This page is not created by, affiliated with, or supported by Slack Technologies, Inc.
Good morning all! Who else is wearing lucky socks today? 😁 :unicorn_face:
Would you believe I didn’t know for over a year that these socks came in non-matching pairs — until @mvk842 and @jeff.gallimore pointed out that I was supposed to wear them as @mring is: one Maxine, one Unicorn. (I was wearing them 2x Maxine, or 2x Unicorn. Ooops! 😆 )
…and another insider tip: the sock with maxine goes on the right foot… so she is pointing at the unicorn on the left foot. :unicorn_face:
The socks did not come with a manual... 😁
How's the weather where you are? Overcast and gray where I am... a perfect day to stay inside for a conference 😉
So delighted that you’ll be sharing your fantastic experience reports this morning, @mring, @willardamyl, and then Dr. @arun.chawla!!! And later in the morning, we have @robert.wood!
We are excited to share our journey and connect with folks the rest of the week!
did an 8 degree AM run this morning in Minneapolis 🥶
Thanks for such a fantastic talk in Vegas two months ago, @lucas.rettig! Your talk and @michael_winslow led to four “career talks” this week!
vegas was 2 months ago? feels like yesterday... I was thinking how impressed I am by that short feedback loop!
Purely FYI: stream has started! (My desktop was lagging by 90 seconds — had to refresh. 🙂
(In the talk, I mentioned that there are now 1075 talks in the Video Library — incidentally, there was just a bunch more videos added this morning — a bunch of the breakout talks that are airing this week. 🙂)
No repeat experience reports! (The last time we did that was in 2014, at our first conference. 🙂
I reference this audit panel often when showing people there is hope in building relationships with auditors and transforming into new ways of working. https://videos.itrevolution.com/watch/485153001/
The talks on careers this week: Dr @drandremartin, @karthik.gaekwad @leslie_chapman @rradclif — I had mentioned how much I loved the talks a couple weeks ago from @lucas.rettig and @michael_winslow
"This is a community that loves helping each other." 💯
Speaking of Brian Eno, he was recently interviewed in the NY Times — no mention of scenius, but many wild stories from his wild career: https://www.nytimes.com/interactive/2022/11/14/magazine/brian-eno-interview.html
I love the scenius idea from Brian Eno. Sticking with the musical theme…I’ve long posited that Rick Rubin is a DevOps visionary…tearing down walls since 1986
Ah, another thank you goes to out to @james.moverley and @nickeggleston!
Thanks to you for creating the conference that makes this community possible
Experimenting with virtual format, doing them smaller and more frequent??! Sounds very devopsy if I do say so myself. Excited to see how it plays out !
(Was thinking of your presentation, @nathen.harvey and @amandalewis, when I mentioned “online conferences are a new medium” 🙂)
I hope attendees have at least half as much fun watching as we did recording 😂 ☕
So.. expecting a lot of VFX and post-production in the talks this week, @genek? 😉
Oh yes! Wait till you see what @nathen.harvey and @amandalewis pull off — you won’t believe your eyes. 😆
PS: that was so fun, bringing Slack into the plenary presentations in Vegas.
The slack stream to the side was a great addition and really brought interactivity to the stage
Main reason for adding info on yourself to Slack profile: it makes it easier for people you interact with to interact with you in a more useful way with you. 🙂
The FOMO is still high when trying to attend all the networking events simultaneously 😂
It’s interesting to me how prominently IRC shows up in the early DevOps / Velocity community — a big contrast to how most Ops orgs communicated in those days, which was things like Remedy, Helpdesk, Peregrine, etc.
IRC was lightweight and had super low barriers to entry - love that tool
PS: I was just talking with @jeff.gallimore about what a timesaver Descript is for editing video — if you haven’t seen it, check it out. Allows you to edit videos like a word processor. Amazing. https://www.descript.com/
Hello, @willardamyl and @mring!! Thank you for presenting your story here!
@mring and I are looking forward to some great interactions in Slack!
Love seeing a real-world-manufacturing company embrace DevOps
How is Deere embracing virtual/hybrid/remote ways of working in the post-covid world?
We are a hybrid organization post-Covid … valuing both flexibility and in person collaboration. No one size fits all across the teams.
@willardamyl Do I understand correctly that you wanted to lead this group because of your experience going through Foundry? (Meant to ask / clarify that during our recording session!)
My experience watching the transformation work of the Foundry made this a role I very much wanted and created a desire to work with the team! Fun fact - I didn’t actually go thru the immersion wave we will discuss until I was in this role - went thru and was coached along side my own product teams. @genek
@jroy42 we'll speak to it in the next few slides.
Thank you, @willardamyl! (Sorry for jumping ahead — I’ve been dragging that question around for weeks! 🙂
“John Deere: our first product was actually used by actual horses” 😂😂😂
(this is one of the most amazing corporate videos I’ve ever seen — I get goosebumps every time I see it. Such amazing use of beautiful language.)
Same. And I've seen it a lot... 😁
Narrative storytelling is super powerful. A great skill to develop.
For those of you who want to see the original John Deere video, with fuller sound and its incredible production quality, here it is on YouTube: https://www.youtube.com/watch?v=-gNbFvZO6IQ. (I’ve watched it more than a couple of times!)
