FOSS Enterprise AAA Management (fosseam)

Upfront

A steht für

• Architecture (meistens)
• Asset (öfters)
• Application (hin und wieder), eher Application Portfolio Mangement
• API (selten)
• ARM (nie ;-)

Sinn & Zweck von EAM

​​​​1. Transparenz herstellen
​​​​2. Digitale Souveränität skalieren insb. durch FOSS
​​​​3. Kosten- & Ressourcen sparen: re:duce, re:use, re:cycle
​​​​4. Informationen für alle Bereiche des IT-Managements bereitstellen
​​​​5. Grundlagen für 
​​​​   - die Entwicklung der IT-Strategie und 
​​​​   - das Business-IT-Alignment schaffen
​​​​6. Systemlandschaft(en) konsolidieren
​​​​7. Planungsinstrumente bereitstellen
​​​​8. Best Practices für die Architektur sammeln 
​​​​9. Einhaltung von Compliance-Anforderungen vereinfachen

Erster grober Gedankensturm

german:

​​​​FOSS-EAM ...
​​​​... liefert API Management?
​​​​... ist IT-Portfolio Management?
​​​​... ist Master-Data Management?
​​​​... integriert NoLowCode, BPMN?
​​​​... bietet Dependency Management?
​​​​... ist im Kern auch Asset-Management?
​​​​... braucht Enteprise Data-Catalogues?
​​​​... bietet Application Developer Portale?
​​​​... benutzt EA-Design/Modellierungs Tools?
​​​​... basiert auf sBOM's? (spdx, nist, owasp)
​​​​... integriert InfoSec, Release-Flow, DevOps?
​​​​... berücksichtigt Standards, like TOGAF, ITIL, COBIT, CMMI...? 
​​​​... integriert verschiedene Teildisziplinen?

english:

​​​​FOSS EAM ...
​​​​ ... provides API management?
​​​​ ... is IT portfolio management?
​​​​ ... is master data management?
​​​​ ... integrates NoLowCode, BPMN?
​​​​ ... offers dependency management?
​​​​ ... is also asset management?
​​​​ ... does Enterprise need data catalogs?
​​​​ ... offers application developer portals?
​​​​ ... based on sBOMs? (spdx,nist,owasp)
​​​​ ... uses EA design/modeling tools?
​​​​ ... integrates InfoSec, release flow, DevOps?
​​​​ ... considers standards like TOGAF, ITIL, COBIT, CMMI...?
​​​​ ... integrates different sub-disciplines?

Standards

​​​​- Corporate Governance: COBIT, COSO, ISO/IEC 38500:2008
​​​​- IT Service Management: ISO 20000, ITIL
​​​​- InfoSec: ISO/IEC 2700x und IT-Grundschutz-Kataloge
​​​​- Projectmanagement: SAFe, PMBOK Guide, IPMA ICB und PRINCE2
​​​​- Architecture: TOGAF, Archimate, Zachmann, SysML, C4
​​​​- Systemen Development: TickIT und CMMI

EA Reference-Theories

• TOGAF
  • TOGAF's Enterprise Continuum From Common to Specific:
    
  • TOGAF aus Sicht von GERAM
  • TOGAF in Wikipedia en de
• Zachman (Meta-Theory):
  • Zachman mapped to OMG's MDA:
    
  • Zachman vs. TOGAF: BMC-Article
  • Zachman in Wikipedia de en
• Domain Driven Design & Co

FOSS-Tools (mostly)

Modelling (Togaf, Archimate, …)

• Archi HP, Upstream
• Modellio
• Visual Paradigm Online, with Freemium

Asset-Management

• Backstage.io, Upstream, Live-Demo, Plugins
• roadie.io, Upstream - Backstage SaaS
• GLPI, Upstream, Lab-Demo, Plugins, Forum
• Snipe-IT, Upstream, Live-Demo

CMDB

​​​​CMDBuild
​​​​i-doit
​​​​iTop
​​​​Ralph
​​​​Zenos Core (Zenoss Community Edition)
​​​​OneCMDB
​​​​DATAGERRY
​​​​BlueKing CMDB 

Data Management

• CKAN
• Dataverse
• Pimcore
• Keen
• Unidata
• Semarchy xDM
• Metabase

IT-Portfolio Management (NON-FOSS)

• ABACUS by Avolution
• ADOIT, BOC-Group, Wien
• alfabet, Software AG
• LeanIX, Bonn siehe: Slides1,Slides2
• MapIT - Freeware

Application Marketplaces

• YunoHost - Application Catalog
• Cloudron - App Store
• Bitnami - Application Catalog
• Heroku - Add-Ons
• Snapcraft - The app store for Linux
• Flathub - Apps for Linux
• F-Droid - FOSS applications for Android

Package Manager

• List of 32 Package Manager on libraries.io
• deb
• rpm
• Homebrew
• scoop
• chocolatey

PaaS-Solutions

• YunoHost, Upstream
• OpenShift/OKD, Upstream
• Portainer, Upstream
• VirtEngine, Upstream
• Cloudify, Upstream

API Management

• API Umbrella (NGINX, Ruby)
• Fusio (Apache httpd, PHP)
• Gravitee (Java)
• Kong (NGINX, Lua)
• KrakenD (Go, Martian)
• Tyk (Go)
• Wicked (NGINX, JavaScript, Lua)
• WSO2 (Java, OSGi)
• traefik (Go) -> wird bei FIT-Connect genutzt

Dependency-Management

• REUSE-Spezifikation: https://reuse.software/
• OSS Review Toolkit, ORT
• Eclipse SW 360, inkl. Fossology, 15 Min. Fossdem-Talk
  • https://www.fossology.org/
• DependencyTracker
• RenovateBot
• https://scancode-toolkit.readthedocs.io/
• https://github.com/aquasecurity/trivy und https://github.com/hadolint/hadolint für Docker-Images

.
.
.

More …

Sammlungen / Anregungen aus dem Matrix-Chat

• ADOIT Screencast
• Cloudnative Landscape
• Awesome eGoverment
• Awesome Tech-Radars/Maps
• Wikimatrix als Feature Compare Lösung

Weitere Übersichten:

• https://internaldeveloperplatform.org/
• https://linuxpip.org/best-open-source-cmdb-software/
• Gartner, 2021: Critical Capabilities for Enterprise Architecture Tools via Ardoq
• https://socialism.tools/cloudron-yunohost-self-host-app-showdown/
• https://internaldeveloperplatform.org/frameworks/
• https://www.computerwoche.de/a/18-ea-tools-im-vergleich,3066120
• https://www.predic8.de/open-source-api-management-kong-tyk-fusio-umbrella-wso2.htm
• https://www.inform-it.org/open-source-enterprise-architecture-tools/
• https://www.hitechnectar.com/blogs/open-source-master-data-management-tools/

Barcamp Idee

• Barcamp: https://hackmd.io/rgYMbHW_QaOouOwmPp-jNw

More Ideas

• Newsletter, Blogpost triggerd by new Releases
• Compare- & Voting-Stuff like stackshare or wikimatrix
• awesome list
• fosseam landscape