This page is not created by, affiliated with, or supported by Slack Technologies, Inc.
- # ask-the-speaker-track-1 (130)
- # ask-the-speaker-track-2 (99)
- # ask-the-speaker-track-3 (94)
- # ask-the-speaker-track-4 (172)
- # bof-arch-engineering-ops (2)
- # bof-leadership-culture-learning (2)
- # bof-project-to-product (23)
- # bof-sec-audit-compliance-grc (2)
- # faq (6)
- # games (7)
- # games-self-tracker (1)
- # gather (28)
- # happy-hour (17)
- # hiring (11)
- # networking (8)
- # plenary-discussion (730)
- # project-to-product (1)
- # summit-help (33)
- # summit-info (28)
- # summit-stories (1)
- # xpo-bmc-ami-devops (1)
- # xpo-cloudbees (1)
- # xpo-cockroachdb (2)
- # xpo-github-for-enterprises (1)
- # xpo-gitlab-the-one-devops-platform (3)
- # xpo-itrevolution (4)
- # xpo-launchdarkly (3)
- # xpo-lightstep-observability-incidentresponse (1)
- # xpo-linearb-automate-dev-team-improvement (9)
- # xpo-snyk (1)
- # xpo-split (18)
- # xpo-stackoverflowforteams (2)
- # xpo-synopsys-software-integrity (4)
- # xpo-tasktop (2)
- # xpo-tricentis (2)
Reminder: Get yourself in front of your browser and into #ask-the-speaker-plenary for the opening remarks. We’re kicking off Day 2 in 15 minutes at 10am BST! https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png
Reminder: Day 2 is starting now – opening remarks and then plenary talks! Join the conversation in #ask-the-speaker-plenary.
Reminder: The breakout sessions are starting in 5 minutes. Get in front of your browser and start navigating your way to whichever session you’re attending. https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png
🔆 Honored to introduce @paul.d.fox, Distinguished Engineer, Executive Director Institutional Securities Tech at Morgan Stanley, presenting Log4j Hygiene 🔆
“what’s do difficult about log4j? why isn’t it as easy as opening tickets for everyone who used it?” 😆
That's a very familiar story. We had to contact every single tool/SaaS we used to ask the log4j question. They were also asking us if they banked with us.
Having just started on a new Supply Chain Risk team a couple weeks after log4j dropped, this is like reliving trauma all over again 🤪😅
Our experience of it: Luckily every team had got into the rhythm of patching every month. There was a dashboard that lit up if you were non-compliant. It took 6-9 months to get deployments automated, app testing to test for regression, change process to accept that patching was a low risk change but it put us in a good position. When log4j hit, we got most priority (external) systems patched in a few days, within a month 1000s of apps had been patched, all because we'd been learning how to patch dependancies until it stopped hurting. (@stephen) I don't think we did the deep sweep that @paul.d.fox talked about. All those old containers and apps left in the repos with the vulnerability...
first I’ve seen just a comprehensive public experience report of log4j like this — kudos!
⚡ We now welcome @eleonravinez and @ml.polo.orbe from Banco de Crédito del Perú and @lguevara of NTT Data, here to present, DevSecOps: Beyond Theory, a Strategy with Real Customer Impact ⚡
Awesome takeaways @paul.d.fox "Focus on the success, not failure" - the risk is important, but not if it means we undermine the mountains of effort already put in by the devs to remediate the issue.
BCP: Peru’s largest bank! attended 2019 Vegas to learn about DevOps. 🎉
(4000 users trained; 60M LOC; totally caught my attention, too, @topo.pal!)
3-6 Months to complete features that needed manual forms and approvals!
I think “to deploy features” b/c of approvals and manual forms. A familiar tale!
@lguevara @ml.polo.orbe @eleonravinez - Do you have a central team managing the whole platform?
