Automation world under the DevTestSecOps umbrella

Jul 30, 2019Download as PPTX, PDF1 like462 views

By Kostiantyn Severenchuk at Automation in Action: summer conference. Video: https://youtu.be/mvbElkLtY0Y TOPIC DESCRIPTION The DevTestSecOps approach and its implementation on real projects. How to cook it, how to eat it, and its value. Let’s dive deep into the world of automation and its coverage with real examples. Why it is so important? Bonus funny stories as well.

CONFIDENTIAL. Copyright © 2018
DevTestSecOps
Prepared for Automation in action
Jul 2019

2
WHO AM I
Kostiantyn Severenchuk System Architect @Epam Systems
• 10+ years in IT
• DevTestSecOps practice
• Support & Maintenance
• QA/QC
• Build Engineering
• System Engineering
• SRE
• Development???

4
Continuous Value Delivery Through DevOps
Early Feedback | Transparency | Continuous Delivery
Cycle Time Reduction| Optimization
Implement Monitor
DESIGN
DEVELOP INNOVATE
PRODUCT
BACKLOG
OPERATE
Value delivery
Value definition
Adaptive learningValue creation
Agile ITIL
INFRA/OPS
USERS
OPS
BACKLOG
BIZ
DEV/TEST

5
DevOps Capabilities
DevOps
Orchestration
Automation
CI/CD
Configuration
Management
Scalability/
Reliability
Backup/DR
Networking
Security
Monitoring
• Orchestration
• Automation
• Infrastructure as Code
• Platform as a Service
• CI/CD
• Blue-green deployment
• Pipeline as a Code
• Configuration Management
• Scalability/Reliability
• Backup/DR
• Networking
• Security
• Monitoring

20
DevTestSecOps approach in action
Roadmap
Strategy
Dev
Test
Sec
Ops
Perf
Digital
approach
Web Channel
Delivery
SFP
Project
SoftwareFactoryPlatformSFP
DevTestSecOps
Processes
Scope
B a c k l o g
TBC TBC
TBCTBC
TBC
TBC SFP v 1.0.0
SFP v 1.0.1
…
SFP v 1.2.0

22
RELEASE ANTIPATTERNS
• Sitting bleary-eyed in front of Monitor at 2 A.M. the day after the release day, trying to figure out how
to make it work
• Frequent correction to the release process during the course of release
• Frequent calls to the development team to explain why a deployment is going wrong on a release day
Deploying Software
Manually
• Having deployed successfully many times to staging, the deployment into production fails
• Configuration of the system is carried out by modifying the configuration directly on production
systems
• The operations team takes a long time to prepare an environment for the release
Manual Configuration
Management of Production
Environments
• There is little, if any, collaboration between the development team and the people who actually
perform deployments to create this collateral
• Releasing into staging is the first time that operations people interact with the new release
• The bigger the difference between development and production environments is the less realistic the
assumptions that have to be made during development are
Deploying to a Production-
like Environment Only after
Development Is Completed

24
STEPS FOR GOAL ACHIEVEMENT
Automated
Frequent
Provide meaningful feedback

27
Why DevTestSecOps
1
2
3
4
5
Build once, deploy many
Enable self-service and
on-demand capabilities
Leverage SMEs for support and
best practices
Identify opportunities to remove
bottlenecks
Increase and assume
accountability
Why DevTestSecOps

28
ONE STEP CLOSER TO IDEAL WORLD
CI / Build
Server
Builds / Status
Notifications
Artefact
Repository
CI
Dashboard
QA
Cloud
Version
Control
PROD
approval
gateway
Production
Deployment
Mock /
Unit Tests
Сode
Analysis
Code Review
UAT, INT
PERF
PROD
Security
check
Performance
Test
Integration
Test
Functional &
Regression
Test
• Fully Automated CI/CD Pipeline
• Built-in quality and Security gates
• Frequent and fast feedback
Feedback

29
CI/CD TOOLSET REPRESENTATION & AUTOMATION

39
App in Docker vs Performance & Security

This document provides an overview of best practices for securing Kubernetes clusters. It discusses infrastructure protection, Kubernetes internal security, authentication and authorization options, network security, secrets management, container runtime security, and other security tools. Specific recommendations include limiting SSH access, using hardened images, encrypting storage, restricting API access, separating workloads, enabling authentication, implementing role-based access control, using network policies, securely managing secrets, scanning images for vulnerabilities, and auditing events.

MS LAPS protection: portal for secure access to local admin passwordsNikolay Klendar

CI/CD Pipeline as a Code using Jenkins 2Mayank Patel

Mayank Patel from Oildex gave a presentation on Jenkins 2 Pipelines. He discussed how pipelines allow continuous delivery through features like resilience, pausability, and efficiency. Pipelines can be configured as code in source control and provide security and reusability. The presentation covered the Jenkins environment, ideal pipeline flows, important plugins, and included a demo of a sample pipeline configured with Docker.

Standards / Models for Setting Up a Robust TCoE - Maveric SystemsMaveric Systems

This document discusses standards and models for establishing robust Testing Centers of Excellence (TCoE). It identifies key building blocks for a TCoE, including assessments, resourcing, process frameworks, and more. The document then examines various standards and models from the industry that can provide guidance for each building block, such as TPI® for assessments, TMAP® for processes, and COBIT® for governance. Combining approaches from TPI®, TMAP®, and other standards is recommended for creating a well-rounded TCoE. Organizations are advised to identify which standards suit their context as no single model applies universally.

Robot Framework with Python | EdurekaEdureka!

Youtube Link: https://youtu.be/d-KWz7euLlc ** Edureka Python Certification Training: https://www.edureka.co/data-science-python-certification-course ** This Edureka PPT on 'Robot Framework With Python' explains the various aspects of robot framework in python with a use case showing web testing using selenium library. Follow us to never miss an update in the future. YouTube: https://www.youtube.com/user/edurekaIN Instagram: https://www.instagram.com/edureka_learning/ Facebook: https://www.facebook.com/edurekaIN/ Twitter: https://twitter.com/edurekain LinkedIn: https://www.linkedin.com/company/edureka Castbox: https://castbox.fm/networks/505?country=in

TOSCA and OpenTOSCA: TOSCA Introduction and OpenTOSCA Ecosystem OverviewOpenTOSCA

User Acceptance Testing- Evaluate Your System's ComplianceBugRaptors

ネットワークコンフィグ分析ツール Batfish との付き合い方akira6592

Observabilidad de sistemasSoftware Guru

Teste de softwareRafael Sanches

Robot frameworkRochak Bhalla

What is Jenkins | Jenkins Tutorial for Beginners | EdurekaEdureka!

