devops op het witte paard - improveqs.nl · devops binnen de lijntjes author: trimp, leonard...
TRANSCRIPT
DevOps op het witte paard
De redding van Risk & Compliance
5 december 2019
Leonard Trimp
2
PGGM in vogelvlucht
* stand per 30 juni1018
*
750.000
215
1428
750.000
11X
4,2 MILJOEN
3
4
5
De route naar de klant
• Requirements document• Testcases• PSA• Implementatieplan• Etc.
• Vrijgaveadviezen• Akkoord x stakeholders• Architectuur certificaten
• FAT• GAT• PAT
6
Agile werken
7
8
9
Urgentie / noodzaak
Installation Period Turning Point Deployment Period
Factory systems
Subcontacting
Taylorism
Fordism
Project Management
Product Management
10
Age of oil & massproduction
Age of software & digital
DevOps
CI/CD
Agile
Lean
?
11
DevOps lifecycle
12Bron: bmc.com
DevOps
13Bron: synopsys.com
14
15
“Douane”
16
17
Risk Management Theatre
This is the name I coined for the commonly-
encountered control apparatus, imposed in a
top-down way, which makes life painful for
the innocent but can be circumvented by the
guilty.
- Jez Humble
Risico release verkleinen
18
19
20
21
22
“if the entire management model reeks of
mistrust and control mechanisms against
unwanted behavior, the result might actually
be more, not less, of what we try to prevent.
The more people are treated as criminals, the
more we risk that they will behave as such.”
- Bjarte Bogsnes
23
Specflow voor vastleggen testen
24
25
Architectuur
26
27
Architecture Decision Record
• Architectuur vastleggen• Readme.md
• ADR per beslissing
28
DevOps lifecycle
29Bron: bmc.com
Zoek de verschillen
30
31
32
33
34
35
36
37
38
De route naar de klant
• Requirements document• Testcases• PSA• Implementatieplan• Etc.
• Vrijgaveadviezen• Akkoord x stakeholders• Architectuur certificaten
• FAT• GAT• PATReautomatiseerde testen met specification by example
Readme & Architecture decision records
Configuration as code
Architecture descision records pull requests
Geautomatiseerde release documentatie
Akkoord op specflow testen
Geautomatiseerde testen
Review
39
40
41
42