SlideShare une entreprise Scribd logo
1  sur  40
Télécharger pour lire hors ligne
About the Presenter
Eranda	
  Sooriyabandara	
  is	
  a	
  member	
  of	
  the	
  
Governance	
  Registry	
  team	
  at	
  WSO2	
  
e-­‐mail	
  :	
  eranda@wso2.com	
  	
  
About	
  WSO2	
  
❏  Global	
  enterprise,	
  founded	
  in	
  2005	
  
by	
  acknowledged	
  leaders	
  in	
  XML,	
  
web	
  services	
  	
  technologies,	
  
standards	
  	
  and	
  open	
  source	
  
❏  Provides	
  only	
  open	
  source	
  plaGorm-­‐
as-­‐a-­‐service	
  for	
  private,	
  public	
  and	
  
hybrid	
  cloud	
  deployments	
  
❏  All	
  WSO2	
  products	
  are	
  100%	
  open	
  
source	
  and	
  released	
  under	
  the	
  
Apache	
  License	
  Version	
  2.0.	
  
❏  Is	
  an	
  AcNve	
  Member	
  of	
  OASIS,	
  Cloud	
  
Security	
  Alliance,	
  OSGi	
  Alliance,	
  
AMQP	
  Working	
  Group,	
  OpenID	
  
FoundaNon	
  and	
  W3C.	
  
	
  
❏  Driven	
  by	
  InnovaNon	
  
❏  Launched first open source API
Management solution in 2012
❏  Launched App Factory in 2Q
2013
❏  Launched Enterprise Store and
first open source Mobile
solution in 4Q 2013
	
  
Overview
❏  SOA Governance
❏  SOA Governance Phases
❏  Design Time Governance
❏  Runtime Governance
❏  WSO2 Governance Registry
❏  Governance Use Cases
❏  Demo
❏  WSO2 Governance Registry Governance Features
❏  Conclusion
SOA Governance
“Ensuring	
  and	
  validaNng	
  that	
  assets	
  and	
  
arNfacts	
  within	
  the	
  architecture	
  are	
  acNng	
  as	
  
expected	
  and	
  maintaining	
  a	
  certain	
  level	
  of	
  
quality”	
  -­‐	
  Gartner	
  
SOA Governance
In	
  a	
  nutshell,	
  SOA	
  governance	
  is	
  all	
  about	
  
making	
  sure	
  that	
  you're	
  building	
  the	
  right	
  
system	
  and	
  ensuring	
  it	
  operates	
  to	
  your	
  
expectaCons.	
  
SOA Governance
Activities that are often mentioned as being part of SOA governance
❏  Managing the portfolio of SOA artifacts
❏  Managing the SOA artifact lifecycle
❏  Using policies to restrict behavior
❏  Monitoring, analysing and presenting artifact data
❏  Managing how and by whom SOA artifacts are used
	
  
SOA Governance Phases
SOA governance can be broken into phases on their point of application
1.  Design Time SOA Governance
2.  Runtime SOA Governance
Design Time SOA Governance
o  Design	
  Nme	
  governance	
  refers	
  to	
  the	
  defining	
  and	
  
controlling	
  enterprise	
  services	
  creaNon.	
  	
  
	
  
o  It	
  involves	
  crea-on	
  of	
  enterprise	
  policies	
  used	
  to	
  ensure	
  that	
  
enterprise	
  business	
  models	
  are	
  properly	
  funded	
  within	
  the	
  
enterprise.	
  
Runtime SOA Governance
o  RunNme	
  governance	
  refers	
  to	
  the	
  process	
  of	
  enforcing	
  the	
  
adherence	
  to	
  run-­‐Nme	
  service	
  policies.	
  	
  
	
  
o  In	
  addiNon	
  to	
  policy	
  enforcement,	
  this	
  term	
  is	
  oXen	
  used	
  to	
  
include	
  aspects	
  of	
  SOA	
  management	
  as	
  it	
  relates	
  to	
  these	
  
policies.	
  
	
  
o  Also	
  include	
  real-­‐Nme	
  policy	
  compliance	
  monitoring,	
  
audi-ng	
  and	
  measuring,	
  as	
  well	
  as	
  collec-ng	
  result	
  
sta-s-cs.	
  	