****** DevOps Training : https://www.edureka.co/devops ****** This DevOps Jenkins Tutorial on what is Jenkins ( Jenkins Tutorial Blog Series: https://goo.gl/JebmnW ) will help you understand what is Continuous Integration and why it was introduced. This tutorial also explains how Jenkins achieves Continuous Integration in detail and includes a Hands-On session around Jenkins by the end of which you will learn how to compile a code that is present in GitHub, Review that code and Analyse the test cases present in the GitHub repository. The Hands-On session also explains how to create a build pipeline using Jenkins and how to add Jenkins Slaves. The Hands-On session is performed on an Ubuntu-64bit machine in which Jenkins is installed. To learn how Jenkins can be used to integrate multiple DevOps tools, watch the video titled 'DevOps Tools', by clicking this link: https://goo.gl/up9iwd Check our complete DevOps playlist here: http://goo.gl/O2vo13 Facebook: https://www.facebook.com/edurekaIN/ Twitter: https://twitter.com/edurekain LinkedIn: https://www.linkedin.com/company/edureka

ネットワークの自動化・監視の取り組みについて #netopscoding #npstudyYahoo!デベロッパーネットワーク

Software Engineering - chp8- deploymentLilia Sfaxi

This document discusses deployment processes and best practices. It defines deployment as the activities that make a software system available for use and involve moving approved releases to test and production environments. The document outlines deployment workflows involving development, staging, and production environments. It also discusses concepts like continuous integration, continuous delivery, continuous deployment, and DevOps practices for automating deployment processes.

“見てわかる” ファイバーチャネルSAN基礎講座（第2弾）～FC SAN設計における勘所とは?～Brocade

第6世代（Gen 6）も登場し、注目を集めるファイバーチャネル（FC） SAN。 FC スイッチは多くのデータセンターで広く使われていますが、実際に「触ったことがある」というエンジニアの方はそれほど多くないのではないでしょうか？「触ってみたいけれど、なかなか機会がなくて・・・」そんな方にも判りやすく、“見てわかる” ファイバーチャネルSAN基礎講座を開催しています。本シリーズでは、ブロケードFCスイッチのオペレーションを通して、FC SANの設計・導入・運用を学んでいきます。第1弾の検討編に引き続き、第2弾は設計編を予定しています。 FC SANを設計する際に、考えなければいけないポイントは？気をつけなければいけない落とし穴は？なかなか人には聞けないコツを、長年お客さまやパートナー様のFC SAN設計をサポートしてきた講師が、その経験から惜しみなくご紹介します。 ---------- 第1回～まず理解しよう！基本の “キ”～ https://www.slideshare.net/brocade/san1-62678292 第2回～FC SAN設計における勘所とは?～ https://www.slideshare.net/brocade/san2fc-san 第3回～間違わない！FC SAN導入のヒントとコツ～ https://www.slideshare.net/brocade/san3fc-san 第4回～続・間違わない！FC SAN導入のヒントとコツ～ https://www.slideshare.net/brocade/san4fc-san 第5回～さあ、いよいよ、運用です！～ https://www.slideshare.net/brocade/san5 第6回～困った時もこれで安心(?)、FC SANにおけるトラブルシューティングのコツとは?～ https://www.slideshare.net/brocade/san6-fc-san-71206812

Test Process Maturity Measurement and Related MeasurementsSTAG Software Private Limited

Continuous Integration, Build Pipelines and Continuous DeploymentChristopher Read

This document discusses core concepts and best practices for continuous integration (CI), build pipelines, and deployment. It recommends having a single source code repository, automating builds and testing, publishing the latest build, committing code frequently, building every commit, testing in production environments, keeping builds fast, ensuring all team members can see build status, automating deployment, and making CI and continuous deployment a collaborative effort between developers and system administrators. The goal is to improve quality, time to market, and confidence through practices that provide fast feedback on code changes.

Monitoring at the Speed of DevOpsDevOps.com

Manual Monitoring Slows Deployment and Introduces Risk How often do you update your applications? “We deploy multiple times per day” seems to be the new badge of honor for DevOps. But what you don’t often hear about are the problems caused by process acceleration as a result of continuous integration and continuous deployment (CI/CD). Rapid introduction of performance problems and errors Rapid introduction of new endpoints causing monitoring issues Lengthy root cause analysis as number of services expand When implementing CI/CD, ANY manual intervention slows down the entire pipeline. You can’t achieve complete CI/CD without automating your monitoring processes (just like you did for integration, testing, and deployment).

Ethermint 2.0: An Ethereum Scaling Solution by CosmosTendermint Inc

Cosmos & Tendermint announces the Ethereum Virtual Machine (EVM) module for the Cosmos SDK. The Cosmos SDK easily allows developers to build their own interoperable blockchain. The EVM module lets Ethereum developers start experimenting a Proof of Stake today. HD Slides: https://github.com/cosmos/cosmos-academy/raw/master/presentations/2018-10-31-devcon4/ethermint-2.0.pdf Website: https://cosmos.network

CONTINUOUS INTEGRATION WITH JENKINS AND GITBenjamin Lutaaya

The document discusses continuous integration using Jenkins and Git. Continuous integration involves integrating code changes frequently from developers on a project to avoid integration problems late in a project. Jenkins is a free and open source continuous integration server that can be used with version control systems like Git to automatically build code, run tests, and generate reports each time changes are committed to the repository. Setting up continuous integration involves installing Jenkins, configuring a Git repository, and configuring Jenkins to clone the repository, build the code, run tests, and generate reports on each change notification from Git.

Docker with RHEL7 技術勉強会Etsuji Nakai

Testing FrameworksMoataz Nabil

Testing frameworks provide an execution environment for automated tests. The main types are modular, data-driven, and keyword-driven frameworks. Modular frameworks organize tests into independent scripts representing application modules. Data-driven frameworks store test data and expected results in external files to reduce code duplication. Keyword-driven frameworks use external files to store test actions and data. Hybrid frameworks combine advantages of the different approaches. While frameworks work with waterfall models, agile methodologies benefit more from test-driven development and behavior-driven development which integrate testing throughout development.

DevOps introAbdelrhman Shawky

This document provides an introduction to DevOps. It discusses what DevOps is, including continuous integration and continuous delivery pipelines. It describes the duties of a DevOps engineer, such as developing solutions for continuous delivery, infrastructure strategy, security, and more. It also covers topics like what is included in a CI/CD pipeline, securing a CI/CD pipeline, and common DevOps tools and technologies.

