How to Build a Secure DevOps Environment for Government and Beyond
Presented by: Normal Mehta, Senior Lead Technologist, Strategic Innovation Group, Booz Allen Hamilton The General Services Administration (GSA) is driving IT innovation through their Cloud First, Open Source First policies. Booz Allen is supporting the GSA Integrated Award Environment (IAE) Common Services program to implement these tenets. IAE currently supports several large public facing silo'd applications, which manage the government-wide systems for those who award, administer, or receive Federal financial assistance contracts, and intergovernmental transactions. To create a unified developer experience and provide Platform as a Service (PaaS) support, the GSA is leveraging several open source projects including Docker, Chef and Jenkins on AWS to support the consolidation of 10 legacy applications onto a single public cloud platform. In this discussion, we will review the lessons learned from this large undertaking and featuring a demonstration using Check, Consul, Docker (including Swarm and Machine), GitHub Enterprise, Interlock and Jenkins to create a production-ready and secure Common Services Platform following the best DevOps patterns. Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container that a developer builds and tests on a laptop will run at scale, in production*, on VMs, bare-metal servers, OpenStack clusters, public instances, or combinations of the above.