  
WSO2 Governance Registry
❏  A	
   Service	
   Oriented	
   Architecture	
   (SOA)	
   integrated	
   registry	
  
repository	
  to	
  store,	
  manage	
  and	
  govern	
  service	
  arNfacts	
  
❏  Flexible	
  and	
  Extensible	
  
❏  Fully	
  open	
  source	
  
❏  Supports	
   numerous	
   standards	
   (JMX,	
   SCM,	
   UDDI,	
   WebDAV,	
  
WS-­‐Discovery	
  ,CMIS)	
  
❏  Licensed	
  under	
  Apache	
  License	
  Version	
  2.0	
  
	
  
Governance	
  Use	
  Cases	
  
Use Case 1 : Handling Policies
o  OrganizaNons	
  have	
  their	
  own	
  policies	
  which	
  can	
  be	
  hundred	
  to	
  thousands	
  in	
  numbers.	
  
o  When	
  developing	
  a	
  service	
  there’s	
  no	
  way	
  of	
  idenNfying	
  	
  what	
  policies	
  organizaNon	
  
already	
  have	
  and	
  what	
  policies	
  they	
  want	
  to	
  use	
  in	
  the	
  service.	
  (No	
  discovery	
  and	
  
reuse)	
  
o  If	
  different	
  systems	
  tries	
  to	
  keep	
  the	
  policies	
  with	
  them	
  then	
  when	
  there	
  is	
  an	
  update	
  
to	
  that	
  policy	
  system	
  admins	
  have	
  to	
  update	
  them	
  separately.	
  (No	
  centralizaNon)	
  
o  When	
  service	
  lifecycle	
  changes	
  then	
  moving	
  policies	
  to	
  different	
  environment	
  need	
  to	
  
be	
  done	
  manually.	
  (No	
  automaNon)	
  
o  If	
  a	
  policy	
  moved	
  to	
  a	
  different	
  lifecycle	
  state	
  then	
  there	
  is	
  no	
  way	
  of	
  knowing	
  it	
  for	
  
the	
  interested	
  party.	
  (No	
  noNficaNon)	
  
o  Eg.	
  If	
  lifecycle	
  state	
  changed	
  to	
  Development	
  to	
  QA	
  then	
  quality	
  assurance	
  
engineers	
  may	
  not	
  know	
  that	
  there	
  is	
  a	
  new	
  arNfact	
  in	
  QA	
  state	
  to	
  test.	
  
Policy Governance using G-Reg
Governance Space for
Production
Governance Space for
QA
Governance Space for
Development
Governance Space
Governance Space
Governance Space
Dev
QA
Promote
Promote Demote
Demote
Prod
Policy Governance using G-Reg
Creating XACML Policy
Policy Governance using G-Reg
Distributed PDP Management
Policy Governance using G-Reg
Reverse Lookup
Policy Governance using G-Reg
Governing Policies Across Lifecycle States
Policy Governance using G-Reg
Subscribing to Notification
Use Case 2 : Handling Endpoints
o  OrganizaNons	
  have	
  their	
  own	
  services	
  which	
  can	
  be	
  hundred	
  to	
  thousands	
  in	
  
numbers.	
  Also	
  there	
  can	
  be	
  service	
  which	
  they	
  are	
  using.	
  
o  When	
  developing	
  a	
  service	
  there’s	
  no	
  way	
  of	
  idenNfying	
  	
  what	
  services	
  organizaNon	
  
already	
  have	
  and	
  what	
  services	
  they	
  want	
  to	
  use	
  in	
  the	
  service.	
  (No	
  discovery	
  and	
  
reuse)	
  
o  If	
  different	
  systems	
  tries	
  to	
  keep	
  the	
  service	
  references	
  with	
  them	
  then	
  when	
  there	
  is	
  
an	
  update	
  to	
  that	
  service	
  system	
  admins	
  have	
  to	
  update	
  them	
  separately.	
  (No	
  
centralizaNon)	
  
o  When	
  service	
  lifecycle	
  changes	
  then	
  moving	
  services	
  with	
  all	
  the	
  related	
  arNfacts	
  to	
  
different	
  environment	
  need	
  to	
  be	
  done	
  manually.	
  (No	
  automaNon)	
  
o  If	
  a	
  service	
  moved	
  to	
  a	
  different	
  lifecycle	
  state	
  then	
  there	
  is	
  no	
  way	
  of	
  knowing	
  it	
  for	
  
the	
  interested	
  party.	
  (No	
  noNficaNon)	
  
o  Eg.	
  If	
  lifecycle	
  state	
  changed	
  to	
  Development	
  to	
  QA	
  then	
  quality	
  assurance	
  
engineers	
  may	
  not	
  know	
  that	
  there	
  is	
  a	
  new	
  arNfacts	
  in	
  QA	
  state	
  to	
  test.	
  	
