SlideShare uma empresa Scribd logo
1 de 39
How Online Retailer Resident Scaled DevOps
with AWS and CloudShell Colony
Quali
Digital transformation is changing the world
The digital transformation bottleneck is environments
What is an “environment”?
Environments in DevOps
The benefits of EaaS approach
Resident
DevOps Goals
Using CloudShell Colony and AWS to scale DevOps – Solution
Drill Down
Results
Vision
AWS
Kubernetes on AWS with Amazon EKS
Conclusion
Q&A
Digital Transformation
is Changing the World
Maya Ber Lerner, CTO
Quali
The Digital Transformation Bottleneck is Environments
Approval requests
Stakeholders
Responsible for Infrastructure
Shadow IT
Waiting for
infrastructure kills
innovation
Bottleneck for innovation
Uncontrolled Direct
access to
infrastructure
Responsible for
cloud cost,
security and
compliance
DevOps Environment Challenges
Using environments
for development,
testing, support, Ops
• How can I offer self-service?
• How can I scale DevOps when I
integrate open source tools in the
broader toolchain?
• How can I make it easier to maintain
and troubleshoot environments?
Responsible to
provide environments
for DevOps
• How can I get environments fast?
• How can I do my job without
environments being a bottleneck?
• How can I get environments without
being responsible for cloud spend
or security?
• How can we benefit from the power and
flexibility of the cloud without losing
control?
• How can I manage environment cost?
• How can we avoid environment
security and compliance blind spots?
Innovate At Scale Under Control
Logging & Monitoring
Data/Service Virtualization
Applications Dev/Test/Sec Tools
Infrastructure
An environment is not about any single technology.
It’s about a business need
Environments Fuel Innovation
All the components you need to get a job done
Environments for DevOps
CI/CD
Dev Functional tests ProductionPerformance tests Dynamic security Staging
Source ControlArtifact Repository
Chaos monkey
Consume environments throughout the
value stream
Keep blueprints in your source
control tool
Get application artifacts from
your artifact repository
Integrate with Infrastructure as
Code tools
Infrastructure as Code
After
Before
Waiting for
infrastructure kills
innovation
Enabler for innovation
Business is no
longer constrained
by infrastructure
Digital Transformation
Stakeholders Policies and access Control
Blueprints
Approval requests
Stakeholders
Responsible for Infrastructure
Shadow IT
Bottleneck for innovation
Uncontrolled Direct
access to
infrastructure
Responsible for Infrastructure
Benefits of Environment as a Service
SERVE A
BUSINESS NEED
an environment
represents a business
need, abstracted from the
technology
SCALE
standardize and re-use
automation across the
value stream
CONTROL
automated cost control,
security and compliance
DRIVE BUSINESS
INSIGHTS
connect infrastructure
consumption data with
business need
Environment as a Service with CloudShell Colony
Sign Up
Create an account in
CloudShell Colony and
connect your
cloud-provider
1
Blueprint
Blueprint your
environment
2 Environments at
scale™
Launch environments from a self- service UI
or from the CI/CD pipeline with
Out-of-Box plugins.
All the way from development to production
3
Let’s see how Resident turned
this vision into reality with
CloudShell Colony on AWS cloud
Pavel Eliav, Head of DevOps
Resident
Introduction to Resident
Resident is an innovative retail ISV managing over 10 online brands
Resident is a house of direct-to-consumer brands in the home
goods space. The company owns and operates multiple brands
catering to different consumer furnishing needs including Nectar
and DreamCloud.
The company is headquartered in San Francisco with a
dedicated New York City office and an R&D facility in Tel
Aviv. Yet, at the heart of the company is the belief in
building a team using the best talent possible, no matter
where they reside. From 15 cities across 5 countries,
Resident also has a diversified virtual workforce of more
than 200 employees.
https://www.residenthome.com
Resident’s DevOps Goals
• Support fast growth with multiple globally distributed teams
• Avoid developers sharing static integration and staging environments >
remove bottlenecks and conflicts
• Make it possible to provide fast feedback on new features
• Cut time spent on ongoing environment maintenance and
troubleshooting activity
• Control and secure infrastructure access
• Accurately track AWS usage
The Resident Solution
On-Demand Secure Environments throughout the release pipeline.
ProductionQA Staging
Source Control Artifact RepositoryCloud Provider Pipeline
Used for:
Feature Development,
Integration Tests (CI)
https://www.nectarsleep.com/
ChatOps Bot
Used for:
Product Review
Last mile Validation
Security tests
https://www.dreamcloudsleep.com/
https://www.bundleliving.com/
https://www.wovenlyrugs.com/
… and more
Development
Used for:
Manual QA Tests