Some more videos that details some of the technological innovations that are happening across the agriculture and construction industry: •John Deere Precision Construction Equipment (Smart construction): https://www.youtube.com/watch?v=5kCazvXcPAw&ab_channel=JohnDeere •See & Spray Ultimate Overview: https://www.youtube.com/watch?v=ytJELX6rKV4&ab_channel=JohnDeere •John Deere Operations Center for Precision Ag Farm Operations: https://www.youtube.com/watch?v=hanv4lk5bQY&ab_channel=JohnDeere •John Deere Cyber Security – Cyber Tracker Hacking Challenge: https://www.youtube.com/watch?v=xrLh-9D17mc&ab_channel=JohnDeere
@willardamyl @mring As part of transition to Product, how did you integrate funding/finance into the lifecycle... and move away from annual, big-bang planning cycles?
Still a journey for us on this one - coaching and a focus on simplification and prioritization mindsets embedded in how we work all the time. One focus area for our transformation that didn't make the talk was an intentional shift to MetaScrums & a dynamic portfolio process. Investment Agility is a key focus on this year - post some of this foundational learning. Happy to share more.
We only had to change three things... 😁
@willardamyl @mring: @ben.grinnell and I would so much appreciate your involvement in the Day 3 Birds of Feather session on outsourcing — it’s a session to elicit what goes wrong in outsourcing because of the incentive structures, and how one could get far better outcomes by changing the rules. 🙏
From know-it-alls to learn-it-alls <-- LOVE THIS!!!
https://dallasinnovates.com/american-airlines-appoints-john-deere-cio-as-next-digital-chief/ It was fascinating to watch @ross.clanton410 and team from American Airlines talking with @willardamyl and @mring, because of this news!
Connecting with the folks from American was a huge benefit and highlight of being in person in Vegas... it won't be our last connect for sure!
This is very exciting... to see the root systems of DOES joining and flowering... can you deep dive in to this as a story ... ?
Hopefully between this mindsets slide and the upcoming Outcomes slide, you'll see the iterative and incremental journey we have taken over these three years. We didn't figure everything out up front. It truly has been a journey. #alwaysLearning #betterEveryDay
Love the integrated coaching with “real problems”. Learning about a new way of working is all theoretical until you start doing
Is the Foundry a new group at John Deere ? I think coaching would be an excellent way for us to introduce some of these concepts to NOAA
The Foundry has been operational for about 3 years ... we are ending this wave operating model on the screen right now in Dec and changing how we engage.
The thin vertical slice of immersion coaching was a way that helped us address some of the "thawing the frozen middle of management" (management old ways of working) issues.
@mring asked me about my introduction to this talk: I had mentioned how John Deere approached the Org Change Management very differently than most. He asked, was it better, worse, etc? 🙂 To answer directly, I would say, “faster and bigger and more ambitious” — it’s exciting to see, and to see what your outcomes have been!
@mring How did you get C-Suite/Senior Management or folks unfamiliar with Agile/DevOps practices on board?
Lots of discussions of course - but at the end of the day, it was about outcomes. This slide.
Thanks @willardamyl sounds like start that Agile/DevOps bubble, show results and help get others on board.
Definitely leveraging the change adoption curve. Our early waves focused on those depts and orgs that were the pioneers / early adopters in change adoption. That helped give early success, positive word of mouth and get others excited about wave immersion.
Human Centered Design — a term I wish I had integrated into Phoenix Project, had I only known what it was called. (To the best of my understanding, this was pioneered by Pivotal Labs, and shows up so much in the orgs they touched.)
We treated coaching and wave immersion as an enabling function and force multiplier. So these 3-year slides told us whether coaching these new ways of working was driving the right organizational performance. Measures of Better Value Sooner Safer and Happier.
We have a new feature in Slack… if someone posts a link to a resource you’d like to keep, mark the post with 🔖 and it will repost to #C04ED43AQAC. Then you can just go to that channel and see all the resources that everyone is recommending!
(I got trained in the Alan Cooper school of UX in 2005, but I love the way the HCD school frames things.)
@mring - how do you use eNPS to drive change and what levels of leadership create action plans to address red flags in your eNPS?
It's really a tool at many levels - product teams, product family, business capability area and even the whole function depending on the topic and impediment that is raised. Embedded Action Teams drive much of this. So, across many levels.
These outcomes have really be a north star for our transformation journey internally to our IT function and with the senior leadership of our company. Our why needed to be clear, as well as the progress on our journey.
I think what John Deere approach shows that it’s better to do the wrong things right, than doing the right things wrong. > I’m very grateful to my old Whitbread colleague John Gough’s Blog for alerting me to the work of http://en.wikipedia.org/wiki/Russell_L._Ackoff, the American management guru, who has some wonderful language to describe this: > “The righter we do the wrong thing”, he explains, “the wronger we become. When we make a mistake doing the wrong thing and correct it, we become wronger. When we make a mistake doing the right thing and correct it, we become righter. Therefore, it is better to do the right thing wrong than the wrong thing right. Most of our current problems are the result of policy makers and managers busting a gut to do the wrong thing right. > Getting the right thing wrong is better than putting the wrong thing right.” https://reallearningforachange.com/leadership-skills/why-doing-the-wrong-thing-righter-makes-it-wronger/
Re: how we measured ROI: Over simplified - it's the amount we spent on the transformations - upskilling, coaching, technology investments, etc being more than recovered by the amount of savings we had thru insourcing, technology divestments, and other cost optimizations.
Is there anything you can share about how former CIO Ganesh Jayaram best helped in this effort, @amandalewis @mring? Many thanks!!! 🙏
Ganesh was key in driving the vision and commitment to transformation within the function and across the broader business ecosystem. He was also excellent at being a servant leader and advocate while we worked thru the journey.
"Get comfortable being uncomfortable" <--Yes! target being comfortably uncomfortable :)
NOAA rarely employs quantitative measures to show the impact of agile development. That adds to the resistance to agile development. What is the most important metric that has helped you push culture change?