  
Endpoints Governance using G-Reg
Governance Space
for Production
Governance Space
for QA
Governance Space
for Development
Governance
Space
Governance
Space
Governance
SpaceDev
QA
Prod
Promote
Promote Demote
Demote
Endpoint Governance using G-Reg
Adding WSDL
Endpoint Governance using G-Reg
WSDL View
Endpoint Governance using G-Reg
Service View
Endpoint Governance using G-Reg
Creating Proxy Service Using the Service Endpoints
Endpoint Governance using G-Reg
Governing Service Across Lifecycle States
Endpoint Governance using G-Reg
Governing Service Across Lifecycle States
Endpoint Governance using G-Reg
Production….
Endpoint Governance using G-Reg
Production - Echo Proxy Config = Dev - Echo Proxy Config
G-Reg Governance Features
❏  Built-­‐in	
  SOA	
  arNfacts	
  support	
  
❏  Support	
  for	
  common	
  types	
  (Services,	
  WSDL,	
  Schema,	
  Policy,	
  APIs,	
  Providers,	
  
Documents,	
  URIs,	
  WADLs,	
  Endpoints,	
  Proxies,	
  Sequences)	
  
❏  ValidaNon	
  policies	
  -­‐	
  	
  e.g.	
  WSDL	
  ValidaNon,	
  WS-­‐I	
  ValidaNon,	
  and	
  Schema	
  
ValidaNon	
  
❏  Governance	
  Archive	
  (.gar)	
  for	
  uploading	
  arNfacts	
  with	
  imports	
  
❏  WSDL	
  Tool	
  to	
  import	
  service	
  informaNon	
  from	
  a	
  given	
  WSDL,	
  and	
  WSDL	
  
custom-­‐view	
  
❏  WS	
  API	
  for	
  built-­‐in	
  arNfacts	
  (CRUD	
  OperaNon	
  Support)	
  
	
  
	
  
G-Reg Governance Features (Cont.)
❏  Lifecycle	
  support	
  
❏  Built-­‐in	
  service	
  lifecycle	
  
❏  Advanced	
  lifecycle	
  management	
  	
  
❏  checklists	
  
❏  scripNng	
  support	
  
❏  transiNon	
  validaNon	
  
❏  transiNon	
  UI	
  
❏  Lifecycle	
  Workflow	
  IntegraNon	
  
❏  XML	
  editor	
  for	
  ediNng	
  lifecycle	
  
❏  Lifecycle	
  state	
  transiNon	
  through	
  governance	
  API	
  
❏  Approval	
  for	
  lifecycle	
  operaNons	
  
❏  Lifecycle	
  audit	
  
	
  
G-Reg Governance Features (Cont.)
❏  Governance	
  registry	
  extensions	
  
❏  Configurable	
  Governance	
  ArNfacts	
  (RXTs)	
  
❏  Various	
  field	
  support	
  (text,	
  text-­‐area,	
  opNons,	
  opNon-­‐text,	
  date)	
  
❏  Unbounded	
  field	
  support	
  
❏  Tool-­‐Np	
  feature	
  
❏  Reg-­‐ex	
  validaNon	
  support	
  
❏  Lifecycle	
  in	
  RXT	
  DefiniNon	
  
❏  API	
  to	
  govern	
  SOA	
  arNfacts	
  
❏  Pluggable	
  media	
  type	
  handlers	
  for	
  handling	
  custom	
  media	
  types	
  and	
  XML	
  
editor	
  for	
  ediNng	
  handler	
  
❏  WS	
  API	
  for	
  Governance	
  ArNfacts	
  (CRUD	
  OperaNon	
  Support)	
  
	
  
	
  
G-Reg Governance Features (Cont.)
❏  Miscellaneous	
  
❏  InternaNonalizaNon	
  
❏  Worklist	
  noNficaNons	
  
❏  Dependency	
  management	
  
❏  WS-­‐Discovery	
  support	
  
	
  
	
  
Conclusion
o  SOA	
  governance	
  plays	
  a	
  huge	
  role	
  in	
  an	
  enterprise	
  and	
  helps	
  the	
  industry	
  solve	
  
emerging	
  issues.	
  A	
  majority	
  of	
  the	
  SOA	
  industry	
  has	
  adopted,	
  or	
  is	
  in	
  the	
  process	
  
of	
   adopNng,	
   SOA	
   governance	
   into	
   their	
   systems	
   to	
   maximize	
   producNvity	
   and	
  
profitability	
  of	
  both	
  SOA	
  designs	
  and	
  SOA	
  producNon	
  systems.	
  
o  SOA	
   governance	
   can	
   be	
   categorized	
   into	
   two	
   major	
   phases:	
   Design	
   Time	
  
Governance	
  and	
  RunNme	
  Governance.	
  
o  WSO2	
  Governance	
  Registry	
  can	
  be	
  use	
  in	
  both	
  governance	
  phases	
  and	
  there	
  are	
  
numerous	
   OOTB	
   features	
   and	
   extension	
   points	
   to	
   implement	
   a	
   complete	
  
governance	
  story.	
  