Use Case Drill Down – Self Service Environments
1 2
Environment Ready!
Results - Innovating Faster
Self Service in under 5 minutes
Global teams get access to secure https environments
using a self-service slack bot
No Static Environments
Remove conflicts and bottlenecks
100% Role Based Access Control
Access control to cloud accounts
Increased Development Speed
Dynamic environments make it possible to immediately
test new features, Develop more features in parallel.
Visibility on Cloud Utilization
Environments are tagged automatically and tracked.
Scale
Easy to manage standardized environments
The Vision
Adopting Containers & Kubernetes
• Launch environments on Amazon EKS Kubernetes Service.
• Migrate existing assets
• Overcome technical & cultural challenges with CloudShell Colony
Kubernetes on AWS
with Amazon EKS
Kevin Wall, Partner Solutions Architect
AWS Partner Network
• Create a culture of innovation by organizing into small DevOps teams
• Continually evaluate your security posture by automating security
• Componentize applications using microservices
• Update applications & infrastructure quickly by automating CI/CD
• Standardize and automate operations by modeling infrastructure as code
• Simplify infrastructure management with serverless technologies
• Improve application performance by increasing observability
AWS best practices for building modern applications
Monoliths and Microservices
Monolith
Does everything
Microservice
Does one thing
AWS Container Services Landscape
Management
Deployment, Scheduling,
Scaling & Management of
containerized applications
Hosting
Where the containers run
Amazon Elastic
Container Service
Amazon Elastic
Kubernetes
Service
Amazon EC2 AWS Fargate
Image Registry
Container Image Repository
Amazon Elastic
Container Registry
Balancing flexibility and simplicity:
Workload-by-workload
Flexibility focused
Low level of opinion
Low level of abstraction
Focus on infrastructure
and configuration
Installing, configuring, and managing
managing my compute environment is
environment is critical to achieving my
achieving my goals
Value simplicity
High level of opinion
High level of abstraction
Focus only on app
and primitive
Having a standardized and
on-demand compute environment
is critical to achieving my goals
Amazon Elastic
Container Service for
Kubernetes
51%
of Kubernetes workloads
run on AWS today
— CNCF
Customers adopting Kubernetes on AWS
Helps you run
containers at scale
Open source container
management platform
Gives you primitives
for building
modern applications
What is Kubernetes?
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Cluster.example.com
Node Components
Kubectl
Master Components
(Control Plane)
etcd
API Server
Kubelet
Worker
node
Kubelet
Worker
node
Kube-proxy Kube-proxy
Scheduler
Controller Mgr.
What is Kubernetes?
Amazon EKS
Worker VPC (your account)
Kubectl
Master VPC (AWS account)
etcd
AZ 1
API Server
etcd
API Server
prod-cluster-123.eks.amazonaws.com
EKS-owned ENI
Kubelet
AZ 1
Worker
node
EKS-owned ENI
Kubelet
AZ 2
Worker
node
AZ 2
Kube-proxy Kube-proxy
[mycluster].eks.amazonaws.com
Availability
Zone 1
Availability
Zone 2
Availability
Zone 3
Kubectl
Master VPC (AWS account)
Worker VPC
(Your account)
AWS Identity and Access Management
(IAM) Authentication
Kubectl
3) Authorizes AWS identity with RBAC
K8s API
1) Passes AWS identity
2) Verifies AWS identity
4) K8s action
allowed/denied
Container Storage Interface (CSI)
A flexible standard for orchestration
and storage provider connections
We support the CSI standard through following drivers:
Amazon Elastic Block Store: Amazon EBS CSI Driver
Amazon Elastic File System: Amazon EFS CSI Driver
Amazon FSx for Lustre: Amazon FSx CSI Driver
• Amazon EKS-Optimized AMI
• Standard EC2 compute instance types
• P2 and P3 accelerated instances
• i3 bare metal
• Spot Instances
Worker Node Instance Flexibility
Amazon EKS is Kubernetes-certified
Kubernetes conformance
• Amazon EKS runs 100% upstream Kubernetes
• Guaranteed portability and interoperability
• Timely updates
• Confirmability
Continuous Deployment Cycle
Code
Repository
Code Pipeline Execution New Image Generated Trigger Deployment
1 2 4
3 5
6
1
Developers continuously integrate
changes into a main branch hosted
within a repo
2
Triggers an execution of the pipeline
when a new version is found, builds
a new image with build id
3
Pushes the newly built image
tagged with build id to container repo
4
Trigger application deployment
5
Update Kubernetes deployment
6
Fetches new container image
and performs a rolling update
of deployment
Developer
Container Repo
Rich Partner Ecosystem
DevOpsFoundation Security Networking
Monitoring &
logging
More Information
Amazon EKS
https://aws.amazon.com/eks/
AWS YouTube Channel
https://www.youtube.com/user/AmazonWebServices
Amazon EKS Workshop
https://eksworkshop.com/
Conclusion
• Environment automation is great
Q&A
Challenges Results
Case Study |
quali.com
Thank You!