TestNGPrabhanshu Saraswat

This document provides an overview of the TestNG testing framework. It describes TestNG as an open source testing framework that does not require a main method and is efficient for testing. It supports features like annotations for test execution, HTML reports, priority execution of tests, dependency of tests, data-driven testing using data providers, and parallel/group execution of tests. Examples are provided of using TestNG annotations like @Test, @BeforeMethod, @AfterMethod, @DataProvider etc. to implement priority, dependency, parallel and data-driven testing. The document also explains how to configure XML files to run tests in parallel, with groups or serially.

Opa gatekeeperRita Zhang

This document discusses OPA Gatekeeper, which is an admission webhook that helps enforce policies and strengthen governance in Kubernetes clusters. It provides customizable admission controls via configuration instead of code. Gatekeeper uses the Open Policy Agent (OPA) to evaluate policies written in Rego against objects in the Kubernetes API. It started as kube-mgmt and has evolved through several versions. Gatekeeper allows defining policies as templates with parameters and matching rules, and instances of those policies that are enforced as custom resources. It provides capabilities like auditing, CI/CD integration, and replicating cluster state for offline policy checking. The document demonstrates example policies and invites the reader to get involved in the open source project.

Network Protocol Testing Using Robot FrameworkPayal Jain

Docker 基本のおさらいNaoki Nagazumi

CI and CD with JenkinsMartin Málek

Continuous integration involves developers committing code changes daily which are then automatically built and tested. Continuous delivery takes this further by automatically deploying code changes that pass testing to production environments. The document outlines how Jenkins can be used to implement continuous integration and continuous delivery through automating builds, testing, and deployments to keep the process fast, repeatable and ensure quality.

Automating API Generation and DevOps Pipeline for On-Prem SystemsDevOps.com

On-premise applications are problematic for DevOps because APIs are typically hand-written by a team outside the DevOps process, making automation impossible. Additionally, SOA middleware - which facilitates the communication between the API and the on-premise system - slows down the process. This webinar will examine how to accelerate the build and test cycle by automating microservice-based API generation and bypassing current ESB and SOA middleware. In this webinar, you will learn: The importance of thinking about on-premise applications as part of your DevOps process How to automatically generate APIs directly from on-premise systems Why microservices better encapsulate the communications to your legacy systems when doing DevOps development How to easily generate Java based microservices from your on-premise system Why SOA middleware doesn’t align with the DevOps process Real-world implementation: Eldad Omer from Ayalon Insurance will discuss how microservice-based APIs helped create their DevOps process by integrating common DevOps tools( Jira, Git, Bitbucket, Docker, Jenkins, and Kubernetes) to their on-prem systems. This reduced policy creation time 1000%.

Back To Basicskamalikamj

This document provides an introduction to DevOps concepts including continuous integration, continuous delivery, infrastructure as code, and configuration management. It discusses the need for DevOps to improve processes like manual setups, lack of change tracking, and long release cycles. Key DevOps practices include infrastructure as code, configuration management, continuous integration, and continuous delivery. The document demonstrates a continuous delivery pipeline using Gocd.

More Related Content

What's hot (20)

Observabilidad de sistemasSoftware Guru

Teste de softwareRafael Sanches

Robot frameworkRochak Bhalla

What is Jenkins | Jenkins Tutorial for Beginners | EdurekaEdureka!

ネットワークの自動化・監視の取り組みについて #netopscoding #npstudyYahoo!デベロッパーネットワーク

Software Engineering - chp8- deploymentLilia Sfaxi

“見てわかる” ファイバーチャネルSAN基礎講座（第2弾）～FC SAN設計における勘所とは?～Brocade

Test Process Maturity Measurement and Related MeasurementsSTAG Software Private Limited

Continuous Integration, Build Pipelines and Continuous DeploymentChristopher Read

Monitoring at the Speed of DevOpsDevOps.com

Ethermint 2.0: An Ethereum Scaling Solution by CosmosTendermint Inc

CONTINUOUS INTEGRATION WITH JENKINS AND GITBenjamin Lutaaya

Docker with RHEL7 技術勉強会Etsuji Nakai

Testing FrameworksMoataz Nabil

DevOps introAbdelrhman Shawky

TestNGPrabhanshu Saraswat

Opa gatekeeperRita Zhang

Network Protocol Testing Using Robot FrameworkPayal Jain

Docker 基本のおさらいNaoki Nagazumi

CI and CD with JenkinsMartin Málek

Observabilidad de sistemasSoftware Guru

Teste de softwareRafael Sanches

Robot frameworkRochak Bhalla

What is Jenkins | Jenkins Tutorial for Beginners | EdurekaEdureka!

ネットワークの自動化・監視の取り組みについて #netopscoding #npstudyYahoo!デベロッパーネットワーク

Software Engineering - chp8- deploymentLilia Sfaxi

“見てわかる” ファイバーチャネルSAN基礎講座（第2弾）～FC SAN設計における勘所とは?～Brocade

Test Process Maturity Measurement and Related MeasurementsSTAG Software Private Limited

Continuous Integration, Build Pipelines and Continuous DeploymentChristopher Read

Monitoring at the Speed of DevOpsDevOps.com

Ethermint 2.0: An Ethereum Scaling Solution by CosmosTendermint Inc

CONTINUOUS INTEGRATION WITH JENKINS AND GITBenjamin Lutaaya

Docker with RHEL7 技術勉強会Etsuji Nakai

Testing FrameworksMoataz Nabil

DevOps introAbdelrhman Shawky

TestNGPrabhanshu Saraswat

Opa gatekeeperRita Zhang

Network Protocol Testing Using Robot FrameworkPayal Jain

Docker 基本のおさらいNaoki Nagazumi

CI and CD with JenkinsMartin Málek

Similar to Automation world under the DevTestSecOps umbrella (20)

Automating API Generation and DevOps Pipeline for On-Prem SystemsDevOps.com

Back To Basicskamalikamj

DellEMC Forum NYC - DevOps and Digital Trans vPublicDon Demcsak

This document discusses DevOps and digital transformation. It begins by outlining an agenda and introducing the speaker. It then discusses how software delivery currently works in a very manual way versus how it could work using an automated continuous delivery pipeline with DevOps. It emphasizes aligning, building, and improving such a pipeline. Finally, it provides key takeaways about taking an iterative approach to DevOps transformation and using it to enable faster delivery of new ideas and tools for digital transformation.