	
  
	
  
Questions?
Business	
  Model	
  
More Information !
1.  hgp://wso2.com/products/governance-­‐registry/	
  
2.  hgp://docs.wso2.com/display/Governance460/Governing+External+References
+Across+Environments	
  
References
1.  Thomas	
  Erl	
  ...	
  [et	
  al.],	
  SOA	
  governance	
  :	
  governing	
  shared	
  services	
  on-­‐premise	
  
and	
  in	
  the	
  cloud	
  
Contact us !

Contenu connexe

Tendances

Understanding PCoIP and Zero Clients
Understanding PCoIP and Zero ClientsUnderstanding PCoIP and Zero Clients
Understanding PCoIP and Zero Clients
Jennifer Phillips
 
An Introduction to the WSO2 API Manager
An Introduction to the WSO2 API Manager An Introduction to the WSO2 API Manager
An Introduction to the WSO2 API Manager
WSO2
 

Tendances (20)

Devops ppt
Devops pptDevops ppt
Devops ppt
 
CI/CD pipelines on AWS - Builders Day Israel
CI/CD pipelines on AWS - Builders Day IsraelCI/CD pipelines on AWS - Builders Day Israel
CI/CD pipelines on AWS - Builders Day Israel
 
Understanding PCoIP and Zero Clients
Understanding PCoIP and Zero ClientsUnderstanding PCoIP and Zero Clients
Understanding PCoIP and Zero Clients
 
What is DevOps | DevOps Introduction | DevOps Training | DevOps Tutorial | Ed...
What is DevOps | DevOps Introduction | DevOps Training | DevOps Tutorial | Ed...What is DevOps | DevOps Introduction | DevOps Training | DevOps Tutorial | Ed...
What is DevOps | DevOps Introduction | DevOps Training | DevOps Tutorial | Ed...
 
Introduction to devops
Introduction to devopsIntroduction to devops
Introduction to devops
 
Service Oriented Architecture (SOA)
Service Oriented Architecture (SOA)Service Oriented Architecture (SOA)
Service Oriented Architecture (SOA)
 
Devops
DevopsDevops
Devops
 
Dev ops != Dev+Ops
Dev ops != Dev+OpsDev ops != Dev+Ops
Dev ops != Dev+Ops
 
DevOps and Tools
DevOps and ToolsDevOps and Tools
DevOps and Tools
 
Introduction To AWS & AWS Lambda
Introduction To AWS & AWS LambdaIntroduction To AWS & AWS Lambda
Introduction To AWS & AWS Lambda
 
Devops Devops Devops, at Froscon
Devops Devops Devops, at FrosconDevops Devops Devops, at Froscon
Devops Devops Devops, at Froscon
 
DevOps at Amazon: A Look at Our Tools and Processes
DevOps at Amazon: A Look at Our Tools and ProcessesDevOps at Amazon: A Look at Our Tools and Processes
DevOps at Amazon: A Look at Our Tools and Processes
 
Introduction to Enterprise Service Bus
Introduction to Enterprise Service BusIntroduction to Enterprise Service Bus
Introduction to Enterprise Service Bus
 
CI/CD on AWS
CI/CD on AWSCI/CD on AWS
CI/CD on AWS
 
Microservices architecture
Microservices architectureMicroservices architecture
Microservices architecture
 
DevOps Challenges and Best Practices
DevOps Challenges and Best PracticesDevOps Challenges and Best Practices
DevOps Challenges and Best Practices
 
DNS DDoS mitigation using Amazon Route 53 and AWS Shield
DNS DDoS mitigation using Amazon Route 53 and AWS ShieldDNS DDoS mitigation using Amazon Route 53 and AWS Shield
DNS DDoS mitigation using Amazon Route 53 and AWS Shield
 
Intro to AWS Developer Tools, featuring AWS CodeStar
Intro to AWS Developer Tools, featuring AWS CodeStarIntro to AWS Developer Tools, featuring AWS CodeStar
Intro to AWS Developer Tools, featuring AWS CodeStar
 
Introduction to Microservices
Introduction to MicroservicesIntroduction to Microservices
Introduction to Microservices
 
An Introduction to the WSO2 API Manager
An Introduction to the WSO2 API Manager An Introduction to the WSO2 API Manager
An Introduction to the WSO2 API Manager
 

Similaire à Design Time and Run Time Governance

Introducing the WSO2 Governance Registry 4 1.5
Introducing the WSO2 Governance Registry 4 1.5 Introducing the WSO2 Governance Registry 4 1.5
Introducing the WSO2 Governance Registry 4 1.5
WSO2
 
