WEMS IT User Group. Mark Brodziak: Solutions Architect John McLean: Project Manager Gary Wade: IT Consultant. 20 March 2015



Similar documents
WEMS 3.12 Release Notes

More on SHA-1 deprecation:

Continuous Integration Processes and SCM To Support Test Automation

The Agile Movement An introduction to agile software development

What is WS_FTP? How WS_FTP Works

About me - Joel Montvelisky

Continuous Delivery. Ariel Alonso, IPC

Request for Offers (RFO) Addendum

Web UI & Functional Test Automation for Continuous Agile Deliveries

Good Agile Testing Practices and Traits How does Agile Testing work?

SharePoint 2013 Migration Readiness

Is Your SSL Website and Mobile App Really Secure?

SECURITY AND REGULATORY COMPLIANCE OVERVIEW

How To Be Successful At An Agile Software Engineering

Bridging the Gap Between Acceptance Criteria and Definition of Done

Sandesh Prasanna Kumar

Service Description - Testing

PLM - Agile. Design Code Test. Sprints 1, 2, 3, 4.. Define requirements, perform system design, develop and test the system. Updated Project Plan

Step-by-Step guide for SSO from MS Sharepoint 2010 to SAP EP 7.0x

MIGRATING SHAREPOINT TO THE CLOUD

Product Build. ProPath. Office of Information and Technology

Scrum: A disciplined approach to product quality and project success.

Striving for Quality in One IT Landscape

Agile Web Application Testing

WS_FTP Professional 12 and WS_FTP Home 12. Getting Started Guide

Client Overview. Engagement Situation

Building Security into the Software Life Cycle

Introduction site management software

MailStore Server. The Standard in Archiving

IT Home 2015 DevOps 研 討 會

Taking the first step to agile digital services

Whitepaper. Agile Methodology: An Airline Business Case YOUR SUCCESS IS OUR FOCUS. Published on: Jun-09 Author: Ramesh & Lakshmi Narasimhan

Multi-Tenancy in SharePoint DD105 Spencer Harbar Enterprise Architect harbar.net

How To Use Saml 2.0 Single Sign On With Qualysguard

Agile QA Process. Anand Bagmar Version 1.

Continuous Integration

LoadRunner and Performance Center v11.52 Technical Awareness Webinar Training

Introduction to Agile Software Development Process. Software Development Life Cycles

Test Lab Automation Using Virtualization. Sameer Jagtap, Director Product Management

Dell UPS Local Node Manager USER'S GUIDE EXTENSION FOR MICROSOFT VIRTUAL ARCHITECTURES Dellups.com

Microsoft Dynamics GP SQL Server Reporting Services Guide

Case Study - Developing a Clinical Application using Agile Methodology

Quality Assurance in an Agile Environment

Space Shuttle Launch - Exploring other Galaxies with Operations Manager

MESSAGING SECURITY USING GLASSFISH AND OPEN MESSAGE QUEUE

Shorten your 11i Upgrade and Patching Cycles with Automated Testing. Rod Lehman Senior Director of Product Marketing

A Practical Guide to implementing Agile QA process on Scrum Projects

DameWare Server. Administrator Guide

IDENTIKEY Server Windows Installation Guide 3.2

Continuous Delivery for Alfresco Solutions. Satisfied customers and happy developers with!! Continuous Delivery!

Applying Agile Project Management to a Customized Moodle Implementation

Java Software Quality Tools and techniques

inforouter V8.0 Server & Client Requirements

Complete Patch Management

AGILE SOFTWARE TESTING

Interactive Application Security Testing (IAST)

System Management. What are my options for deploying System Management on remote computers?

Oracle WebCenter Content Service for Microsoft Exchange

Case Study. Case Study. Performance Testing For Student Application. US-based For-profit University (Higher Education) Compunnel Software Group

Benefits of Test Automation for Agile Testing

Client Overview. Engagement Situation. Key Requirements for Platform Development :

Investment Management System. Connectivity Guide. IMS Connectivity Guide Page 1 of 11

ASSURING SOFTWARE QUALITY USING VISUAL STUDIO 2010

Criteria for web application security check. Version

Collaborating for Quality in Agile Application Development From Beginning to End

Enabling Continuous Delivery by Leveraging the Deployment Pipeline

Managing Applications: How much money can you save with a Collaborative Workflow tool?