@mring Could give some more info on Engineering Ratio? what did you measure and pros?
The simple formula is that engineering roles vs non-engineering roles. If we have 100 people and 75 are delivering inside of a product team - that's a 75% engineering ratio. We are looking for the right balance of roles across Scrum, Product and Engineering roles - with very few "translator" roles between these roles and their customers.
Get comfortable not having all the answers, especially senior leadership... important point in developing away from top-down models of deference in hierarchies
yes Nick! that is such a big transformational leadership thing that is so hard to do!
where i spend 60%+ of my time these days
Anecdotally, we have seen the shift in how multiple layers of leadership communicates over the past three years, shifting from command-and-control type language / behaviors to more servant and transformational leadership behaviors. These behavior changes we can clearly see through evidence from eNPS results, employee engagement, psych safety surveys, etc.
Feeling uncomfortable: I have such a strong memory in 2004 of how uncomfortable and stupid I felt when we moved to Scrum at Tripwire — so many strange and alien terms that I didn’t know what they meant! sprint, scrum, spike, points. It was truly bewildering, and it didn’t help that I didn’t feel comfortable then asking questions, afraid of looking stupid.
Ha! I got very good at asking questions, not afraid at all at looking stupid. Nick, remind me aobut this later, and I’d love to write this up. Maybe we can pair on that?
@arun.chawla Wanna join me in writing some thing up? I’d lvoe to share this story!!!
Yes! Improving psych safety, modeling your own fallibility and embracing those that ask questions or bring bad news. "Thank you for the question!" "That's a good question. Hmm, what do others think?"
(Another thing I admire about this presentation from @willardamyl and @mring is their use of language of leading, constantly evoking the core mission of the organization. So awesome!)
@mring how does your OKR setup look like? E.g is it top down, bottom up? How do teams work towards the key results set?
We are still maturing in this space. We are actively trying to avoid top-down / cascading of OKRs. We started at the product team level (bottom-up), identified need for Product Family / line of business OKRs and then working to align those.
OKRs definitely not a silver bullet, but has been a way to enable more conversation about what is (and more importantly) what is not yet a focus.
Are you doing certain kind of cross stakeholders planning by Objective or KRs just after OKRs definition (for dependencies identification/prioritization, etc)? or are the OKRs more a guidance for the underlying teams/units/products involved to move forward in the product development in isolation?
Today, OKRs are more guidance to enable conversations about priorities and shifting discussions from outputs to outcomes. (e.g. "by delivering this new feature/solution, we expect _ {what outcome}___?") Dynamic and cross-portfolio prioritization is definitely a focus for us in 2023.
Come find out! 😀 https://devopsenterprise.slack.com/archives/CB0JGT2NQ/p1667231841655739
@willardamyl @mring Thank you for a great talk! It would be great to learn how DevEx was implemented at John Deere
We'd love to connect more @nnomula. @vladyslav.ukis - not one platform for all Devs, but striving for a balance of autonomy and common platforms.
Further investments in creating/maturing engineering "paved paths" (a.k.a "golden paths") is an area of focus for us in 2023. Helping make "the right way" the easy way for our software engineers.
1Foundry is our version of a Dojo with the waves being one delivery "how"
Please welcome Dr. @arun.chawla — who I met through Dr.@topo.pal . If I remember correctly, they went to college together!!!! 😂
I'm only as good as my speaking partner @willardamyl.
I have a friend who is looking for work. She heading to the John Deere site to apply but anyone I can pass on a resume to personally?
You can sent it my my way @mark.persiko - but having her officially apply is necessary
Thank you @willardamyl and @mring for awesome presentation with use case and results.
This is such a wild story — you’ll have so much appreciation of what they do, because their work impacts all our daily lives, IN SO MANY WAYS!!!!
First talk over, but struggling to keep engaged with the current slack conversations and pay attention to the next video as it plays... hopefully we can experiment with a virtual #AndonCord in the future, so we can stop the line, gather and focus on a topic/problem and then move on together
I envision the video stopping and focus turns to the slack disussion, which could be via text or audio/video until that dies down naturally and the hold is released to continue playing the video
The issue here relates directly to cognitive load and the speed of learning... could be an interesting area for research and experimentation... many unknowns
What @genek said earlier about virtual allowing more frequent gatherings… maybe it can also enable slowing down enough to interact more without missing the talk?
Slowing down, more focus, remove parallel tracks... the economics of in-person conferences optimizes for space and cost by having lots of stuff happening at the same time... but in virtual we can de-couple all that and focus... but how to do that, with which people and keep it engaging so people are on the edge of flow/learning is non-obvious...
Customers: aviation!!! pilots use it to create their flight plan! Search and rescue (which we learned about in Vegas: PRC2!). Firefighting! Apparently, the absence of maritime disasters and losses is a somewhat new thing, made possible because of better use of weather forecasts to make better routes. Did I get that correct, @arun.chawla?
Forecasting the weather in four easy steps. Step 1, get your 45TB of data on conditions of atmosphere, water, ice, 😆
Step 2: get some computing equipment: recommended configuration shown below: 8K cores recommended. 😂
Why have exactly the same architecture? If you hit a platform bug/issue, wouldn’t it take down both?
We switch platforms in less than 3 hours. When we hit a bug that breaks production we try to solve it in one and then bring it into the other
Should be 3 in case of network troubles. or 2 plus file share as less expensive configuration
That story has become a favorite -- the head of the computing center was having lunch at the common room when he got a call on his phone and his response was -- "you see smoke from wheeeere ?"
I just love how weather forecasting is one of the problems that shaped the entire history of computation, created chaos theory. The compelling event: the blown Hurricane Sandy prediction that predicted that it would head to the ocean — for hours, the European forecast disagreed, suggesting it was going to make landfall.
