DevOps Fest 2019

Applied Alerting Philosophy

More than five years ago, Rob Ewaschuk created an innocuous Google doc titled “My Philosophy On Alerting”. It became kind of viral and later formed the foundation of a chapter in the famous book Site Reliability Engineering – How Google Runs Production Systems. In parallel, the metrics-based monitoring and alerting system Prometheus was developed at SoundCloud. It is the open-source tool to put Rob’s philosophy into practice. Thus, I would like to present “applied alerting philosophy” and explain how we use Prometheus at SoundCloud to create meaningful and actionable alerts. In particular, SoundCloud follows a fairly radical “you build it – you run it” approach, which requires additional care to route alerts to the right group of engineers. Prometheus’s “label everything” mantra proves to be very helpful here.

Hands-On ModSecurity and Logging

This talk combines two of the OWASP top ten security risks:
* Injections (A1:2017): We are using a simple application that is exploitable by an injection and will then secure it with ModSecurity.
* Insufficient Logging & Monitoring (A10:2017): We are logging and monitoring the application both with and without ModSecurity with the open source Elastic Stack.
To make it more interactive the audience has to do the injections, which we are then live monitoring and mitigating with ModSecurity.

Taking your .NET Core container solution from laptop to production in under a minute

In this session we will take a look at building .NET Core solutions based on Docker, Kubernetes and Azure and taking these to production efficiently and how to iterate your development cycle. You are going to see how this can be done in a DevOps fashion, with full automation from provisioning cloud resources to build and release of your application. Learn how you can create robust web applications and web APIs that are resilient and robust, and how to add monitoring and instrumentation so any bugs or failures can be spotted early and pro-actively. We will go through the entire inner loop of fixing the bug on a local development environment with Visual Studio and Docker tooling, and take the fixed solution to production to a production Azure Kubernetes cluster with automated pipelines in VSTS. Be a DevOps pro and impress all your friends with your rapid iteration for cloud scale solutions.

Infrastructure-as-code: bridging the gap between Devs and Ops

Ops are overwhelmed with support. Devs are mad because their cannot deploy the changes as fast as they want. Sounds familiar?
Infrastructure-as-code can make your life easier by empowering developers and reducing operations' routine toil. It can cut down the lead time for infrastructure provisioning from hours or even days to minutes.
This talk reviews several IaC tools and approaches, showing how to integrate them into continuous delivery pipeline. It covers the problems and challenges that engineers may face while working with infrastructure-as-code tools and provides a few hands-on recipes to address them.

Configuration management and service discovery in a serverless world

Your system is composed of highly decoupled, independent, fast, and modular microservices. But how can they share common configurations, dynamic endpoints, database references, and properly rotate secrets? Based on the size and complexity of your serverless system, you may simply use environment variables or eventually opt for some sort of centralized store. And then how do integrate all of this with monitoring and automation tooling? During this session, I will present the ideal solutions and some of the alternatives available on AWS (such as AWS Systems Manager Parameter Store and AWS Secrets Manager). I will also discuss the best use cases for each solution and the corresponding best practices to achieve the highest standards for security and performance.

DevOps never sleeps. What we learned from InfluxDB v1 to v2

Where a company with an OpenSource project announce that they are working on a new major release there is always a lot of chatting going on in the community because you never know how much this is going to break your system. Gianluca Arbezzano SRE at InfluxData will speak about the journey the company is facing from a DevOps perspective to move from InfluxDB v1 to version 2 a fully integrated platform that starts from the strong background we built running a database like InfluxDB at scale in our SaaS offer. This is not just a story about how a project evolved but it touches all the company in particular for what concern DevOpsFest everything around Kubernetes, Container and automation. How the SRE team managed the onboard of 20 developers on a cloud based project where operating and observing the system is a key concept to learn how to build a more solid and sustainable product.

The evolution of Devops in the age of AI

AI become more and more an element of differentiation, above all to manage the increasing complexity of information. The presentation will focus on the opportunities of using Splunk to make efficient the DevOps ecosystem and what steps you should do to get your infrastructure AI ready.
The beating heart of devops is automation. But often efficient automation is possible only if you can manage correctly feedbacks from processes, give them meaning, and apply real time remediation. Large infrastructures that adopt devops to deliver software have huge machine data that should be understood to take the correct decisions. These machines are useful to extract significant data and metrics that could lead to a better understanding of the system. The presentation shows what is the best design for devops infrastructures data driven, what are the relevant tools to adopt (Splunk) and what the way they works together.

Сonnecting pool Kubernetes clusters: Federation and Networks

On this IT sense, we will talk about the Federation.
The Federation is a very flexible tool for connecting several clusters and gives us a lot possibilities in K8s control.
With the help of the Federation, we can easily:
- sync resources across clusters
- cross cluster discovery
We will also discuss how to connect several Kubernetes clusters into one network, how to reach services in each Kubernetes cluster...

Mobile CI/CD. Cross-platform app approach

У доповіді я покажу чому мобільна автоматизація важлива і розкажу про еволюцію мобільної аплікації на платформі Xamarin, яка дозволяє виконувати паралельно тести у хмарі і повністю інтегрована в CI/CD пайплайн.
Ця доповідь містить практичні аспекти, технічні деталі, плюси та мінуси налаштування CI/CD для крос-платформенної аплікації у Azure DevOps.

Windows Containers. Why should I care?

Все больше on-premise классических легаси .NET Framework приложений мигрируют в клауд, но как правило в отсутствие зрелой DevOps культуры или знаний о технологиях, процесс перехода является не таким гладким. Основной задачей DevOps в данном контексте является готовность к осуществлению перехода на современные контейнеризированные приложения который должен как снизить косты на поддержку инфраструктуры, а также позволит получить гибкость в деливери новых бизнес фич благодаря полностью автоматизированному CI/CD процессу. В докладе будет дан обзор технологии Windows Containers, а также мы рассмотрим некоторые сценарии по их использованию и варианты миграции classic .NET Framework приложений в сторону современных клауд оптимизированных приложений интегрированных с уже существующими решениями на примере TIG стека.

CD for StartUp, cheap and furious

Кто сказал, что у стартапов всегда много денег? Как быть если вам важна быстрая разработка и внедрение, но на это нет средств?
Мы поговорим о способе построить Continuous Delivery процесс с ChatOps "за дешево" используя популярные инструменты и сервисы, такие как: Bitbucket, Kubernetes, Terraform, Scaleway и др. Я покажу вам как автоматизировать без дополнительных расходов.

Terraform: a novel about modules, providers, security, and pain

В Dev-Pro DevOps-специалисты работают с Terraform в рамках Azure. Команда работает с множеством окружений и ресурсов, среди которых есть AKS (Kubernetes). Сергей поделится опытом успешного написания модулей и провайдеров для Terraform.

Building Next Generation Apps with Knative

Knative is a collection of open source building blocks for serverless containers running on Kubernetes. It brings together two worlds: Kubernetes, as container management solution; and serverless, as the way the application developers want to run their code.
In this talk we will discuss the foundation the Knative is built on, it’s components and capabilities. We will see how it simplifies life of both developers and operators.
And of course we will check it in action. Come to this section to see the future of the service world.

Monitoring Cloud Databases

Troubleshooting the database-related problems turns out to be not a simple task even if you run your database on-premise. And performance debug can become a nightmare when you run it as a managed service in AWS/GCP/Azure, because you have no access to the underlying OS, and series of DB metrics gathered by your monitoring solution is the only subject you have to explore.
The talk will make an overview of a monitoring possibilities available for MySQL/PostgreSQL managed database in case of AWS, GCP, and Azure cloud providers. We will review what monitoring data can be gathered, speak about data granularity, and discuss ways to export these metrics to Prometheus for their simplified representation and wide/complex troubleshooting analysis of the whole instance.

DevOps: Be good, Get good or Give up

В данной презентации, мы рассмотрим три ключевых момента в культуре DevOps, а именно Continuous Integration, Continuous Delivery и Post-Production фазы, и как методом проб и ошибок менялись наши подходы.
Доклад построен на базе опыта построения и постоянной модернизации приложений для интеграции глобальных экосистем.
Когда есть требования по поводу производительности, безопасности, и высокой доступности распределенного приложения некоторые стандартные подходы могут усложнить нашу жизнь, и я продемонстрирую с какими проблемами нам пришлось столкнуться и какие решения были использованы.

Девопс культура или бизнес, что важнее?

В процессе цикла разработки, часто возникает вопрос что важнее: бизнес задачи, которые принесут выгоду в краткосрочной перспективе, или инженерные задачи, такие как правильная архитектура и стабильность, которые принесут долгосрочную выгоду. Если ваша организация задекларировала, что она внедряет девопс философию, но в процессе выясняется, что это противоречит краткосрочным бизнес целям, что если бизнес считает команды такими, которые затягивают цикл разработки, а команды чувствуют себя пожаротушителями?! В своем докладе я приведу примеры простых технических и организационных чек листов , по которым можно будет понять находятся ли цели бизнеса и команды в равновесии и как следовать девопс культуре, даже если ты один в поле воин.

Using Chef to manage hardware-based infrastructure

Доклад посвящен практическому опыту использования Chef для разворачивания, Сonfiguration-management, Release-management of medium-scale infrastructure (1000+ железных серверов). Будут рассмотрены и даны ответы на следующие вопросы:
- Как управлять железом в мире клаудов и k8s?
- Сколько нужно времени и инженеров чтобы релизнуться на 1000 машин?
- Какой инструментарий предоставляет Chef для мониторинга хода релиза в процессе, pre-release, post-release статуса?
- How to keep, manage and rotate secrets secure way?
- Сколько нужно времени чтобы изменить root-password на всей среде?
- Bonus: сколько нужно грузовиков чтобы перевезти датацентр?

Тестирование в DevOps практиках или есть ли у вас план мистер Х?

Очень часто когда приходишь на проект и строишь структуру CI/CD с удивлением узнаешь, что никакой стратегии тестирования на проекте нету и в помине. Очень часто стратегия тестирования сводится к фразе "У нас есть Jenkins и авто-тесты". Как и когда запускать тесты? Насколько они важны для DevOps практик, все это будет рассказано в докладе.

DevOps in the Cluster: A deep dive into operators

Operators are a recent concept in the Kubernetes world. They allow you to package, deploy and manage Kubernetes applications. But there is more to it. Operators also let you encode your operational knowledge and apply it from within the cluster. This talk wants to introduce Operators, explain the why, give working examples and go into some best practices for development. We will also look at tasks beyond packaging and deployment that can be performed by an Operator.