Puppet发布2020年DevOps状态报告

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Puppet发布的"},{"type":"link","attrs":{"href":"https:\/\/puppet.com\/resources\/report\/2020-state-of-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"2020年DevOps报告"}]},{"type":"text","text":"显示，内部自助服务平台和有效的变更管理实践是组织提升DevOps发展阶梯的关键。安全集成在软件交付管道中也扮演着关键的角色。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"本次报告已经是第9年发布了，覆盖了全球近2400名专业人士。欧洲的受访者最多(33%)，美国和加拿大紧随其后(30%)。大多数受访者(33%)来自科技公司，其次是金融服务、工业和制造业。可以将这些百分比与"},{"type":"link","attrs":{"href":"https:\/\/puppet.com\/resources\/report\/2019-state-of-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"前一年的报告"}]},{"type":"text","text":"进行对比。今年报告的目标是研究在组织中实现DevOps敏捷性的“结构性问题”。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.infoq.cn\/resource\/image\/99\/9a\/995050afe2643cb04e2c9872583b499a.png","alt":null,"title":"","style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":"","fromPaste":false,"pastePass":false}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"图片来源：2020年DevOps状态报告"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2020年的报告指出，内部平台团队变得更加普遍，他们的存在与DevOps实践的发展呈正相关性。Puppet社区和开发者关系高级总监Alanna Brown指出：“我们发现DevOps的发展和内部平台的使用之间存在着很强的关系”。不断演化的组织为它们的开发人员提供了自助服务功能，如CI\/CD、开发环境、公共云和内部基础设施、监控\/警报、数据库配置和审计跟踪。该报告还提到了包含五个阶段的“进化模型”，其中第五个是最高阶段，在这个阶段，具有可用的自助服务资源和自动事件响应，业务需求定义了应用程序的架构，而安全是设计和部署的关键部分。在各种不同级别的DevOps演化阶段，CI\/CD是最为常见的自助服务接口。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"报告作者指出，最重要的是要把内部平台当作产品来对待，因此要为之分配资源、时间、固定的团队，并作出管理承诺，以此来保证它的成功。内部平台可以让应用程序开发人员专注于他们的核心能力，让他们可以访问标准化的工具集。作者写道：“内部平台团队负责提供一个平台，该平台提供基础设施、环境、部署管道和其他内部服务，让内部客户(通常是应用程序开发团队)能够构建、部署和运行他们的应用程序”。有63%的受访者至少拥有一个内部平台，60%的受访者拥有2到4个平台。这些组织中的31%有26% 到50%的开发人员使用一个平台。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"在一个被引用的案例研究中，CircleCI的平台副总裁Mike Stahnke表示，他们从可用性、成本、安全性和开发效率等方面来衡量内部平台成功与否。报告还指出，提供内部平台的最大挑战是缺乏时间、标准化以及团队缺乏技术技能。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"报告还展示了变更管理的四种不同方法。有效的变更管理与强调自动化测试、部署、风险缓解和灵活的审批流程具有相关性。代码变更(包括基础设施即代码的变更)、员工影响变更以及流程和文化都是其中的组成部分。报告指出，将变更作为代码的好处是“变更可以受制于任何可用的代码验证技术”。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"在运维方面比较成熟的公司是那些自动化程度最高、“正统”审批系统水平也很高的公司。这一看似矛盾的现象可以用以下事实来解释：这些典型的大中型企业已经有了成熟的变更部署流程，并且将自动化作为“数字化转变”的一部分。工程驱动型公司大多是技术公司(占全部受访者的33%)，而规模更大的公司通常更依赖人工审查，并注重治理，在这些受访者中，有40%的公司员工超过5000人。最后一类在自动化、审批和工程工作等各个方面得分都很低。自动化变更管理的最大挑战是不完整的测试覆盖、组织的思维方式以及紧密耦合的应用程序架构。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"将安全性与软件交付过程集成可以加快关键漏洞的处理过程。虽然这份报告没有提到安全集成的具体例子，但2019年的报告提到了。2020年的报告可以从"},{"type":"link","attrs":{"href":"https:\/\/puppet.com\/resources\/report\/2020-state-of-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"Puppet网站"}]},{"type":"text","text":"下载。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"strong"}],"text":"原文链接"},{"type":"text","text":"："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/www.infoq.com\/news\/2020\/11\/2020-devops-report\/","title":"","type":null},"content":[{"type":"text","text":"Puppet Releases Its 2020 State of DevOps Report"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}}]}