Wie passt klassische IT Governance zu Continuous Delivery? Gar nicht! Eine hochgradig automatisierte Continuous Deployment Welt stellt die Firma vor ganz neue Herausforderungen im Bereich Compliance und Governance. Klassische - manuelle - Prozesse kommen den schnellen und häufigen Releases gar nicht mehr hinterher. Die Lösung ist die Automation aller Governance prüfungen und die automatisierte Zertifizierung jeder Softwarelieferung. Das klingt banal und einfach, ist im Detail jedoch nicht einfach umzusetzen. Der Vortrag zeigt am konkreten Beispiel der DB Systel, wie wir das Thema angehen und Lösungen für die automatisierte Zertifizierung geschaffen haben.

1. DB Systel GmbH | Schlomo Schapiro | @schlomoschapiro | 14.08.2019
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License
Compliant by Default
Continuous Delivery at DB Systel
©Christopher Schmidt / flickr © Steve Jurvetson / flickr © Rudolpho Duba / pixelio.de

2. Why?
Customer
Sales Team
Solution Architects Team
Product Manager Team
Developer Teams
Testing Team
Release Manager Team
Security / Compliance Officer
Admin Team
Operator Team
Company efficiency to delivery customer value?
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20182

3. How?
Customer
Obsession
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20183

4. Jeff Bezos: 2016 Letter to Shareholders
https://www.amazon.com/p/feature/z6o9g6sysxur57t
100%
focus on
customer
value
Customer
uses our
product
Customer
pays for
our product
We are
valuable
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20184

5. Biggest Contribution to Customer Value
DevOps Productivity =
Company Efficiency to
Delivery Customer Value
Engineer
https://upload.wikimedia.org/wikipedia/commons/b/b7/Archimedes_lever.png
Customer
Sales Team
Solution Architects Team
Product Manager Team
Developer Teams
Testing Team
Release Manager Team
Security / Compliance Officer
Admin Team
Operator Team
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20185

6. Customer: Everybody who codes (Dev, Ops, PO …)
Value: • Quickly
• Simple
• Tested
• Secure
• Compliant
• Traceable
• With support
& consulting
• Without deep
knowledge
everywhere
• Easy multi vendor
DevOps Engineers as „Customers“
User Experience for „Engineer“ Customers:
Developer ExperienceDB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20186

7. How?
DevOps
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20187

8. DevOps is
… if every person uses the same tool for the same job
… codified knowledge - everybody contributes his part to common automation
… if all people have the same privileges in their tooling
… if human error is equally possible for Dev and Ops
… replacing people interfaces by automated decisions and processes
... a result
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20188
bit.ly/5pdops

9. How?
Cloud Platforms
In your Data Center:
• do you have an API for every function?
• can you provide „just enough“ resources
and scale up/down without delays?
• can you scale costs by usage and
achieve full cost transparency?
Good cloud platforms can be built on-premise, require extreme scale out.
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.20189

10. How?
DevOps
Cloud
Platforms
Continuous
Delivery
People Technolog
y
Effect
Changes
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201810

11. Configuration
Software
Containers
Servers
Storage
Network
Security
…
DevOps Vision
Continuous
Delivery
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201811

12. Configuration
Software
Containers
Servers
Storage
Network
Security
…
DevOps Vision
Continuous
Delivery
GIT Repo
Dev,
Ops,
PO,
...
Automation
All Infrastructure
Environments und
Cloud Platforms
AWS, OpenShift, Azure, DB ...
G
itO
ps
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201812

13. Code, Config &
declarative
Description
of all
Components in
all
Infrastructure
Environments
Continuous
Delivery
Value for Engineers G
itO
ps
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201813

14. Code, Config &
declarative
Description
of all
Components in
all
Infrastructure
Environments
Continuous
Delivery
quickly
simple
secure
compliant
tested
multi vendor
traceable
without deep knowledge
support & consulting
Value for Engineers
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201814

15. DB Systel | Developer Experience | DoS 08.08.201915
Governance
Security
Lizenzeinhaltung
Testabdeckung
Architekturstandards
KoRils
Sei jederzeit in der Lage an den
Kunden auszuliefern.
Datenschutz
Liebes Team, liefere deine Software unter
Einhaltung folgender Rahmenbedingungen:
?!?
Lokale Optimierung
„Rad neu erfinden“
Fokus?
Ist das jetzt compliant?
Value?

16. DB Systel | Developer Experience | DoS 08.08.201916
AWS
Kubernetes/
OpenShiftAzure
DB custom
cloud services
– Proxy, DNS,
…
Everything as
code
PipeShip
Basis CDaaS
80%-
Lösung?
Feedback-/
Improvement-Loop NFA-Automation „auf
der Grenze“ zum
zertifizierten Raum
(CDaaS)
Zertifizierte Changes –
Compliant by default!
Zertifizierter Raum

17. DB Systel | Developer Experience | DoS 08.08.201917
Governance
Security
Testautomation
License Check
…
NFA-Automation ermöglicht den Teams die Fokussierung auf
Business Value bei Einhaltung der Konzern- und
Unternehmensvorgaben. #CompliantByDefault!
Das Ergebnis ist
CUSTOMER CENTRICITY.

18. CloudFormation Deployment
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018
- CF-Deployment takes 7
lines
- Governance & Security
checking implicitly included
- Declarative Description
User doesn‘t need to know
„how it works“
18

19. CloudFormation Deployment
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201819

20. DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201820

21. DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.2018
From JDBC connection strings
to Developer Productivity:
The big picture
21

22. The result:
Customer
Sales Team
Solution Architects Team
Product Manager Team
Developer Teams
Testing Team
Release Manager Team
Security / Compliance Officer
Admin Team
Operator Team
BusinessTeam
BusinessTeam
BusinessTeam
BusinessTeam
BusinessTeam
PlatformTeam
PlatformTeam
Infrastructure
Infrastructure
Infrastructure
Infrastructure
Infrastructure
Infrastructure
Infrastructure
Automation
DevOps
Continuous
Delivery
Cloud
Platforms
DB Systel | Schlomo Schapiro & Hendrik Pahl | @schlomoschapiro & @hendrik_pahl | 16.10.201822

23. 23

24. How to start?
• Set a goal, e.g. „2 deployments per day“
• Identify impediments
• Replace impediments through automation
• Believe that you can do it, let failure make
you stronger
• Repeat until done
• Build tools that are useful products:
• Continuous Delivery as a Service
• Cloud Platform as a Service
• Proxy, DNS ... as a Service
• Company concerns (security, governance,
compliance) must be part of the continuous
delivery pipeline24

25. Time for Questions & Answers
Slides go.schapiro.org/slides
DB Planet db.de/devex
DevOps bit.ly/5pdops
Contact schlomo.schapiro@deutschebahn.com
Twitter @schlomoschapiro