed Database and Analytics Services | AWS Public Sector...
Understanding AWS Managed Database and Analytics Services | AWS Public Sector...
Amazon Web Services
 
Azure DevOps
Azure DevOpsAzure DevOps
DevOps In Azure: Deliver Value With Automation
DevOps In Azure: Deliver Value With AutomationDevOps In Azure: Deliver Value With Automation
DevOps In Azure: Deliver Value With Automation
Utkarsh Pandey
 

What's hot (20)

Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...
 
[JAZUG Tohoku Azure DevOps] Azure DevOps
[JAZUG Tohoku Azure DevOps] Azure DevOps[JAZUG Tohoku Azure DevOps] Azure DevOps
[JAZUG Tohoku Azure DevOps] Azure DevOps
 
Getting Started with Azure DevOps
Getting Started with Azure DevOpsGetting Started with Azure DevOps
Getting Started with Azure DevOps
 
Getting Started with Azure Artifacts
Getting Started with Azure ArtifactsGetting Started with Azure Artifacts
Getting Started with Azure Artifacts
 
Drive business outcomes using Azure Devops
Drive business outcomes using Azure DevopsDrive business outcomes using Azure Devops
Drive business outcomes using Azure Devops
 
Introducción a Azure Devops Pipelines - Plain Concepts DevOps day
Introducción a Azure Devops Pipelines - Plain Concepts DevOps dayIntroducción a Azure Devops Pipelines - Plain Concepts DevOps day
Introducción a Azure Devops Pipelines - Plain Concepts DevOps day
 
Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps  Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps
 
Microsoft Tech Series 2019 - Azure DevOps
Microsoft Tech Series 2019 - Azure DevOpsMicrosoft Tech Series 2019 - Azure DevOps
Microsoft Tech Series 2019 - Azure DevOps
 
Introduction to Azure Blueprints
Introduction to Azure BlueprintsIntroduction to Azure Blueprints
Introduction to Azure Blueprints
 
Azure DevOps Best Practices Webinar
Azure DevOps Best Practices WebinarAzure DevOps Best Practices Webinar
Azure DevOps Best Practices Webinar
 
Azure DevOps - Azure Guatemala Meetup
Azure DevOps - Azure Guatemala MeetupAzure DevOps - Azure Guatemala Meetup
Azure DevOps - Azure Guatemala Meetup
 
AWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API Calls
AWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API CallsAWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API Calls
AWS Partner: Grindr: Aggregate, Analyze, and Act on 900M Daily API Calls
 
Infrastructure automation with .NET
Infrastructure automation with .NETInfrastructure automation with .NET
Infrastructure automation with .NET
 
Securing Systems at Cloud Scale with DevSecOps
Securing Systems at Cloud Scale with DevSecOpsSecuring Systems at Cloud Scale with DevSecOps
Securing Systems at Cloud Scale with DevSecOps
 
Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019
Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019
Azure DevOps for .NET - Fall into the Pit of Success, .NET Conf 2019
 
Azure dev ops
Azure dev opsAzure dev ops
Azure dev ops
 
Building Azure ARM Templates Lesson 1
Building Azure ARM Templates Lesson 1Building Azure ARM Templates Lesson 1
Building Azure ARM Templates Lesson 1
 
Understanding AWS Managed Database and Analytics Services | AWS Public Sector...
Understanding AWS Managed Database and Analytics Services | AWS Public Sector...Understanding AWS Managed Database and Analytics Services | AWS Public Sector...
Understanding AWS Managed Database and Analytics Services | AWS Public Sector...
 
Azure DevOps
Azure DevOpsAzure DevOps
Azure DevOps
 
DevOps In Azure: Deliver Value With Automation
DevOps In Azure: Deliver Value With AutomationDevOps In Azure: Deliver Value With Automation
DevOps In Azure: Deliver Value With Automation
 

Similar to Azure DevOps työkalut - Roundtable 14.3.2019

Tour of Azure DevOps
Tour of Azure DevOpsTour of Azure DevOps
Tour of Azure DevOps
Callon Campbell
 
Azure DevOps
Azure DevOpsAzure DevOps
Azure DevOps
Michael Jesse
 
Azure DevOps Day - Trivandrum
Azure DevOps Day - TrivandrumAzure DevOps Day - Trivandrum
Azure DevOps Day - Trivandrum
Amal Dev
 