DevOps - Motivadores e BenefíciosFlávio Secchieri Mariotti

DevOps Simplex Services .pdfDebasish Das

My personal story from azure it pro to azure dev opsnj-azure

This document provides an agenda and summary for a presentation on how an Azure IT Pro embraced DevOps practices. The presentation discusses how the presenter started as an Azure IT Pro managing infrastructure, then learned DevOps practices like using Azure Resource Manager templates, infrastructure as code, and continuous deployment. It provides demos of authoring ARM templates in Visual Studio and "DevOps-ing" a web app. The presentation aims to help other Azure IT Pros adopt DevOps practices to deploy infrastructure and applications faster and more reliably.

What is DevOps?Mesut Güneş

The document discusses DevOps practices like continuous integration (CI) and continuous delivery/deployment (CD). It explains that DevOps aims to improve software development and operations by increasing automation, reducing deployment times, and enabling more frequent and safer software releases. CI principles include automating builds, testing, and deployments. CD builds on CI by further automating the software release process and reducing risks of major releases.

Change Management in Hybrid landscapes 2017Chris Kernaghan

Dev ops conceptProfessional Guru

Introduction to 5w’s of DevOpsCygnet Infotech

DevOps - The Key to Rapid Productization (Introduction to the 5C's of DevOps)Cygnet Infotech

Continuous Delivery: why ? where to start ? how to scale ?Jean-Philippe Briend

This document provides an overview of continuous delivery and how to get started with it. It defines key terms like continuous integration, continuous delivery, and continuous deployment. It discusses the benefits of continuous delivery like delivering value faster and with higher quality. It then presents several maturity models for assessing an organization's continuous delivery capabilities. It provides recommendations for where to start the continuous delivery journey, such as focusing on automating deployments and environments first. Finally, it discusses challenges of scaling continuous delivery across large organizations.

Enterprise DevOps and the Modern Mainframe Webcast PresentationCompuware

Compuware and CloudBees demonstrate how you can apply modern DevOps practices to your mainframe applications using Compuware ISPW and Topaz for Total Test with CloudBees Jenkins. Compuware Product Manager Steve Kansa and CloudBees DevOps Evangelist Brian Dawson will: - Position the mainframe as part of your DevOps and CI/CD journey - Explain how Jenkins automates mainframe source code management and testing - Demo a CI/CD workflow on a COBOL application Watch the full presentation on YouTube: https://www.youtube.com/watch?v=x4MWrPy3bKM.

Cloud and Network Transformation using DevOps methodology : Cisco Live 2015Vimal Suba

Microservices at Scale: How to Reduce Overhead and Increase Developer Product...DevOps.com

As a cloud native application grows in size—more microservices, more dependencies, more teams—there’s a corresponding increase in… Complexity: Over time, the application becomes a lot harder for a single developer to reason about and contribute to. Staying on top of READMEs and managing cross-team communication is practically a full-time job. Scaling challenges: The reality of building, deploying, and testing a 100+ service distributed application means developers are going to spend a lot of time sitting around waiting. But it doesn’t have to end up this way, and there are concrete steps that DevOps engineers can take to keep their developers moving quickly even as an application grows. In this webinar, we’ll show you how to use open source products to: Make it easy for your developers to code and run on-demand tests against a production-like environment—without having to constantly deal with the complexity that comes with a large application Codify the relationship between all your services and tests, making your system self-documented and easy to understand Keep your integration tests running fast so that devs can more easily write and debug their tests and get the quick feedback loops they need Facilitate remote, in-cluster development and give every developer their own isolated namespace—and never again ask a developer to deploy the application on their laptop

КОСТЯНТИН СЕВЕРЕНЧУК «Monitoring and Automation in DevTestSecOps world» Lviv ...UA DevOps Conference

DevOps in the Hybrid CloudRichard Irving

DevOps aims to improve collaboration between development and operations teams to accelerate software delivery cycles and reduce risks. This allows for more frequent and reliable software releases while incorporating customer and end user feedback. The document discusses how DevOps addresses inefficiencies in traditional software development models and leverages practices like continuous integration, delivery, deployment and monitoring. It also explores how DevOps and hybrid cloud environments can help organizations improve customer experiences through faster and more reliable application updates.

OpenDevOps 2019 - Disconnected pipelines the missing linkEmerasoft, solutions to collaborate

This document discusses connecting pipelines across software delivery to address challenges from cloud adoption and increasing delivery speed. It identifies four "disconnects" that can disturb businesses: 1) CI/CD happening without visibility, 2) lack of tool integrations, 3) insufficient focus on security and operations, and 4) disconnect between business and IT delivery processes. The document advocates connecting CI/CD, tools, security/operations, and business/IT processes through approaches like integrating development tools into pipelines, embedding security checks in pipelines, and connecting business release planning to automated IT execution. This helps maximize the speed of business value delivery through DevOps and overcome challenges of scaling practices across large organizations.

Pivotal korea transformation_strategy_seminar_enterprise_dev_ops_20160630_v1.0minseok kim

Accelerate Sitecore DevOps on Microsoft AzurePerficient, Inc.

Depending on their size and complexity, content management systems such as Sitecore can require various workflows and tools for DevOps management. The choice in processes largely depends upon the scale and depth of your DevOps projects. Deploying DevOps strategies on Microsoft Azure makes it easy to convert your network, virtual machines, databases, and more from infrastructure into code, enabling you to increase speed and reduce risk. We discussed the benefits of Sitecore DevOps on Microsoft Azure, including using Microsoft Azure and Microsoft Azure (VSTS) to: -Automate the build-out of Sitecore environments -Automate code and content deployment -Use Azure Resource Manager templates, PowerShell, and -VSTS to provision Sitecore environments -Automate Sitecore installations -Move your Sitecore databases into Azure SQL

Automating API Generation and DevOps Pipeline for On-Prem SystemsDevOps.com

Back To Basicskamalikamj

DellEMC Forum NYC - DevOps and Digital Trans vPublicDon Demcsak

DevOps - Motivadores e BenefíciosFlávio Secchieri Mariotti

DevOps Simplex Services .pdfDebasish Das

My personal story from azure it pro to azure dev opsnj-azure

What is DevOps?Mesut Güneş

Change Management in Hybrid landscapes 2017Chris Kernaghan

Dev ops conceptProfessional Guru

Introduction to 5w’s of DevOpsCygnet Infotech

DevOps - The Key to Rapid Productization (Introduction to the 5C's of DevOps)Cygnet Infotech

Continuous Delivery: why ? where to start ? how to scale ?Jean-Philippe Briend

Enterprise DevOps and the Modern Mainframe Webcast PresentationCompuware

Cloud and Network Transformation using DevOps methodology : Cisco Live 2015Vimal Suba

Microservices at Scale: How to Reduce Overhead and Increase Developer Product...DevOps.com

КОСТЯНТИН СЕВЕРЕНЧУК «Monitoring and Automation in DevTestSecOps world» Lviv ...UA DevOps Conference

DevOps in the Hybrid CloudRichard Irving

OpenDevOps 2019 - Disconnected pipelines the missing linkEmerasoft, solutions to collaborate

Pivotal korea transformation_strategy_seminar_enterprise_dev_ops_20160630_v1.0minseok kim

Accelerate Sitecore DevOps on Microsoft AzurePerficient, Inc.

