Making Leaders Successful Every Day Forrester Research, Inc. Reproduction Prohibited

Transcription

1 Making Leaders Successful Every Day

2 Compliance & Continuous Delivery for SVN and Git An Oxymoron No Longer Kurt Bittner, Principal Analyst

3 Mobile and Cloud Are Driving The Need for Faster Delivery Cycles Social media and search Systems of engagement (mobile, web, rich client) Cloud-based systems of record Traditional systems of record Increased customer expectations Mobile, cloud becoming the dominant means of customer interaction Customers expect the same capabilities across all channels Delivering exceptional experiences means integrating all channels In-store point-of-sale systems Cloud-based services provided by third parties Source: Forrester Research, Inc. Navigate The Modern Application Delivery Landscape, February 12, 2014

4 Shorter Time-To-Feedback = Faster Time-To-Value Respond Develop and test Develop hypotheses Beta test Continuous delivery Fast feedback Analyze Probe Deploy Flow Measure Sense Feedback Drives Improved Customer Experience and Business Results The faster the feedback, the less waste The less waste, the lower the cost Faster feedback means better results to customers, faster Happier customers = more customers, increased revenue Increased revenue and lower cost = better business results Source: Forrester Research, Inc. Measuring Mobile Apps, December 13,

5 What Is Continuous Delivery? Small batches of work Release management, release automation, and change control software. What remains after testing has been automated is largely exploratory and usability testing, performed manually. With high levels of automation, this testing requires less coverage and focuses on spot-checking specific capabilities. User Acceptance s Release (to Prod) Develop Deliver Integrated Development Environments (IDEs), editors/compilers/debuggers, application design tools, content management systems, packaged application customization tools, code review (e.g. Gerrit) and collaboration tools and sourced components and services. Source code control systems (e.g. SVN and Git) and related asset management tools. Can involve code analysis and unit testing as part of a pre-commit process. Automated API-based testing frameworks, static code analysis tools, typically called from CI tools. Capacity, Security s Environment Management Build & Integrate Continuous integration tools Automated API-based testing frameworks, static code analysis tools, typically called from CI tools. Automated Acceptance s (including Regression s) Release (to ) Unit s Automated API-based testing frameworks, typically called from CI tools Release management and release automation software Navigate The Modern Application Delivery Landscape, February 12,

6 A Delivery Pipeline View of Continuous Delivery UAT/ Exploratory ing Idea proposed Understand Needs & Invent Solutions Develop, Commit & Build Functional ing Release Decision Deploy Solution Customer Value Load, Performance, Security, ing Continuous Integration & automation

7 1. Create a Delivery Pipeline 3. Automate the Delivery Pipeline 8. Use Faster Delivery To Drive Business Strategy & Execution 2. Break down big efforts into small batches of work UAT/ Exploratory ing 7. Eliminate Release Drama Idea proposed Understand Needs & Invent Solutions Develop, Commit & Build Functional ing Release Decision Deploy Solution Customer Value 5. Adopt Loosely coupled architectures Load, Performance, Security, ing 4. Use Continuous ing 6. Treat Infrastructure As Code

8 Typical improvement opportunities Managing demand small batches of work Outcome-driven innovation Rapid ideation cycles Ux techniques Short branches Trunk-based development Continuous Integration Loosely coupled architecture API-driven test automation Static code analysis Automated performance, load, and security testing UAT/ Exploratory ing Idea proposed Understand Needs & Invent Solutions Develop, Commit & Build Functional ing Release Decision Deploy Solution Customer Value Load, Performance, Security, ing Infrastructure as code Automated provisioning of Dev & environments Service Virtualization Data Management Automated deployment Infrastructure as code Automated provisioning of production environments Application analytics

9 An Inside View of Continuous Integration New or Changed Code Continuous Integration automation Functional SCM Repository Pre-commit checks Build Unit Performance Load Deployment Automation Security & Compliance Environ Config Info Environment Management Data Configured Environment Configuration Info Data Data Management Service Virtualization

10 Distributed Continuous Delivery Team locations Why distribute? Follow-the-clock development & testing Access to skilled resources Reduced cost Business location Incentives 10

11 Distributed Continuous Delivery Infrastructure New or Changed Code Continuous Integration automation Functional SCM Repository Pre-commit checks Build Unit Performance Load Deployment Automation Security & Compliance Environ Config Info Data Environment Management Data Management Data Configured Configured Configured Environment Environment Environment Configuration Info Service Virtualization Challenges IP control Policy enforcement Latency Availability Security Consistency Coordination

12 Distributed Continuous Delivery Challenges Data SCM Repository Environ Config Info Configured Configured Configured Environment Environment Environment Challenges IP control & policy enforcement Latency & availability Security Consistency Coordination Typical solutions Centralized servers Good security & consistency Latency & availability can suffer Responsiveness is essential for developer acceptance Lack of acceptance is a major barrier

13 Summary Compliance & Governance and Fast Delivery Are Not Incompatible Peer code reviews improve quality without increasing overhead (much) resulting in: Socialization of coding standards Increased code quality and fewer problems and delays later Increased supportability through broader code awareness Control over Environments improves quality and stability Infrastructure as code improves governance and auditability It works fine on my machine problems are eliminated Improved repository management boosts security and IP/asset control without increasing overhead Distributed, automated access control eliminates approval overhead Organizations need a single version of truth Continuous ing evaluates code quality, stability and fitness for purpose with every build Short cycles times require all functional testing through APIs Other qualities can be tested as part of CI process as well 13

14 Thank you Kurt