Gain a New Level of Trust with Extended Validation SSL Certificates

Better Software Though Expertise, Collaboration & Automation. BDD, DevOps and Testing

Lepide Active Directory Self Service. Configuration Guide. Follow the simple steps given in this document to start working with

CSUSB Web Application Security Standard CSUSB, Information Security & Emerging Technologies Office

Digital Marketplace Services Service Definition

Web Application Security Assessment and Vulnerability Mitigation Tests

Vistara Lifecycle Management

Continuous Delivery at SAP: From dinosaur to spaceship. Darren Hague / SAP Global IT November 1st, 2013 Public

Terms of Reference for Design, Development and Maintenance of Intranet for UN in India

ScrumDesk Quick Start

eguide: Designing a Continuous Response Architecture 5 Steps For Windows Server 2003 End of Life Success

Test Run Analysis Interpretation (AI) Made Easy with OpenLoad

How To Export Data From Exchange To A Mailbox On A Pc Or Macintosh (For Free) With A Gpl Or Ipa (For A Free) Or Ipo (For Cheap) With An Outlook 2003 Or Outlook 2007 (For An Ub

Codeless Test Automation for Web Apps

AdminStudio Release Notes. 16 July Introduction New Features... 6

Intelligent Power Protector User manual extension for Microsoft Virtual architectures: Hyper-V 6.0 Manager Hyper-V Server (R1&R2)

Thomas Röthlisberger IT Security Analyst

RAP as a Service for. Team Foundation Server. Prerequisites

SOLARWINDS ORION. Patch Manager Evaluation Guide for ConfigMgr 2012

Using Story Points to Estimate Software Development Projects in the Commercial Phase

VMware vcenter Log Insight Security Guide

Bitrix Site Manager ASP.NET. Installation Guide

Agile and Secure: Can We Be Both?

API Management Introduction and Principles

Policy. London School of Economics & Political Science. Encrypted Authentication IMT. Jethro Perkins. Information Security Manager. Version 1.

Continuous Delivery Benefits, Best Practices and Practical Advice

Enable Your Automated Web App Testing by WebDriver. Yugang Fan Intel

An Oracle White Paper October Frequently Asked Questions for Oracle Forms 11g

DJANGOCODERS.COM THE PROCESS. Core strength built on healthy process

XIA Configuration Server

JVA-122. Secure Java Web Development

Transcription:

WEMS IT User Group Mark Brodziak: Solutions Architect John McLean: Project Manager Gary Wade: IT Consultant 20 March 2015

AGENDA WEMS 3.12 an overview SHA-1 / Internet Explorer 8 Web service retirement old versions Software development processes at the IMO Feedback 2

WEMS 3.12 An Overview

WEMS 3.12 an overview Showcase - settlement portal replacement WEMS 3.12 summary of changes Release timeline 4

Showcase - settlement portal replacement MPI - user interface (DEMO) Web service API Improve invoice to include prepayment. More details to be provided in release notes. 5

Settlement web services API - examples REST (Representational State Transfer) JSON documents and files HTTP GET, client certificate authentication Examples: o Get a list of all invoices in 2014: https://wems.imowa.com.au/mpi/ws/rest/v1/settlement/invoices?from=2014-01-01&to=2014-12-31 o Get a list of all STEM invoices https://wems.imowa.com.au/mpi/ws/rest/v1/settlement/invoices/stem/tradeweek/2014-05 o Get a list of all NSTEM invoices trade month May 2014 https://wems.imowa.com.au/mpi/ws/rest/v1/settlement/invoices/nstem/trademonth/2014-05 o Get invoice 1234 https://wems.imowa.com.au/mpi/ws/rest/v1/settlement/invoices/1234 6

WEMS 3.12 summary of changes Technical debt resolution release Upgrade to Java 8 Upgrade of stale / obsolete libraries (includes security patches) Consolidation of WEMS components Removal of all code warnings Web services to use CRUX (Jetty instead of Tomcat) Removal of XA transactions Legacy ABB components into separate libraries 7

WEMS 3.12 summary of changes (continued) Various registration improvements: Standing data change requests differences are now shown Standing data change requests reason is no longer copied Change request search now remembers search parameters Display order is now oldest-first PERL market events have been removed (technical) Retirement of trading web service (legacy URL): https://wems.imowa.com.au/mpi/trading/ws/v1?wsdl Please use: https://wems.imowa.com.au/mpi/ws/trading/v1?wsdl 8

WEMS 3.12 release timeline Functional testing and UAT (SPARTA invoice and settlement portal replacement, event manager changes) Full regression and certification testing (3 months) Planned Market Trial extension (2 stages) We are here Production release Timeline for WEMS 3.12 Tentative mid July 2015 Functional testing and UAT Completed: end of April Market Trial Release #1 Tentative end of June Regression and certification testing Completed: end of July Market Trial Release #2 Tentative end of July for 2 weeks 9

