Public presentation about Scania's Cloud migration. Why Scania goes for public cloud and how we organize and utilize cloud computing. New content is (among other details from latest learnings) an example on serverless code hosted on AWS.
11. • 3-8 people
• Requirements
• Technologies
• Quality
• Deployment
• Operations
11
Autonomous Teams that fully own their services
12. • 3-8 people
• Requirements
• Technologies
• Quality
• Deployment
• Operations
12
Autonomous Teams that fully own their services
13. Deploy frequency
• 2015
– Agile teams
• 12 deploys per year
• 2016
– Autonomous Teams
• Continuous Delivery
• 30+ deploys per day
• 2011
– Software projects
• 2-3 in parallel
• 3 deploys per year
1. Microservice Architecture
2. Trust and courage from
management
Continuous Integration
14. Version Control
Pull & Push several
times a day
Continuous
Integration
Server Target Servers
(Dev, Staging, Prod)
Version Everything
Code
Tests
Configuration
Database
Pipeline
Infrastructure
10 minutes
Deploy
Orchestrator
Reliable changes must also include Infrastructure
TO MASTER!!
Infrastructure
18. Cloud – Return on Investment
Resistance
Legacy
Education
Value
benefits of
cloud
19. Organize for 1500+ Engineers
= Feature TeamFT DE = Delivery Engineering (Supporting)
DE
FT
FT
FT
FT
FT
FT
FT
FT
DE
FT
FT
FT
FT
FT
DE
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
FT
Multiple other departments
co-located in same building
Cloud Adoption
Lift and shift
Greenfield
Dev-teams that move to
“DevOps”-teams with no
investment tend to struggle
in their cloud journey
21. 1. Enabling feature teams to iterate as fast as possible
2. Cloud on-boarding and education
3. Core infrastructure
− Networking, IAM, DNS, …
4. Automation tooling
5. Security awareness
− Automated audits to Security Lead
− Security Compliance Validator (cfn_nag)
6. Cost awareness
− Billing reports to Cloud Leads
21
Supporting Cloud engineers mission
22. Key decisions in our AWS setup
Version Control
cloud enabled
AWS multi
account strategy
Immutable
infrastructure
In each
Feature Team!
Read Only in Prod
for human beings
FREE
NO
BASTION
30. …in the past…
Code is the same
as in the past
Tests are the same
as in the past
Manual
tweaks in
Jenkins pipe
Ordering of
servers
No patching of
servers
Order of DNS
aliases
Order of
backups
No licensing of
software
No downtime
on releases No downtime
on releases
Order of
FQDN in Load
Balancer
Order of
alarms
No capacity
planning
No order of
service users
No secrets!!
The cloud first decision (Q3 2016) was crucial for our cloud movement.
No more ShadowOps!
Moved from software projects to agile teams and continuous integration.
Even with continuous integration and agile teams it is hard to maintaine a big codebase
Also about 4 times more check-ins with the microservice architecture.
Code review is your security gate. Not a QA or an ISec department.
Version Control hosted in cloud: VCS is like bread and butter: Free for everyone Enabled fully automation in AWS