Skip to content

Instantly share code, notes, and snippets.

@jamesob

jamesob/devops_checklist.md

Created November 25, 2014 03:14
Show Gist options
  • Save jamesob/3bd7d286be7255dd155e to your computer and use it in GitHub Desktop.
Save jamesob/3bd7d286be7255dd155e to your computer and use it in GitHub Desktop.
Download ZIP
DevOps checklist
Raw
devops_checklist.md

Security

  • no credentials kept in codebase
    • use consul/zookeeper/etc., then have code load credentials from environment variables
  • using a bastion box to safeguard access to servers
    • in conjunction with, e.g., AWS security groups

Development

  • master is always deployable
    • this means that proposed changesets are always tested prior to being merged to master
    • this probably means that a CI solution must be implemented
  • infrastructure topology is replicated faithfully in QA/staging
    • this means that if you have, e.g., separate database servers in PROD, you should have them separated on QA as well
    • a little much to ask for dev environments, but bonus points if possible
  • deploys happen automatically on merge to master

Montoring

  • logging is centralized
  • metrics-per-feature are collected to verify live functionality
  • stacktrace aggregation (e.g. Sentry) is in place
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment