Chef presentation from the CC Dojo #3 Agile & DevOps Bootcamp in Tokyo on December 12, 2016. https://connpass.com/event/46308/

1. Managing Complexity at Velocity
Matt Ray, David Echols

2. Our Vision
the most enduring and transformative companies
use Chef to become fast, efficient, and
innovative software driven organizations

3. The Promise Of The Coded Business
Velocity Consistency Scale Feedback

4. What is Stopping Us?

5. Ideas/Business Objectives
The Enterprise Challenge
Platform Services (CD/Automation/…)
LOB LOB LOB
Legacy Shared ServicesCloud/PaaS
LOBLOB
Security / Compliance

6. Ideas/Business Objectives
The Enterprise Challenge
Platform Services (CD/Automation/…)
LOB LOB LOB
Legacy Shared ServicesCloud/PaaS
LOBLOB
Security / Compliance

7. cloud & IaaS OS
bare metal
virtualization
Infrastructure
Runtime
grid PaaS containers & discovery
Applications
Complexity Budget:
● Pick (at least) one from each layer
● Write your application to it
● Let that be 100% complexity
● Automate all of it; let that be 100% of the original complexity
● Add an additional 50% for emergent conditions you hadn’t thought of yet
The Looming Complexity Crisis
Automation
By
Side
Effect

8. • Scale and services unlock ability to move faster
• Cloud is not inherently more reliable
• Operate with assumption of ephemeral infrastructure
• Easier to re-deploy and move ahead than to solve for
root-cause of failures
Cloud Brings Further Complexity

9. How do Humans Manage This Complexity?

10. Platform
CultureWorkflow
How Do Humans Manage This Complexity?

11. Infrastructure Automation Application Automation Compliance Automation
Workflow
Visibility
Compliance
Platform: Chef Automate

12. Chef: Infrastructure automation and delivery at scale
● Manages deployment and on-going
automation
● Define reusable resources and
infrastructure state as code
● Scale elegantly from one to tens of
thousands of managed nodes across
multiple complex environments
● Community, Certified Partner, &
Chef supported content available
for all common automation tasks

13. InSpec: Turn security and compliance into code
• Translate compliance into Code
• Clearly express statements of policy
• Move risk to build/test from runtime
• Find issues early
• Write code quickly
• Run code anywhere
• Inspect machines, data and APIs
A simple example of an InSpec CIS rule
Part of a process of continuous compliance
Scan for
Compliance
Build &
Test Locally
Build &
Test CI/CD Remediate Verify

14. Habitat: Automation that travels with the app
• Ease the burden of managing microservice apps and
bring benefits of apps architected for microservices to
legacy applications
–Gain consistent management of new and legacy
applications across lifecycle
–Provides application portability for new and
legacy apps
–Autonomous nodes self-manage runtime state
of application based upon policy you define
–APIs expose application behaviors as data for
better management
• Works in tandem with infrastructure automation
• Makes applications running on containers, PaaS, virtual
machines, bare metal, … better

15. Visibility: Real-time data collection and analysis
• Search, analyze, audit, and report on workflow
processes and environment behaviors
–multiple Chef Servers
–Chef Solo
–InSpec
–Chef Compliance
–Habitat
–Chef Automate Workflow
•Better manage ephemeral, long-lived, and large
federated environments
•Easily export data to 3rd party analytic platforms
and event notification systems

16. Platform
CultureWorkflow
How Do Humans Manage This Complexity?

17. Workflow: Continuous delivery of any code
• Improve collaboration across
infrastructure & applications
– Cross-team productivity enhanced by
consistent overall pipeline shape
– Specific teams given flexibility to configure
pipeline automation specific to their app
– Service dependencies across pipelines are
easily mapped and tested
–Stakeholder visibility keeps teams in the
know and involved as needed
–Robust governance ensures compliance
controls are enforced

18. Chef Automate removes infrastructure as a speed bump
Move at any speed the business requires safely and without breaking IT processes
● Build, deploy, and manage
applications and infrastructure
environments with one platform
● Gain consistency, security, and
compliance across complex and
any-size enterprise environments
● Collaboration, governance, and
visibility across dev, security,
compliance, and ops teams
● Improve productivity, reinforce
the right organizational behaviors,
and accelerate time from idea to
shipment
InfrastructureApps
+
Infrastructure Automation Application Automation Compliance Automation
Workflow
Visibility
Compliance

19. Workflow
CulturePlatform
How Do Humans Manage This Complexity?

20. What every modern application team wants
An Empowered Team
● Development and
operations collaborating
● Ability to focus on doing
the work rather than
managing it
● Easy on-ramps to the
modern application world
High Velocity Development
Cycle
● Time to market matters
● Repeatable and
predictable
● Want to bring velocity to
legacy applications along
with new greenfield apps
Tools That Simplify/Tame
The Complexity
● Consistent app behavior
● Easy to port old and new
to cloud
● Apps have autonomy to
run anywhere
Confidential & subject to NDA
Modern application teams aren’t just developers and operations; they also include leadership, finance, security,
marketing, sales, business people…

21. Technology & Process
Current
State
Process
Bliss
Local
Development
Coding
Practices
The DevOps Journey
Organization & Culture
Current
State
Organizational
Structure
Data-Driven
Decision
Making
Cultural
Bliss
Organizational
Alignment
Organizational
Culture
Continuous
Integration
Chef Code
Deployment
Application
Deployment
Virtualization
as a Service
Full Stack
Automation
Continuous
Delivery

22. • Expect and embrace failures
• Test Driven Infrastructure
• Chaos Monkeys
• Mean Time To Repair > Mean Time Between Failures
Resilience over Strength

23. • Continuous Integration means continuously providing value
• Small batch changes mean more safety, faster feedback
• New technology is not slowing down
Risk over Safety

24. Infrastructure Automation Application Automation Compliance Automation
Workflow
Visibility
Compliance