Develops platform teams that have taken a product-oriented approach to providing IT services to developers have also received cost and security benefits for IT operations.

DevOP platforms, which serve as a managed service for internal developer clients, have experienced a resurgence as demand grows, especially in the wake of the CVD-19 epidemic and budget constraints. In many cases, this strategy also reflects the normal manpower limitation of the so-called “full-stack developers” – once DeepOps’ imagination. Proven to be difficult to access.

rather than Recent industry research However, IT organizations, which expect some separation between developers and operators, are more likely to be more efficient in terms of speed deployments such as software deployments and number of deployments that promote efficient collaboration between them.

Many such high-performance organizations range from project-based thinking, to IT teams setting their work to short-term goals, to product-based thinking, one group – developers – being treated as internal customers and the other – IT ops and SREs – Focused on developing long-term customer experience as an internal service provider.

A.D. In 2018, Oshkosh Corporation, a manufacturer of automotive equipment, began its transition from the IT department to the in-house customer service division.

“We are embarking on a journey to turn our culture from a vicious circle of cost-cutting to a business venture,” said Yared Peterson, senior director of digital technology strategy and portfolio management at Oshkosh Weiss. Try to create a more free market type environment and naturally provide the products and services that our business customers and key customers want.

This approach may seem to prioritize developer experience over IT Ops benefits, but it has improved for both in Oshkosh, Peterson said.

The integration of the Devpes platform enhances the efficiency of IT Ops.

Two software products will form the basis of Oshkosh IT Services. The first is ServiceNow’s. Now platformWide range of services from change management to application portfolio management and business services such as digital products Robotic process automation (RPA) and IT infrastructure supply. The second is Apptio ApptioOne IT Financial Management Software.

“Our digital product owners are having regular meetings with the business customer leader … and they say, ‘Hey, this is the price of our unit, we’re seeing an increase in consumption.’ [and] over here [are] Where we believe … we can improve or we can better collaborate; ” Peterson has prepared a report from Apptio to do this.

Apptio’s Cost analysis Peterson’s team helps the Service Novel platform grow their internal clients and provides investment information to demonstrate its benefits. The platform’s internal clients are also expanded to include collaborative developers. Azure DevOps Last year, Peterson said.

“Now we can speak with confidence and show it back … we can show the price and the cost,” he said. “The business will build confidence in the new investments it makes in our products.”

When a combination of Aptio and Service Now comes along, it can solve problems, such as budget deficit due to IT configuration, which reduces the operating costs required to run IT services.

“If I were our leader [ServiceNow Intelligent Automation Engineering] Ability, and I’m watching [total cost of ownership] I know who to talk to if my RPA service network costs increase, ”Peterson said.

Earlier this year, Aptio released a collection Two-way data integration modules Application for ServiceNow Application Portfolio Management Application, which relates the costs in Appio to detailed ServiceNow IT infrastructure usage information.

The Peterson Department will be able to provide more accurate infrastructure costs to internal IT service customers, including developers who deploy Azure Clouds through the platform, he said.

“Aptio, who has been in our travels for a year, said: ‘The area where we feel vulnerable or where we want to be better automated is a combination of how many. [service] The units are eating up the business, ”he said.

Currently, there is no direct integration between AptioOne IT financial management tools used by the Peterson team and Azure DevOps, although AptioOne customers can create custom integrations. Peterson said he would rather see such a merger in the product than create a custom merger.

Still, Switching to the DevOps platform The listing as a product has helped Oshkosh make the best use of the ServiceNow portfolio, Petererson said.

In 2018, the cost of our project portfolio for Service Now was less than $ 10 million annually. [operational impact]”Today, this is more than $ 30 million – we have seen about three times the cost of that portfolio.

SANS harvests security improvements from the platform shift

SNS Institute, Bethesda, MD Available Cyber ​​Security Training and Certification Organization Epidemic of Cowid-19 A.D. He hit the United States in March 2020. However, the outbreak has reduced the number of employees, prompting SANS to reconsider its development platforms, streamlining its IT security processes.

Previously, SANS Labs, which administers online cybersecurity training courses, used a combination of IT automation tools to provide temporary infrastructure for students. These tools are included Infrastructure as a code Tools such as HashiCorp’s Terraform and AWS CloudFormation; CI / CD (Continuous integration / continuous supply) tools Such as CircleCI, Mergify and Code Climate; And various bash scripts And AWS Lambda Tasks.

Meanwhile, SANS DevOps engineers in the company’s security intelligence business have started using Pulum-based codecs, which support application programming languages ​​for developers such as TypeScript and Node.js. As the SANS leadership reduced IT staff and called for greater workflow efficiency during the outbreak, the team replaced its own mix of tools with Pulumi and Githeb Action for CI / CD. A.D. In early 2021, security awareness units were called in to discuss the renovations to the SANS Labs team.

Tyler Muligan, one of the SANS DevOps engineers who implemented the new platform, said: “As demand grew, more acceptable hand processes were better when the demand was not high enough.” But when they started measuring and hitting COVID, we had to serve more needs on demand, and the system they built to integrate with their serial integration tools wasn’t really working for them.

Muligan and his colleagues have developed infrastructure-as-code templates for developers to create in-house self-service interface in TyScript using Pulumi, which saves time and effort to learn a unique tool. Ann Automation API Pulumi introduced the developer experience for SANS Labs in April, as developers can replace the built-in self-service system with a built-in REST API.

The Develops team has already developed Pulumi policy packages to ensure security and compliance standards in the new centralized system that provides infrastructure and application code. Through GitHub Actions.

Strengthening the number of tools used by developers and streamlining developer experience has resulted in a more consistent security policy than the previous set of tools, Muligan said.

“This is one of the most sticky parts for me personally, which means we can’t expect the same level in a typing script that could be tested in Bash script,” he said. “[The Release Manager GitHub Action] Giving the developers a little work allows us to execute our steps on the pipeline because all they need to do is push the branch when it is ready. And all our checks and balances will be released if they pass.

The Muligan team now hopes to expand the use of this system to more SANS business units and developers in other programming languages, including Python.

“We are trying to see if that will encourage further adoption of Pulumi by providing more popular languages ​​to the developers,” he said. “We can share many of the same tools that we write our applications in Pulumi [to do] On enforcement and security checks [application] Dependents who use one ecosystem instead of spreading it over many [tools]. “

Beth Pariseau, Senior News Writer at TechTarget, is an award winning IT Journalism Veteran. It can be found on her [email protected] Or on Twitter @PariseauTT.