EXIN DevOps Professional study materials
EXIN DevOps Professional study resources

The Insurer's Release Train

EXIN DevOps Professional · Put your knowledge to work in context.

All case studies

The Insurer's Release Train

Northwind Claims runs a claims platform used by 2,400 adjusters. Nine teams contribute to one deployable monolith plus 40 services. Releases happen every six weeks through a release train; lead time averages 37 days, and 61% of that time is waiting for a shared test environment. Change failure rate is 18%, and mean time to restore is 5.5 hours. The CIO has approved a 'DevOps team' of eight engineers to build a CI/CD pipeline and introduce Kubernetes, with a goal of weekly releases in nine months. The operations manager supports the plan because automation will 'remove human error.' Team leads say they cannot reduce batch size because testing requires the full release train, and the test environment is booked by project. No one has mapped the value stream. The first pipeline pilot is scheduled for a single team that owns a low-risk service, while the monolith remains on the six-week cycle.

1. Using flow principles, what is the most likely primary constraint, and what should the first 30-day change be? Explain why the CI/CD and Kubernetes plan may not address it.

Read the worked answer

The decisive data point is that 61% of a 37-day lead time is waiting for a shared test environment: roughly 22.6 days of queue time. That is far larger than coding, build, or deploy time. Flow thinking says optimize the constraint, not the resources around it. A CI/CD pipeline for a low-risk service may speed that service's build, but it does not reduce the release-train queue for the monolith, which carries most change. The first 30-day change should make the test environment visible and limit work in it: publish the queue, cap the number of release trains or services in test at once, and reserve capacity for the monolith instead of project bookings. The goal is to shorten waiting and reduce batch size. If you automate the existing six-week batch, you may get faster handoffs into the same queue, increasing work in process and making lead time worse. Kubernetes adds cognitive load and a new platform to operate; it is not wrong, but it is not the constraint. Start with a temporary policy that one or two services can go to production independently if they pass an agreed test contract. That tests whether the constraint is environment capacity or architectural coupling.

2. The CIO wants weekly releases in nine months. How would you respond to the risk of measuring success by pipeline adoption and Kubernetes rollout?

Read the worked answer

Pipeline adoption and Kubernetes rollout are outputs, not outcomes. They can rise while lead time and change failure rate stay flat. The CIO should track a small set of flow and stability outcomes: lead time from commit to production, deployment frequency, change failure rate, and time to restore. The pilot should have a baseline and a target, for example a 25% reduction in median lead time for the pilot service without a rise in change failure rate. A second guardrail is that the monolith's batch size must fall or its test queue wait must fall; otherwise the organization is optimizing a side path. I would also ask what happens if the first pipeline shows no lead-time improvement: will the Kubernetes rollout pause? If not, the program is activity-driven. Weekly releases may be achievable, but only if the test-environment queue and release coupling are addressed. The nine-month goal should be a hypothesis with leading indicators, not a mandate that makes disconfirming data unwelcome.

3. Design a 30-day experiment with three flow metrics and a decision rule. What would make you stop or expand?

Read the worked answer

Use three metrics: median lead time from commit to production for the pilot service, work in process in the shared test environment, and change failure rate for the pilot service. Add deployment frequency as context, but do not make it the primary success measure. Baseline all four for two weeks before changing anything. During the 30 days, publish the test queue, cap concurrent release trains in test, and allow two low-risk services to deploy independently on an agreed test contract. Review the queue daily and record why items wait. The decision rule should be set in advance: expand only if median lead time falls at least 25% and change failure rate does not worsen by more than 2 percentage points. Stop and reassess if work in process in test does not fall or if wait time simply moves to another queue, such as security review or production approval. Also stop if the pilot teams report that they are bypassing the contract to keep the experiment alive. The point is to learn where the constraint actually is, not to prove the pipeline works.