Pilot for United States Patent and Trademarks Office (USPTO) 30-60-90 Day Plan Technical Proposal
Total Page:16
File Type:pdf, Size:1020Kb
Pilot for United States Patent and Trademarks Office (USPTO) 30-60-90 Day Plan Technical Proposal Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this document. i Copyright© RIVA Solutions, Inc. 2020. All Rights Reserved. Pilot for United States Patent and Trademarks Office (USPTO) 30-60-90 Day Plan Technical Proposal Table of Contents 1 Executive Summary ................................................................................................................. 1 2 Technical Approach ................................................................................................................. 3 2.1 Assessment (Sprint 0)....................................................................................................... 3 2.2 Setup OpenCloudCX (Sprint 1) ....................................................................................... 4 2.3 Integrate Pipeline with OpenCloudCX (Sprint 2) ............................................................ 5 2.4 Productionize OpenCloudCX (Sprint 3) .......................................................................... 7 2.5 Enable Immune Deployment System (IDS) (Sprint 4) .................................................... 8 2.6 Agile Team Production use of OpenCloudCX (Sprint 5) ................................................ 9 2.7 Beyond the Pilot (Sprint n+) .......................................................................................... 10 3 Management Approach .......................................................................................................... 11 3.1 The Pilot Team ............................................................................................................... 11 3.2 Metrics for Success ........................................................................................................ 12 Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this document. ii Copyright© RIVA Solutions, Inc. 2020. All Rights Reserved. Pilot for United States Patent and Trademarks Office (USPTO) 30-60-90 Day Plan Technical Proposal 1 Executive Summary Seven years ago, a Cloud First Policy was created to accelerate the pace of government adoption of Cloud capabilities. During this timeframe, many departments within agencies moved to the cloud under very little governance and direction, which led agencies and even departments to use multiple cloud providers. Many government agencies have been successful in implementing a DevSecOps environment and many departments within the agency use different cloud providers — such as Google, Amazon Web Services or Azure — but they are running into a multi-cloud deployment nightmare trying to manage deployments into multiple cloud providers. Deployment pipelines are siloed and not reusable across the enterprise, which burdens additional cost for the agency and limits the cross-department reuse of microservices, applications, and software efforts due to the “stickiness” services offered by each cloud provider. There are additional benefits to having multiple cloud providers, such as enhanced redundancy or business continuity planning are a few, but we’ve seen that most agencies have multiple clouds because of the organic use of a cloud provider that best fits their business case and mission. This strategy is best for the department but not for the overall Enterprise efforts for the Agency. In 2019, the Federal Cloud Computing Strategy, Cloud Smart, introduced a path forward for agencies to migrate to a safe and secure cloud infrastructure. This “BY UPDATING AN OUTDATED new strategy will support agencies to POLICY LOUD MART EMBRACES achieve additional savings, security, and , C S will deliver faster services. BEST PRACTICES FROM BOTH THE FEDERAL GOVERNMENT AND THE RIVA is agnostic to COTs, open source PRIVATE SECTOR, ENSURING and GOTs solutions, but we do evaluate and provide guidance to our customers AGENCIES HAVE CAPABILITY TO about the Pros and Cons for each LEVERAGE LEADING SOLUTIONS TO solution and develop a “best fit” strategy BETTER SERVE AGENCY MISSION, for each customer. DRIVE IMPROVED CITIZEN SERVICES With federal cloud adoption increasing AND INCREASE CYBER SECURITY.” dramatically in the last 5 years. Many — Suzette Kent, Federal Chief Information Officer agencies have implementation across multiple clouds with no centralized strategy in how to efficiently manage deployments to the cloud via an optimized and maintainable Continuous Delivery/Continuous Integration approach. OpenCloudCX aims to solve this problem. RIVA Solutions, LLC (RIVA) developed the OpenCloudCX Multi-Cloud solution based on an open source solution originally developed using Netflix’s Spinnaker CI/CD solution. Furthermore, we have integrated Hygieia, which is two self-contained dashboards – one for engineers and another for executives – that visually depict CI/CD pipelines. We are able to provide senior leadership the ability to understand the DevSecOps state of maturity and risk across a wide range of product portfolios. OpenCloudCX is an open source, multi-cloud continuous delivery platform for releasing software changes with Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this document. 