Featured Guest: Charles Betz, Forrester
DevOps Hits Adolescence – what’s next?
2© 2018 Forrester. Reproduction PROHIBITED.
3© 2018 Forrester. Reproduction PROHIBITED.
4© 2018 Forrester. Reproduction PROHIBITED.
© 2018 FORRESTER. REPRODUCTION PROHIBITED.
© 2018 Forrester. Reproduction PROHIBITED.
DevOps Hits Adolescence — What’s
Next?
Charles T. Betz
Principal Analyst
@CharlesTBetz
cbetz@Forrester.com
December 6, 2018
7© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Agenda
› It’s hard to believe that DevOps has been around for nearly ten years. From its specialist “unicorn” origins to a broadly accepted set of
principles adopted by companies of all sizes and stripes, DevOps has been one of the most transformative movements in information
technology since the PC. What comes next? In this wide-ranging webinar, Forrester Principal Analyst and DevOps Lead, Charles Betz,
will take on:
› The transforming I&O organization: integrated product teams, Site Reliability Engineering (SRE), GitOps, and “code-first” operations
› Cognitive DevOps
› DevOps and the automation paradox
› DevOps and Enterprise Service Management
› The convergence of Continuous Integration, release automation, and configuration management
› Cloud providers’ play for the DevOps pipeline
8© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Some DevOps basics
9© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Transforming the business to be customer focused
and deliver value directly to the customer via digital
capabilities.
Digital Transformation:
10© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Customers Link Software Delivery Success To
Business Strategy
Disagree (1,2)
10%
Middle (3)
24%
Agree (4,5)
66%
Digital technology enhancements are the driving force behind
our business strategy (scale 1-5)
Total Sample Size: N=2,809
Business Technographics® Business and Technology Services Survey, 2017
11© 2018 FORRESTER. REPRODUCTION PROHIBITED.
© Golden Gate Bridge, Highway and Transportation District
Source: http://blog.livehelpnow.net/wp-content/uploads/2012/07/speedometer-540-2501.png
Not speed at the expense of quality,
but…
Speed with quality
Not completion of work, but…
Creation of value
Not speed of current project, but..
future projects
Cumulative Speed
of current and
12© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Defining DevOps
› DevOps (a mashup of “development” and “operations”)
› is a transformative movement in digital and IT management,
› that describes and advocates for the management practices,
technical capabilities, and cultural behaviors
› that optimally support the fast and effective delivery (including
design, architecture, testing, security, and runtime
management)
› of software-based systems.
13© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Positioning DevOps
14© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Change & stability
Smaller changes
Improved time to market
with stability
Change capability - improved
More frequent changes
+
Improved time to market
with stability
Automated build, test,
deploy, canary
deployments, roll back,
monitoring, observability,
processes, culture
15© 2018 FORRESTER. REPRODUCTION PROHIBITED.
A simple DevOps reference architecture
Source
repo
- hosts: server
sudo: yes
sudo_user: root
tasks:
- name: install mysql-server
apt: name=mysql-server
function writeIt(){
diswin = window.open();
diswin.document.open();
diswin.document.write(temp2);
diswin.document.close() } Package
Repo
Pre-production
Production
Build Automation Release Automation
Infrastructure
Automation
Monitor
Pipeline as code
Artifacts
and models
Provisioning
& Control
Infrastructure
as code
Deployment
GitOps
Release {“myrelease”}{
phase (“dev”) {
build (“env1”)
execute (“test1”)
}
}
PipelineAppInfra
Agent versus agentless –
still a thing
16© 2018 FORRESTER. REPRODUCTION PROHIBITED.
2018 Research
17© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Then and now
› 2010: “Ten deploys a day? Are they NUTS?”
› 2014: “What’s DevOps?”
› 2018: “We’ve tried it and like the pilot results. But what
about…”
• ITIL, our NOC, and our Service Desk?
• Auditors?
• Packaged software?
• What if we have 12 projects in flight but only enough staff for 3 steady
state product teams?
• Our ops staff who do not have “infrastructure as code” skills?
› 2019: Peak DevOps?
18© 2018 FORRESTER. REPRODUCTION PROHIBITED.
This year’s infrastructure survey – some teasers
› Between 2017 and 2018, the percentage of
companies expressing the highest interest in
DevOps increased by 33%, from 40% to 53%
of all surveyed.
