24.10.2014 Views

Deploying DRUPAL in a Private Cloud at DHS - Mil-OSS

Deploying DRUPAL in a Private Cloud at DHS - Mil-OSS

Deploying DRUPAL in a Private Cloud at DHS - Mil-OSS

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

www.bstonetech.com<br />

Presented By: Richard Bull<strong>in</strong>gton-McGuire<br />

Special Thanks to: Anthony Glynn & Dan K<strong>at</strong>z<br />

9/8/2011


Introductions<br />

Richard Bull<strong>in</strong>gton-McGuire @obscurerichard<br />

rbull<strong>in</strong>gton-mcguire@bstonetech.com<br />

Dan K<strong>at</strong>z @mtndan<br />

dk<strong>at</strong>z@bstonetech.com<br />

Anthony Glynn<br />

aglynn@bstonetech.com<br />

Blackstone Technology Group<br />

@blackstonetech<br />

http://us.bstonetech.com<br />

And you?


Disclaimer<br />

The content of this present<strong>at</strong>ion is<br />

solely the thoughts and op<strong>in</strong>ions of<br />

the speaker and contributors.<br />

We are not employees of, nor do we<br />

represent the US Federal<br />

Government or the Department of<br />

Homeland Security.<br />

Blackstone Technology Group Proprietary and Confidential<br />

9/8/2011


Wh<strong>at</strong> is Drupal?<br />

4


Who Uses Drupal?<br />

5


Can you use Drupal <strong>in</strong> a<br />

Controlled IT Envirnoment? Yes...<br />

6<br />

Blackstone Technology Group Proprietary and Confidential


Piloted on Acquia’s Public <strong>Cloud</strong><br />

All<br />

7<br />

public d<strong>at</strong>a, low risk, lower C&A requirements


Enterprise Service C<strong>at</strong>alogs


ITIL C<strong>at</strong>alog <strong>in</strong> a <strong>Priv<strong>at</strong>e</strong> <strong>Cloud</strong><br />

Internal<br />

9<br />

deployment, higher C&A and doc burden


Service C<strong>at</strong>alog Overview<br />

10<br />

Essential Fe<strong>at</strong>ures<br />

Security / User<br />

Authentic<strong>at</strong>ion<br />

Them<strong>in</strong>g / 508<br />

Compliance<br />

Search<br />

C<strong>at</strong>alogs / Group<br />

Management<br />

Cart / Item Request<br />

Workflow<br />

Content Approval<br />

Workflow<br />

Feedback / Info Request<br />

Technologies Used<br />

Drupal 6<br />

CCK<br />

Views<br />

Flag<br />

Rules<br />

Workflow<br />

Notific<strong>at</strong>ions<br />

Apache Solr<br />

9/8/2011


Commercial Support Essential<br />

Commercial Support was essential to pass<strong>in</strong>g the<br />

Certific<strong>at</strong>ion & Accredit<strong>at</strong>ion hurdles<br />

Pl<strong>at</strong>form Element<br />

Commercial Support From<br />

Oper<strong>at</strong><strong>in</strong>g System<br />

D<strong>at</strong>abase<br />

Red H<strong>at</strong> (Red H<strong>at</strong> Enterprise L<strong>in</strong>ux)<br />

Oracle (MySQL Enterprise)<br />

Script<strong>in</strong>g Language Zend (PHP)<br />

CMS<br />

Acquia (Drupal)


C&A Challenges & Roadblocks<br />

Many required Open Source products were not on<br />

the TRM list<br />

Security g<strong>at</strong>ekeepers required educ<strong>at</strong><strong>in</strong>g<br />

Risk assessment was required for each module<br />

Wh<strong>at</strong> is our basel<strong>in</strong>e? (Drupal moves fast)<br />

Access to cloud VMs for test and deployment was<br />

difficult due to security constra<strong>in</strong>ts


Future Directions<br />

13<br />

Drive Quality through DevOps Techniques<br />

Use Drush to p<strong>in</strong> module versions<br />

Use Vagrant to cre<strong>at</strong>e repe<strong>at</strong>able dev & test VMs<br />

Use cont<strong>in</strong>uous <strong>in</strong>tegr<strong>at</strong>ion to drive functional and<br />

security scann<strong>in</strong>g<br />

Increase use of public cloud for projects th<strong>at</strong> can<br />

use it<br />

Lower the C&A burdens<br />

Decrease cycle times<br />

9/8/2011


Questions

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!