SHA-1 (SSL Certificates) Internet Explorer 8

SHA-1 (SSL Certificates) deprecation SHA-1 is an encryption algorithm used in SSL certificates (https) SHA-1 is dangerously weak Google and Microsoft are actively sunsetting SHA-1: o Why Google is Hurrying the Web to Kill SHA-1 o Microsoft TechNet - SHA1 Deprecation Policy We plan to upgrade our certificates to SHA-2 by June 2015 You will need to ensure that your environment is compatible with SHA-2 o Windows XP - SP3 at a minimum o IE8 needs TLS 1.1 at a minimum not enabled by default 11

Internet Explorer 8 Worldwide 2.8% of browsers are IE8 WEMS 22% of users have IE8 (source: Google Analytics) Windows XP? (already end-of-life) Microsoft: End-of-Life for IE8 in January 2016 6 years old, increasingly difficult to support Development costs (lack of contemporary features) Testing costs End of support in WEMS? Notice to participants how long is sufficient 12

Web service retirement old versions

Web service retirement old versions WEMS web services are versioned Latest version is always more complete (additional information) Expanding / contracting releases the new way to manage Retirement of old versions - WEMS 3.12 (contracting release) https://wems.imowa.com.au/mpi/trading/ws/v1?wsdl Retirement of old versions - WEMS 3.13 (contracting release) o We will proactively contact participants using old versions https://wems.imowa.com.au/mpi/ws/balancing/v2?wsdl https://wems.imowa.com.au/mpi/ws/balancing/v2.1?wsdl https://wems.imowa.com.au/mpi/ws/sm/v2?wsdl https://wems.imowa.com.au/mpi/ws/sm/v2.1?wsdl 14

Software development processes at the IMO

Project management Based on industry standards: PMBOK and SCRUM (agile) Project management framework used in all projects since MEP including: o GBB o SPARTA o CAST 16

Process groups 17

How are changes proposed? Rule change process Participants (via Market Operations or other forums) Market Operations Testers Technical team (development, support) Technical, independent security reviews End of life technology updates 18

Change control (CCB) IMO Change Control Board (CCB): IMO business, testing, technical, support Reviews all issues (JIRA) Allocates and manages priorities Reviews and assesses risk and timeframes Broadly schedules issues; manages the backlog The WEMS backlog: How many open issues in the backlog? 216 (53 minor) How many open issues in the long term backlog? 392 (249 minor) 19

Development process Work only starts after issues are allocated (after CCB) Iterative, peer review Automated testing unit, integration, and system tests Target test coverage minimum 80% WEMS (largely legacy code), ~ 20% coverage overall GBB (new system), ~90% coverage New in WEMS 3.12 automated certification testing (Cucumber trial) 20

WEMS some statistics ABB Lines of Code WEMS Lines of Code 99,488 LoC 168,667 LoC Covered Not Covered Covered Not Covered 21

Continuous build, release and deployment Mercurial for source control Bamboo for automatic build and quality control (brief demo) Each commit that passes automated testing produces a release Each release can be deployed to an environment (test or live) WEMS environments: 8 lightweight test environments (LTEs) 4 preliminary test environments Market Trial Live (production) both data centres Production support testing (PST) 22

How we deploy WEMS The old way Checklists, Word documents, lengthy instructions Error prone and slow The new way Bamboo initiates and tracks the deployment (Green or Red) PowerShell does the work All scripts are version controlled and tested Repeatable, fast, and auditable Last deployment (18 March) done remotely, 20 minutes no BMOs missed Continually evolving and improving 23

Testing at the IMO Quality and Excellence - we are professional and committed to what we do. We deliver quality outcomes and celebrate success. 24

Testing greenfield projects High automated test code coverage (target >80%) Unit and integration tests Automated browser testing (eg Selenium) Pros: o Lower defect counts when manually testing changes o Lower ongoing support costs o Regression testing is largely automated Cons: o Greater upfront cost (must write tests) Gradual move to QA review / demo 25

Testing WEMS MPI, MOP, MOI Low automated test code coverage (~20%) Improvements over time file exchange and web service test automation Predominately manual testing cycle Plan / Test / Release 26

Plan CCB defines release scope (rule changes, participant requests, defects, new features, etc.) Test Strategy What, where, when 27

Test Functional testing test plans and results Regression testing o Balancing / LFAS o STEM o Web services o File exchange submissions Systems integration testing (if required) o IMS (the interface between IMO and System Management) o Settlements Showcases User Acceptance Testing: test review, scenario testing 28

Release 29

Feedback

Q & A Release notes format? Questions? Other items? 31