Puppet發佈2020年DevOps狀態報告

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Puppet發佈的"},{"type":"link","attrs":{"href":"https:\/\/puppet.com\/resources\/report\/2020-state-of-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"2020年DevOps報告"}]},{"type":"text","text":"顯示，內部自助服務平臺和有效的變更管理實踐是組織提升DevOps發展階梯的關鍵。安全集成在軟件交付管道中也扮演着關鍵的角色。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"本次報告已經是第9年發佈了，覆蓋了全球近2400名專業人士。歐洲的受訪者最多(33%)，美國和加拿大緊隨其後(30%)。大多數受訪者(33%)來自科技公司，其次是金融服務、工業和製造業。可以將這些百分比與"},{"type":"link","attrs":{"href":"https:\/\/puppet.com\/resources\/report\/2019-state-of-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"前一年的報告"}]},{"type":"text","text":"進行對比。今年報告的目標是研究在組織中實現DevOps敏捷性的“結構性問題”。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.infoq.cn\/resource\/image\/99\/9a\/995050afe2643cb04e2c9872583b499a.png","alt":null,"title":"","style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":"","fromPaste":false,"pastePass":false}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"圖片來源：2020年DevOps狀態報告"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2020年的報告指出，內部平臺團隊變得更加普遍，他們的存在與DevOps實踐的發展呈正相關性。Puppet社區和開發者關係高級總監Alanna Brown指出：“我們發現DevOps的發展和內部平臺的使用之間存在着很強的關係”。不斷演化的組織爲它們的開發人員提供了自助服務功能，如CI\/CD、開發環境、公共雲和內部基礎設施、監控\/警報、數據庫配置和審計跟蹤。該報告還提到了包含五個階段的“進化模型”，其中第五個是最高階段，在這個階段，具有可用的自助服務資源和自動事件響應，業務需求定義了應用程序的架構，而安全是設計和部署的關鍵部分。在各種不同級別的DevOps演化階段，CI\/CD是最爲常見的自助服務接口。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"報告作者指出，最重要的是要把內部平臺當作產品來對待，因此要爲之分配資源、時間、固定的團隊，並作出管理承諾，以此來保證它的成功。內部平臺可以讓應用程序開發人員專注於他們的核心能力，讓他們可以訪問標準化的工具集。作者寫道：“內部平臺團隊負責提供一個平臺，該平臺提供基礎設施、環境、部署管道和其他內部服務，讓內部客戶(通常是應用程序開發團隊)能夠構建、部署和運行他們的應用程序”。有63%的受訪者至少擁有一個內部平臺，60%的受訪者擁有2到4個平臺。這些組織中的31%有26% 到50%的開發人員使用一個平臺。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"在一個被引用的案例研究中，CircleCI的平臺副總裁Mike Stahnke表示，他們從可用性、成本、安全性和開發效率等方面來衡量內部平臺成功與否。報告還指出，提供內部平臺的最大挑戰是缺乏時間、標準化以及團隊缺乏技術技能。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"報告還展示了變更管理的四種不同方法。有效的變更管理與強調自動化測試、部署、風險緩解和靈活的審批流程具有相關性。代碼變更(包括基礎設施即代碼的變更)、員工影響變更以及流程和文化都是其中的組成部分。報告指出，將變更作爲代碼的好處是“變更可以受制於任何可用的代碼驗證技術”。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"在運維方面比較成熟的公司是那些自動化程度最高、“正統”審批系統水平也很高的公司。這一看似矛盾的現象可以用以下事實來解釋：這些典型的大中型企業已經有了成熟的變更部署流程，並且將自動化作爲“數字化轉變”的一部分。工程驅動型公司大多是技術公司(佔全部受訪者的33%)，而規模更大的公司通常更依賴人工審查，並注重治理，在這些受訪者中，有40%的公司員工超過5000人。最後一類在自動化、審批和工程工作等各個方面得分都很低。自動化變更管理的最大挑戰是不完整的測試覆蓋、組織的思維方式以及緊密耦合的應用程序架構。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"將安全性與軟件交付過程集成可以加快關鍵漏洞的處理過程。雖然這份報告沒有提到安全集成的具體例子，但2019年的報告提到了。2020年的報告可以從"},{"type":"link","attrs":{"href":"https:\/\/puppet.com\/resources\/report\/2020-state-of-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"Puppet網站"}]},{"type":"text","text":"下載。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"strong"}],"text":"原文鏈接"},{"type":"text","text":"："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/www.infoq.com\/news\/2020\/11\/2020-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"Puppet Releases Its 2020 State of DevOps Report"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]}