ESB Evaluation Framework
ESB Evaluation Framework ESB Evaluation Framework
ESB Evaluation Framework
WSO2
 
Application development with WSO2 App Factory
Application development with WSO2 App Factory Application development with WSO2 App Factory
Application development with WSO2 App Factory
WSO2
 
RajivRanjan_Resume
RajivRanjan_ResumeRajivRanjan_Resume
RajivRanjan_Resume
Rajiv Ranjan
 
JasonMorgan_Resume
JasonMorgan_ResumeJasonMorgan_Resume
JasonMorgan_Resume
Jason Morgan
 
SOA Governance Strategies
SOA Governance StrategiesSOA Governance Strategies
SOA Governance Strategies
WSO2
 

Similaire à Design Time and Run Time Governance (20)

Design Time and Runtime Governance with WSO2 Governance Registry
Design Time and Runtime Governance with WSO2 Governance RegistryDesign Time and Runtime Governance with WSO2 Governance Registry
Design Time and Runtime Governance with WSO2 Governance Registry
 
WSO2 Governance Registry - Product Overview
WSO2 Governance Registry - Product OverviewWSO2 Governance Registry - Product Overview
WSO2 Governance Registry - Product Overview
 
Introducing the WSO2 Governance Registry 4 1.5
Introducing the WSO2 Governance Registry 4 1.5 Introducing the WSO2 Governance Registry 4 1.5
Introducing the WSO2 Governance Registry 4 1.5
 
GitOps, Driving NGN Operations Teams 211127 #kcdgt 2021
GitOps, Driving NGN Operations Teams 211127 #kcdgt 2021GitOps, Driving NGN Operations Teams 211127 #kcdgt 2021
GitOps, Driving NGN Operations Teams 211127 #kcdgt 2021
 
Introduction to the All New WSO2 Governance Centre
Introduction to the All New WSO2 Governance CentreIntroduction to the All New WSO2 Governance Centre
Introduction to the All New WSO2 Governance Centre
 
ESB Evaluation Framework
ESB Evaluation Framework ESB Evaluation Framework
ESB Evaluation Framework
 
Compliance as Code
Compliance as CodeCompliance as Code
Compliance as Code
 
Application development with WSO2 App Factory
Application development with WSO2 App Factory Application development with WSO2 App Factory
Application development with WSO2 App Factory
 
DevNation Tech Talk: Getting GitOps
DevNation Tech Talk: Getting GitOpsDevNation Tech Talk: Getting GitOps
DevNation Tech Talk: Getting GitOps
 
RajivRanjan_Resume
RajivRanjan_ResumeRajivRanjan_Resume
RajivRanjan_Resume
 
JasonMorgan_Resume
JasonMorgan_ResumeJasonMorgan_Resume
JasonMorgan_Resume
 
WSO2 API Manager 2.0 - Overview
WSO2 API Manager 2.0 - Overview WSO2 API Manager 2.0 - Overview
WSO2 API Manager 2.0 - Overview
 
Automation Deployments and Gudielines.pptx
Automation Deployments and Gudielines.pptxAutomation Deployments and Gudielines.pptx
Automation Deployments and Gudielines.pptx
 
SOA Governance Strategies
SOA Governance StrategiesSOA Governance Strategies
SOA Governance Strategies
 
Ignatius Prasad Guntupalli
Ignatius Prasad GuntupalliIgnatius Prasad Guntupalli
Ignatius Prasad Guntupalli
 
Webinar - Devops platform for the evolving enterprise
Webinar - Devops platform for the evolving enterpriseWebinar - Devops platform for the evolving enterprise
Webinar - Devops platform for the evolving enterprise
 
PCF2.2 update mkim_201807
PCF2.2 update mkim_201807PCF2.2 update mkim_201807
PCF2.2 update mkim_201807
 
Free GitOps Workshop (with Intro to Kubernetes & GitOps)
Free GitOps Workshop (with Intro to Kubernetes & GitOps)Free GitOps Workshop (with Intro to Kubernetes & GitOps)
Free GitOps Workshop (with Intro to Kubernetes & GitOps)
 
AWS Summit Singapore - Mass Migration to AWS: Best Practices to Solve Securit...
AWS Summit Singapore - Mass Migration to AWS: Best Practices to Solve Securit...AWS Summit Singapore - Mass Migration to AWS: Best Practices to Solve Securit...
AWS Summit Singapore - Mass Migration to AWS: Best Practices to Solve Securit...
 
