DevOpsDays Baltimore 2018: Black Mirror Season 5: DevOps - Brendan O'Leary

•

1 like•193 views

Black Mirror presents a haunting view of how modern technology places society a “minute away” from a dystopian future. DevOps and those of us that practice it find ourselves in a similar situation - partially mature technologies whose implications we don’t yet fully understand. Heartbleed, Equifax and now Meltdown & Spectre can make us feel like there is no escaping this dark future. But just as Black Mirror examines the extremes of these concepts as a canary in the mine shaft for society, we too can carefully employ practices that will prevent season 5 from featuring Site reliability engineer, DevOps engineer, or CISO characters. In this talk, we'll learn how to use the powerful concepts and tools behind DevOps for good...with great power comes great responsibility....but also great opportunity to do good for our businesses, each other and our world. By working together with product, business, and external teams; embedding security into how we operate; and measuring everything we do we can empower our teams to thrive.

DevOpsDays Baltimore 2018: Black Mirror Season 5: DevOps - Brendan O'Leary

Every day we make decisions. Those decisions can be around improving your product, process, company; sometimes even bettering yourself. But many of our decisions are not made consciously. We all have biases. And even though most of our biases are unconscious, those biases still can get in a way of making the best possible decision. This is not a talk about gender and racial bias in tech hiring (altho I will also touch on hiring procedures and biases). This is a talk about different biases that skew our technical decision process that we deal with in out day-to-day operations.

DevOpsDays Baltimore 2018: A Definition of Done for DevSecOps - Gene Gotimer

DevOpsDays Baltimore

DevOps cannot be achieved without considering many different aspects of software quality, including security. The term DevSecOps was developed to highlight that security was being focused on as part of the pipeline, not a second-class citizen. Fortunately, DevOps and continuous delivery practices give us opportunities to add different types of security testing to our pipeline so that security can be part of our definition of done. Continuous integration can invoke static analysis tools to test for simple security errors and check if components with known vulnerabilities are being used. Automated deployments and virtualization make dynamic environments available for testing in a production-like setting. Regression test suites can be used to drive traffic through proxies for security analysis. From the code to the systems where the software is being deployed, the process can make sure that security best practices are followed and insecure software is not being produced. Gene will talk about how to construct a definition of done that focuses on security along with other types of quality in a DevOps pipeline. He will discuss how to define security practices and criteria that are appropriate for our teams and our projects to be confident that we are doing DevSecOps, and how those practices and criteria might mature over time.

DevOpsDays Baltimore 2018: The Difference Between DevOps and Everything Else ...

DevOpsDays Baltimore

DevOpsDays Baltimore 2018: Comparative studies in highways, organizations, au...

DevOpsDays Baltimore

DevOpsDays Baltimore 2018: MBTF V. MTTR - Aaron Aldrich

DevOpsDays Baltimore

DevOps trends are clear on measuring systems Mean Time To Recovery rather than Mean Time Between Failures. I argue that worrying about time between failures actually causes more harm than worrying about recovery. But do we think of our human systems the same way as our digital? I’ll apply lessons learned in SysOps to HumanOps. I’ll talk about how our complex social systems act like complex computer systems and how focusing on MTTR rather than MTBF is a good thing between people, not just machines. I'll cover the environmental requirements for focusing on MTTR and discuss potential conflict resolution steps for a jumping off point in your organization or community.

Integrating Infrastructure as Code into a Continuous Delivery Pipeline

DevOpsDays Baltimore

Reanimating DevOps to Build Things that Work

DevOpsDays Baltimore

Product owners are under pressure from Marketing and Leadership to focus on features, while operability (availability, performance, monitoring, etc) are an afterthought to be bolted on later. Deployments fail, customers complain, and work isn't fun. How can DevOps reach out to Product? People from a "Product background" often have zero technical experience, but find themselves needing to dictate the deliverables. Product owners are under great pressure from Marketing and Leadership to focus on "features" from a customer perspective; the so-called "non-functional requirements" often fall by the wayside. Operability - monitorabilty, recoverability, availability, performance, among other aspects - is difficult to bake into an application that was developed without such consideration. This talk will present practical approaches to bridge-building between Ops and Product. Focusing especially on cross-functional Agile teams with leadership with little or no Ops background, we will explore whether "planning the work will result in the planned work being the work that is done." When working with a mixed team, doing development, deployment, incident response, and everything in support of that, such plans go off the rails. Methods of championing Ops needs while avoiding "the sky is falling" perceptions will be presented. What kinds of unplanned work exist? Are there steps we can take to convert unplanned work into planned work? How does work flow through the team? How does unplanned work disrupt the flow?

