DevOpsDC: Developing a Continuous Delivery Tool Chain from the Bottom Up

A retrospective on evolving from infrequent, risky releases to a low-risk, automated continuous delivery pipeline over several years. It shares the open-source tooling stack used across CI, testing, deployment, and security.

Coveros Staff

March 14, 2015

Last week I was able to talk about some of my DevOps experiences at the March 2015 DevOpsDC Meetup. I told the story about how we took a project that was just starting Agile and was deploying a risky release to production every 6 months or so, and over 4+ years brought it to deploying every two weeks with fewer people, more confidence, and a low-risk automated deploy process that included functional testing, regression testing, and security testing.

We started by showing how easy it was to set up a continuous integration engine (using ). Once we were using automated builds and unit testing, we focused on automated functional testing (using Selenium). That grew into an extensive set of role-based tests.

We discovered Jez Humble and Dave Farley’s book, Continuous Delivery, and it gave us confidence that we could keep expanding our CI practice into more. So we started using Puppet for deploys on our local development and test systems, eventually using it in “higher environments” too, like staging and production. And we added quite a bit of security testing for both the systems and the applications we were deploying.

Along the way we ran into a log of culture clash with the other teams that were involved.

I won’t recount the entire story here, but I have had a few requests for the tools we ended up using. We used open-source tools everywhere possible, in a large part because it was easier to get started with them.

 

Coveros Staff

Coveros Staff

This post represents the collective insights of the Coveros team. Our staff consists of software experts who bring deep experience in secure agile development, DevOps, testing, and software quality. Over the past 20 years, Coveros has trained more than 30,000 professionals and worked with half of the Fortune 100 companies on mission-critical software development challenges. We draw on this extensive experience to share practical insights, proven strategies, and real-world solutions that help organizations build better software faster and more securely.