And the most important test of the various predictive models is the real world and what actually happens... usually in a few days... fast feedback loops...
All these computation models developed independently, across different agencies, universities. On different computation platforms.
Some only ran on NOAA platforms. Had to get accounts on our system. (FISMA infrastructure, so had get to clearance!!! NEVER KNEW THAT!)
I was citing something I heard in a talk from GitHub team: “figuring out how to have two versions of Python installed on your laptop shouldn’t be a core competency”
One of the most frustrating thing about owning legacy platforms is the SME knowledge debt that exacerbates tech debt - it's really hard to upgrade that which is not fully understood.
“we’ve learned over 20 years: atmosphere is being affected by what’s happening in ocean, making storms bigger and stronger.” <--- showing that these models needed to interact with each other. 🤯
I so wish I could set up a foundry in NOAA to teach the scientists to work in an AGILE environment
“scientists aren’t good at documentation”. <--- hahaha. not just scientists. 😂
Pet peeve of mine: "oh, sure they aren't good at (doocumentation, mentoring, communicating, basic social skills), but they're such a good technologist!" 😠
Hilarious how these themes are so familiar to us, @arun.chawla!
The CICE model comes from Department of Energy. Incidentally, there were people there interested in building an open community environment, we convinced NOAA to fund a code manager to help them make the transition
“had to convince scientists that no one was trying to steal your ideas” “scientists often worked for 15-20 by themselves, not in groups”
@arun.chawla - curious how hard it was to get the first turn of the wheel to change the culture from silos to sharing? My observation is that the culture is key to adoption
I am still fighting it. But backing from leadership was most important. The silo culture is very hard to break
What I learned very early was that no one likes a lecture. I think the John Deere example of showing not telling is critical
"No correct answer" - that is so important here. How do you solve a problem when there is no correct answer
The scope of their coalition is astonishing: NOAA, Dept of Energy, NASA, US Navy, International weather agencies…
Step 1: create a unified dev community — let’s not worry about operations for now (we’ll get there eventually)
I wonder how "experts" feel about saying "I don't know" and publicly learning...
Pivotal moment of my career was seeing someone I admired do exactly that. I now see it as the responsibility of senior folks to model asking questions and learning.
We've been trying to get at this in our interviewing - if you can't say "I don't know" you're not a good fit for us culturally. We want to move quickly and so focus more on learning and being aware of your resources vs. pretending you have everything in your head.
when you build your brand on being seen as always right, always certain and being the embodiment of Science or Knowledge would make it rather difficult to say "I don't know" or "let's find out"
We encouraged this by repeatedly stating that ALL learning starts with those 3 words - I Don't Know This helped make Not Knowing feel safe
I have heard anecdotally that this gets harder as one acquires more credentials.. or at least in a culture that places a high value on credentials. I wonder if this generalizes...
This short Ted Talk is a decent tl;dr - https://www.youtube.com/watch?v=LhoLuui9gX8 But I really recommend this longer talk: https://www.youtube.com/watch?v=_1Ub1xfSQ1s
Core team reporting to @arun.chawla — worked with code managers from each of the model components. Reminds me so much of the talk from Mike Bland, about the birth of automated testing at Google in 2005. https://videos.itrevolution.com/watch/524439661/
“We helped people — people love you when you are showing up to help them solve their problems.” Another common theme, which showed up in Team of Teams, etc. In the talks from @david627, this showed up prominently: https://videos.itrevolution.com/watch/432219018/
Routinely meeting and showing a genuine interest in helping each other is a great way to fuel community growth / collaboration. Loved to hear that.
@arun.chawla You can run the huge weather model in a Docker container?! (I meant to ask this during our recording session.). How much memory is required for those workloads that run in Docker? (That was so startling to hear!)
Fascinating how packaging and builds shows up in this talk — and how critical it is to do anything in a repeatable way. (and something that a bunch of developers or scientists are unlikely able to do themselves.)
Twenty years of working in scientific modeling, and the biggest requests I get is for Gource simulations 😃
It is amazing what newer insight you get when you visualize activity like this vs. looking through a git log. The explosion of change 🙂
Visual processing has a lot of brain-space devoted to it, so mapping into that domain should be helpful in developing insights
Anything like Gource but for Jira tickets? I'd like to demonstrate the complexity we're causing by turning all ideas into tickets in the hopes of changing how Jira is being used.
I'm not aware of anything like that, but I have used logstalgia for different ways to show flow between systems. If you could get an activity log transformed into a similar format, you may be able to indicate flow from different sources / destinations. https://logstalgia.io/
This was one of the key breakthroughs: doubling the number of atmospheric levels, which would enable more accurate forecasts, which addresses the Hurricane Sandy forecast inaccuracy. The problem: data output too big and took too long to write. Ops said “no way”. 😆
Solution: work with NetCDF OSS community, who helped solved the problem!
Agreed. I already have! Shows universality of these problems and direction of solution.
Three labs working together to create the moving nests capability.
can’t just fund scientists. must also fund development (and dev enablement!)
since "incentives eat everything all the time", funding decisions will have a huge impact on outcomes
So much like “just hire devs to write features!” 😂 cc @arun.chawla
Heyy Gene and everyone! I’m happy to be back to learn and to propagate that learning for http://thenewstack.io/author/jennifer-riggins/
cheers to you Alex for always helping me when I remember to attend VERY last minute
Great presentation, @arun.chawla. I supported some weather modeling 20 years ago and it’s great to see so much progress!
Please welcome @robert.wood, CISO of Centers for Medicare and Medicaid Services!