Mais conteúdo relacionado

Mais procurados

From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!Jules Pierre-Louis
 
App Modernisation with Microsoft Azure
App Modernisation with Microsoft AzureApp Modernisation with Microsoft Azure
App Modernisation with Microsoft AzureAdam Stephensen
 
Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps  Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps Chetan Gordhan
 
Introduction to DevSecOps
Introduction to DevSecOpsIntroduction to DevSecOps
Introduction to DevSecOpsSetu Parimi
 
Operationalize all the network things
Operationalize all the network thingsOperationalize all the network things
Operationalize all the network thingsLori MacVittie
 
Mainframe MRI from CA Technologies
Mainframe MRI from CA TechnologiesMainframe MRI from CA Technologies
Mainframe MRI from CA TechnologiesCA Technologies
 
Infrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service FabricInfrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service FabricSaba Jamalian
 
Secure your Application with Google cloud armor
Secure your Application with Google cloud armorSecure your Application with Google cloud armor
Secure your Application with Google cloud armorDevOps Indonesia
 
State of Mainframe DevOps
State of Mainframe DevOpsState of Mainframe DevOps
State of Mainframe DevOpsDevOps.com
 
Pushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservicesPushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservicesLori MacVittie
 
Securing Your Database Dynamic DB Credentials
Securing Your Database  Dynamic DB CredentialsSecuring Your Database  Dynamic DB Credentials
Securing Your Database Dynamic DB CredentialsDevOps Indonesia
 
DevSecOps in 10 minutes
DevSecOps in 10 minutesDevSecOps in 10 minutes
DevSecOps in 10 minuteskieranjacobsen
 
The DevOps Journey
The DevOps JourneyThe DevOps Journey
The DevOps JourneyMicro Focus
 
DevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security SuccessDevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security SuccessPuma Security, LLC
 
Iac evolutions
Iac evolutionsIac evolutions
Iac evolutionsPrancer Io
 
When Developers Operate and Operators Develop
When Developers Operate and Operators DevelopWhen Developers Operate and Operators Develop
When Developers Operate and Operators DevelopAdrian Cockcroft
 
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...CloudIDSummit
 
Application_security_Strategic
Application_security_StrategicApplication_security_Strategic
Application_security_StrategicRamesh VG
 

Mais procurados (20)

From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!From Monolith to Microservices – and Beyond!
From Monolith to Microservices – and Beyond!
 
