Enabling applications to really thrive (and not just survive) in cloud environments can be challenging. The original 12 factor app methodology helped to lay out some of the key characteristics needed for cloud-native applications... but... as our cloud infrastructure and tooling has progressed, so too have these factors. In this session we'll dive into the extended and updated 15 factors needed to build cloud native applications that are able to thrive in this environment, and we'll take a look at open source technologies and tools that can help us achieve this.

1. THRIVING IN THE CLOUD:
GOING BEYOND THE 12
FACTORS
Grace Jansen
@gracejansen27

2. The Evolution
to Cloud

3. Evolution of Modern Infrastructure
© 2021 IBM Corporation @gracejansen27

4. Evolution of Applications

6. What does the Cloud offer?
Co$t Speed
Speed
Speed
Speed
Speed
Speed
Resiliency
Innovation
Scalability

7. What does it mean to be cloud-native?
Cloud native technologies empower organizations to build and
run scalable applications in modern, dynamic environments
such as public, private, and hybrid clouds.
https://github.com/cncf/toc/blob/master/DEFINITION.md

9. 12 Factor Apps

10. 12 Factor App Methodology
https://12factor.net/

11. The original 12 factors:
1. Codebase
2. Dependencies
3. Configuration
4. Backing Services
5. Build, release, run
6. Processes
7. Port Binding
8. Concurrency
9. Disposability
10. Dev/prod parity
11. Logs
12. Admin Processes

12. Revised 15 factors
1. One Codebase, one application
2. API first
3. Dependency management
4. Design, build, release, and run
5. Configuration, credentials and code
6. Logs
7. Disposability
https://www.oreilly.com/library/view/beyond-the-twelve-factor/9781492042631/
8. Backing services
9. Environment parity
10. Administrative processes
11. Port binding
12. Stateless processes
13. Concurrency
14. Telemetry
15. Authentication and authorization

13. Revised 15 factors
1. One Codebase, one application
2. API first
3. Dependency management
4. Design, build, release, and run
5. Configuration, credentials and code
6. Logs
7. Disposability
https://www.oreilly.com/library/view/beyond-the-twelve-factor/9781492042631/
8. Backing services
9. Environment parity
10. Administrative processes
11. Port binding
12. Stateless processes
13. Concurrency
14. Telemetry
15. Authentication and authorization

14. Thriving in the
cloud through
the revised 15
factors

15. 1. One codebase, one application
Production
Staging
Q/A
DevSecOps
Developer
Codebase
Deploys
1. CodeBase

16. 1. One codebase, one application
1. CodeBase
Production
Staging
Q/A
DevSecOps
Developer
Codebase
Deploys

17. 2. API first
NEW
Application Source
Code
Feedback

18. 2. API first
NEW
Application Source
Code
Feedback
https://openliberty.io/guides/micro
profile-openapi.html

19. 3. Dependency management
2. Dependencies
Application Source
Code
Makes use of…

20. 3. Dependency management
2. Dependencies
Application Source
Code
Makes use of…

21. 4. Design, build, release, run
5. Build, release, run
CI/CD
Design Build Release Run

22. 4. Design, build, release, run
5. Build, release, run
CI/CD
Design Build Release Run

23. 5. Configuration, credentials and code
3. Configuration
Application
Uses…

24. 5. Configuration, credentials and code
3. Configuration
Application
Uses…
https://openliberty.io/guides/microprofile-config.html

25. 6. Logs
11. Logs
Message
Broker
Interested
Service
Interested
Service
Logger

26. 6. Logs
11. Logs
Message
Broker
Interested
Service
Interested
Service
Logger

27. 7. Disposability
9. Disposability
1 2
3
4
5
6
7
Carl the Cat
Cattle Pet
VS

28. 7. Disposability
9. Disposability
1 2
3
4
5
6
7
Carl the Cat
Cattle Pet
VS
https://openliberty.io/guides/microprofile-fallback.html

29. 8. Backing Services
4. Backing Services
Application

30. 8. Backing Services
4. Backing Services
Application

31. 9. Environmental parity
10. Dev/Prod Parity
Development Q/A Production
= =

32. 9. Environmental parity
10. Dev/Prod Parity
Development Q/A Production
= =
https://openliberty.io/guides/microshed-testing.html

33. 10. Administrative processes
12. Admin Processes
https://openliberty.io/guides/kubernetes-intro.html

34. 11. Port Binding
7. Port Binding
Service A Service B Service C
http://<a_dns>:3030 http://<another_dns>:4040 http://<som_other_dns>:5050