DevOps Transformation: Learnings and Best Practices
DevOps Transformation: Learnings and Best PracticesDevOps Transformation: Learnings and Best Practices
DevOps Transformation: Learnings and Best Practices
 

Plus de WSO2

Architecting Cloud Native Applications
Architecting Cloud Native ApplicationsArchitecting Cloud Native Applications
Architecting Cloud Native Applications
WSO2
 
Fueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected ProductsFueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected Products
WSO2
 
A Reference Methodology for Agile Digital Businesses
 A Reference Methodology for Agile Digital Businesses A Reference Methodology for Agile Digital Businesses
A Reference Methodology for Agile Digital Businesses
WSO2
 

Plus de WSO2 (20)

Architecting Cloud Native Applications
Architecting Cloud Native ApplicationsArchitecting Cloud Native Applications
Architecting Cloud Native Applications
 
Accelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessAccelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with Platformless
 
How to Create a Service in Choreo
How to Create a Service in ChoreoHow to Create a Service in Choreo
How to Create a Service in Choreo
 
Ballerina Tech Talk - May 2023
Ballerina Tech Talk - May 2023Ballerina Tech Talk - May 2023
Ballerina Tech Talk - May 2023
 
Platform Strategy to Deliver Digital Experiences on Azure
Platform Strategy to Deliver Digital Experiences on AzurePlatform Strategy to Deliver Digital Experiences on Azure
Platform Strategy to Deliver Digital Experiences on Azure
 
GartnerITSymSessionSlides.pdf
GartnerITSymSessionSlides.pdfGartnerITSymSessionSlides.pdf
GartnerITSymSessionSlides.pdf
 
[Webinar] How to Create an API in Minutes
[Webinar] How to Create an API in Minutes[Webinar] How to Create an API in Minutes
[Webinar] How to Create an API in Minutes
 
Modernizing the Student Journey with Ethos Identity
Modernizing the Student Journey with Ethos IdentityModernizing the Student Journey with Ethos Identity
Modernizing the Student Journey with Ethos Identity
 
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
 
CIO Summit Berlin 2022.pptx.pdf
CIO Summit Berlin 2022.pptx.pdfCIO Summit Berlin 2022.pptx.pdf
CIO Summit Berlin 2022.pptx.pdf
 
Delivering New Digital Experiences Fast - Introducing Choreo
Delivering New Digital Experiences Fast - Introducing ChoreoDelivering New Digital Experiences Fast - Introducing Choreo
Delivering New Digital Experiences Fast - Introducing Choreo
 
Fueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected ProductsFueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected Products
 
A Reference Methodology for Agile Digital Businesses
 A Reference Methodology for Agile Digital Businesses A Reference Methodology for Agile Digital Businesses
A Reference Methodology for Agile Digital Businesses
 
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
 
Lessons from the pandemic - From a single use case to true transformation
 Lessons from the pandemic - From a single use case to true transformation Lessons from the pandemic - From a single use case to true transformation
Lessons from the pandemic - From a single use case to true transformation
 
Adding Liveliness to Banking Experiences
Adding Liveliness to Banking ExperiencesAdding Liveliness to Banking Experiences
Adding Liveliness to Banking Experiences
 
Building a Future-ready Bank
Building a Future-ready BankBuilding a Future-ready Bank
Building a Future-ready Bank
 
WSO2 API Manager Community Call - November 2021
WSO2 API Manager Community Call - November 2021WSO2 API Manager Community Call - November 2021
WSO2 API Manager Community Call - November 2021
 
[API World ] - Managing Asynchronous APIs
[API World ] - Managing Asynchronous APIs[API World ] - Managing Asynchronous APIs
[API World ] - Managing Asynchronous APIs
 
[API World 2021 ] - Understanding Cloud Native Deployment
[API World 2021 ] - Understanding Cloud Native Deployment[API World 2021 ] - Understanding Cloud Native Deployment
[API World 2021 ] - Understanding Cloud Native Deployment
 

Dernier

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
Joaquim Jorge
 

Dernier (20)

Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdf
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 

