3 ms·
I think another way of looking at this is what can you do to make critical systems more robust and resilient. The capability to monitor, deploy, and rollback n
by skmurphy 17y ago
I think another way of looking at this is what can you do to make critical systems more robust and resilient.
The capability to monitor, deploy, and rollback new features/fixes on short notice would seem to be a part of that, even if actually used infrequently. I would think that you would need to be able to respond to a change in the environment the system is operating in as much ensure that a new release doesn't contain bugs that would manifest in your current understanding of the operating environment.
I am suggesting that much if not all of the infrastructure needed to reliably patch/rollback critical systems can also be used for continuous deployment at the option of the development team and/or the customer.
So in the event that a P1 hit a continuously operating network application (e.g. power grid) the ability to deploy and rollback new features rapidly in response might be a valuable option to have. It's an approach that increases resilience. This does not mean you have to do this all of the time.
- ghshephard 17y agoI absolutely agree with you that continuous deployment increases resilience. The problem is that it also increases instability. Perhaps the closest example I can think of with regards to continuous deployment in mission critical situations are the martian rovers - I think they had some real-time deployment of new code. But, the implications of a problem with them were relatively minor - a few hundred million dollars, and no lives lost. Are there any examples of continuous deployment in a scenario in which hundreds of lives and/or billions of dollars are at stake?