Supporting multiple development teamsdeveloping and operating withzero time-to-market andzero down-time.

Olli Vistbacka, Development Manager at YleKalle Ylä-Anttila, Architect at Yle

Environment

10+ CROSS-FUNCTIONALTEAMS

UUTISVAHTI

AREENA

TUNNUS

UUTISET

URHEILU

Multiple Services

INTERNAL

More bang for the buck with good quality?

Problem #1

How to to enforce basic infra-level security?

Problem #2

Customer value =Total effort - overhead

Bang for the buck

1. Duplicated work2. Build and maintain

infrastructure

Overhead

Js

LOG

MON

VM

NET

HW

PU

PP

ET

Before: Custom stacks

Js

LOG

MON

VM

NET

HW

PU

PP

ET

Sca

LOG

MON

VM

NET

HWP

UP

PET

Clj

LOG

MON

VM

NET

HW

PU

PP

ET

Development team

Partner #1

Partner #2

Service #1 Service #2 Service #3 Service #4

Solution

Js

S#1IMG

Docker

AWS

Now: Container-driven code-based Infrastructure

Sca

S#3IMG

Clj

S#4IMG

Yle AWS Tools

DevOps team

Service #1 Service #2 Service #3 Service #4

Js

S#2IMG

OPS team

Legacy

https://spotifylabscom.files.wordpress.com/2014/03/spotify-engineering-culture-part1.jpeg

yle.fi OPS team supportsdevelopment teams

to use code-basedinfrastructure.

OPS team supports development teams

https://spotifylabscom.files.wordpress.com/2014/09/spotify-engineering-culture-part2.jpeg

yle.fi development teams have full autonomy inside containers.

Only handful of techs and tools are supported byOPS team.

development teams have full autonomy

OPS team members visit in teams as OPS lead.

DevOps team

OPS team DevOps’es code-based-infra, legacy and tools.

As soon as availablein Region EU

Amazon ECR

Docker Hub

Amazon ECS

Development Flow

AmazonRDS

Amazon ElastiCache

Amazon VPC

AWS IAM

SANE DEFAULTS

NewRelic POLICIES

NewRelic THRESHOLDS

Logging and monitoring

Amazon Elasticsearch

Service

AmazonSQS

Amazon CloudWatch

Amazon ECS

TERRAFORM MODULES

Yle AWS Tools

Takeaways

Decide when to enforceRemember goal: more bang for the buck!

rules < supportdevdev

AD50%

Konsepti75%

PO75%

UX50%

OPS0%

Make the securest way the easiest wayby providing sane defaults and support for the most common technologies used.