Azure DevOps Day - Kochi
Azure DevOps Day - KochiAzure DevOps Day - Kochi
Azure DevOps Day - Kochi
Amal Dev
 
Welcome to Azure DevOps
Welcome to Azure DevOpsWelcome to Azure DevOps
Welcome to Azure DevOps
Riccardo Cappello
 
Azure dev ops
Azure dev opsAzure dev ops
Azure dev ops
Vishwas N
 
Rilasci senza paura (o panico) con Azure DevOps
Rilasci senza paura (o panico) con Azure DevOpsRilasci senza paura (o panico) con Azure DevOps
Rilasci senza paura (o panico) con Azure DevOps
Commit University
 
Azure_DevOps_Customer_201903.pptx
Azure_DevOps_Customer_201903.pptxAzure_DevOps_Customer_201903.pptx
Azure_DevOps_Customer_201903.pptx
Sherman37
 
DevOps para Open Source com Azure DevOps
DevOps para Open Source com Azure DevOpsDevOps para Open Source com Azure DevOps
DevOps para Open Source com Azure DevOps
Emmanuel Gomes Brandão
 
Azure DevOps in Action
Azure DevOps in ActionAzure DevOps in Action
Azure DevOps in Action
Callon Campbell
 
Azure DevOps: the future of integration and traceability
Azure DevOps: the future of integration and traceabilityAzure DevOps: the future of integration and traceability
Azure DevOps: the future of integration and traceability
Lorenzo Barbieri
 
Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...
Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...
Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...
Janusz Nowak
 
Deploy multi-environment application with Azure DevOps
Deploy multi-environment application with Azure DevOpsDeploy multi-environment application with Azure DevOps
Deploy multi-environment application with Azure DevOps
Andrea Tosato
 
The Power of Azure DevOps - Global Azure Day 2020
The Power of Azure DevOps - Global Azure Day 2020The Power of Azure DevOps - Global Azure Day 2020
The Power of Azure DevOps - Global Azure Day 2020
Jeff Bramwell
 
DevOps e a transformação digital de aplicações
DevOps e a transformação digital de aplicaçõesDevOps e a transformação digital de aplicações
DevOps e a transformação digital de aplicações
Ramon Durães
 
The Power of Azure DevOps
The Power of Azure DevOpsThe Power of Azure DevOps
The Power of Azure DevOps
Jeff Bramwell
 
Introduction to Azure DevOps
Introduction to Azure DevOpsIntroduction to Azure DevOps
Introduction to Azure DevOps
Lorenzo Barbieri
 
MLOps in action
MLOps in actionMLOps in action
MLOps in action
Pieter de Bruin
 
Martin Woodward - DevOps Habits
Martin Woodward  - DevOps HabitsMartin Woodward  - DevOps Habits
Martin Woodward - DevOps Habits
Peter Laker
 

Similar to Azure DevOps työkalut - Roundtable 14.3.2019 (20)

Tour of Azure DevOps
Tour of Azure DevOpsTour of Azure DevOps
Tour of Azure DevOps
 
Azure DevOps
Azure DevOpsAzure DevOps
Azure DevOps
 
Azure DevOps Day - Trivandrum
Azure DevOps Day - TrivandrumAzure DevOps Day - Trivandrum
Azure DevOps Day - Trivandrum
 
Azure DevOps Day - Kochi
Azure DevOps Day - KochiAzure DevOps Day - Kochi
Azure DevOps Day - Kochi
 
Welcome to Azure DevOps
Welcome to Azure DevOpsWelcome to Azure DevOps
Welcome to Azure DevOps
 
Azure DevOps
Azure DevOpsAzure DevOps
Azure DevOps
 
Azure dev ops
Azure dev opsAzure dev ops
Azure dev ops
 
Rilasci senza paura (o panico) con Azure DevOps
Rilasci senza paura (o panico) con Azure DevOpsRilasci senza paura (o panico) con Azure DevOps
Rilasci senza paura (o panico) con Azure DevOps
 
Azure_DevOps_Customer_201903.pptx
Azure_DevOps_Customer_201903.pptxAzure_DevOps_Customer_201903.pptx
Azure_DevOps_Customer_201903.pptx
 
DevOps para Open Source com Azure DevOps
DevOps para Open Source com Azure DevOpsDevOps para Open Source com Azure DevOps
DevOps para Open Source com Azure DevOps
 
Azure DevOps in Action
Azure DevOps in ActionAzure DevOps in Action
Azure DevOps in Action
 
Azure DevOps: the future of integration and traceability
Azure DevOps: the future of integration and traceabilityAzure DevOps: the future of integration and traceability
Azure DevOps: the future of integration and traceability
 
Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...
Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...
Continues Integration and Continuous Delivery with Azure DevOps - Deploy Anyt...
 