Don't Mind the Gap by Galen Emery

DevOpsDays Baltimore

Transversal Delivery Pipeline by Mike Nescot and Nick Grace

DevOpsDays Baltimore

Artificial intelligence, bots and agents, conversational interfaces, IoT, and cyborgs. Until recently, such things were more hype than substance, but now, the awaited brave new world may actually be dawning. “Pokémon GO anyone?” says Alexa. This talk will explore what these advances means for DevOps conceptually and practically. How do we help our organizations and communities deliver “applications” across multiple senses, devices, media, and realities with the same level of speed, agility, precision, and security we have achieved in much simpler realms?

Best Practices for IT management: Investment‐based Budgeting

DevOpsDays Baltimore

Hacking the A3

DevOpsDays Baltimore

A3 Thinking is a proven technique for developing a learning organization enabled to drive rapid cycles of continual improvement, but the original method needs some tweaks to work best in a DevOps context. This Ignite talk will provide a quick overview of A3 Thinking and its roots. Then I’ll discuss how DevOps practitioners are modifying A3 Thinking to better fit DevOps. I’ll close with some suggestions on other ways in which the A3 could be modified to meet the needs of DevOps teams. Links to sources for those interested in learning more about A3 Thinking and DevOps will be provided.

Getting Away from it All - Living an Unplugged Life as an IT Pro

DevOpsDays Baltimore

Plan a digital cleanse! Schedule a technology detox days! Unplug to Reconnect! The internet is littered with articles promoting the benefits of getting away from our devices. They aren't wrong, but most frame such an activity as a rare event, one that falls somewhere between darning your socks and filing your taxes in terms of frequency. Believe it or not, there is sizable group within the IT professional community who do exactly that every week. For 25 hours, they turn off more than just their cell phones. Anything with an on switch is off-limits, from cell phones and computers to televisions and toaster ovens. As extreme as some may see that lifestyle, there are lessons which can be learned even for the occasional email hiatus. This talk offers insight into: current research (along with his own experience) on the benefits of unplugging what disconnecting from all tech on a weekly basis "looks like" - how it really works The challenges and risks of disconnecting specifically for an IT pro. Options for negotiating those challenges and mitigating the risk This talk is for anyone who has ever considered taking a break from tech, whether for an hour, a day, or longer; or anyone who heard about people who disconnect and called them freaky crazy luddites, whether to their face or behind their back.

Decoding Culture: Beyond the Fluff and Back to Business

DevOpsDays Baltimore

We’ve all heard culture is vital to creating and sustaining a healthy organization. It was even Merriam-Webster’s Word of the Year in 2014. We also know culture is notoriously hard to describe in a meaningful way. Even harder than describing culture is demonstrating its contribution to organizational performance. Culture’s importance is reinforced in the DevOps movement as the “C” in “CALMS” – one of the key aspects of DevOps. Culture also shapes how an organization shares information – “sharing” being the “S” in “CALMS” and another key aspect of DevOps. But for all its importance, we’ve had few tools and limited research to describe or quantify culture. Or so we thought. Work from Dr. W. Edwards Deming, Sydney Dekker, Dr. Ron Westrum, and the State of DevOps Reports is all contributing to our understanding of culture and how it impacts the performance of an organization and its people. This talk will discuss how culture connects to organizational performance, vocabulary for how to describe culture, research about the effects of culture, an d tactics you can use to change your culture for the better.

Lost art of troubleshooting

DevOpsDays Baltimore

There are a lot of great things about the cloud, but the "destroy and rebuild" philosophy which is really good for building a continuous delivery pipeline, really sucks when applied to troubleshooting production problems. When your application goes haywire, the most valuable engineering skill is not the the ability to bring up a copy of your system or even the knowledge of your technology stack (although it doesn't hurt). It is the skill of understanding and solving problems. Finding the root cause of the issue and mitigating it with minimal disruption in production is a must-have skill for engineers responsible for managing and maintaining production systems, which nowadays includes ops, dbas and devs alike. In this talk I will discuss the skills required to troubleshoot complex systems, traits that prevent engineers from being successful at troubleshooting and discuss some techniques and tips and trick for troubleshooting complex systems in production.