If I had a dollar for every time that I have heard "DEVOPS and Agile will not work here ...." I am seeing so much commonality with all of your work!
I have found @jonathansmart1 et. al's focus on outcomes (Better Value Sooner Safer Happier) to be extremely valuable in focusing conversations on outcomes (not practices) and using common language. "What problem are we trying to solve? Delivering sooner (flow)? Safer (Security)? Happier (culture)? Ok, so, what are some capabilities that can enable us to achieve those outcomes?"
So true Matt. At NOAA I find many people shut down when talk moves to Scrums and Scrum leader etc. I think we really need an immersion coaching environment like what you have that uses the philosophy of agile development, but helps local teams to solve real problems
This is great! I think we need new thinking around "agile" workflow, tied to outcomes.
💯 @mark.persiko. Early in our transformation, people were getting hung up on behaviors and metrics and hitting targets for the sake of hitting targets. We continued to struggle with getting people (even our own coaches sometimes) past this until we started leveraging BVSSH language.
So, rather than getting stuck debating any given practice (.e.g. daily stand-ups, pairing, etc.) we can re-frame it in terms of outcomes. Team: "Do we have to do pair-programming?" Me: "Well, what problem are you trying to solve?" Team: "We are constantly getting disrupted with production defects introduced which takes us away from our backlog of new work." Me: "So you're struggling with delivering better (quality) and sooner (flow)?" Them: "Yes." Me: "Ok, so pairing is one way to lower defects getting introduced into production. What are some other things you want to try to improve the software quality and delivering better and sooner?"
Ha..clever. Requires clear, cold understanding of goals, and smooth, socratic delivery of them to others!
https://itrevolution.com/articles/what-is-better-value-sooner-safer-happier/
"Requires clear, cold understanding of goals, and smooth, socratic delivery of them to others!" As a coach / change agent / leader, I also need to let go of whether somebody is doing a particular practice. I need to not care whether they are pairing or not, so long as they are achieving the desired outcomes. That in itself requires self-discipline. Leading with intent and not control.
BatCAVE: “Continuous Assurance and Verification Environment!” 😂
CMS: 230 FISMA level systems (just as weather modeling systems were). 6500+ developers across numerous integrators!
Problem was the onerous work required to gain Authority to Operate, and all the necessary certifications to run CMS systems!
i’ve heard stories from other agencies about this taking up to two years. 😭
ATO_person: "You'll need to submit this new form for every deployment." me: "You don't want me to do that. We deploy several times per day."
“you’re not innovating when you’re fiddling with network settings, partitioning, VPCs. Innovation at the application and value you create for users. Infrastructure is abstracted away, and should be invisible to users.”
“reducing cost for end-to-end development; it’s not just opportunity cost, but cloud spend — ever turn something on, but forget to turn it off?” 😂
Proud of the work Defense Unicorns is contributing to this effort.
Funny / not-funny depiction of the horrendous timelines required to get capabilities into production, overlaid onto the COVID timeline.
A scrappy startup trying to change the world, one ATO at a time.
This is an astonishing philosophy of a security platform — instead of requirements and compliance, @robert.wood and team thinking about it as a market share and TAM (total available market) problem: % of developers are using our platforms, because they want to!
Using the Fly wheel in federal workspace is such a good idea @robert.wood! We need to look at that as well
Utility Belt: the toolchain that all CMS developers are able to take advantage of, not just security related. “we empower development teams, and not get distracted by security and operational stuff — logging, operations collectors, security collectors”
@genek does such a great job of highlighting and adding color to points in these talks. How much does being able to review the material in advance and having time to reflect and prep help?
For sure — I take notes during the recording session, and queue up more questions that I never got around to asking. It’s one of the things I lvoe about the virtual format.
It's good to be the Gene (stolen from History of the World Part I)
You're already a loop or two ahead on the spiral journey of knowledge
“Backup and… tested recovery?” 😂 I had a sinking nervous feeling when I heard @robert.wood talk about this. Backup is easy. Recovery is harder, and I’m not sure when the last time I tested recovery is… What an incredible benefit it is to have someone else help do this for you!
All the benefits that developers get by using batCAVE: helping advance developer objectives, as well as security objectives. Such a clever way to get developers onboard.
Listening to this talk, now I definitely want to base everything I do on Batman 😅
That is a tons of scan, deployment time will suffer, correct or not correct ? Can we couple the scans?
Fully agree, challenging the amount of time spend into the steps, I assume they are using lightweight images.
I suggest using the "also send to" option to have a better chance of getting an answer on this.
and moreover, with lot of controls, engineers are sometimes struggle to solve for instance major flaws found on external libraries, question here… Where to paint the line? Working for the government it is a must, but it impacts a lot the time to market in the case of e-commerce sites I love quality gates but @genek it will not call developers 🙂
@arun.chawla re: flywheel in my mind it’s really about the mindset of the team and stakeholder engagement
If you’re using a library with a known vulnerability but you aren’t using the actual piece of code that is vulnerable, is it a risk? :thinking_face: 💭
It's a good point about vulnerability analysis... how do you demonstrate that the vulnerability noted in the library or package is operationally vulnerable (not just theoretically)?