Deploy multi-environment application with Azure DevOps
Deploy multi-environment application with Azure DevOpsDeploy multi-environment application with Azure DevOps
Deploy multi-environment application with Azure DevOps
 
The Power of Azure DevOps - Global Azure Day 2020
The Power of Azure DevOps - Global Azure Day 2020The Power of Azure DevOps - Global Azure Day 2020
The Power of Azure DevOps - Global Azure Day 2020
 
DevOps e a transformação digital de aplicações
DevOps e a transformação digital de aplicaçõesDevOps e a transformação digital de aplicações
DevOps e a transformação digital de aplicações
 
The Power of Azure DevOps
The Power of Azure DevOpsThe Power of Azure DevOps
The Power of Azure DevOps
 
Introduction to Azure DevOps
Introduction to Azure DevOpsIntroduction to Azure DevOps
Introduction to Azure DevOps
 
MLOps in action
MLOps in actionMLOps in action
MLOps in action
 
Martin Woodward - DevOps Habits
Martin Woodward  - DevOps HabitsMartin Woodward  - DevOps Habits
Martin Woodward - DevOps Habits
 

Recently uploaded

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
James Anderson
 
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
Sri Ambati
 
Leading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdfLeading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdf
OnBoard
 
Connector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonConnector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a button
DianaGray10
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
Product School
 
Essentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with ParametersEssentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with Parameters
Safe Software
 
Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*
Frank van Harmelen
 
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Ramesh Iyer
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
Product School
 
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdfFIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
KatiaHIMEUR1
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
Ana-Maria Mihalceanu
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Alan Dix
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
Cheryl Hung
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
Paul Groth
 
How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...
Product School
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
UiPathCommunity
 
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Product School
 
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdfFIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Inflectra
 

Recently uploaded (20)

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
 
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
 
Leading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdfLeading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdf
 
Connector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonConnector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a button
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
 
Essentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with ParametersEssentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with Parameters
 
Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*
 
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
 
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdfFIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
 
How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
 
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
 
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdfFIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdf
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
 