App Modernisation with Microsoft Azure
App Modernisation with Microsoft AzureApp Modernisation with Microsoft Azure
App Modernisation with Microsoft Azure
 
Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps  Microsoft DevOps Solution - DevOps
Microsoft DevOps Solution - DevOps
 
Introduction to DevSecOps
Introduction to DevSecOpsIntroduction to DevSecOps
Introduction to DevSecOps
 
Securing DevOps Lifecycle
Securing DevOps LifecycleSecuring DevOps Lifecycle
Securing DevOps Lifecycle
 
Operationalize all the network things
Operationalize all the network thingsOperationalize all the network things
Operationalize all the network things
 
Mainframe MRI from CA Technologies
Mainframe MRI from CA TechnologiesMainframe MRI from CA Technologies
Mainframe MRI from CA Technologies
 
Infrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service FabricInfrastructure less development with Azure Service Fabric
Infrastructure less development with Azure Service Fabric
 
Secure your Application with Google cloud armor
Secure your Application with Google cloud armorSecure your Application with Google cloud armor
Secure your Application with Google cloud armor
 
State of Mainframe DevOps
State of Mainframe DevOpsState of Mainframe DevOps
State of Mainframe DevOps
 
Pushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservicesPushing the DevOps envelope into the network with microservices
Pushing the DevOps envelope into the network with microservices
 
Securing Your Database Dynamic DB Credentials
Securing Your Database  Dynamic DB CredentialsSecuring Your Database  Dynamic DB Credentials
Securing Your Database Dynamic DB Credentials
 
DevSecOps in 10 minutes
DevSecOps in 10 minutesDevSecOps in 10 minutes
DevSecOps in 10 minutes
 
The DevOps Journey
The DevOps JourneyThe DevOps Journey
The DevOps Journey
 
DevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security SuccessDevSecOps: Key Controls to Modern Security Success
DevSecOps: Key Controls to Modern Security Success
 
Iac evolutions
Iac evolutionsIac evolutions
Iac evolutions
 
Introduction to Microservices
Introduction to MicroservicesIntroduction to Microservices
Introduction to Microservices
 
When Developers Operate and Operators Develop
When Developers Operate and Operators DevelopWhen Developers Operate and Operators Develop
When Developers Operate and Operators Develop
 
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
CIS14: NSTIC - Identity and Access Management Collaborative Approaches to Nov...
 
Application_security_Strategic
Application_security_StrategicApplication_security_Strategic
Application_security_Strategic
 

Semelhante a How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony

The state of containers for your DevOps journey
The state of containers for your DevOps journeyThe state of containers for your DevOps journey
The state of containers for your DevOps journeyAgile Montréal
 
Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Adrian Todorov
 
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...Ian Choi
 
Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4WhaTap Labs
 
Containers and Kubernetes
Containers and KubernetesContainers and Kubernetes
Containers and KubernetesNills Franssens
 
All you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft AzureAll you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft AzureEvgeny Rudinsky
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsJessica Deen
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
 How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPTAmazon Web Services
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS
 How Symantec Cloud Workload Protection Secures LifeLock on AWS How Symantec Cloud Workload Protection Secures LifeLock on AWS
How Symantec Cloud Workload Protection Secures LifeLock on AWSAmazon Web Services
 
Continuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWSContinuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWSAmazon Web Services
 
Improving Security Agility using DevSecOps
Improving Security Agility using DevSecOpsImproving Security Agility using DevSecOps
Improving Security Agility using DevSecOpsAmazon Web Services
 
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...Amazon Web Services
 
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWSAWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWSAmazon Web Services
 
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptxKubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptxHectorSebastianMendo
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsJessica Deen
 
Microsoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on AzureMicrosoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on AzureJessica Deen
 
Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201Amazon Web Services
 
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)Alex Henthorn-Iwane
 
Kubernetes for .NET Developers
Kubernetes for .NET DevelopersKubernetes for .NET Developers
Kubernetes for .NET DevelopersLorenzo Barbieri
 

Semelhante a How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony (20)

The state of containers for your DevOps journey
The state of containers for your DevOps journeyThe state of containers for your DevOps journey
The state of containers for your DevOps journey
 
Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...Using Azure DevOps to continuously build, test, and deploy containerized appl...
Using Azure DevOps to continuously build, test, and deploy containerized appl...
 