› 22% of respondents are using DevOps for all
new applications, and 26% are transforming
their entire portfolio (including legacy apps) to
DevOps approaches.
› However, concern for security and
governance is the highest-cited obstacle for
DevOps, mentioned by 34%.
Forrester's Global Business Technographics Developer Survey, 2017-18
19© 2018 Forrester. Reproduction PROHIBITED.
2018 lessons: people
› DevOps mindshare continues to
grow
› Customers are stuck on
organizational questions
20© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Product teams
leverage Shared
Services to
accomplish
specialized
tasks.
Shared Resource
teams measure
success by the success
of product teams
21© 2018 Forrester. Reproduction PROHIBITED.
Software survey 2018
22© 2018 Forrester. Reproduction PROHIBITED.
2018 lessons: process
› “Pipeline as code” rocks!
› Release automation != release
management. Interface with ITSM?
› CDRA vendors are advancing towards
continuous cognitive delivery.
23© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Site Reliability Engineering
› In a world of “you build it, you run it” integrated
product teams, what is SRE?
› We propose “3 Gs”
• Guardrails
• Guidance
• Governance
› 53% of 3000+ infrastructure pros surveyed in
2018 indicate their org is already implementing
or expanding
24© 2018 Forrester. Reproduction PROHIBITED.
2018 lessons: technology
› The market as a whole is
converging (more later)
› Cloud native capabilities quickly
became table stakes in 2018
› Terraform is becoming a de facto
standard.
› Cloud providers pipelines will
disrupt
25© 2018 FORRESTER. REPRODUCTION PROHIBITED.
CogOps applied: Release readiness
26© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Looking ahead
27© 2018 FORRESTER. REPRODUCTION PROHIBITED.
CDRA marketStack
Lifecycle
CI origins
(Jenkins,
Bamboo)
Element/automation
origins (Chef,
Puppet)
CD/ARA origins
(XebiaLabs,
UrbanCode)
• “Close to the metal” control
• Challenged by Kubernetes
and next gen IaC
• Choreography but lots of
scripting
• Popular with developers
• Not initially developed for
production deployment
• Model-based,
declarative (less
scripting)
• Production-grade
security
Project, product, service mgmt
ITOM & related
28© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Cloud plays
Possible outcome: people will “use the thing that comes with the thing.”
• CodePipeline for AWS
• Azure Devops
• Google Open Cloud & ecosystem
One scenario: a few pure-play ARA vendors survive to service hybrid & multi-cloud
To what extent will the cloud DevOps pipelines interoperate?
29© 2018 FORRESTER. REPRODUCTION PROHIBITED.
ESM Conceptual Architecture
› Service accessibility
› Service fulfillment consistency,
speed, and transparency
› Flexible service configuration
› Core IT service management
• Strategic digital services
• Workflow-based services
• External services
30© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Continuous Delivery And Release Automation
ESM covers the entire Digital Pipeline
31© 2018 FORRESTER. REPRODUCTION PROHIBITED.
What is the relationship between DevOps and ESM?
› DevOps is how the most important services are
created and sustained
› DevOps is a harbinger of where the REST of work
needs to go
› Fast flow
› Continuous learning
› Collaborative
› Relentlessly automated, but people are NOT
replaced … the sociotechnical system as a whole
becomes more capable … because the competition
demands it.
32© 2018 FORRESTER. REPRODUCTION PROHIBITED.
ESM and CDRA overlap
“Require to Deploy” value stream
33© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Market spaces
CDRA
ESM
Portfolio/Project
APM
Analytics
ITOM
CSM
NextGen
Incident
34© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Faster
release
cycles
Automated
resiliency
MTTR
decreases
Complexity
(e.g.distributed
microservices)
Knowledge is
shorter lived
MTTR
increases???
“Known error” lifecycles decrease
Ambitious organizations exploit stability
The DevOps/stability paradox
35© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Increasing automation
Faster release cycles
MTTR
Ephemeral knowledge
Increasing complexity
The automation paradox U-curve
Time
36© 2018 FORRESTER. REPRODUCTION PROHIBITED.
The consequences of knowledge lifecycle shrinking
Tier 1
Tier 2
Tier 3
Less
urgent
More urgent
Critical
Long lived known errors and the
3-tier model have been the basis
for IT operating models and help
desk outsourcing
How will we develop staff?
The organizations that will truly excel in
the future will be the organizations that
discover how to tap people’s commitment
and capacity to learn at all levels in an
organization.
Peter Senge, The Fifth Discipline
38© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Knowledge-centered support
39© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Swarming
› From hierarchy to network
40© 2018 FORRESTER. REPRODUCTION PROHIBITED.
Looking to other domains
https://www.flickr.com/photos/matt_hecht/11240697165, commercial use permitted
41© 2018 Forrester. Reproduction PROHIBITED.
Recommendations
› Know your business objectives.
› How will you support and secure your digital pipelines and toolchain?
› Decide whether you will pursue best of breed or an integrated toolchain.
› Evaluate the pros and cons of agent vs agentless approaches.
› Manage your pipelines, preferably “as code.”
› Prepare for market consolidation to accelerate in 2019.
› Keep an eye on automation paradox, the increasing importance of
knowledge management, and influences from safety-critical domains.
FORRESTER.COM
Thank you
© 2018 Forrester. Reproduction PROHIBITED.
Charles Betz
+01 612 868 2754
cbetz@forrester.com
43© 2018 Forrester. Reproduction PROHIBITED.
44© 2018 Forrester. Reproduction PROHIBITED.
45© 2018 Forrester. Reproduction PROHIBITED.

DevOps Hits Adolescence – what’s next?

  • 1.
    Featured Guest: CharlesBetz, Forrester DevOps Hits Adolescence – what’s next?
  • 2.
    2© 2018 Forrester.Reproduction PROHIBITED.
  • 3.
    3© 2018 Forrester.Reproduction PROHIBITED.
  • 4.
    4© 2018 Forrester.Reproduction PROHIBITED.
  • 5.
    © 2018 FORRESTER.REPRODUCTION PROHIBITED.
  • 6.
    © 2018 Forrester.Reproduction PROHIBITED. DevOps Hits Adolescence — What’s Next? Charles T. Betz Principal Analyst @CharlesTBetz cbetz@Forrester.com December 6, 2018
  • 7.
    7© 2018 FORRESTER.REPRODUCTION PROHIBITED. Agenda › It’s hard to believe that DevOps has been around for nearly ten years. From its specialist “unicorn” origins to a broadly accepted set of principles adopted by companies of all sizes and stripes, DevOps has been one of the most transformative movements in information technology since the PC. What comes next? In this wide-ranging webinar, Forrester Principal Analyst and DevOps Lead, Charles Betz, will take on: › The transforming I&O organization: integrated product teams, Site Reliability Engineering (SRE), GitOps, and “code-first” operations › Cognitive DevOps › DevOps and the automation paradox › DevOps and Enterprise Service Management › The convergence of Continuous Integration, release automation, and configuration management › Cloud providers’ play for the DevOps pipeline
  • 8.
    8© 2018 FORRESTER.REPRODUCTION PROHIBITED. Some DevOps basics
  • 9.
    9© 2018 FORRESTER.REPRODUCTION PROHIBITED. Transforming the business to be customer focused and deliver value directly to the customer via digital capabilities. Digital Transformation:
  • 10.
    10© 2018 FORRESTER.REPRODUCTION PROHIBITED. Customers Link Software Delivery Success To Business Strategy Disagree (1,2) 10% Middle (3) 24% Agree (4,5) 66% Digital technology enhancements are the driving force behind our business strategy (scale 1-5) Total Sample Size: N=2,809 Business Technographics® Business and Technology Services Survey, 2017
  • 11.
    11© 2018 FORRESTER.REPRODUCTION PROHIBITED. © Golden Gate Bridge, Highway and Transportation District Source: http://blog.livehelpnow.net/wp-content/uploads/2012/07/speedometer-540-2501.png Not speed at the expense of quality, but… Speed with quality Not completion of work, but… Creation of value Not speed of current project, but.. future projects Cumulative Speed of current and
  • 12.
    12© 2018 FORRESTER.REPRODUCTION PROHIBITED. Defining DevOps › DevOps (a mashup of “development” and “operations”) › is a transformative movement in digital and IT management, › that describes and advocates for the management practices, technical capabilities, and cultural behaviors › that optimally support the fast and effective delivery (including design, architecture, testing, security, and runtime management) › of software-based systems.
  • 13.
    13© 2018 FORRESTER.REPRODUCTION PROHIBITED. Positioning DevOps
  • 14.
    14© 2018 FORRESTER.REPRODUCTION PROHIBITED. Change & stability Smaller changes Improved time to market with stability Change capability - improved More frequent changes + Improved time to market with stability Automated build, test, deploy, canary deployments, roll back, monitoring, observability, processes, culture
  • 15.
    15© 2018 FORRESTER.REPRODUCTION PROHIBITED. A simple DevOps reference architecture Source repo - hosts: server sudo: yes sudo_user: root tasks: - name: install mysql-server apt: name=mysql-server function writeIt(){ diswin = window.open(); diswin.document.open(); diswin.document.write(temp2); diswin.document.close() } Package Repo Pre-production Production Build Automation Release Automation Infrastructure Automation Monitor Pipeline as code Artifacts and models Provisioning & Control Infrastructure as code Deployment GitOps Release {“myrelease”}{ phase (“dev”) { build (“env1”) execute (“test1”) } } PipelineAppInfra Agent versus agentless – still a thing
  • 16.
    16© 2018 FORRESTER.REPRODUCTION PROHIBITED. 2018 Research
  • 17.
    17© 2018 FORRESTER.REPRODUCTION PROHIBITED. Then and now › 2010: “Ten deploys a day? Are they NUTS?” › 2014: “What’s DevOps?” › 2018: “We’ve tried it and like the pilot results. But what about…” • ITIL, our NOC, and our Service Desk? • Auditors? • Packaged software? • What if we have 12 projects in flight but only enough staff for 3 steady state product teams? • Our ops staff who do not have “infrastructure as code” skills? › 2019: Peak DevOps?
  • 18.
    18© 2018 FORRESTER.REPRODUCTION PROHIBITED. This year’s infrastructure survey – some teasers › Between 2017 and 2018, the percentage of companies expressing the highest interest in DevOps increased by 33%, from 40% to 53% of all surveyed. › 22% of respondents are using DevOps for all new applications, and 26% are transforming their entire portfolio (including legacy apps) to DevOps approaches. › However, concern for security and governance is the highest-cited obstacle for DevOps, mentioned by 34%. Forrester's Global Business Technographics Developer Survey, 2017-18
  • 19.
    19© 2018 Forrester.Reproduction PROHIBITED. 2018 lessons: people › DevOps mindshare continues to grow › Customers are stuck on organizational questions
  • 20.
    20© 2018 FORRESTER.REPRODUCTION PROHIBITED. Product teams leverage Shared Services to accomplish specialized tasks. Shared Resource teams measure success by the success of product teams
  • 21.
    21© 2018 Forrester.Reproduction PROHIBITED. Software survey 2018
  • 22.
    22© 2018 Forrester.Reproduction PROHIBITED. 2018 lessons: process › “Pipeline as code” rocks! › Release automation != release management. Interface with ITSM? › CDRA vendors are advancing towards continuous cognitive delivery.
  • 23.
    23© 2018 FORRESTER.REPRODUCTION PROHIBITED. Site Reliability Engineering › In a world of “you build it, you run it” integrated product teams, what is SRE? › We propose “3 Gs” • Guardrails • Guidance • Governance › 53% of 3000+ infrastructure pros surveyed in 2018 indicate their org is already implementing or expanding
  • 24.
    24© 2018 Forrester.Reproduction PROHIBITED. 2018 lessons: technology › The market as a whole is converging (more later) › Cloud native capabilities quickly became table stakes in 2018 › Terraform is becoming a de facto standard. › Cloud providers pipelines will disrupt
  • 25.
    25© 2018 FORRESTER.REPRODUCTION PROHIBITED. CogOps applied: Release readiness
  • 26.
    26© 2018 FORRESTER.REPRODUCTION PROHIBITED. Looking ahead
  • 27.
    27© 2018 FORRESTER.REPRODUCTION PROHIBITED. CDRA marketStack Lifecycle CI origins (Jenkins, Bamboo) Element/automation origins (Chef, Puppet) CD/ARA origins (XebiaLabs, UrbanCode) • “Close to the metal” control • Challenged by Kubernetes and next gen IaC • Choreography but lots of scripting • Popular with developers • Not initially developed for production deployment • Model-based, declarative (less scripting) • Production-grade security Project, product, service mgmt ITOM & related
  • 28.
    28© 2018 FORRESTER.REPRODUCTION PROHIBITED. Cloud plays Possible outcome: people will “use the thing that comes with the thing.” • CodePipeline for AWS • Azure Devops • Google Open Cloud & ecosystem One scenario: a few pure-play ARA vendors survive to service hybrid & multi-cloud To what extent will the cloud DevOps pipelines interoperate?
  • 29.
    29© 2018 FORRESTER.REPRODUCTION PROHIBITED. ESM Conceptual Architecture › Service accessibility › Service fulfillment consistency, speed, and transparency › Flexible service configuration › Core IT service management • Strategic digital services • Workflow-based services • External services
  • 30.
    30© 2018 FORRESTER.REPRODUCTION PROHIBITED. Continuous Delivery And Release Automation ESM covers the entire Digital Pipeline
  • 31.
    31© 2018 FORRESTER.REPRODUCTION PROHIBITED. What is the relationship between DevOps and ESM? › DevOps is how the most important services are created and sustained › DevOps is a harbinger of where the REST of work needs to go › Fast flow › Continuous learning › Collaborative › Relentlessly automated, but people are NOT replaced … the sociotechnical system as a whole becomes more capable … because the competition demands it.
  • 32.
    32© 2018 FORRESTER.REPRODUCTION PROHIBITED. ESM and CDRA overlap “Require to Deploy” value stream
  • 33.
    33© 2018 FORRESTER.REPRODUCTION PROHIBITED. Market spaces CDRA ESM Portfolio/Project APM Analytics ITOM CSM NextGen Incident
  • 34.
    34© 2018 FORRESTER.REPRODUCTION PROHIBITED. Faster release cycles Automated resiliency MTTR decreases Complexity (e.g.distributed microservices) Knowledge is shorter lived MTTR increases??? “Known error” lifecycles decrease Ambitious organizations exploit stability The DevOps/stability paradox
  • 35.
    35© 2018 FORRESTER.REPRODUCTION PROHIBITED. Increasing automation Faster release cycles MTTR Ephemeral knowledge Increasing complexity The automation paradox U-curve Time
  • 36.
    36© 2018 FORRESTER.REPRODUCTION PROHIBITED. The consequences of knowledge lifecycle shrinking Tier 1 Tier 2 Tier 3 Less urgent More urgent Critical Long lived known errors and the 3-tier model have been the basis for IT operating models and help desk outsourcing How will we develop staff?
  • 37.
    The organizations thatwill truly excel in the future will be the organizations that discover how to tap people’s commitment and capacity to learn at all levels in an organization. Peter Senge, The Fifth Discipline
  • 38.
    38© 2018 FORRESTER.REPRODUCTION PROHIBITED. Knowledge-centered support
  • 39.
    39© 2018 FORRESTER.REPRODUCTION PROHIBITED. Swarming › From hierarchy to network
  • 40.
    40© 2018 FORRESTER.REPRODUCTION PROHIBITED. Looking to other domains https://www.flickr.com/photos/matt_hecht/11240697165, commercial use permitted
  • 41.
    41© 2018 Forrester.Reproduction PROHIBITED. Recommendations › Know your business objectives. › How will you support and secure your digital pipelines and toolchain? › Decide whether you will pursue best of breed or an integrated toolchain. › Evaluate the pros and cons of agent vs agentless approaches. › Manage your pipelines, preferably “as code.” › Prepare for market consolidation to accelerate in 2019. › Keep an eye on automation paradox, the increasing importance of knowledge management, and influences from safety-critical domains.
  • 42.
    FORRESTER.COM Thank you © 2018Forrester. Reproduction PROHIBITED. Charles Betz +01 612 868 2754 cbetz@forrester.com
  • 43.
    43© 2018 Forrester.Reproduction PROHIBITED.
  • 44.
    44© 2018 Forrester.Reproduction PROHIBITED.
  • 45.
    45© 2018 Forrester.Reproduction PROHIBITED.