Design Time and Run Time Governance

  • 1. About the Presenter Eranda  Sooriyabandara  is  a  member  of  the   Governance  Registry  team  at  WSO2   e-­‐mail  :  eranda@wso2.com    
  • 2. About  WSO2   ❏  Global  enterprise,  founded  in  2005   by  acknowledged  leaders  in  XML,   web  services    technologies,   standards    and  open  source   ❏  Provides  only  open  source  plaGorm-­‐ as-­‐a-­‐service  for  private,  public  and   hybrid  cloud  deployments   ❏  All  WSO2  products  are  100%  open   source  and  released  under  the   Apache  License  Version  2.0.   ❏  Is  an  AcNve  Member  of  OASIS,  Cloud   Security  Alliance,  OSGi  Alliance,   AMQP  Working  Group,  OpenID   FoundaNon  and  W3C.     ❏  Driven  by  InnovaNon   ❏  Launched first open source API Management solution in 2012 ❏  Launched App Factory in 2Q 2013 ❏  Launched Enterprise Store and first open source Mobile solution in 4Q 2013  
  • 3.
  • 4. Overview ❏  SOA Governance ❏  SOA Governance Phases ❏  Design Time Governance ❏  Runtime Governance ❏  WSO2 Governance Registry ❏  Governance Use Cases ❏  Demo ❏  WSO2 Governance Registry Governance Features ❏  Conclusion
  • 5. SOA Governance “Ensuring  and  validaNng  that  assets  and   arNfacts  within  the  architecture  are  acNng  as   expected  and  maintaining  a  certain  level  of   quality”  -­‐  Gartner  
  • 6. SOA Governance In  a  nutshell,  SOA  governance  is  all  about   making  sure  that  you're  building  the  right   system  and  ensuring  it  operates  to  your   expectaCons.  
  • 7. SOA Governance Activities that are often mentioned as being part of SOA governance ❏  Managing the portfolio of SOA artifacts ❏  Managing the SOA artifact lifecycle ❏  Using policies to restrict behavior ❏  Monitoring, analysing and presenting artifact data ❏  Managing how and by whom SOA artifacts are used  
  • 8. SOA Governance Phases SOA governance can be broken into phases on their point of application 1.  Design Time SOA Governance 2.  Runtime SOA Governance
  • 9. Design Time SOA Governance o  Design  Nme  governance  refers  to  the  defining  and   controlling  enterprise  services  creaNon.       o  It  involves  crea-on  of  enterprise  policies  used  to  ensure  that   enterprise  business  models  are  properly  funded  within  the   enterprise.  
  • 10. Runtime SOA Governance o  RunNme  governance  refers  to  the  process  of  enforcing  the   adherence  to  run-­‐Nme  service  policies.       o  In  addiNon  to  policy  enforcement,  this  term  is  oXen  used  to   include  aspects  of  SOA  management  as  it  relates  to  these   policies.     o  Also  include  real-­‐Nme  policy  compliance  monitoring,   audi-ng  and  measuring,  as  well  as  collec-ng  result   sta-s-cs.    
  • 11. WSO2 Governance Registry ❏  A   Service   Oriented   Architecture   (SOA)   integrated   registry   repository  to  store,  manage  and  govern  service  arNfacts   ❏  Flexible  and  Extensible   ❏  Fully  open  source   ❏  Supports   numerous   standards   (JMX,   SCM,   UDDI,   WebDAV,   WS-­‐Discovery  ,CMIS)   ❏  Licensed  under  Apache  License  Version  2.0    
  • 13. Use Case 1 : Handling Policies o  OrganizaNons  have  their  own  policies  which  can  be  hundred  to  thousands  in  numbers.   o  When  developing  a  service  there’s  no  way  of  idenNfying    what  policies  organizaNon   already  have  and  what  policies  they  want  to  use  in  the  service.  (No  discovery  and   reuse)   o  If  different  systems  tries  to  keep  the  policies  with  them  then  when  there  is  an  update   to  that  policy  system  admins  have  to  update  them  separately.  (No  centralizaNon)   o  When  service  lifecycle  changes  then  moving  policies  to  different  environment  need  to   be  done  manually.  (No  automaNon)   o  If  a  policy  moved  to  a  different  lifecycle  state  then  there  is  no  way  of  knowing  it  for   the  interested  party.  (No  noNficaNon)   o  Eg.  If  lifecycle  state  changed  to  Development  to  QA  then  quality  assurance   engineers  may  not  know  that  there  is  a  new  arNfact  in  QA  state  to  test.  
  • 14. Policy Governance using G-Reg Governance Space for Production Governance Space for QA Governance Space for Development Governance Space Governance Space Governance Space Dev QA Promote Promote Demote Demote Prod
  • 15. Policy Governance using G-Reg Creating XACML Policy
  • 16. Policy Governance using G-Reg Distributed PDP Management
  • 17. Policy Governance using G-Reg Reverse Lookup
  • 18. Policy Governance using G-Reg Governing Policies Across Lifecycle States
  • 19. Policy Governance using G-Reg Subscribing to Notification