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
[OpenInfra Days Vietnam 2019] Innovation with open sources and app modernizat...
 
Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4Cloud for Kubernetes : Session4
Cloud for Kubernetes : Session4
 
Containers and Kubernetes
Containers and KubernetesContainers and Kubernetes
Containers and Kubernetes
 
All you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft AzureAll you need for Containerized application in Microsoft Azure
All you need for Containerized application in Microsoft Azure
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOps
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
 How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
How Symantec Cloud Workload Protection Secures LifeLock on AWS PPT
 
How Symantec Cloud Workload Protection Secures LifeLock on AWS
 How Symantec Cloud Workload Protection Secures LifeLock on AWS How Symantec Cloud Workload Protection Secures LifeLock on AWS
How Symantec Cloud Workload Protection Secures LifeLock on AWS
 
Continuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWSContinuous Integration and Deployment Best Practices on AWS
Continuous Integration and Deployment Best Practices on AWS
 
Improving Security Agility using DevSecOps
Improving Security Agility using DevSecOpsImproving Security Agility using DevSecOps
Improving Security Agility using DevSecOps
 
Kubernetes vs App Service
Kubernetes vs App ServiceKubernetes vs App Service
Kubernetes vs App Service
 
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
Managing Your Application Lifecycle on AWS: Continuous Integration and Deploy...
 
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWSAWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
AWS January 2016 Webinar Series - Introduction to Deploying Applications on AWS
 
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptxKubernetes on on on on on on on on on on on on on on Azure Deck.pptx
Kubernetes on on on on on on on on on on on on on on Azure Deck.pptx
 
Microsoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOpsMicrosoft, Linux, Open Source, DevOps
Microsoft, Linux, Open Source, DevOps
 
Microsoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on AzureMicrosoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on Azure
 
Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201Creating your Hybrid Cloud with AWS -Technical 201
Creating your Hybrid Cloud with AWS -Technical 201
 
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
The Carrier DevOps Trend (Presented to Okinawa Open Days Conference)
 
Kubernetes for .NET Developers
Kubernetes for .NET DevelopersKubernetes for .NET Developers
Kubernetes for .NET Developers
 

Mais de DevOps.com

Modernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source SoftwareModernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source SoftwareDevOps.com
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...DevOps.com
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...DevOps.com
 
Next Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and SnykNext Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and SnykDevOps.com
 
Vulnerability Discovery in the Cloud
Vulnerability Discovery in the CloudVulnerability Discovery in the Cloud
Vulnerability Discovery in the CloudDevOps.com
 
2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and Predictions2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and PredictionsDevOps.com
 
A New Year’s Ransomware Resolution
A New Year’s Ransomware ResolutionA New Year’s Ransomware Resolution
A New Year’s Ransomware ResolutionDevOps.com
 
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)DevOps.com
 
Don't Panic! Effective Incident Response
Don't Panic! Effective Incident ResponseDon't Panic! Effective Incident Response
Don't Panic! Effective Incident ResponseDevOps.com
 
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's CultureCreating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's CultureDevOps.com
 
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with TeleportRole Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with TeleportDevOps.com
 
Monitoring Serverless Applications with Datadog
Monitoring Serverless Applications with DatadogMonitoring Serverless Applications with Datadog
Monitoring Serverless Applications with DatadogDevOps.com
 
Deliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or PrivatelyDeliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or PrivatelyDevOps.com
 
Securing medical apps in the age of covid final
Securing medical apps in the age of covid finalSecuring medical apps in the age of covid final
Securing medical apps in the age of covid finalDevOps.com
 
How to Build a Healthy On-Call Culture
How to Build a Healthy On-Call CultureHow to Build a Healthy On-Call Culture
How to Build a Healthy On-Call CultureDevOps.com
 
The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021DevOps.com
 
Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?DevOps.com
 
Secure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift EnvironmentsSecure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift EnvironmentsDevOps.com
 
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...DevOps.com
 
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...DevOps.com
 

Mais de DevOps.com (20)

Modernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source SoftwareModernizing on IBM Z Made Easier With Open Source Software
Modernizing on IBM Z Made Easier With Open Source Software
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
 
