ConfPad

Training for technical diving prepares you for situations in a high pressure environment where failures are unavoidable but also highly dangerous. It means surviving in a hostile environment with limited resources where the failure of individual components can trigger deadly failure cascades. A diver who can’t understand how to do proper post-accident analys…

In this session, we do not look at how Kubernetes is structured. Because this may and may not be the same as the user. Let's take a look at how pods roll out via deployments and automatically scale over self-generated / published metrics. Needless to say, we also configure the reverse proxy (ingress) so that our application can be reached via the Internet. W…

The Agile and DevOps movements place a lot of emphasis on the autonomy, self-organization and responsibility of teams. A common misconception is that there is little or no role for leaders of such teams. On the contrary! In this rapidly changing world, where competition is fierce and the pressure to deliver is high, effective leaders create environments that…

"Whether starting a greenfield project in one of the public clouds or implementing a lift-and-shift project – cloud security always is and will be an important topic. Even more so with the “privacy by design” principle that was put in place by GDPR. There are lots of best practices out there: multi-account strategies, principle of least privilege, automated …

"Containers and Kubernetes are becoming the de-facto standard for software distribution, management, and operations. Development teams see and realize the power of these technologies to improve efficiencies, save time, and focus on the unique business requirements of each project. At the same time, the process of deploying, running, managing, and handling up…

This talk is about how to strategically think about using system data and operations to uncover the deeper story of your product, to understand what users want without asking them and without guessing. Make better use of system logs and other data to inform what we build focusing on the "learn" aspect of the build-measure-learn development cycle. Think of it…

"Developers love containers: they help to package applications neatly and unravel library dependencies. Some ops teams take a more sober view of the technology, though. They are responsible for the infrastructure and the security. Shared kernels separating applications only by namespaces and groups, cause raised eyebrows now and then. The level of isolation …

Shell scripts have been our constant companions since the seventies and although there have been many other contenders like Perl, Python or Ruby, Shell scripts are still here, alive and kicking. With the rise of the container, writing shell scripts becomes an essential skill again, since plain shell scripts are the least common denominator for every Linux co…

At Mapp Digital Cloud Team we strive to deliver best digital marketing experience to our customers and their end users. However, as everyone working with complex technology, we too have our ups and downs. I want to share our experience on the failure approach journey. We have come long way by applying industry best standards on blameless postmortems and impl…

Package managers are hard. Helm learned a lot of lessons from others’ mistakes, but also repeated some. For example, having a single index file per repository is not scalable. It’s the same mistake that NPM made and it causes slower CI, high memory consumption, slower searches, and more. Another example is not having private enterprise repositories in mind, …

The consistent application of DevOps and Continuous Delivery practices requires transformation within almost all functions of an company. While this is a challenge for small and medium-sized companies, it is a giant task for large international corporations. Heiko and Dirk will introduce SAP’s Cloud Transformation in their talk, during which they will focus …

Digital economy makes applications the center of your world and the trust anchor of your customer. At the same time, your customer expects the highest comfort which makes it necessary to keep your applications up to date with new features as quick as possible. This results in several release cycles per day which need to be in sync with your security policy. …

"1. Speed – rapid iterations require agile coordination 2. Relevance – integrating market feedback requires integrated communication 3. Quality and Testing (not "testing quality”) are built into every step of the process The above is well-documented and widely accepted as part of the DevOps revolution. But we have not yet won the battle! The solution lies no…

The purpose of the talk is to motivate teams to take a moment and reflect on their Continuous Delivery pipeline architecture for the sole purpose of improvement and encourage them to KISS "Keep it simple, (maybe not stupid)" their continuous delivery architecture all the way. The architecture of continuous delivery pipelines is becoming complicated and compl…

"In the course of digital transformation, many business processes are currently undergoing fundamental change. Management wants the cloud in order to better face cost and competitive pressure. There is hardly a company that does not start strategic cloud initiatives. According to independent market research, by 2020 more computing power will be used as a Iaa…

"How to apply DevOps in a traditional and large enterprise is a hot topic. Terms like digitization and transformation are now common buzzwords among management, thus defining a technology roadmap and reinventing your business with software is a must if you want to excel or even survive. It is clear that today, no company can’t compete without technology, the…

If you want to be in nowadays, you count on open source software (OSS) to stay flexible and avoid reinventing the wheel. Many applications contain more open source code than proprietary code. Using components with known vulnerabilities is one of the most common OWASP risks. In this presentation, we will look at the security, operational and legal challenges …