More from Katherine Golovinova (20)

Contract-based Testing Approach as a Tool for Shift LefKatherine Golovinova

The document discusses contract based testing and shifting testing left. It describes testing at different levels, including UI, integration, and unit testing. It outlines how to implement contract testing between a consumer and provider by creating pacts, publishing them to a broker, and having the provider verify against the pacts. Benefits include apps working together continuously, avoiding duplicative work, and visibility into dependencies. The presentation encourages attendees to try out contract testing.

Speed up application testing with azure container instancesKatherine Golovinova

SPEAKER: Anton Boyko, Founder and main speaker of the Ukrainian Microsoft Azure Community. TOPIC DESCRIPTION: We recently faced an issue with our test automation on a huge project. We had become victims of our own success: we were focused on eliminating manual testing efforts by increasing automated test coverage, but at some point, our single 8CPU/32GB test agent was not enough anymore. We used to wait for more than an hour for all our tests to run. We started thinking about how to improve the situation. The concept that will be presented is about utilizing Azure Container Instances as a hosting platform for spinning up multiple parallel environments and running all our test automation against them in parallel. This session will be useful for those who want to reduce total product cost by reducing team members’ idle time. I will share code examples that you will be able to use in your own environment.

Analyzing application activities with KSQL and ElasticsearchKatherine Golovinova

IEVGENII VLASYUK, Delivery manager @EPAM Capturing application events in distributed system is becoming a more and more common task. The modern Kafka eco-system can help to solve this task in an easy and elegant way. A bunch of already-created sources and sinks, SQL syntax and ease of joining data streams will save a lot of time and reduce complexity. However, capturing data is only half the battle. We will also explore how to make use of Elasticsearch to provide advanced analysis of user activities.

Testing Big Data solutions fast and furiouslyKatherine Golovinova

DMYTRO SOBKO, Lead automation QA engineer @EPAM. We are well aware of how to test the REST API with N endpoints, with relational and non-relational (NonSQL) databases. Same thing with UI testing. Frameworks like Selenium, Selenide, Selenoid are not a mystery to anyone. Moreover, creating a reliable, extensible and really cool automated test framework for such applications from scratch is not difficult. But what about BigData projects that have no back-end or front-end in the classical sense? How can we test them? What parts should we cover with tests in the first place? And, besides, how do we introduce automation and make it an effective way for such projects? Dmytro will show you how to create a test framework for Cloud Big Data projects from scratch and to develop it in the most optimal way using the most interesting technologies.

"Fast & Fail in real life of DevTestSecOps"Katherine Golovinova

Kostiantyn Severenchuk is a Systems Architect with 10+ years’ experience in IT production, including support/QA-QC/System Engineering & DevOps. TOPIC TOPIC DESCRIPTION: Let’s talk about best practices and how they are helping us to adapt/survive and resolve any issues asap; real-life examples and implementations will be provided. Link to video: https://epa.ms/devops-meetup-nov2019

Geodistributed databases - what, how, and why?Katherine Golovinova

SPEAKER: Yevhen Nedaskivskyi is a professional with over ten years of experience in databases. MCP, MCSA, MCSE. He was twice awarded the Microsoft Data Platform. Regular speaker at IT conferences and seminars. Co-organizer of Ukrainian Data Community Kyiv. He also teaches databases at Igor Sikorsky Kyiv Polytechnic Institute. In this session, we will review geographically distributed databases and their architecture. The speaker will tell about products that exist on market, their features and principles of work, and he will share his own experience in the design and implementation of similar solutions. Attenders will learn why such technologies are needed, what tasks they solve, and what principles they are based on. The lecturer will also tell where to start if there is a need to implement a geodistributed database on your project. The style is aimed at a wide range of listeners, and the presentation requires minimal knowledge of DBMS principals and database theories.

COSMOS DB - geodistributed database for anyoneKatherine Golovinova

SPEAKER: Illia Lubenets is a Lead Software Engineer at EPAM. Microsoft Azure MVP. Co-founder of .NET Core Ukrainian User Group. He is interested in distributed systems development, mainly based on Microsoft Azure. Active meetup and conference organizer and speaker. COSMOS DB is an interesting database developed by Microsoft. In this session, we will look at what opportunities it provides and what problems can be solved with this database. Since this database is an SAAS service, its performance depends on how much you pay for it. The speaker will tell you how to minimize the coefficient in this dependency and what approaches you should take when working with COSMOS.

Migrating from a monolith to microservices – is it worth it?Katherine Golovinova

IURII IVON, EPAM Solution Architect, Microsoft Competency Center Expert. The term ‘microservices’ has become so popular that many people see it as a silver bullet for all architectural problems, or at least as a trend that should be followed. If your project is a monolith today, does it make sense to move towards microservices? This presentation overviews painful issues to be considered when migrating from a monolith to microservice architecture, ways to solve them, and ideas on the feasibility of such migration.

Azure Functions - the evolution of microservices platform or marketing gibber...Katherine Golovinova

ANTON BOYKO, Founder and main speaker of Ukrainian Microsoft Azure Community. When many people hear the word microservices, they think of Kubernetes. And it’s hard to blame them: the utilization of Docker containerization together with Kubernetes orchestration really seems like a match made in heaven. But, there is a new name in town: serverless (or FaaS). It seems it can offer you all the stuff that Kubernetes has and more. Native support for .NET, Java, Python, Node. Out-of-the-box binding for things like HTTP incoming requests (for Web API), incoming queue message (for processing async tasks), time-based trigger, etc. It also comes with micro billing (you pay only for execution time, not for idle time) and 0-to-infinite scalability. But is it all too good to be true? Aren't there any drawbacks? Is it all a huge marketing scheme to make us actually pay more? Let's find out.

