Cloud Migrations

What it looks like…

• FULLY AUTOMATED

  Enable engineers to contribute to the infrastructure without risking instability. By using 100% Infrastructure as Code, every change goes through a Pull Request/Code Review work flow – the essence of GitOps.

• REPEATABLE

  100% Infrastructure-as-Code eliminates error-prone manual operations. Reproducible 100% of the time. Spin up as many environments as needed and treat them all the same. Lifecycle Management strategies ensure all components can be upgraded without major disruptions.

• MULTI-ACCOUNT

  Flexible enough to support any class of application that you might need to run now or in the future.

• HIGHLY AVAILABLE

  Fault-tolerant so that services won't fall over and die if a component fails. Resilient by design, so that services self-heal without human intervention. Scalable to grow with demand both instantaneously and over time as the business grows. Capable of being both scaled-up and scaled-out.

Local Development Environments

Rapid Software Development…

• REPEATABLE

  Reproducible 100% of the time. Spin up as many environments as needed and treat them all the same.

• SQUASH BUGS

  Treat everything as “Infrastructure as Code” for more manageable environments. Reduce the human element wherever possible.

• EASY TO USE

  Lifecycle Management strategies ensure all components can be upgraded without major disruptions.

• FAST ONBOARDING

  Simple – anyone should be able to do it.

Release Engineering

Confidence that it works…

• INTEGRATION TESTING

  Leverage CodeFresh or other systems like AWS CodeBuild, TravisCI, CircleCI or Jenkins to build and test every commit. Know exactly which commit broke the build every time.

• CONT. DELIVERY

  Deploy exactly what was tested to any cluster using immutable containers. Identify problems before they get into production. Run identical environments to eliminate headaches.

• SLACK INTEGRATION

  Automatically notify your QA team when new environments are online and ready for testing.

• FULLY AUTOMATED

  Zero downtime, rolling deployments are accomplished automatically by Kubernetes.

Automated Deployments

Easy deployments…

• EASY ROLLOUTS

  Infrastructure as code means it can be tested as code.

• QUICK ROLLBACKS

  Easy rollbacks when things don't work as expected. Just revert back to the previous deployment without bending over backwards.

• ZERO-DOWNTIME

  Zero downtime, rolling deployments are accomplished automatically by Kubernetes.

• RELIABLE

  Improve overall stability by catching problems early. Treat every problem as an opportunity to eliminate future headaches.

Site Reliability Engineering

System-wide overview…

• DASHBOARDS

  Dashboards provide an overview of everything at a glace and provide the necessary transparency across departments. Get everyone on the same page and working towards the same goals by giving them the insights they need to do it.

• KEY PERFORMANCE INDICATORS

  KPIs provide the benchmarks for success. They provide a concrete indicator when things are working or broken. Alert based on thresholds instead of discrete events. Generate actionable notifications that escalate only when it matters to On-Call Engineers .

• LOG AGGREGATION

  Internal services are monitored for both availability and correctness. Aggregate and report on logs collected from all services across all machines.

• MONITORING AS CODE

  External services are just as integral to the performance of your product as internal ones. Monitor all dependencies as if they were your own. Escalate before their problems become your.

Scale Testing

Know your limits…

• TEST PLAN

  Collect and ship logs somewhere so they can be reported on.

• ESTABLISH BASELINE

  Reporting on logs requires visualization of events because that's the only way to make sense of mounds of data.

• SIMULATE TRAFFIC

• OPTIMIZE & REPEAT

  Integrate with monitoring and alerting so that critical events are not lost.

Training and Support

Foster a DevOps culture…

• CODE REVIEWS

  DevOps involves constant cross-training of engineers to ensure business continuity is achieved at the human-level.

• SCREEN SHARING

• SLACK CHANNEL

  Best Practices exist to ensure hard lessons can be learned the easily.

• DOCUMENTATION

  Cloud Technologies are evolving at an astonishing rate. Get help staying on top of the latest & greatest tech without getting overwhelmed.

Security & Compliance

Protect your business…

• SINGLE SIGN-ON

  Cloud security involves hardening all components, restricting access with SSO/MFA, and having a birds eye view of everything going on in order to quickly remediate any incident.

• PHYSICAL SECURITY

  On-prem security is just as important as cloud security. Protect your intellectual property (IP) from being compromised. Lock down laptops, wifi, and physical access. A company is only as secure as its weakest link.

• AUDIT TRAILS

  Auditing is the on-going process of surfacing anomalous events happening across all systems by combing through logs that are centrally aggregated to a log store like Splunk, Sumologic or Kibana/ElasticSearch.

• SECRETS MANAGEMENT

  Secrets management ensures there's a formal process for storing, securing and rotating passwords and keys. Well designed solutions help ensure your company will not be tomorrow's headline news.

Gap Assessments

Gain the upper hand…

• CLOUD ARCHITECTURE

  We'll perform a comprehensive 12-factor assessment on your cloud architecutre.

• SOURCE CONTROL

  Escalation involves notifying the appropriate people at the right time the way they want to be notified. It also means that when someone cannot be reached, that contingencies kick-in.

• DOCKER/COMPOSE

  Remediation procedures should be documented along side the alerts in the form of a knowledge base. This ensures on-call engineers (OCEs) are never left hanging.

• KUBERNETES

  Relevant alerts go directly to key stakeholders. Avoid alert overload by tracking KPIs instead of individual checks.

Other Resources

• Hundreds of Terraform Modules

  We are the largest provider of high quality, well-maintained, 100% Open Source (APACHE2) Terraform Modules. View our Terraform Modules

• Dozens of Helm Charts

  What makes them special is we've developed these charts to integrate with third party services like Github for authentication (OAuth2) and Duo for MFA. View our Helm Charts

• Dozens of Helmfiles

  Preconfigured release configurations for all essential services for kubernetes including Prometheus, Grafana, Nginx Ingress, Kube Dashboard, CloudFlare Argo, Fluentd, and much more. View our Helmfiles

• Active Slack Community

  It's FREE to join for everyone! This is the best place to talk shop, ask questions, solicit feedback, and work together as a community to build sweet infrastructure. Join our Slack Community

• Badass Documentation

  Here you'll find comprehensive guides and documentation to help you start working with the Cloud Posse technology stack as quickly as possible, as well as support if you get stuck. Read our Docs

• Town Hall Conference Calls

  Every two weeks we hold a conference call over Zoom for our community members to share what they are working on and ask questions. Join our next call