Applications today are deployed in fully automatic environments like microservices, containers or clouds, which allow seamless load balancing, auto-scaling and other infrastructure-dependent services. To secure such applications many different security policies need to be applied, like SSL/TLS, ACLs, IP Reputation, WAF and more. This talk will look at the ch…

Experience live how open source tools can be used to check the security of a web application – fully automated as part of a DevOps build pipeline. See how a dynamic and static security analysis toolset identifies vulnerabilities and gives remediation advice. Also learn how to generate vulnerability reports and consolidate findings. Enhance your security tool…

"DevOps aims for increasing business efficiency through IT – thus requiring, next to automation practices, changes in the way of working and collaboration between Dev and Ops. But for those who thought this is where the story ends: sorry, you’re wrong! I’ve seen many examples where the “Pulse of DevOps” is not been transferred to the entire enterprise ecosys…

"Gene Kim articulates: “The Third Way (of DevOps) is about creating a culture that fosters two things: continual experimentation, taking risks and learning from failure; and understanding that repetition and practice is the prerequisite to mastery.” Yet, as DevOps is getting popular traction, what we experience are misinterpretations (the DevOps team or DevO…

This talk calls attention to the seven biggest problems encountered when building security into agile projects. Based on rules of thumb from security consulting, you will experience first-hand the expected (and unexpected) obstacles you can meet. You will hear about technical, organizational, process-oriented, and even skill-related issues with which teams f…

Installation of KVM by Ansible Playbook on a Linux workstation Setting up multiple nodes on local KVM with Terraform Installation of Kubernetes clusters with hyperkube

Puppet Pipelines simplifies continuous delivery and unifies workflows across your Dev and Ops teams. It automates the build and deployment of your applications — whether they’re traditionally packaged or container-based apps running in Kubernetes — and gives you deep visibility and audit trails for every action taken. Join us for a demonstration of the power…

"Distributed applications like microservices shift some of their complexities into the interaction of services. Such a service mesh, which can have hundreds of runtime instances, is very difficult to manage. You will be concerned with some of the following questions: • which service will be requested by which other services in which version and how often dep…

Microservices development environment becomes more and more popular in cloud-based companies in order to support better CI/CD methodologies. I would like to show a case study which leads to best practices of how do we manage CI/CD for 200 microservices based both on Docker/Kubernetes and Puppet under production environments and be able to control them all us…

"The complexity of the socio-technical systems we engineer, operate, and exist within is staggering. Despite this complexity, it remains a fact of life in software development and operations, one which can become easy to ignore, due to our daily interactions with and familiarity of that system (and, let’s face it, as a good strategy to cope with it). When th…

We look at how authentication works in and on Kubernetes. After a small excursion into the world of TLS certificates in which we create a user using OpenSSL, we turn to the possibility to authenticate users via OpenID-Connect. This allows us to authenticate users, e.g. Google, Gitlab or your own Keycloak instance. Right now I tend to Keycloak. The connection…

In the last three years we have built the infrastructure of the television platform waipu.tv. We started writing tools for the operation in Golang. Some of the tools turned into core services that easily take away the burden of a FIFA World Cup broadcast. We want to show you how to use the same tool chain (Golang & Co) to solve operational problems and devel…

"Go is not a language traditionally used in SysOps. However, as SysOps transforms to DevOps and systems complexity keeps increasing, the need for scalability is increasing as well. Scalable system need generalized support, less scripting and more software development, ideally using a cross-platform language that supports concurrency and parallelism. This is …

Over the last year or so much has been happening to Java the JVM and the Java ecosystem. Yet there is so much more to come. In this talk hear how the Java application stack, the related open source technologies and the Java ecosystem is changing to meet the demands of Cloud. Learn what has happened so far and what more there is to come. Whether improved memo…

"You’ve probably heard of BDD and TDD. Well, many teams struggle with CDD: Chaos-Driven Delivery. That is, teams struggle with how to handle the constant onslaught of overwhelming amounts of work and begin to lose hope. The good news is that if you understand operating systems, you already know a great deal about how to tame the chaos! Process management is …

"From traditional IT operations and support to AI driven ChatOps: Having the right information, at the right time often makes a difference. In life… and in IT Operations and “DevOps” teams. In this breakout session you will get an overview about ChatOps, how it can help to fasten up problem solving and make collaboration more efficient. You will hear some re…

The first half of this talk will provide an overview of what the Cloud Native Computing Foundation (CNCF) is, its purpose, how it works, and provide an overview of CNCF-hosted projects. We will go into some detail about the process that projects go through to get accepted into the CNCF and what kinds of benefits this provides to those projects. The second pa…

