Movatterモバイル変換

OPTIMIZING THE OPSIN DEVOPSGORDON HAFFTechnology Evangelist, Red HatCloud Expo Silicon Valley3 November 2016

FOCUS ONCLOUD-NATIVEAPPLICATIONARCHITECTURES● Single-function units ownedby a team● Bounded context● Communicate throughlightweight APIsSource: PWC

FOCUS ON IMPROVEDAND LESS ISOLATEDDEVELOPER WORKFLOWS● Collaboration● CI/CD● Issue tracking● Source code control● Code review● IDE● xPaaSSource: Mike McGarr, Netflix

AN OPPOSING VIEW"I want to change my job because there is this horrible concept of"pager duty" or "oncall". Where the developer has to be ready forany issues that may occur. Are most software jobs like this? Is thisa norm? Where can I find software development positions withoutsuch concepts?"Anonymous Quora user

WE ALSO TALKABOUT CULTURE A LOT● Empathy● Trust● Learning● Cooperation● Responsibility

DevOpsBUT WHAT ABOUT THE OPS IN DEVOPS?

NO OPS? (OR IS IT EVOLVED DEVOPS?)"We have built tooling that removes many of theoperations tasks completely from the developer, andwhich makes the remaining tasks quick and selfservice. There is no ops organization involved inrunning our cloud, no need for the developers tointeract with ops people to get things done, and lesstime spent actually doing ops tasks than developerswould spend explaining what needed to be done tosomeone else."Adrian Cockroft, Netflix, 2012

FOCUS ON PROVIDING CORE SERVICESAND GETTING OUT OF THE WAY● Deploy a modern container platform● Enable automated developer workflows● Mitigate risk and automate security

NEW CLOUD PLATFORM NEEDSWhat? Why?Scale-out to meet highly elastic servicerequirementsScale-up is not flexible or scalable enough tomeet changing business needsSoftware-defined everythingSoftware functions running on standardizedhardware increase flexibilityFocused on applications composed ofloosely-coupled servicesLarge monolithic applications are fragile andcan’t be updated quicklyEnable lightweight iterative softwaredevelopment and deploymentModern applications are often short-lived andrequire frequent refreshes/replacements

COMPREHENSIVE CLOUD-NATIVE INFRASTRUCTUREPhysical hardwareContainer orchestrationContainer-optimized LinuxContainer/servicesContainer/servicesContainer/servicesContainer/servicesContainer/servicesContainer/servicesHybrid cloud managementDevelopertoolingSoftware-defined compute, storage, and networkingPublicclouds

OPENSTACK SOFTWARE-DEFINED INFRASTRUCTURE

MAKING CONTAINERS USEFUL:ECOSYSTEM AND DEFACTO STANDARDS1 Open Container Initiative (OCI)2 Cloud Native Computing Foundation (CNCF)

OPERATED AT SCALE• Different aspects of scale:• Large scale workloads• Diverse workloads (batch and services)• Complex resource management (QoS,latency sensitivity, etc.)• Focus on lightweight containerized instances• Orchestration and resource management

HYBRID MANAGEMENT SERVICESSERVICEAUTOMATIONComplete lifecycle andoperational managementthat allows IT to remain incontrol.POLICY &COMPLIANCEDeploy across virtualization,private cloud, public cloud andcontainer-basedenvironments.UNIFIED HYBRIDMANAGEMENTDraws on continuousmonitoring and deepinsights to raise alerts orremediate issues.Streamline complex servicedelivery processes, savingtime and money.OPERATIONALVISIBILITY

LOTS OF TOOLS FOR THE PIPELINEgerrit

TRACK ANDVALIDATETHIRD-PARTYTOOLSANDCOMPONENTS

MITIGATE RISKAUTOMATE SECURITY

TRADITIONAL SECURITYWhat we did The problemCode audited for current complianceNew vulnerabilities constantlydiscovered and exploited with noopportunity for rapid remediation.Applications and systems deployed on“secured” platformThere is no perimeter.Largely relied on checklists, writtenprocesses, and manual actionsLimited throughput and prone to errors.“Patch Tuesdays” last all month.Primarily an end-of-process checkpoint Security is such a bottleneck!

DevSecOps● Build on the mindset that "everyone is responsible for security"● It’s the practice of building security into development processes● Security as code● Flips security from a defensive to an offensive posture that is both automated andconstant

BAKE IN SECURITY AND ASSURANCE● Components built from source code using a secure, stable, reproducible buildenvironment● Careful selection, configuration, and security tracking of packages● Automated analysis and enforcement of security practices● Active participation in upstream and community involvement● Thoroughly validated vulnerability management process

INTEGRATED SECURITY"Our goal as information security architects must be toautomatically incorporate security controls without manualconfiguration throughout this cycle in a way that is as transparentas possible to DevOps teams and doesn't impede DevOps agility,but fulfills our legal and regulatory compliance requirements aswell as manages risk. "DevSecOps: How to Seamlessly Integrate Security Into DevOpsGartner. DevSecOps: How to Seamlessly Integrate Security Into DevOps. September 2016. G00315283

AUTOMATING SECURITYCONFIGURATIONERRORSMISSINGPATCHESCODINGMISTAKEHUMAN ERRORBAD OPSEC

SECURING CONTENTEXAMPLE: CONTAINERSA validated supplychain helps ensureuse of tested andpatched software.