Gatling and Page Object: a way to performance testingKatherine Golovinova

Automation of Security scanning easy or cheeseKatherine Golovinova

By Karen Florykian at Automation in Action: summer conference. Video: https://youtu.be/4fUwEvnFo_Q TOPIC DESCRIPTION I will share my experience of SDLC enablement on the enterprise level. In the process I will reveal pitfalls and gotchas about the building of a developer-friendly CI-enabled service using industry standard static and dynamic scanning tools, CI platforms, ReportPortal, Carrier platform and Jira integration service.

Gradle plugins for Test AutomationKatherine Golovinova

By Maksym Barvinskyi at Automation in Action: summer conference. Video: https://youtu.be/YoIJ8AcS9Og TOPIC DESCRIPTION In this talk we are going to meet a powerful tool – Gradle plugins – and explore what kinds of problems they can solve in Test Automation. These could be additional quality gates for an automation framework build, or automatic code generation of SUT API endpoints and entities that could be used in tests, or other areas depending on your needs. We will create a couple of plugins right there during the talk and discuss their benefits and drawbacks when compared to other options. By the end, you are going to have one more tool in your Test Automation toolset, and be better prepared for solving different kinds of automation problems in your current and future projects.

"Disaster Recovery in Azure" by Viktor KocherhaKatherine Golovinova

"Certified Kubernetes Administrator Exam – how it was" by Andrii FedenishinKatherine Golovinova

"Modern CI/CD" by Dmytro BatiievskyiKatherine Golovinova

EPAM DevOps community meetup: Building CI/CD for microservice architectureKatherine Golovinova

EPAM DevOps community meetup: Designing bare metal Kubernetes clustersKatherine Golovinova

Hosting Microservices in Microsoft AzureKatherine Golovinova

Infrastructure as Code for Azure: ARM or Terraform?Katherine Golovinova

Azure IoT Hub: what is it and why we select other solution (production projec...Katherine Golovinova

Contract-based Testing Approach as a Tool for Shift LefKatherine Golovinova

Speed up application testing with azure container instancesKatherine Golovinova

Analyzing application activities with KSQL and ElasticsearchKatherine Golovinova

Testing Big Data solutions fast and furiouslyKatherine Golovinova

"Fast & Fail in real life of DevTestSecOps"Katherine Golovinova

Geodistributed databases - what, how, and why?Katherine Golovinova

COSMOS DB - geodistributed database for anyoneKatherine Golovinova

Migrating from a monolith to microservices – is it worth it?Katherine Golovinova

Azure Functions - the evolution of microservices platform or marketing gibber...Katherine Golovinova

Gatling and Page Object: a way to performance testingKatherine Golovinova

Automation of Security scanning easy or cheeseKatherine Golovinova

Gradle plugins for Test AutomationKatherine Golovinova

"Disaster Recovery in Azure" by Viktor KocherhaKatherine Golovinova

"Certified Kubernetes Administrator Exam – how it was" by Andrii FedenishinKatherine Golovinova

"Modern CI/CD" by Dmytro BatiievskyiKatherine Golovinova

EPAM DevOps community meetup: Building CI/CD for microservice architectureKatherine Golovinova

EPAM DevOps community meetup: Designing bare metal Kubernetes clustersKatherine Golovinova

Hosting Microservices in Microsoft AzureKatherine Golovinova

Infrastructure as Code for Azure: ARM or Terraform?Katherine Golovinova

Azure IoT Hub: what is it and why we select other solution (production projec...Katherine Golovinova

Recently uploaded (20)

Greenhouse_Monitoring_Presentation.pptx.hpbmnnxrvb

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

How analogue intelligence complements AIPaul Rowe

Artificial Intelligence is providing benefits in many areas of work within the heritage sector, from image analysis, to ideas generation, and new research tools. However, it is more critical than ever for people, with analogue intelligence, to ensure the integrity and ethical use of AI. Including real people can improve the use of AI by identifying potential biases, cross-checking results, refining workflows, and providing contextual relevance to AI-driven results. News about the impact of AI often paints a rosy picture. In practice, there are many potential pitfalls. This presentation discusses these issues and looks at the role of analogue intelligence and analogue interfaces in providing the best results to our audiences. How do we deal with factually incorrect results? How do we get content generated that better reflects the diversity of our communities? What roles are there for physical, in-person experiences in the digital world?

Technology Trends in 2025: AI and Big Data AnalyticsInData Labs

At InData Labs, we have been keeping an ear to the ground, looking out for AI-enabled digital transformation trends coming our way in 2025. Our report will provide a look into the technology landscape of the future, including: -Artificial Intelligence Market Overview -Strategies for AI Adoption in 2025 -Anticipated drivers of AI adoption and transformative technologies -Benefits of AI and Big data for your business -Tips on how to prepare your business for innovation -AI and data privacy: Strategies for securing data privacy in AI models, etc. Download your free copy nowand implement the key findings to improve your business.

AI and Data Privacy in 2025: Global TrendsInData Labs

In this infographic, we explore how businesses can implement effective governance frameworks to address AI data privacy. Understanding it is crucial for developing effective strategies that ensure compliance, safeguard customer trust, and leverage AI responsibly. Equip yourself with insights that can drive informed decision-making and position your organization for success in the future of data privacy. This infographic contains: -AI and data privacy: Key findings -Statistics on AI data privacy in the today’s world -Tips on how to overcome data privacy challenges -Benefits of AI data security investments. Keep up-to-date on how AI is reshaping privacy standards and what this entails for both individuals and organizations.

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

Noah Loul Shares 5 Steps to Implement AI Agents for Maximum Business Efficien...Noah Loul

Artificial intelligence is changing how businesses operate. Companies are using AI agents to automate tasks, reduce time spent on repetitive work, and focus more on high-value activities. Noah Loul, an AI strategist and entrepreneur, has helped dozens of companies streamline their operations using smart automation. He believes AI agents aren't just tools—they're workers that take on repeatable tasks so your human team can focus on what matters. If you want to reduce time waste and increase output, AI agents are the next move.