When integrating Kubernetes into an existing environment there are special requirements to consider, especially when migrating high-load applications. This talk will highlight some practical experiences during a central infrastructure project to internally provide Kubernetes at 1&1 Mail & Media. Besides the platform topics, the talk addresses demands to soft…

Kubernetes and Docker have become nowadays the standard for building reliable and flexible software services, but with flexibility comes responsibility. In this talk we will share 7 Principles we defined for running production ready Kubernetes and you will learn how not to repeat the same mistakes we did in the past years. We will embrace the failures and ta…

"Public cloud services have become a commodity asset in the past years. Shopping24 though is currently running all systems on pure bare metal. With this we’re not alone: Etsy is a popular example for choosing a classic datacenter over a cloud one. In this use case, I’ll lay out Shopping24’s move into the Amazon AWS cloud a few years back and our recent journ…

"Blameless postmortems and learning from failure are very en vogue in the technology industry right now. Both fall into that less-discussed category of "CI": Continuous Improvement. But for as much as we all talk about them, in many organizations and teams, the outcome of continual organizational learning and improvement remains elusive. Why is this? In this…

Modern software development is increasingly taking a “microservice” approach that has resulted in an explosion of complexity at the network level. We have more applications running distributed across different datacenters. Distributed tracing, events, and metrics are essential for observing and understanding modern microservice architectures. This talk is a …

Have you ever heard yourself or someone else say “Don’t deploy on Friday”? Perhaps it’s your company’s policy? I used to have a “Fear of Fridays” too! Join me as I tell you about my experiences, how I improved. Learn about risk and confidence, build pipelines with Jenkins, automated testing, continuous deployment and monitoring. Discover the details of trunk…

Development teams are looking more and more to Serverless for new projects, and for many teams that means using a commercial Functions service. But, there are options. In this talk, we’ll discuss Serverless concepts and work with the Fn Project, an open source, cloud-agnostic functions platform which can be deployed across your existing cloud estate.

Every new project in nearly every organization wants to include DevOps, and every team wants to get faster. However, putting every person in a room together and introducing some new technologies does not guarantee for even slightly improved lead times. What is the reason? Does DevOps really work for the world outside our IT bubble? Let´s switch perspectives …

If you want to privately deliver your Docker images to your data centers or customers world-wide, you will need to run your own registry. Running it yourself or using IaaS in the cloud for that means investing a lot of effort. Ready-made registries in the cloud are an alternative. Long-time Azure MVP and Microsoft Regional Director Rainer Stropek spends this…

Bootstrapping a Kubernetes cluster is easy, rolling it out to nearly 200 engineering teams and operating it at scale is a challenge. In this talk, we are presenting our approach to Kubernetes provisioning on AWS, operations and developer experience for our growing Zalando developer base. We will walk you through our horror stories of operating 80+ clusters a…

Tool-supported quality assurance has been part of software development since the very beginning and thanks to the idea of release pipelines, there is now a "natural" starting point for it. But what kind of quality control should be attached to which pipeline stage and is the pipeline the right place for this at all? The presentation shows which areas can cur…

"Time and time and time again, we see people doing incredibly stupid things. Once we start talking it turns out things aren’t as stupid as they seem to be. From a different perspective things make perfect sense – all of a sudden. Perspectives that are usual in companies but can blur the view and make things look stupid can be the following: a view from highe…

“Feeling means believing”. As a complement to our keynote, we offer a simple game. The game will simulate how to feel and perceive DevOps speed. We use the widely known exercise of paper mail enveloping to model a flow close to software development. Given this model, we can observe typical brakes and boosts in a condensed time frame, while having interesting…

Everybody is enthusiastic about the “cloud”, but how do I can transfer my old rusty application to this shiny new world? This presentation describes the migration process of a ten-year-old web application to a Kubernetes based platform. The app is written in Java with Wicket 1.4 as the Web framework of choice, running on a plain Jetty 6 servlet engine with M…

The ever-increasing complexity of modern systems, modern DevOps and continuous delivery-centric workflows place new demands on performance and reliability testing approaches. When systems are comprised of many distributed components, each with its own performance and reliability characteristics, and when a misconfiguration that causes a cascading failure und…

While Openshift provides a lot of prebaked components, one can install thru the catalog – it’s NOT setting you up for rapid, well integrated and goverened software development. It’s an endless open toolkit. That is why we have started github/opendevstack, with the goal that developers can focus on features and not on getting CI/CD to work. This session intro…

"Microservices are everywhere. Everyone seems to be either going into that direction or is talking about doing so. But are they really the best choice for you? Developers! Architects! Buckle up as we’re going to cut through the hype. Instead of going all-in on microservices or all-in on big ball of mud, we’ll introduce a third choice: the Majestic Modular Mo…