Next Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and SnykNext Generation Vulnerability Assessment Using Datadog and Snyk
Next Generation Vulnerability Assessment Using Datadog and Snyk
 
Vulnerability Discovery in the Cloud
Vulnerability Discovery in the CloudVulnerability Discovery in the Cloud
Vulnerability Discovery in the Cloud
 
2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and Predictions2021 Open Source Governance: Top Ten Trends and Predictions
2021 Open Source Governance: Top Ten Trends and Predictions
 
A New Year’s Ransomware Resolution
A New Year’s Ransomware ResolutionA New Year’s Ransomware Resolution
A New Year’s Ransomware Resolution
 
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
Getting Started with Runtime Security on Azure Kubernetes Service (AKS)
 
Don't Panic! Effective Incident Response
Don't Panic! Effective Incident ResponseDon't Panic! Effective Incident Response
Don't Panic! Effective Incident Response
 
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's CultureCreating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
Creating a Culture of Chaos: Chaos Engineering Is Not Just Tools, It's Culture
 
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with TeleportRole Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
Role Based Access Controls (RBAC) for SSH and Kubernetes Access with Teleport
 
Monitoring Serverless Applications with Datadog
Monitoring Serverless Applications with DatadogMonitoring Serverless Applications with Datadog
Monitoring Serverless Applications with Datadog
 
Deliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or PrivatelyDeliver your App Anywhere … Publicly or Privately
Deliver your App Anywhere … Publicly or Privately
 
Securing medical apps in the age of covid final
Securing medical apps in the age of covid finalSecuring medical apps in the age of covid final
Securing medical apps in the age of covid final
 
How to Build a Healthy On-Call Culture
How to Build a Healthy On-Call CultureHow to Build a Healthy On-Call Culture
How to Build a Healthy On-Call Culture
 
The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021The Evolving Role of the Developer in 2021
The Evolving Role of the Developer in 2021
 
Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?Service Mesh: Two Big Words But Do You Need It?
Service Mesh: Two Big Words But Do You Need It?
 
Secure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift EnvironmentsSecure Data Sharing in OpenShift Environments
Secure Data Sharing in OpenShift Environments
 
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
How to Govern Identities and Access in Cloud Infrastructure: AppsFlyer Case S...
 
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
Elevate Your Enterprise Python and R AI, ML Software Strategy with Anaconda T...
 

Último

Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...apidays
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?Igalia
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Scriptwesley chun
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CVKhem
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)Gabriella Davis
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024The Digital Insurer
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsJoaquim Jorge
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdflior mazor
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businesspanagenda
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc
 

Último (20)

Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdf
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 