35. 11. Port Binding
7. Port Binding
Service A Service B Service C
http://<a_dns>:3030 http://<another_dns>:4040 http://<som_other_dns>:5050

36. 12. Stateless processes
6. Processes
Process A
Process B Process C Process D

37. 12. Stateless processes
6. Processes
Process A
Process B Process C Process D
https://openliberty.io/guides/rest-intro.html

38. 13. Concurrency
8. Concurrency
Web.1
Web.2
Worker.1
Worker.2
Worker.3
Worker.4
Clock.1
Workload diversity (process types)
Scale
(running
processes)

39. 13. Concurrency
8. Concurrency
Web.1
Web.2
Worker.1
Worker.2
Worker.3
Worker.4
Clock.1
Workload diversity (process types)
Scale
(running
processes)

40. 14. Telemetry
NEW
Application

41. 14. Telemetry
NEW
Application
https://openliberty.io/guides/microprofile-metrics.html https://openliberty.io/guides/microprofile-health.html

42. 15. Authentication and authorization
NEW
Application
Authorised
User
Unauthorised
User
RBAC verification

43. 15. Authentication and authorization
NEW
Application
Authorised
User
Unauthorised
User
RBAC verification
https://openliberty.io/guides/microprofile-jwt.html

44. Public or Private Cloud
App
Services
(database,
registry, …)
15-Factor App
App
Artefact repo
Image repo

45. Public or Private Cloud
App
Services
(database,
registry, …)
1. One Codebase,
One Application
15-Factor App
3. Dependency Management
5. Configuration,
Credentials & Code
8. Backing services
4. Design, Build, release, run 11. Stateless Processes
App
11. Port binding
13. Concurrency
7. Disposability
9. Environmental
parity
6. Logs
10. Admin process
Artefact repo
Image repo
2. API First
14. Telemetry
15. Authentication
& Authorization

46. Public or Private Cloud
App
Services
(database,
registry, …)
1. One Codebase,
One Application
15-Factor App
3. Dependency Management
5. Configuration,
Credentials & Code
8. Backing services
4. Design, Build, release, run 11. Stateless Processes
App
11. Port binding
13. Concurrency
7. Disposability
9. Environmental
parity
6. Logs
10. Admin process
Artefact repo
Image repo
2. API First
14. Telemetry
15. Authentication
& Authorization

47. Public or Private Cloud
Kubernetes
Container
App
Container
Services
(database,
registry, …)
Code
Config
A Cloud-native instantiation

48. Hands on
experience

49. Interactive cloud-native labs
https://openliberty.skill
snetwork.site/cloud-
native-java-made-easy-
microprofile-jakarta-ee

50. Open Liberty Guides
https://openliberty.io/guides/

51. Summary

52. Summary:
• Twelve-factor applications = great start
• But… to thrive in the cloud, we need to look beyond the 12 factors
• No excuses!
• Lots of open-source tools and technologies available to help
• Action: Evaluate your own applications against these 15 factors and
consider what you could do to enable them to truly thrive in the
cloud

53. Useful Resources
• General:
• https://openliberty.io/blog/2019/09/05/12-factor-microprofile-kubernetes.html
• https://www.cdta.org/sites/default/files/awards/beyond_the_12-
factor_app_pivotal.pdf
• Design, build, release, run:
• https://developer.ibm.com/devpractices/devops/patterns/make-continuous-
delivery-easier-with-tekton-dashboards/
• https://dzone.com/articles/deploying-microprofile-microservices-with-tekton
• Logging:
• https://developer.ibm.com/videos/use-json-logging-in-open-liberty/
• https://developer.ibm.com/videos/send-open-liberty-logs-to-elastic-stack/
• https://openliberty.io/blog/2021/02/10/ocp-log-forwarding.html
• https://community.ibm.com/community/user/communities/community-
home/librarydocuments/viewdocument?DocumentKey=65596910-8d01-48d2-a99e-
d94794d022af

54. Useful Resources
• Stateless Processes:
• https://openliberty.io/guides/sessions.html
• Concurrency:
• https://developer.ibm.com/technologies/containers/tutorials/autoscale-
application-on-kubernetes-cluster/
• Authentication and Authorisation:
• https://openliberty.io/blog/2021/03/26/MP-JWT-1.2.html
• https://openliberty.io/blog/2020/09/04/securing-open-liberty-azure.html
• Open Liberty Tools:
• https://openliberty.io/blog/2021/04/21/admin-center-21004.html

55. THANK YOU
Grace Jansen
@gracejansen27