1 Copyright© RIVA Solutions, Inc. 2020. All Rights Reserved. Pilot for United States Patent and Trademarks Office (USPTO) 30-60-90 Day Plan Technical Proposal high velocity and confidence. Furthermore, because the key building blocks of our solution are based on Open Source technology, there is no worry of vendor lock-in that exists with proprietary software solutions. What differentiates OpenCloudCX from other Multi-Cloud solutions is how OpenCloudCX abstracts the cloud operations from its users by allowing users to create custom views of the cloud. Providing a custom view of the cloud enforces best practices that help development teams draw from the lessons codified in OpenCloudCX. This enable agencies with multiple cloud providers the ability to seamlessly integrate OpenCloudCX into their existing CI/CD pipelines and abstract out the cloud provider operations and allow agencies to adopt best practices by incorporating security, reuse existing deployments, and standards cloud deployments for the Enterprise. RIVA has invested in this solution for clients, extending Spinnaker to integrate it with our existing open source DevSecOps platform to provide a fast, repeatable, open source multi-cloud deployment capability. A core differentiating component of OpenCloudCX is the deep learning models that determine the normal state of deployments and provides anomaly alerts when development teams deviate from a successful deployment in our Immune Deployment System (IDS) which uses unsupervised and supervised machine learning and AI to understand all about your multi-cloud deployments. RIVA is an 8(a) small disadvantaged business (SDB) (graduation date January 18, 2026) has a long and successful management history supporting USPTO operations, including five current contracts supporting the Office of the Chief Information on Officer (OCIO), Office of the Chief Financial Officer (OCFO), and Office of Human Resources (OHR) for deep mission understanding and best practice sharing. We bring a deep understanding of the of the USPTO environment, culture, and mission in addition to valuable experience on multiple USPTO contracts providing similar services. We offer the USPTO a transparent, reliable team that focuses on customer delivery and quality services. RIVA is the right company to start small and scale to win! Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this document. 2 Copyright© RIVA Solutions, Inc. 2020. All Rights Reserved. Pilot for United States Patent and Trademarks Office (USPTO) 30-60-90 Day Plan Technical Proposal 2 Technical Approach RIVA’s experience with OpenCloudCX implementations has taught us that each organization’s journey is unique, and complex. Success relies on understanding the current people, process, and technologies. We start with an understanding our USPTO’s executive vision and benefits a multi-cloud continuous deployment capability will bring to them. We will decompose that vision into prioritized requirements as a Roadmap. The Roadmap will detail which applications and agile teams will transition to OpenCloudCX. We define these requirements as user stories and ensure that they are refined into actionable tasks that rely on USPTO’s DevSecOps and Cloud Maturity. We use the requirements to get from “as is” to the “to be” state. Below shows a model for our approach, as we transition from an assessment to execution, incrementally growing the “body of knowledge,” buy-in, and maturing USPTO’s multi-cloud governance model. RIVA follows Agile Scrum to integrate OpenCloudCX in order to respond quickly and accurately to migrate USPTO to a multi-cloud continuous delivery platform. Figure 1-RIVA’s OpenCloudCX Engagement Process for 30/60/90 day approach at USPTO . 2.1 Assessment (Sprint 0) The assessment phase is our first 2-week Sprint, Sprint 0, where we determine the lay of the land. We determine which applications are a good fit to migrate to OpenCloudCX and develop a Roadmap that provides USPTO an artifact that can be used to understand where we are and Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this document. 3 Copyright© RIVA Solutions, Inc. 2020. All