How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony

  • 1. How Online Retailer Resident Scaled DevOps with AWS and CloudShell Colony
  • 2. Quali Digital transformation is changing the world The digital transformation bottleneck is environments What is an “environment”? Environments in DevOps The benefits of EaaS approach Resident DevOps Goals Using CloudShell Colony and AWS to scale DevOps – Solution Drill Down Results Vision AWS Kubernetes on AWS with Amazon EKS Conclusion Q&A
  • 3. Digital Transformation is Changing the World Maya Ber Lerner, CTO Quali
  • 4. The Digital Transformation Bottleneck is Environments Approval requests Stakeholders Responsible for Infrastructure Shadow IT Waiting for infrastructure kills innovation Bottleneck for innovation Uncontrolled Direct access to infrastructure
  • 5. Responsible for cloud cost, security and compliance DevOps Environment Challenges Using environments for development, testing, support, Ops • How can I offer self-service? • How can I scale DevOps when I integrate open source tools in the broader toolchain? • How can I make it easier to maintain and troubleshoot environments? Responsible to provide environments for DevOps • How can I get environments fast? • How can I do my job without environments being a bottleneck? • How can I get environments without being responsible for cloud spend or security? • How can we benefit from the power and flexibility of the cloud without losing control? • How can I manage environment cost? • How can we avoid environment security and compliance blind spots? Innovate At Scale Under Control
  • 6. Logging & Monitoring Data/Service Virtualization Applications Dev/Test/Sec Tools Infrastructure An environment is not about any single technology. It’s about a business need Environments Fuel Innovation All the components you need to get a job done
  • 7. Environments for DevOps CI/CD Dev Functional tests ProductionPerformance tests Dynamic security Staging Source ControlArtifact Repository Chaos monkey Consume environments throughout the value stream Keep blueprints in your source control tool Get application artifacts from your artifact repository Integrate with Infrastructure as Code tools Infrastructure as Code
  • 8. After Before Waiting for infrastructure kills innovation Enabler for innovation Business is no longer constrained by infrastructure Digital Transformation Stakeholders Policies and access Control Blueprints Approval requests Stakeholders Responsible for Infrastructure Shadow IT Bottleneck for innovation Uncontrolled Direct access to infrastructure Responsible for Infrastructure
  • 9. Benefits of Environment as a Service SERVE A BUSINESS NEED an environment represents a business need, abstracted from the technology SCALE standardize and re-use automation across the value stream CONTROL automated cost control, security and compliance DRIVE BUSINESS INSIGHTS connect infrastructure consumption data with business need
  • 10. Environment as a Service with CloudShell Colony Sign Up Create an account in CloudShell Colony and connect your cloud-provider 1 Blueprint Blueprint your environment 2 Environments at scale™ Launch environments from a self- service UI or from the CI/CD pipeline with Out-of-Box plugins. All the way from development to production 3
  • 11. Let’s see how Resident turned this vision into reality with CloudShell Colony on AWS cloud Pavel Eliav, Head of DevOps Resident
  • 12. Introduction to Resident Resident is an innovative retail ISV managing over 10 online brands Resident is a house of direct-to-consumer brands in the home goods space. The company owns and operates multiple brands catering to different consumer furnishing needs including Nectar and DreamCloud. The company is headquartered in San Francisco with a dedicated New York City office and an R&D facility in Tel Aviv. Yet, at the heart of the company is the belief in building a team using the best talent possible, no matter where they reside. From 15 cities across 5 countries, Resident also has a diversified virtual workforce of more than 200 employees. https://www.residenthome.com
  • 13. Resident’s DevOps Goals • Support fast growth with multiple globally distributed teams • Avoid developers sharing static integration and staging environments > remove bottlenecks and conflicts • Make it possible to provide fast feedback on new features • Cut time spent on ongoing environment maintenance and troubleshooting activity • Control and secure infrastructure access • Accurately track AWS usage
  • 14. The Resident Solution On-Demand Secure Environments throughout the release pipeline. ProductionQA Staging Source Control Artifact RepositoryCloud Provider Pipeline Used for: Feature Development, Integration Tests (CI) https://www.nectarsleep.com/ ChatOps Bot Used for: Product Review Last mile Validation Security tests https://www.dreamcloudsleep.com/ https://www.bundleliving.com/ https://www.wovenlyrugs.com/ … and more Development Used for: Manual QA Tests
  • 15. Use Case Drill Down – Self Service Environments 1 2 Environment Ready!
  • 16. Results - Innovating Faster Self Service in under 5 minutes Global teams get access to secure https environments using a self-service slack bot No Static Environments Remove conflicts and bottlenecks 100% Role Based Access Control Access control to cloud accounts Increased Development Speed Dynamic environments make it possible to immediately test new features, Develop more features in parallel. Visibility on Cloud Utilization Environments are tagged automatically and tracked. Scale Easy to manage standardized environments