Azure DevOps työkalut - Roundtable 14.3.2019

  • 1. Agenda 8:30-9:00 Aamiainen ja tilaisuuden avaus 9:00-9:45 Azure DevOps työkalut – Janne Mattila 9:45-10:30 Azure PaaS projektit ja ketterä kehitys – Sakari Nahi 10:30 Paneelikeskustelu Lounas
  • 2. Azure DevOps työkalut Janne Mattila Solution Architect – Azure App Dev janne.p.mattila@microsoft.com @janne_mattila
  • 3. Dev tools != Ops tools Dev: I want change != Ops: I want stability Dev: Document deployment -> Ops: Manual implementation Different orgs, different teams, …
  • 5. Evolution of software development 15+ years ago 10 years ago 5 years ago Today Source Control Management Unit testing Agile Continuous Integration (CI) Continuous Delivery (CD) Telemetry Infrastructure as Code DevOps Git
  • 6. Expectations for modern applications 15+ years ago 10 years ago 5 years ago Today Git – Pull Request & Code Reviews All source assets under version control CI – Unit tests, code analyzers (e.g. SonarQube, Fortify, CredScan, BinSkim, WhiteSource Bolt) CD – Release tests (e.g. Selenium, API), Security Verification Tests (SVTs) from Secure DevOps Kit for Azure, OWASP Zed Attack Proxy Scan etc. Start small and continuously improve
  • 8. “DevOps is development and operations collaboration” “DevOps is treating your infrastructure as code” “DevOps is using automation” “Kanban for Ops?” “DevOps is feature switches” “DevOps is small deployments”
  • 10. People. Process. Products. What is DevOps? DevOps is the union of people, process, and products to enable continuous delivery of value to your end users. “ ” Build & Test Continuous Delivery Deploy Operate Monitor & Learn Plan & Track Develop
  • 11.
  • 12.
  • 13. “Janne-Pauli” challenge Long time employee of company Has strong expertise in on-premises technologies: Active Directory Networks But… They are afraid of change: Azure DevOps SQL Server clusters
  • 14. Kysymys: Minkälaisia kokemuksia teillä on vastaavanlaisesta muutoksesta?
  • 15. Plan 1 Monitor + Learn ReleaseDevelop + Test 2 Development Production 4 3
  • 17. Kysymys: Miten paljon te hyödynnätte telemetriaa?
  • 19.
  • 20. cspkg
  • 21.
  • 23. Azure DevOps Deliver value to your users faster using proven agile tools to plan, track, and discuss work across your teams. Build, test, and deploy with CI/CD that works with any language, platform, and cloud. Connect to GitHub or any other Git provider and deploy continuously. Get unlimited, cloud-hosted private Git repos and collaborate to build better code with pull requests and advanced file management. Test and ship with confidence using manual and exploratory testing tools. Create, host, and share packages with your team, and add artifacts to your CI/CD pipelines with a single click. Azure Boards Azure ReposAzure Pipelines Azure Test Plans Azure Artifacts https://azure.com/devops 
  • 25.
  • 26.
  • 27. Mix and match to create workflows with tools from Microsoft, open source or your favorite 3rd party tools Azure DevOps lets developers choose the tools and languages that are right for them Target any cloud, on-prem or both and deploy to the servers you need Your tools, languages, and clouds
  • 28. Azure DevOps An end-to-end solution for organizations looking for an enterprise-grade toolchain Fully Integrated with end to end traceability Better together Scalable to any team and project size Highly available, multi region, hybrid cloud & on-prem Customer Support Consistent admin and access control https://azure.com/devops Azure Boards Azure Repos Azure Pipelines Azure Test Plans Azure Artifacts
  • 29. Track work with Kanban boards, backlogs, team dashboards, and custom reporting Azure Boards https://azure.com/devops Connected from idea to release Track all your ideas at every development stage and keep your team aligned with all code changes linked directly to work items. Scrum ready Use built-in scrum boards and planning tools to help your teams run sprints, stand-ups, and planning meetings. Project insights Gain new insights into the health and status of your project with powerful analytics tools and dashboard widgets.
  • 30. Unlimited private Git repo hosting and support for TFVC that scales from a hobby project to the world’s largest Git repositories Azure Repos https://azure.com/devops Works with your Git client Securely connect with and push code into your Git repos from any IDE, editor, or Git client. Web hooks and API integration Add validations and extensions from the marketplace or build your own using web hooks and REST APIs. Semantic code search Quickly find what you’re looking for with code-aware search that understands classes and variables.
  • 31. Cloud-hosted pipelines for Linux, Windows and macOS, with unlimited minutes for open source Azure Pipelines Any language, any platform, any cloud Build, test, and deploy Node.js, Python, 
Java, PHP, Ruby, C/C++, .NET, Android, and iOS apps. Run in parallel on Linux, macOS, and Windows. Deploy to Azure, AWS, GCP or on-premises Extensible Explore and implement a wide range of community- built build, test, and deployment tasks, along with hundreds of extensions from Slack to SonarCloud. Support for YAML, reporting and more Best-in-class for open source Ensure fast continuous integration/continuous delivery (CI/CD) pipelines for every open source project. Get unlimited build minutes for all open source projects with up to 10 free parallel jobs across Linux, macOS and Windows https://azure.com/pipelines Containers and Kubernetes Easily build and push images to container registries like Docker Hub and Azure Container Registry. Deploy containers to individual hosts or Kubernetes.
  • 32. Get end-to-end traceability. Run tests and log defects from your browser. Track and assess quality throughout your testing lifecycle. Azure Test Plans Capture rich data Capture rich scenario data as you execute tests to make discovered defects actionable. Explore user stories without test cases or test steps. You can create test cases directly from your exploratory test sessions. Test across web and desktop Test your application where it lives. Complete scripted tests across desktop or web scenarios. Test on-premises application from the cloud and vice- versa. Get end-to-end traceability Leverage the same test tools across your engineers and user acceptance testing stakeholders. Pay for the tools only when you need them. https://azure.com/devops
  • 33. Create and share Maven, npm, and NuGet package feeds from public and private sources – fully integrated into CI/CD pipelines Azure Artifacts Manage all package types Get universal artifact management for Maven, npm, and NuGet. Add packages to any pipeline Share packages, and use built-in CI/CD, versioning, and testing. Share code efficiently Easily share code across small teams and large enterprises. https://azure.com/devops
  • 34. Data: Internal Microsoft engineering system activity, September 2018 372k Pull Requests per month 2m Git commits per month 78,000Deployments per day 4.4m Builds per month 500m Test executions per day 500k Work items updated per day 5m Work items viewed per day Azure DevOps is the toolchain of choice for Microsoft internal engineering with over 90,000 internal users https://aka.ms/DevOpsAtMicrosoft
  • 36. Infrastructure as Code - PowerShell + ARM Template Enable local development No hardcoded parameters Infra and app deployment together Enable overriding any environment specific values during deployment Todays demo – Company web app App layer Azure App Services End users Azure Application Insights Internet Supporting Services App Service Web Application
  • 39. ARM Deployments can be backtracked to the actual deployment Things to remember I
  • 40. Database changes also go together with infra and app - SQL Server Project in Visual Studio, DbUp, Redgate database DevOps tools, Entity Framework code migration etc. Faster does not mean Reckless - CI: Unit tests, code quality analyzers (e.g. SonarQube), static code analyzers (e.g. Fortify), Credential Scanners (e.g. CredScan), Binary analyzers (e.g. BinSkim), open source license and vulnerability scanner (e.g. WhiteSource Bolt) etc. - CD: Release tests (e.g. Selenium, API), Security Verification Tests (SVTs) from Secure DevOps Kit for Azure etc.  Start small and continuously improve Things to remember II
  • 41. Automation enables you to clean up resources - Direct cost savings if you release resources used in lower environments Automation prevents configuration drift - Infrastructure-as-Code and automation helps you to fight the “dev does not equal test does not equal prod environment” battle Automation enables you to get environments faster and more reliable manner - Human doing the “point & click” magic cannot ever beat automated deployment - Planning of variable chaining in CD enables easier maintenance Things to remember III
  • 42. Things to remember III - Variable chaining in Release Management
  • 43. Happy DevOps DEV OPS Production

Editor's Notes

  1. Taken from: http://dev2ops.org/2010/02/what-is-devops/ Tension: "ITSM MOG” Environment don't match (Dev <> QA <> Prod) Takes time to get an environment Environments are always running (Cost) Failures and reliability Solution: Infrastructure-as-Code (IaC) Automation DevOps Tension: Deployments Solution: Infrastructure-as-Code (IaC) Automation DevOps Dev tools != Ops tools Dev: I want change != Ops: I want stability Dev: Document deployment -> Ops: Manual implementation -> Environment mismatch Different orgs, different teams, …
  2. Source: http://devops.com/wp-content/uploads/2014/01/devops-devolution.jpg
  3. 5
  4. 6
  5. DevOps has different meanings to different roles in an organization. Some feel that it is a buzz word, others are more informed. Our intent is to share with you what being more agile and responsive means to your role, what has to change, what remains consistent
  6. Over the past 5 years, the State of DevOps report has surveyed more than 25,000 technical professionals world wide with companies of ALL sizes and verticals. Employees in high-performing teams were 2.2x more likely to recommend their organization as a great place to work. (2016 – employee Net Promoter Score)
  7. 10
  8. PEOPLE = Culture and not JUST Dev and Ops, anyone involved in delivering value to customers. Fundamental attributes of successful cultures: Shared mission and incentives: infrastructure as code, apps as services, DevOps/all as teams Rally around agile, shared metrics, CI, service owners on call, etc. PROCESS = DevOps is about Lean and eliminating waste in the process of delivering value to end users. PRODUCTS = You can’t buy “the DevOps” in or outside of Microsoft. That being said part of what DevOps is about is automation and you can’t automate without tools or products to help you. Also tools or products are only as effective as the people groups using them and processes they are bound by. For instance if only one small pocket of developers are using a script to build their infrastructure from scratch, but Ops still has a separate different manually configured infrastructure – it really is of only limited value if not detrimental.
  9. Understand that the shift to unite people, process and product is a big culture shift for both sides, which is not to be taken lightly. Developers: Are responsible for deployments (including testing) and have responsibility for their code in production. Operations: Have to improve the environment and redeploy constantly as well as automating everything through code.
  10. 13
  11. 23
  12. 25
  13. 26
  14. 27
  15. 28
  16. 29
  17. 30
  18. 31
  19. 32
  20. 33
  21. 34
  22. 35
  23. CI CredScan BinSkim WebScout SSLScanner Open Source Software Compliance One Compliance (1CS) SonarQube - Quality Micro Focus: Fortify Static Code Analyzer WhiteSource Bolt CD AzSK
  24. 38