Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Open Developer Platform: What Is It and Why Should I Care? Maurizio Pillitu

1,000 views

Published on

Presented at the 2017 Members Meeting.

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Open Developer Platform: What Is It and Why Should I Care? Maurizio Pillitu

  1. 1. Open Developer Platform 2017-06-21 Annual Member’s Meeting, NYC Maurizio Pillitu Devops Director, Symphony Software Foundation @maoo maoo@symphony.foundation What is it and why should I care
  2. 2. 1/14 A set of online services and best practices to expedite the developer productivity of Foundation's project teams. Open Developer Platform What is it
  3. 3. 2/14 Open Developer Platform Architecture Source Code (SCM) Build Test Report Publish Dev Deploy Project Infrastructure
  4. 4. Open Developer Platform Architecture Project Infrastructure Source Code (SCM) Build Test Report Publish Dev Deploy Technology 1 Technology 2 Technology N... Technologies 2/14
  5. 5. Project Infrastructure Source Code (SCM) Build Test Report Publish Technology 1 Technology 2 Technology N... Technologies Incubating Active Archived Project Lifecycle Dev Deploy Open Developer Platform Contribution flow 3/14
  6. 6. 3/14 Open Developer Platform Contribution flow Project Infrastructure Source Code (SCM) Build Test Report Publish Technology 1 Technology 2 Technology N... Technologies Incubating Active Archived Project Lifecycle Contribution Dev Deploy
  7. 7. 4/14 A service-based infrastructure to support committers throughout the entire project lifecycle. Project Infrastructure What is it
  8. 8. Github symphonyoss ✅ User access management (widely adopted) ✅ Git flow (Pull requests + Branch protection) ✅ Github Issues ❗ IP cleanliness Source Code - Github 5/14
  9. 9. Github symphonyoss TRAVIS CI Build and Test ✅ Clojure, Java, Javascript and Python currently tested and documented ✅ Language-specific frameworks/DSLs/platforms for building and testing ✅ Use myget.org for C# projects Build and test - Travis CI 6/14
  10. 10. Github symphonyoss TRAVIS CI Build and Test TRAVIS CI Reporting ✅ Github IdM widely used ❗ Reporting != Validation. Manual checks always needed! ❗ Manage false negatives ❗ Self-governed repos with org-wide configuration ❗ Work in progress: WhiteSource and Fossa Reporting SonarCloud VersionEye Coverity Scan Node Security Bithound Code Climate Github PagesWhiteSource Fossa 7/14
  11. 11. Github symphonyoss TRAVIS CI Build and Test TRAVIS CI Reporting ✅ Foundation-wide license and components whitelist ✅ Identify licenses ❗ Dual licensing ❗ Code-driven ignores (for transitive dependencies and hosted files) Reporting - Legal SonarCloud VersionEye Coverity Scan Node Security Bithound Code Climate Github PagesWhiteSource Fossa 8/14
  12. 12. Github symphonyoss TRAVIS CI Build and Test TRAVIS CI Reporting ✅ Define/customise quality gates ❗ Test coverage is fundamental ❗ Mocked interfaces ❗ Integration testing Reporting - Quality SonarCloud VersionEye Coverity Scan Node Security Bithound Code Climate Github PagesWhiteSource Fossa 9/14
  13. 13. Github symphonyoss TRAVIS CI Build and Test TRAVIS CI Reporting ✅ CVEs based on package name/version ❗ Language-specific static code analysis Reporting - Security SonarCloud VersionEye Coverity Scan Node Security Bithound Code Climate Github PagesWhiteSource Fossa 10/14
  14. 14. Github symphonyoss TRAVIS CI Build and Test TRAVIS CI Reporting ✅ Integration with most important eco-systems ❗ Artifact signing (security) ❗ code-driven automation (ie semantic-release) ❗ Work in progress: Docker Hub Publish TRAVIS CI Artifact publishing PyPI NuGet Docker Hub Maven Central NPMJS 11/14
  15. 15. Github symphonyoss TRAVIS CI Build and Test TRAVIS CI Reporting ✅ Continuous (Dev) Delivery keystone ✅ Containerised deployments ❗ Cloud enablement ❗ Deployment configuration standardisation ❗ Certified image registry Dev Deployment TRAVIS CI Artifact publishing TRAVIS CI Dev Deploy Openshift Online Symphony Dev Pod foundation-dev Rolling deployment Symphony APIs Integration testing 12/14
  16. 16. 13/14 ✓ CLA bot to scan PRs for IP cleanliness ✓ Facilitate cloud enablement ✓ Reporting ○ More tools ○ Improve existing integrations Open Developer Platform Future
  17. 17. 14/14 ❗ Implementing and/or maintaining a modern developer workflow is hard and time-consuming ❗ Outdated tools/processes are enemies of productivity and talent retention ✅ Let us take care of your dev workflow! Open Developer Platform Why should I care
  18. 18. 14/14 ✅ symphonyoss.atlassian.net/wiki ✅ github.com/symphonyoss ✅ symphony.foundation Open Developer Platform Resources
  19. 19. Thanks! Maurizio Pillitu Devops Director, Symphony Software Foundation @maoo maoo@symphony.foundation

×