We have 4 teams 3 of them are divided into practices: CT, CI and CD And the 4to manages the support and maintenance of the tools We are 40 engineers who centrally create the pipelines, manage the tools and evolve the devops practice
The challenge we are working on is to decentralize the creation of pipelines so that each business team can do it
“reduce implementation; increase frequency of production pushes (?); increase quality”
And they kept it running — bad day when the pipeline goes down! 🙂
(@topo.pal Did you know that the Unicorn Project scene of CI servers going down was inspired by @chris552 story from Jaguar Land Rover? 🙂
@eleonravinez what was reaction from the devs of all this new tooling you created? And business users?
At the beginning there was no acceptance Only a few who wanted to use the tools We worked on changing the culture , that has succeeded but it is still a challenge for each new technical capability we implement
We had to work a lot of work with the C Level and the business to show them what they could achieve and get them to help us drive adoption.
it's not easy to find individuals with these skills anywhere and I love the training to make your own base
Many Thanks Virginia!!!! 😀 Was not easy but, was a very good way to move forward!
2300 community members; co-creation of financial education with their customers. (<<<<<<-----)
Great session. Thanks @eleonravinez @email@example.com
It has been a very nice experience to share with you the success and learning of BCP & NTT Data
Thank you very much to all!! very happy to share our journey to DevOps!!!!
Reminder: The breakout sessions are starting again in 5 minutes. Get in front of your browser and start navigating your way to whichever session you’re attending. https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png
✨ Introducing @jakob.knutsson657, Head of Cloud & Data Center, Core Engineering, H&M Group, here to present Integrating Business With Tech ✨
All in on the cloud and multi-cloud - see more of that all the time but like the "faster access to innovation" as an objective for that approach, @jakob.knutsson657
We currently use two hyper scalers- which both have their different strongholds - for us it's about using the right tool for the job.
🌲 A warm welcome to @miika.soininen, Director, Digital Services and IT, Ponsse Plc and @nsharma, Director of Product Management, Copado, here to present, Automating QA for the King of the Forest 🌲
thank you @jakob.knutsson657
Cool intro video, and fun to see @nsharma and @miika.soininen actually onsite with the forestry equipment. The opposite of work from home
“For the last several years, I’ve been working in test automation. Basically because I like to break things” • @nsharma
“Data is as important as putting fuel [in the] machine” - a forestry machine operator in Canada
reminds me of the Suncor talk. I love the nexus of heavy machinery and DevOps - real world applications
Layer on top of that the idea of “moving from product to service”, where they look at the uptime of the machines and training to ensure optimal utilization.
“Harvester as a service”
Interesting concept of “cut-to-length” forestry. Only take trees of the size you need. Reduces the waste of excess inventory. Get data on needs from the mill and harvest as needed.
If you thought you had trouble getting a good cellphone signal:
“One of our biggest challenges has been ensuring adequate connectivity for our forestry equipment”
And still we are building real time data solutions to places without connectivity. It's just one problem to solve and we have ways around it.
New cell towers? Satellite? Something else?
“We accumulated a lot of technical debt … but we learned that it was important to deliver fast before the customer demand dried up”
“You’ve probably had the experience of getting an update that caused your device to not work. … imagine you were a logger sitting in the middle of a forest and suddenly your equipment stopped working” (Brings new seriousness to the challenge of change fail rate)
Thank you, @miika.soininen and @nsharma - what a beautiful presentation!
Reminder: The plenary sessions are starting again in 5 minutes. Start making your way back to your browser and join us in #ask-the-speaker-plenary to interact live with the speakers and other attendees. https://devopsenterprise.slack.com/files/UATE4LJ94/F01D34MC2KS/image.png
Reminder: Please submit your feedback for the talks you attended. It’s so valuable for us and the speakers. And after all, feedback is a gift and sharing is caring! Enter your feedback for those talks here: https://members.itrevolution.com/live/schedule https://devopsenterprise.slack.com/files/UATE4LJ94/F03E48CJRF1/image.png