HCL Nomad Web – Best Practices und Verwaltung von Multiuser-Umgebungenpanagenda

Webinar Recording: https://www.panagenda.com/webinars/hcl-nomad-web-best-practices-und-verwaltung-von-multiuser-umgebungen/ HCL Nomad Web wird als die nächste Generation des HCL Notes-Clients gefeiert und bietet zahlreiche Vorteile, wie die Beseitigung des Bedarfs an Paketierung, Verteilung und Installation. Nomad Web-Client-Updates werden “automatisch” im Hintergrund installiert, was den administrativen Aufwand im Vergleich zu traditionellen HCL Notes-Clients erheblich reduziert. Allerdings stellt die Fehlerbehebung in Nomad Web im Vergleich zum Notes-Client einzigartige Herausforderungen dar. Begleiten Sie Christoph und Marc, während sie demonstrieren, wie der Fehlerbehebungsprozess in HCL Nomad Web vereinfacht werden kann, um eine reibungslose und effiziente Benutzererfahrung zu gewährleisten. In diesem Webinar werden wir effektive Strategien zur Diagnose und Lösung häufiger Probleme in HCL Nomad Web untersuchen, einschließlich - Zugriff auf die Konsole - Auffinden und Interpretieren von Protokolldateien - Zugriff auf den Datenordner im Cache des Browsers (unter Verwendung von OPFS) - Verständnis der Unterschiede zwischen Einzel- und Mehrbenutzerszenarien - Nutzung der Client Clocking-Funktion

Mobile App Development Company in Saudi ArabiaSteve Jonas

EmizenTech is a globally recognized software development company, proudly serving businesses since 2013. With over 11+ years of industry experience and a team of 200+ skilled professionals, we have successfully delivered 1200+ projects across various sectors. As a leading Mobile App Development Company In Saudi Arabia we offer end-to-end solutions for iOS, Android, and cross-platform applications. Our apps are known for their user-friendly interfaces, scalability, high performance, and strong security features. We tailor each mobile application to meet the unique needs of different industries, ensuring a seamless user experience. EmizenTech is committed to turning your vision into a powerful digital product that drives growth, innovation, and long-term success in the competitive mobile landscape of Saudi Arabia.

ThousandEyes Partner Innovation Updates for May 2025ThousandEyes

Drupalcamp Finland – Measuring Front-end Energy ConsumptionExove

Massive Power Outage Hits Spain, Portugal, and France: Causes, Impact, and On...Aqusag Technologies

Linux Professional Institute LPIC-1 Exam.pdfRHCSA Guru

UiPath Community Berlin: Orchestrator API, Swagger, and Test Manager APIUiPathCommunity

Join this UiPath Community Berlin meetup to explore the Orchestrator API, Swagger interface, and the Test Manager API. Learn how to leverage these tools to streamline automation, enhance testing, and integrate more efficiently with UiPath. Perfect for developers, testers, and automation enthusiasts! 📕 Agenda Welcome & Introductions Orchestrator API Overview Exploring the Swagger Interface Test Manager API Highlights Streamlining Automation & Testing with APIs (Demo) Q&A and Open Discussion Perfect for developers, testers, and automation enthusiasts! 👉 Join our UiPath Community Berlin chapter: https://community.uipath.com/berlin/ This session streamed live on April 29, 2025, 18:00 CET. Check out all our upcoming UiPath Community sessions at https://community.uipath.com/events/.

TrsLabs - Fintech Product & Business ConsultingTrs Labs

Hybrid Growth Mandate Model with TrsLabs Strategic Investments, Inorganic Growth, Business Model Pivoting are critical activities that business don't do/change everyday. In cases like this, it may benefit your business to choose a temporary external consultant. An unbiased plan driven by clearcut deliverables, market dynamics and without the influence of your internal office equations empower business leaders to make right choices. Getting things done within a budget within a timeframe is key to Growing Business - No matter whether you are a start-up or a big company Talk to us & Unlock the competitive advantage

IEDM 2024 Tutorial2_Advances in CMOS Technologies and Future Directions for C...organizerofv

Complete Guide to Advanced Logistics Management Software in Riyadh.pdfSoftware Company

Explore the benefits and features of advanced logistics management software for businesses in Riyadh. This guide delves into the latest technologies, from real-time tracking and route optimization to warehouse management and inventory control, helping businesses streamline their logistics operations and reduce costs. Learn how implementing the right software solution can enhance efficiency, improve customer satisfaction, and provide a competitive edge in the growing logistics sector of Riyadh.

DevOpsDays Atlanta 2025 - Building 10x Development Organizations.pptxJustin Reock

Building 10x Organizations with Modern Productivity Metrics 10x developers may be a myth, but 10x organizations are very real, as proven by the influential study performed in the 1980s, ‘The Coding War Games.’ Right now, here in early 2025, we seem to be experiencing YAPP (Yet Another Productivity Philosophy), and that philosophy is converging on developer experience. It seems that with every new method we invent for the delivery of products, whether physical or virtual, we reinvent productivity philosophies to go alongside them. But which of these approaches actually work? DORA? SPACE? DevEx? What should we invest in and create urgency behind today, so that we don’t find ourselves having the same discussion again in a decade?

How Can I use the AI Hype in my Business Context?Daniel Lehner

𝙄𝙨 𝘼𝙄 𝙟𝙪𝙨𝙩 𝙝𝙮𝙥𝙚? 𝙊𝙧 𝙞𝙨 𝙞𝙩 𝙩𝙝𝙚 𝙜𝙖𝙢𝙚 𝙘𝙝𝙖𝙣𝙜𝙚𝙧 𝙮𝙤𝙪𝙧 𝙗𝙪𝙨𝙞𝙣𝙚𝙨𝙨 𝙣𝙚𝙚𝙙𝙨? Everyone’s talking about AI but is anyone really using it to create real value? Most companies want to leverage AI. Few know 𝗵𝗼𝘄. ✅ What exactly should you ask to find real AI opportunities? ✅ Which AI techniques actually fit your business? ✅ Is your data even ready for AI? If you’re not sure, you’re not alone. This is a condensed version of the slides I presented at a Linkedin webinar for Tecnovy on 28.04.2025.

