culture

In response to a twitter thread about questions to identify whether a applicant would want to accept a job, one of the most brilliant responses was by Lars Albertsson (@lalleal) asking “How much does it cost your company to buy a thing for 1000 EUR? Spend a day chasing approvals, and you are at > 100% overhead.”

The book Power to the Public by Tara Dawson McGuinness and Hana Schank is a fantasic overview of the Brownfield nature of the public sector. The book goes into a few fantastic examples of how things can be better.

Legacy organizations with legacy products have designed complex and rigid processes for releasing software into a production environment. The production environment is special and has limited access and compliance and constraints and needs to always work so developers shouldn’t even try to look at it.

Except things change and stuff breaks. So now what? Continuous deployment to the rescue!?

The original recording was 40 minutes of chatting and pipelines and other nonsense. I sliced it up and we are left with about 9 minutes of the process and 4 minutes explaining a few pipeline jobs in greater detail.

When transitioning from classic methods to Agile and DevOps, the gatekeepers can feel stuck in limbo. The first step to easing the transition for security reviews, change management, and independent verification is to give them a place they control. As of GitLab 13-ish, the existing roles do not meet this need, despite the merge request approval with branch, tag, and environment protections.

This article lays out a 2 project workflow with an automated merge request handoff to support the access levels needed for segregation of duties with Auto DevOps.