Continuous Integration: a bittersweet love story

DevOpsDays Baltimore

This is the bittersweet story of Continuous Integration. CI is practice that we fell in love with, embraced and then never fully committed to. I’ll share with you the current state of CI, what we think we are doing when we say CI and what we are really doing in terms of CI. Then I’ll remind us all why we fell in love with CI in the first place and make some suggestions on how to get back to the good stuff.

Building the Baltimore DevOps Community

DevOpsDays Baltimore

The worldwide DevOps community is strong and growing every year. Last year there were 42 DevOps Days conferences. These conferences are all organized by local community volunteers who are passionate about DevOps. The first DevOps Days in Baltimore is an inflection point for the local community. Let’s look back on the history of DevOps through the eyes of someone who’s been a community participant from the early days of the movement. As we do so, we’ll look at some tips you can takeaway to help make sure your DevOps Days Baltimore experience is delightful. We'll also discuss ways that you can help build and participate in the local DevOps community. Hear about some successful teams are incorporating lessons learned from open source, DevOps, and other communities. Leave with some ideas of things to try in your own environment. Be prepared to learn, be prepared to make new friends, and, most importantly, be prepared to be surprised.

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster. However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks. In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!

Monitoring Java Application Security with JDK Tools and JFR Events

Ana-Maria Mihalceanu

Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...

Thierry Lestable

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

JMeter webinar - integration with InfluxDB and Grafana

RTTS

Watch this recorded webinar about real-time monitoring of application performance. See how to integrate Apache JMeter, the open-source leader in performance testing, with InfluxDB, the open-source time-series database, and Grafana, the open-source analytics and visualization application. In this webinar, we will review the benefits of leveraging InfluxDB and Grafana when executing load tests and demonstrate how these tools are used to visualize performance metrics. Length: 30 minutes Session Overview ------------------------------------------- During this webinar, we will cover the following topics while demonstrating the integrations of JMeter, InfluxDB and Grafana: - What out-of-the-box solutions are available for real-time monitoring JMeter tests? - What are the benefits of integrating InfluxDB and Grafana into the load testing stack? - Which features are provided by Grafana? - Demonstration of InfluxDB and Grafana using a practice web application To view the webinar recording, go to: https://www.rttsweb.com/jmeter-integration-webinar

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

91mobiles

De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...

Product School

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

Paul Groth

Recently uploaded

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

Monitoring Java Application Security with JDK Tools and JFR Events

Ana-Maria Mihalceanu

Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...

Thierry Lestable

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

JMeter webinar - integration with InfluxDB and Grafana

RTTS

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

91mobiles

De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...

Product School

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

Paul Groth

GraphRAG is All You need? LLM & Knowledge Graph

Guy Korland

Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs. 1. Unifying Large Language Models and Knowledge Graphs: A Roadmap. https://arxiv.org/abs/2306.08302 2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs: https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024

Tobias Schneck

As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other? Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.

Neuro-symbolic is not enough, we need neuro-*semantic*

Frank van Harmelen

Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”. All of this illustrated with link prediction over knowledge graphs, but the argument is general.

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

FIDO Alliance

The Art of the Pitch: WordPress Relationships and Sales

Laura Byrne

Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes? All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.

Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...

Ramesh Iyer

In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.

Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality

Inflectra

In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring. Learn about: • The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks. • Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective. • Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification. • Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process. Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

The Future of Platform Engineering

Jemma Hussein Allen

Key Trends Shaping the Future of Infrastructure.pdf

Cheryl Hung

Recently uploaded (20)

Securing your Kubernetes cluster_ a step-by-step guide to success !

Elevating Tactical DDD Patterns Through Object Calisthenics

Monitoring Java Application Security with JDK Tools and JFR Events

Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...

PCI PIN Basics Webinar from the Controlcase Team

JMeter webinar - integration with InfluxDB and Grafana

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

GraphRAG is All You need? LLM & Knowledge Graph

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024

Neuro-symbolic is not enough, we need neuro-*semantic*

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

The Art of the Pitch: WordPress Relationships and Sales

Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...

Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality

FIDO Alliance Osaka Seminar: Overview.pdf

The Future of Platform Engineering

Key Trends Shaping the Future of Infrastructure.pdf

DevOpsDays Baltimore 2018: Black Mirror Season 5: DevOps - Brendan O'Leary

Recommended

Recommended

More Related Content

More from DevOpsDays Baltimore

More from DevOpsDays Baltimore (13)

Recently uploaded

Recently uploaded (20)