AN OPEN HYBRID CLOUD JOURNEYHybrid policy & managementData, workflow, & API integrationAutomationSoftware-defined infrastructureLegacy modernizationSelf-service & flexibilityOptimized virtualizationCloud migrationOrchestrated container platformDevOps toolingMobileOpen Innovation LabsSecured software supply chain

CREDITSDev: Nelson Pavlosky/flickr under CC http://www.flickr.com/photos/skyfaller/113796919/Ops: Leonardo Rizzi/flickr under CC http://www.flickr.com/photos/stars6/4381851322/Rainbows and Unicorns: http://kaigumo.deviantart.com/art/Unicorns-Fart-Rainbows-3-151273843Piggy bank: https://www.flickr.com/photos/marcmos/3644751092Stop: https://www.flickr.com/photos/r_grandmorin/6922697037

THANK YOUplus.google.com/+RedHatlinkedin.com/company/red-hatyoutube.com/user/RedHatVideosfacebook.com/redhatinctwitter.com/RedHatNews

TRADITIONAL SECURITYWhat we didCode audited for current complianceApplications and systems deployed on“secured” platformLargely relied on checklists, writtenprocesses, and manual actionsPrimarily an end-of-process checkpoint

TRUSTED CONTAINER CONTENT"From a security and governance perspective, trusting thecontainer image is a critical concern throughout the softwaredevelopment lifecycle. Ensuring that images are signed andoriginate from a trusted registry are solid security best practices. "5 keys to conquering container security, Amir Jerbi, Infoworld4 August 2016http://www.infoworld.com/article/3104030/security/5-keys-to-docker-container-security.html

NoOps?"This is part of what we call NoOps. The developers used tospend hours a week in meetings with Ops discussing what theyneeded, figuring out capacity forecasts and writing tickets torequest changes for the datacenter. Now they spend secondsdoing it themselves in the cloud."Adrian Cockroft, Netflix, 2012

BACK TO ADRIAN" We have built tooling that removes many of the operations taskscompletely from the developer, and which makes the remainingtasks quick and self service. There is no ops organization involvedin running our cloud, no need for the developers to interact withops people to get things done, and less time spent actually doingops tasks than developers would spend explaining what neededto be done to someone else. "Adrian Cockroft, Netflix, 2012

Strategies for sourcing softwareWild WestGo aheadand grab it!BlacklistIs it from aknown badsource?WhitelistIs it a known good source?Digitally signed/securely deliveredRapid updates for vulnerabilitiesRepeatable release processes

THE MOVE TO HYBRID INFRASTRUCTURESBRINGS ADDITIONAL MANAGEMENT CHALLENGESAPPLICATIONARCHITECTUREINFRASTRUCTUREPLATFORMOPERATIONALMODELOPERATIONALCHALLENGESTraditional ApplicationsVirtualizationOperationalAutomationOrchestrationAutomationPrivate CloudScalableApplicationsPublic CloudSaaS and PaaSCloud NativeServiceBrokeringContainersMicroservicesSelf-serviceAutomated provisioningLifecycle managementRoot cause analysisPerformance andcapacity managementHybrid ManagementPolicy complianceQuota enforcementChargeback

WHAT DEFINES A MODERN PLATFORM?● Built through collaborative innovation in Linux and other open source communities● Composed of integrated core software services● Open container format, runtime, and orchestration● Focused on large distributed system scale points

THE NEEDED MANAGEMENT SERVICESSERVICEAUTOMATIONComplete lifecycle andoperational managementthat allows IT to remain incontrol.POLICY &COMPLIANCEDeploy across virtualization,private cloud, public cloud andcontainer-basedenvironments.UNIFIED HYBRIDMANAGEMENTDraws on continuousmonitoring and deepinsights to raise alerts orremediate issues.Streamline complex servicedelivery processes, savingtime and money.OPERATIONALVISIBILITY

OPERATIONAL VISIBILITY CHALLENGESSystems that are not being utilizedshould be retired to reclaim resources.Budgets are tight. We have tomake sure that we are utilizingour systems efficiently.Tracking problems across infrastructurelayers can be a challenge.I’ve got to project infrastructure usageout into the future for planning purposes.CHALLENGESLIFECYCLE MANAGEMENTROOT-CAUSE ANALYSIS CAPACITY MANAGEMENTRESOURCE OPTIMIZATION

OPERATIONAL VISIBILITY WITH HYBRID MANAGEMENTWe now have complete lifecyclemanagement: provisioning, reconfiguration,deprovisioning, and retirement.Automatic resource optimizationintelligently places VMs and offersright-sizing recommendations.I can drill-down through infrastructurelayers to determine the root cause.Resource tracking and trending aids incapacity and what-if scenario planning.CHALLENGESLIFECYCLE MANAGEMENTROOT-CAUSE ANALYSIS CAPACITY MANAGEMENTRESOURCE OPTIMIZATION

Movatterモバイル変換

Change Language

Optimizing the Ops in DevOps

Embed presentation

Recommended

More Related Content

What's hot

Viewers also liked

Similar to Optimizing the Ops in DevOps

More from Gordon Haff

Recently uploaded

Optimizing the Ops in DevOps