Linux Support for SMARC: How Toradex Empowers Embedded DevelopersToradex

Toradex brings robust Linux support to SMARC (Smart Mobility Architecture), ensuring high performance and long-term reliability for embedded applications. Here’s how: • Optimized Torizon OS & Yocto Support – Toradex provides Torizon OS, a Debian-based easy-to-use platform, and Yocto BSPs for customized Linux images on SMARC modules. • Seamless Integration with i.MX 8M Plus and i.MX 95 – Toradex SMARC solutions leverage NXP’s i.MX 8 M Plus and i.MX 95 SoCs, delivering power efficiency and AI-ready performance. • Secure and Reliable – With Secure Boot, over-the-air (OTA) updates, and LTS kernel support, Toradex ensures industrial-grade security and longevity. • Containerized Workflows for AI & IoT – Support for Docker, ROS, and real-time Linux enables scalable AI, ML, and IoT applications. • Strong Ecosystem & Developer Support – Toradex offers comprehensive documentation, developer tools, and dedicated support, accelerating time-to-market. With Toradex’s Linux support for SMARC, developers get a scalable, secure, and high-performance solution for industrial, medical, and AI-driven applications. Do you have a specific project or application in mind where you're considering SMARC? We can help with Free Compatibility Check and help you with quick time-to-market For more information: https://www.toradex.com/computer-on-modules/smarc-arm-family

Greenhouse_Monitoring_Presentation.pptx.hpbmnnxrvb

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

How analogue intelligence complements AIPaul Rowe

Technology Trends in 2025: AI and Big Data AnalyticsInData Labs

AI and Data Privacy in 2025: Global TrendsInData Labs

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

Noah Loul Shares 5 Steps to Implement AI Agents for Maximum Business Efficien...Noah Loul

HCL Nomad Web – Best Practices und Verwaltung von Multiuser-Umgebungenpanagenda

Mobile App Development Company in Saudi ArabiaSteve Jonas

ThousandEyes Partner Innovation Updates for May 2025ThousandEyes

Drupalcamp Finland – Measuring Front-end Energy ConsumptionExove

Massive Power Outage Hits Spain, Portugal, and France: Causes, Impact, and On...Aqusag Technologies

Linux Professional Institute LPIC-1 Exam.pdfRHCSA Guru

UiPath Community Berlin: Orchestrator API, Swagger, and Test Manager APIUiPathCommunity

TrsLabs - Fintech Product & Business ConsultingTrs Labs

IEDM 2024 Tutorial2_Advances in CMOS Technologies and Future Directions for C...organizerofv

Complete Guide to Advanced Logistics Management Software in Riyadh.pdfSoftware Company

DevOpsDays Atlanta 2025 - Building 10x Development Organizations.pptxJustin Reock

How Can I use the AI Hype in my Business Context?Daniel Lehner

Linux Support for SMARC: How Toradex Empowers Embedded DevelopersToradex

Automation world under the DevTestSecOps umbrella

2. 2 WHO AM I Kostiantyn Severenchuk System Architect @Epam Systems • 10+ years in IT • DevTestSecOps practice • Support & Maintenance • QA/QC • Build Engineering • System Engineering • SRE • Development???

3. LET’S START FROM THE BASICS

4. 4 Continuous Value Delivery Through DevOps Early Feedback | Transparency | Continuous Delivery Cycle Time Reduction| Optimization Implement Monitor DESIGN DEVELOP INNOVATE PRODUCT BACKLOG OPERATE Value delivery Value definition Adaptive learningValue creation Agile ITIL INFRA/OPS USERS OPS BACKLOG BIZ DEV/TEST

5. 5 DevOps Capabilities DevOps Orchestration Automation CI/CD Configuration Management Scalability/ Reliability Backup/DR Networking Security Monitoring • Orchestration • Automation • Infrastructure as Code • Platform as a Service • CI/CD • Blue-green deployment • Pipeline as a Code • Configuration Management • Scalability/Reliability • Backup/DR • Networking • Security • Monitoring

6. 6 DEVOPS TOOLSET

7. 7 SECOPS & DEVOPS

8. 8 Too many talks

9. WHAT IS IMPORTANT & WHY

10. 10 WHAT’S FIRST?

11. 11 ITIL VS ITSM FUNDAMENTALS

12. 12 ITIL FUNDAMENTALS

13. 13 SDLC VS SDL FUNDAMENTALS

14. 14 VIRTUALIZATION FUNDAMENTALS

15. 15 MONITORING FUNDAMENTALS

16. 16 SCM/VCS FUNDAMENTALS

17. 17 SILVER BULLETS

18. DEVTESTSECOPS IN ACTION AND WHY

19. 19 LET’S START 19

20. 20 DevTestSecOps approach in action Roadmap Strategy Dev Test Sec Ops Perf Digital approach Web Channel Delivery SFP Project SoftwareFactoryPlatformSFP DevTestSecOps Processes Scope B a c k l o g TBC TBC TBCTBC TBC TBC SFP v 1.0.0 SFP v 1.0.1 … SFP v 1.2.0

21. 21 DEVOPS MAGIC

22. 22 RELEASE ANTIPATTERNS • Sitting bleary-eyed in front of Monitor at 2 A.M. the day after the release day, trying to figure out how to make it work • Frequent correction to the release process during the course of release • Frequent calls to the development team to explain why a deployment is going wrong on a release day Deploying Software Manually • Having deployed successfully many times to staging, the deployment into production fails • Configuration of the system is carried out by modifying the configuration directly on production systems • The operations team takes a long time to prepare an environment for the release Manual Configuration Management of Production Environments • There is little, if any, collaboration between the development team and the people who actually perform deployments to create this collateral • Releasing into staging is the first time that operations people interact with the new release • The bigger the difference between development and production environments is the less realistic the assumptions that have to be made during development are Deploying to a Production- like Environment Only after Development Is Completed

23. 23 MANUAL WORK

24. 24 STEPS FOR GOAL ACHIEVEMENT Automated Frequent Provide meaningful feedback

25. 25 UMBRELLA

26. 26 GUIDANCE & GOVERNANCE

27. 27 Why DevTestSecOps 1 2 3 4 5 Build once, deploy many Enable self-service and on-demand capabilities Leverage SMEs for support and best practices Identify opportunities to remove bottlenecks Increase and assume accountability Why DevTestSecOps

28. 28 ONE STEP CLOSER TO IDEAL WORLD CI / Build Server Builds / Status Notifications Artefact Repository CI Dashboard QA Cloud Version Control PROD approval gateway Production Deployment Mock / Unit Tests Сode Analysis Code Review UAT, INT PERF PROD Security check Performance Test Integration Test Functional & Regression Test • Fully Automated CI/CD Pipeline • Built-in quality and Security gates • Frequent and fast feedback Feedback

29. 29 CI/CD TOOLSET REPRESENTATION & AUTOMATION

30. 30 AUTOMATION

31. 31 BUILD A HOUSE WITHOUT BASE

32. WHAT CAN BE AUTOMATED?

33. 33 REALITY

34. WHAT CAN NOT BE AUTOMATED?

35. 35 REALITY

36. ZONES OF RESPONSIBILITY

37. 37 REALITY

38. BONUS STORIES

39. 39 App in Docker vs Performance & Security

40. 40 SOMETHING WENT WRONG