4 ms·
> You build it, you run it While I do like that definition, it also means that most companies/organisation cannot do DevOps, as software development is often b
by mrweasel 5y ago
> You build it, you run it
While I do like that definition, it also means that most companies/organisation cannot do DevOps, as software development is often bought as projects, and operations is a recurring cost.
- 988747 5y agoAlso, government regulations such as HIPAA explicitily force you to have separation of duties, so true DevOps is against them. Developer being able to push their code to production can earn you some hefty fine at the next audit.
- sethammons 5y agoWe pass our audits all day long and I can push to prod multiple times a day. But there are caveats. Another developer must sign off on a code review and quality check before code rolled out, and a build pipeline ensures that we run our test suites and all changes have an audit trail.
- d0mine 5y agoSoftware is never done. It can only be abandoned. There are projects that change slowly but they do change nonetheless unless they are no longer used.
- throwDec19 5y agoWe get heavily clamped down on access to production by our auditors for Sarbane Oxley reason. Technically we aren't even allowed production data in our dev environment. I dont understand why any organization would allow it. Seems the tech world is still ripe to get sued.
- throwawayboise 5y agoOrganizations did (do?) allow it because it's easy. It's also a way to test/debug production problems with actual production data instead of spending time trying to make up data that you hope covers all the actual use cases.
- vasco 5y agoIt's also lazy and doesn't respect the privacy of your users.
- KptMarchewa 5y agoBecause most of the world (also, as in industries) isn't under those type of laws.