What we used to do at SourceClear was tag the line of code, method, function, whatever that was actually responsible for the vulnerability in a CVE and then add that as metadata to our database. Then when our agent built out the AST and did the comparisons we were able to tell whether or not the vulnerable code (based on our analysis anyways) was being called or not
This is an area where SBoMs can help. Two essential companion artifacts for SBoMs are the Common Security Advisory Framework (CSAF) standard and the Vulnerability Exploitability eXchange standard (VEX). These standards specify companion artifacts for automated vulnerability identification. CSAF specifies machine-readable security advisories delivered by software producers. This enables automated evaluation of software component vulnerabilities by software consumers to efficiently identify affected systems. VEX is a profile within CSAF that specifies a machine-readable format enabling suppliers and vendors to assert the vulnerability status (i.e., affected or not affected) of software products. https://docs.oasis-open.org/csaf/csaf/v2.0/csaf-v2.0.html https://www.ntia.gov/files/ntia/publications/vex_one-page_summary.pdf https://www.csa.gov.sg/-/media/Csa/Documents/Events/OTCEP-2021/aDolus-White-Paper--Introduction-to-VEX--V0100.pdf
The batCAVE acronym is hilarious: here’s @robert.wood LinkedIn profile — see his URL. 😂 https://www.linkedin.com/in/holycyberbatman/
I used to work at SourceClear and that vulnerable method identification was a key feature of ours
Of course everything about the company was a mess so it never really took off…but it was a good idea while it lasted 🙂
@robert.wood I have to imagine that developers you work with must occasionally say, “You’re a security person?!?” Yes?
some federal agencies call this “team-managed deployments” — certifying the practices the teams are using so they can deploy frequently… and responsibly
But theater is so much easier... and makes people feel like they are doing something..
I've heard theater defended as useful ceremony to keep "security" top of mind
I do get that from time to time. Developers like being stuck up for from pentesters and compliance folks.
I once had a pentester tell me his job was “to investigate the crime of new development.” :face_palm:
Having done all that sort of security work myself I can speak the language and cut through the BS…which is helpful in building the bridges
We want developers to be able to inherit controls from the platforms they run on — saving tremendous amounts of time, consistent results in GRC. 80% of controls they can inherit form batCAVE.
Next step: multi-tenancy, to reduce costs to run the shared platform!
@robert.wood I should really have our security folks talk to you. Getting libraries approved for operational environments is like rolling a boulder uphill (on many days)
https://linkedin.com/in/holycyberbatman if you need it…robert wood is a surprisingly common name
Next up: helping groups achieve big policy changes (ZeroTrust, SBOM) coming out of a recent White House directive.
something wonderful is happening :star-struck: @robert.wood @arun.chawla
PS: @robert.wood: Dr. @arun.chawla gave the presentation before you, on the amazing work he’s been doing at NOAA! https://doesus2022.sched.com/event/1EMk7/modernization-of-noaas-operational-weather-modeling-suite?iframe=no&w=100%&sidebar=yes&bg=no I’ll send you his presentation video, which will be posted in an hour or two!
“benefits are shared by all consumers — and so are risks” — one of the benefits of centralizing and shared platforms.
Testimonial of a developer loving the help they’re getting from security!
Congrats @robert.wood — often reaction from devs are different when security kicks down the door and says, “we’re here to help!” 😆
it’s one of the things that makes this community so special… because people respond with help!
We should collect those somewhere and share them after the conference... to get them under everyone's eyes and provide a loop back.
"Help we're looking for" This is something we're also starting to seed internally at John Deere as well with CoP talks, etc. Really has a positive impact on fostering a culture of learning and psych safety.
@nickeggleston @genek @mring i created a #C04E25MA5E0 channel. any post tagged with 🆘 will go there.
Centralized platform with excellent DevEx is so important.
+1 - having a powerful devex makes it easier to bring more teams onboard as you work through gaps (what may be holding them back with their existing system).
Yes. If we hate to use it, we’ll find another way.
Thank you so much, @robert.wood for the amazing work that you and team are doing at CMS, especially for some of the vulnerable Americans!!!
Hearing so many of the critical links being referenced.
Wooo! Morning sessions over — thank you @willardamyl @mring, @arun.chawla, @robert.wood for those fantastic sessions!!!! 🎉🎉
All the morning talks are live in the Video Library! https://videos.itrevolution.com/
4Reminder: The breakout sessions are starting in 5 minutes. Get in front of your browser and start navigating your way to whichever session you’re attending. https://devopsenterprise.slack.com/files/UATE4LJ94/F04DG604H1C/image.png
@topo.pal thanks for letting us know. fixed for today and for future reminders 🙂 (cc @alex)
Reminder: The action has moved to the breakouts! Join the following channels to interact with speakers live while their talks air: #discussion-track-1 #discussion-track-2 #discussion-track-3 #discussion-track-4
I noticed the same thing. When I joined the breakouts, Plenary/Track 1 was grey and I could not click it. @alex any insight?
(likely there was no content being streamed on that channel at that time, but hoping Alex can confirm)
Yes exactly - we built in logic to disable buttons with no content streaming
1. Plenary/Track 1 button is combined, so is the button greyed if only one of those two channels has no content? 2. If previous content is over, we can't copy/paste something from Slack that was good (even though we can go to the Slack channel, true!)
The main goal is to make sure that you don’t miss programming — Even during the launch test yesterday, I was in Track 1, and when programming ended on it, I didn’t realize I should have switched to a different track. So whenever there’s no programming on a track, we move you to one where there is, just so you know.
(Secondary goal: keep as much logic out of the web client as possible. 🙂 Hard-earned lesson. 🙂
Ah I see, thanks for clarifying intent. Good discussion: fast feedback, quick clarification!