  • 20. Use Case 2 : Handling Endpoints o  OrganizaNons  have  their  own  services  which  can  be  hundred  to  thousands  in   numbers.  Also  there  can  be  service  which  they  are  using.   o  When  developing  a  service  there’s  no  way  of  idenNfying    what  services  organizaNon   already  have  and  what  services  they  want  to  use  in  the  service.  (No  discovery  and   reuse)   o  If  different  systems  tries  to  keep  the  service  references  with  them  then  when  there  is   an  update  to  that  service  system  admins  have  to  update  them  separately.  (No   centralizaNon)   o  When  service  lifecycle  changes  then  moving  services  with  all  the  related  arNfacts  to   different  environment  need  to  be  done  manually.  (No  automaNon)   o  If  a  service  moved  to  a  different  lifecycle  state  then  there  is  no  way  of  knowing  it  for   the  interested  party.  (No  noNficaNon)   o  Eg.  If  lifecycle  state  changed  to  Development  to  QA  then  quality  assurance   engineers  may  not  know  that  there  is  a  new  arNfacts  in  QA  state  to  test.    
  • 21. Endpoints Governance using G-Reg Governance Space for Production Governance Space for QA Governance Space for Development Governance Space Governance Space Governance SpaceDev QA Prod Promote Promote Demote Demote
  • 22. Endpoint Governance using G-Reg Adding WSDL
  • 23. Endpoint Governance using G-Reg WSDL View
  • 24. Endpoint Governance using G-Reg Service View
  • 25. Endpoint Governance using G-Reg Creating Proxy Service Using the Service Endpoints
  • 26. Endpoint Governance using G-Reg Governing Service Across Lifecycle States
  • 27. Endpoint Governance using G-Reg Governing Service Across Lifecycle States
  • 28. Endpoint Governance using G-Reg Production….
  • 29. Endpoint Governance using G-Reg Production - Echo Proxy Config = Dev - Echo Proxy Config
  • 30.
  • 31. G-Reg Governance Features ❏  Built-­‐in  SOA  arNfacts  support   ❏  Support  for  common  types  (Services,  WSDL,  Schema,  Policy,  APIs,  Providers,   Documents,  URIs,  WADLs,  Endpoints,  Proxies,  Sequences)   ❏  ValidaNon  policies  -­‐    e.g.  WSDL  ValidaNon,  WS-­‐I  ValidaNon,  and  Schema   ValidaNon   ❏  Governance  Archive  (.gar)  for  uploading  arNfacts  with  imports   ❏  WSDL  Tool  to  import  service  informaNon  from  a  given  WSDL,  and  WSDL   custom-­‐view   ❏  WS  API  for  built-­‐in  arNfacts  (CRUD  OperaNon  Support)      
  • 32. G-Reg Governance Features (Cont.) ❏  Lifecycle  support   ❏  Built-­‐in  service  lifecycle   ❏  Advanced  lifecycle  management     ❏  checklists   ❏  scripNng  support   ❏  transiNon  validaNon   ❏  transiNon  UI   ❏  Lifecycle  Workflow  IntegraNon   ❏  XML  editor  for  ediNng  lifecycle   ❏  Lifecycle  state  transiNon  through  governance  API   ❏  Approval  for  lifecycle  operaNons   ❏  Lifecycle  audit    
  • 33. G-Reg Governance Features (Cont.) ❏  Governance  registry  extensions   ❏  Configurable  Governance  ArNfacts  (RXTs)   ❏  Various  field  support  (text,  text-­‐area,  opNons,  opNon-­‐text,  date)   ❏  Unbounded  field  support   ❏  Tool-­‐Np  feature   ❏  Reg-­‐ex  validaNon  support   ❏  Lifecycle  in  RXT  DefiniNon   ❏  API  to  govern  SOA  arNfacts   ❏  Pluggable  media  type  handlers  for  handling  custom  media  types  and  XML   editor  for  ediNng  handler   ❏  WS  API  for  Governance  ArNfacts  (CRUD  OperaNon  Support)      
  • 34. G-Reg Governance Features (Cont.) ❏  Miscellaneous   ❏  InternaNonalizaNon   ❏  Worklist  noNficaNons   ❏  Dependency  management   ❏  WS-­‐Discovery  support      
  • 35. Conclusion o  SOA  governance  plays  a  huge  role  in  an  enterprise  and  helps  the  industry  solve   emerging  issues.  A  majority  of  the  SOA  industry  has  adopted,  or  is  in  the  process   of   adopNng,   SOA   governance   into   their   systems   to   maximize   producNvity   and   profitability  of  both  SOA  designs  and  SOA  producNon  systems.   o  SOA   governance   can   be   categorized   into   two   major   phases:   Design   Time   Governance  and  RunNme  Governance.   o  WSO2  Governance  Registry  can  be  use  in  both  governance  phases  and  there  are   numerous   OOTB   features   and   extension   points   to   implement   a   complete   governance  story.      
  • 38. More Information ! 1.  hgp://wso2.com/products/governance-­‐registry/   2.  hgp://docs.wso2.com/display/Governance460/Governing+External+References +Across+Environments  
  • 39. References 1.  Thomas  Erl  ...  [et  al.],  SOA  governance  :  governing  shared  services  on-­‐premise   and  in  the  cloud