  • 17. The Vision Adopting Containers & Kubernetes • Launch environments on Amazon EKS Kubernetes Service. • Migrate existing assets • Overcome technical & cultural challenges with CloudShell Colony
  • 18. Kubernetes on AWS with Amazon EKS Kevin Wall, Partner Solutions Architect AWS Partner Network
  • 19. • Create a culture of innovation by organizing into small DevOps teams • Continually evaluate your security posture by automating security • Componentize applications using microservices • Update applications & infrastructure quickly by automating CI/CD • Standardize and automate operations by modeling infrastructure as code • Simplify infrastructure management with serverless technologies • Improve application performance by increasing observability AWS best practices for building modern applications
  • 20. Monoliths and Microservices Monolith Does everything Microservice Does one thing
  • 21. AWS Container Services Landscape Management Deployment, Scheduling, Scaling & Management of containerized applications Hosting Where the containers run Amazon Elastic Container Service Amazon Elastic Kubernetes Service Amazon EC2 AWS Fargate Image Registry Container Image Repository Amazon Elastic Container Registry
  • 22. Balancing flexibility and simplicity: Workload-by-workload Flexibility focused Low level of opinion Low level of abstraction Focus on infrastructure and configuration Installing, configuring, and managing managing my compute environment is environment is critical to achieving my achieving my goals Value simplicity High level of opinion High level of abstraction Focus only on app and primitive Having a standardized and on-demand compute environment is critical to achieving my goals
  • 24. 51% of Kubernetes workloads run on AWS today — CNCF
  • 26. Helps you run containers at scale Open source container management platform Gives you primitives for building modern applications What is Kubernetes? © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
  • 27. Cluster.example.com Node Components Kubectl Master Components (Control Plane) etcd API Server Kubelet Worker node Kubelet Worker node Kube-proxy Kube-proxy Scheduler Controller Mgr. What is Kubernetes?
  • 28. Amazon EKS Worker VPC (your account) Kubectl Master VPC (AWS account) etcd AZ 1 API Server etcd API Server prod-cluster-123.eks.amazonaws.com EKS-owned ENI Kubelet AZ 1 Worker node EKS-owned ENI Kubelet AZ 2 Worker node AZ 2 Kube-proxy Kube-proxy
  • 29. [mycluster].eks.amazonaws.com Availability Zone 1 Availability Zone 2 Availability Zone 3 Kubectl Master VPC (AWS account) Worker VPC (Your account)
  • 30. AWS Identity and Access Management (IAM) Authentication Kubectl 3) Authorizes AWS identity with RBAC K8s API 1) Passes AWS identity 2) Verifies AWS identity 4) K8s action allowed/denied
  • 31. Container Storage Interface (CSI) A flexible standard for orchestration and storage provider connections We support the CSI standard through following drivers: Amazon Elastic Block Store: Amazon EBS CSI Driver Amazon Elastic File System: Amazon EFS CSI Driver Amazon FSx for Lustre: Amazon FSx CSI Driver
  • 32. • Amazon EKS-Optimized AMI • Standard EC2 compute instance types • P2 and P3 accelerated instances • i3 bare metal • Spot Instances Worker Node Instance Flexibility
  • 33. Amazon EKS is Kubernetes-certified Kubernetes conformance • Amazon EKS runs 100% upstream Kubernetes • Guaranteed portability and interoperability • Timely updates • Confirmability
  • 34. Continuous Deployment Cycle Code Repository Code Pipeline Execution New Image Generated Trigger Deployment 1 2 4 3 5 6 1 Developers continuously integrate changes into a main branch hosted within a repo 2 Triggers an execution of the pipeline when a new version is found, builds a new image with build id 3 Pushes the newly built image tagged with build id to container repo 4 Trigger application deployment 5 Update Kubernetes deployment 6 Fetches new container image and performs a rolling update of deployment Developer Container Repo
  • 35. Rich Partner Ecosystem DevOpsFoundation Security Networking Monitoring & logging
  • 36. More Information Amazon EKS https://aws.amazon.com/eks/ AWS YouTube Channel https://www.youtube.com/user/AmazonWebServices Amazon EKS Workshop https://eksworkshop.com/
  • 38. Q&A
  • 39. Challenges Results Case Study | quali.com Thank You!

Notas do Editor

  1. Environment can be a lot of different components, because it’s not about technology. Today you can have VMs or containers or switches or firewalls in your environment, and tomorrow there may be some other thing – but you will still need an environment. For testing, for development, for production, for demos and PoCs
  2. Teams get access to secure https environments using a self-service slack bot in under 5 minutes Transition from static to dynamic environments – optimizing cloud consumption and increasing development speed Testing on production-like environments Environments standardized and easy to manage Cloud Account Access control All cloud infrastructure is automatically and consistently tagged