Reminder: The breakout sessions are starting again in 5 minutes. Get in front of your browser and start navigating your way to whichever session you’re attending. https://devopsenterprise.slack.com/files/UATE4LJ94/F04DG604H1C/image.png
Reminder: The plenary sessions are starting again in 5 minutes. Start making your way back to your browser. https://devopsenterprise.slack.com/files/UATE4LJ94/F04DG604H1C/image.png
Ah, this talk! Remember that, @rradclif? On how the mainframe team built a memcache like service that could operate at Walmart scale! 🎉 https://videos.itrevolution.com/watch/578031349/
And the blocker: getting code pages working in git, if I remember correctly. 🙂
I was so delighted that @rradclif to teach us about why companies have individual career ladders, and what they look like, and how one advances on it.
“the largest GitHub Enterprise on the planet, with over a million repos.” (Her facial expression speaks volumes on what she thinks about that. 😂 )
I don't have the number off the top of my head it's over 20% - IBM has a history of recognizing the value of diversity - women in leadership as well as minorities
Literally just counted NSA senior technical women. Over 20% here, too!
I'm going to have to go back and watch your talk, @rradclif. I've always enjoyed you in the past and just reading the comments makes me sad I had to miss this DOES
One had to be very efficient with the limited screen real-estate...
And a lot of people became very proficient at it... such that moving to windows was a step back in performance from a human factors side.
I was trying to find the cover of InfoWorld or BYTE magazine of the CUI effort, that I remember reading as a kid.
I am not that old - but yes, it was on the cover of lots of magazines at the time
I love love loved that Nike commercial that they ran on 1/1/00 — the ones where missiles were launching, ATMs were breaking, etc!!!
There's a lot that can be mined from the Y2K fiasco about groupthink and credulity, as well as ways people created and exploited FUD for their advance... lessons lessons lessons...
@rradclif you standardized or created, ctrl-c,x,v? That's kinda huge, everyone uses that everywhere
I remember working cash in a convenience store at the turn of Y2K and wondering if anything would happen lol
“You have to get back into true dev, in order to get what you want (in a dev organization)”
What’s in common between the @rradclif and the @michael_winslow presentation a couple of weeks ago — there is a strategy to advancement. i.e., Rosalind wasn’t always the “mainframe devops” person — this is the story of what she was doing before that! “Looking for the home run that would move the needle on IBM objectives.”
this was an awesome talk @rradclif... your career is pretty inspiring! Huge impact!
One thing this mapping reminds me of is a point from Radical Candor when Kim Scott was saying that people move from growth and maintenance phases in their careers depending on what's going on in their lives. And how important it is for managers to recognize and reward that.
It's important to show people, it's not a straight path and to be a role model. You can't do what you can't see. I want to to show the value of diversity
Yessss!!! You are in my head with that one Rosalind! On one side you have to show the value. On the other side you have to show the possibility!
Yes, I was definitely one of those people with shocked faces. 😂
NWS solved its Y2K problem (not really) by setting fire to their only Supercomputer in oct 1999 (not recommended)
And early on they estimated the size of the global market for computers at ... was it... 10?
A startling thing: the thing that most moves the needle for IBM is “devopsifying” their internal systems. Amazing. And so cool. As @rradclif just said, “you never want to be the biggest of anything”, especially for things that customers don’t care about (code repos, payroll, etc.)
It’s always great to hang around other ambitious people, @ashulman!
Sponsors are critical in any company to help you move forward and be recognized for what you have done.
Connect with people, network, keep your contacts. My office mate when I started is now a GM.
you do your best when you are mostly happy ... not everything is fun, but you have to be mostly happy
the worst thing we sometimes do is make the best technologists into managers. Kudos to IBM for having parallel development tracks
After over 20 years as a manager, I recently moved to an I.C. and it's a blast! :-)
super inspiring and super important to remind women that the track to "success" can often be a windy, curvy, non-direct route and that is OK.
Congratulations, @craig.statham!!! (It was fun talking Clojure with you in Gather! 😂). Want to give a talk on that next year? 🙂
The talks on Clojure and Functional Programming really took me back to classes in had in Scheme back at IU with Dan Friedman and Kent Dybvig.
Growing and developing people and creating environments where they flourish is super hard... perhaps the hardest tech of all...
IBM has the advantage of being very large, so there is a lot of variety. From pure research, hardware, software, etc
And we focus on learning, continuous learning for everyone. The name changes but we have things like Think 40 - making sure you spend time on education and learning
“Creating intellectual capital and external eminence: patents, but these days, more commonly, open source, inner sourcing.”
vs. performance reviews, budgeting, enforcing expense reports, etc. 😆
Incidentally, the two talks in Las Vegas that inspired the career talks this week: • Luke Rettig, Target: https://videos.itrevolution.com/watch/762364324/
• Mike Winslow, Comcast (now Amazon Music!): https://videos.itrevolution.com/watch/763824944/
I do love that individual contributor tracks are more and more prevalent. No one deserves a manager who doesn't want to be there, but has to for career growth.
Surround yourself with people who will challenge you @rradclif
One thing I forgot to mention - we also have a large focus on training and giving more people options - we work with the PTech high schools to bring people into technology earlier - We have what we call new collar to say no need to have a college degree to come into IBM. There are a number of initiatives to provide skills training to the world as well.
We don't require a degree, or specific certification. We bring in new collar, we have the return to workplace initiatives. We focus on peoples ability to learn, to grow and drive innovation.
We went fully remote with COVID pretty fast. But it's important to understand IBM has always have flexibility, even when we were in the office 5 days a week. People could work the hours that work for them, they can go home to be home when kids arrive at home, you can go do volunteer work. We have also always had fully remote people that had skills we wanted. We do encourage to come in for purpose. Doing a design session in person is great, workshops are great. Some jobs never went remote, such as our line to build our machines, and some of our test floor. Those roles needed to be in the office.
We have also found, coming in for purpose, is a good thing for new hires, bringing them in to meet the people they work with. It's much easier to work remote when you know the person.
