DevOpsDays Boise

Here are my transcribed notes from Dev Ops Days Boise, 2019:

Keynote: The Data Behind DevOps: Becoming a High Performer

• 10+ Deploys Per Day: Dev and Ops Cooperation at Flickr

10:10 - Loft Room - Security at DevOps Speed

• Check for vulnerabilities in open source dependencies, ideally automatically at build time.
• I’m harvesting credit card numbers and passwords from your site. Here’s how.

10:50 - JUMP Room - Building a Security Program From Nothing

• Books and Blogs:
  • Threat Modeling: Designing for Security
  • Red Team: How to Succeed By Thinking Like the Enemy
  • Turn the Ship Around
  • The Tangled Web: A Guide to Securing Modern Web Applications
  • Christian Haschek’s Blog
• Podcasts and Videos:
  • Darknet Diaries
  • Security as Nurturance
  • YouTube: OWASP Conferences, Bsides, RSA
• Security Champions (stakeholders attached to software teams)
• Mozilla Observatory
• SheHacksPurple

11:30 - JUMP Room - Continuous Security with Kubernetes

• Open Containers Initiative
• Container image signing
• Database migration/versioning with Flyaway

Lunch

1:00 - Pioneer Room - Ignite Talks:

• “Pixel Perfect Cookies”
• “Challenges and Value of Multi-Cloud and Hybrid Cloud”
• “Negotiating for More Than Your Salary”
• “Hot Takes, Myths, and Fake News: Why Everyone is Wrong About Dev Ops Except for Me”

1:50 - Open Spaces

• “Flow Framework” (Project to Product)
• “Silos and Stagnation”

2:50 - JUMP Room - Five Simple Tools to Unlock Innovation

• https://dschool.stanford.edu/
• Empathize/Define/Ideate/Prototype/Test

3:30 - Pioneer Room - Test-Driven Infrastructure

• Tools:
  • Goss
  • RSpec (Ruby)
  • Kubernetes
  • InSpec
  • DataDog
• “Unit testing” configuration management

Keynote: Engineering the Digital Transformation

• A Practical Approach to Large-Scale Agile Development: How HP Transformed LaserJet FutureSmart Firmware