Thanks you @rradclif -- so much to try and absorb and reflect on
Thank you so much, @rradclif!!!! One of the things she mentioned: if you’re interested in creating an IC ladder in your company, she’d love to help — and many others in this community have done the same! (hello, @topo.pal!)
(I got that eNPS suggestion in a text from @drandremartin while driving in a car, on the morning that we had to freeze the State of DevOps Research questions. Exciting times.)
Love this talk... I need to listen again and again to try and operationalize this.
This is a startling presentation — the ultimate “it’s not you, it’s me”, but for the exogenous factors in one’s work environment.
Ah, Nick. Thanks. It was a fun piece of research and a topic I care so much about...because when the natural preferences of how talent likes to work matches the company they are in...it is pure brilliance. Truly, the stories from the interviewees were breathtaking.
And a fast set of questions show you as an prospective employee can quickly size of the organization for "fit" relative to you as an individual.
There are many more insights to come! Hoping Gene will invite me back to Vegas next year..hint, hint.
Not anymore! But for many years, YES. And just ask @genek about status reports!
^^^ I can resonate with that…. there’s a certain point in my career where it not only impacted me, but also @mvk842!!!!
Absolutely loved this session in Vegas, and can't wait to pre-order your book
I was amazed at some of the replies to a tweet I had written on those status reports! Some made cynicism seem inevitable, and others were heartbreaking! https://twitter.com/RealGeneKim/status/1575534191890288640
I automated those with PowerShell and Jira. There's still no value but those that want them run them now. I wasn't able to convince folks they were unnecessary.
But maybe 95% of the reason I quit a job once was because of "status report culture" 😆
@ryanewtaylor I did the same thing! JIRA -> Confluence Wiki! I even did a talk about it in 2017. No way I was going to spend my time creating those reports manually. Then I used that same code to generate release notes! https://speakerdeck.com/michaelswinslow/automated-release-notes-stc19
Maintaining connection with team and manager is really hard when working fully remote.
How we work is the element of culture that is often below the surface (it is vital but not always overt or accessible or taught)...you have to bump into it. @ashulman
Interview questions: What is the profile of the person that succeeds at this company? What happens here that didn't happen at any other companies you have worked at? Describe for me a typical day from start to finish. How do you spend your time?
This talk is mind blowing, @drandremartin. Thank you already.
Or for leaders, create a bubble where you and your teams can work the way you and team want to work — yes, @drandremartin?
I am going to have to hang out more with this group...for sure! Thanks @arun.chawla! Thanks @christian.kullmann505!
@genek Here are the buffers. As long as your team works truly independently, creating your own way of working, works. If you are dependent on others...that can cause coordination costs to many teams working many different ways.
(Although, I have a friend who is working on a Ph.D., and will never get out of there. I think he’ll give Nola Oachs a run for her money. 😂 😂
“In every Wrong Fit experience, I found a master of craft who could help me get better at what I do.”
41% of their time in discretionary activities that are non-value added. Still stuns me. @topo.pal meetings are a big issue...much better way to come together to do work.
This one hits hard. Great talk @drandremartin!
1We all deserve to be in a right fit experience. If you have, hold on tight. Thanks for letting me crash the party! DOES is the best!
Alas, @drandremartin is not available to do a workshop over the next two days during this conference, due existing commitments — but let’s see what we can make happen! If you’re interested in learning more from Andre, DM him and me, and let’s figure something out!
Definitely interested in learning more from him... maybe this would be a good follow-up talk for AndonCord huddles at a future date.
If you see somebody struggling, not finding their feet, their fit ... help 'em!
I think that if I listened to this talk this past Spring I would have updated my resume and moved on, because it was a very welcome dose of perspective. In that time I've mostly fixed the major problems though, doubling down on improving our ways of working, building business alignment, and making the environment better for others in the process. Thank you for such an important talk.
Thank you again for this amazing talk. Looking forward to learning more on the topic. @drandremartin
Thank you so much, Dr. @drandremartin! Hoping we can find more ways to connect this community with your work soon!!!!
If you are into this topic of "fit", I am planning to put together a webinar in the near future. Email at <mailto:andre@theshiftspace.com|andre@theshiftspace.com> and I will get you on the list. Let's continue this conversation!
If you are into this topic of "fit", I am planning to put together a webinar in the near future. Email at <mailto:andre@theshiftspace.com|andre@theshiftspace.com> and I will get you on the list. Let's continue this conversation!
Some of your thoughts are echoed in a book I've read called What Color Is Your Parachute but I think you offer constructive steps about what to do while we are waiting for the right fit.
I remember the book. Yep. Will go back and give it another read. There has been a lot to help people find their "true north" but not a lot on how to practice in a company that fits them. Trying to lean into this area. Thanks Mark! Have a great day.
Okay, that’s Day 1!! Hope it’s been fantastic for you — Day 2 will be as good, or maybe even better!!! 😂 (No offense to Day 1 speakers!! 🙂
Reminder: Please submit your feedback for the talks you attended. It’s so valuable for us and the speakers. And after all, feedback is a gift and sharing is caring! Enter your feedback for those talks here: https://doesus2022.sched.com/ https://devopsenterprise.slack.com/files/UATE4LJ94/F04DG7DQMSS/image.png
Reminder: That’s a wrap for Day 1 of the Summit. Head to the Dockside Bar in Gather if you want to connect with other fellow travelers and keep the conversation going. We’ll see everyone tomorrow for the start of Day 2 at 8:30am CST. https://devopsenterprise.slack.com/files/UATE4LJ94/F04DL04TNFP/image.png
