cdCon 2022
as the organisers put it
Join Continuous Delivery leaders, industry icons, practitioners, and open source developers for a two-day experience as we improve the world’s capacity to deliver software with security and speed. cdCon is...
| title | author | length |
|---|---|---|
| Welcome & Opening Remarks | Fatih Degirmenci | 15m |
CDF lists 8 projects under its umbrella and just adds two new ones: cd-events — CD-Os common specification built on CloudEvents with contributors from Tekton… | ||
| Dependency Management: Where the Fork are We? | Olivier Vernin | 29m |
Dependencies are everywhere and automating them cuts technical debt and improves security but is hard because files and version schemes vary widely. Built an… | ||
| Lightning Talk: Thinking out of the CI/CD Toolbox: An Experiment with a Workflow En... | Nele Lea Uhlemann | 08m |
Experiment uses the Camunda workflow engine to orchestrate release work around an existing CI/CD pipeline instead of replacing it, connecting executable BPMN… | ||
| Lightning Talk:Technical Documentation is like a Jigsaw Puzzle | Ember Stevens | 06m |
Technical documentation uses the same steps as assembling a jigsaw: sort by content type (conceptual, reference, procedural) and by reader goals, then build an… | ||
| Increase Agility and Quality Using Trunk-Based Development in Continuou... | Hope Lynch, Logan Donley | 35m |
Claims that moving to trunk-based development cuts time to ship and raises quality by keeping main always deployable, with teams committing multiple times per… | ||
| Trusting Mission Critical Infrastructure: Building Reliable CD P... | Fernando Freire, Isaac Mosquera | 27m |
Argues that trust rests on competency empathy reliability and that platforms win by proving specific behaviors not features: adopt proven engines like… | ||
| Keynote: Cory Doctorow, Science Fiction Author, Activist, and Journalist | Cory Doctorow | 18m |
Argues that interoperability mandates like the EU Digital Markets Act and the proposed U.S. Access Act are necessary but brittle unless paired with legal and… | ||
| Keynote: Embracing Open Source to Beat the Great Reshuffle | Joe Sepi | 10m |
IBM integrates open source to keep employees engaged and reduce churn, claiming access to an excellent hiring pipeline and insulation from the “great… | ||
| Keynote: Moving from Awareness to Action: Creating Inclusive and Accessible Experi... | Reginé Gilbert | 22m |
Claims concrete fixes and failure counts: 82% of Americans use social media (2021), WebAIM finds 86.4% low‑contrast on homepages and ~26% of images with… | ||
| Keynote: LF Research: Developer-Centric Insights and Opportunities | Hilary Carter | 24m |
LF Research launches April 2021 and has published 13 projects revealing concrete findings: 45% prohibition of open‑source contributions in financial services… | ||
| Keynote: Why Monorepos | Jeff Cross | 19m |
Monorepos reduce duplication and speed integration by keeping related apps and libraries in one repo, using tools like nx, lerna or turborepo (and Bazel… | ||
| Keynote: Hedy: Creating a Gradual Programming Language | Dr. Felienne Hermans | 21m |
A gradual programming language that hides syntax until learners need it, Hedy exposes 18 incremental levels and ships built-in lessons, cheat sheets and… | ||
| Keynote: Hacking the OSS Supply Chain | Melissa McKay | 13m |
Developers rely on ~80% open source in typical apps and attackers exploit that: Equifax causes ~$1.4B cleanup and $1.38B consumer claims affecting 143M… | ||
| Keynote: Welcome Back | Sara Chipps, Jeremy Meiss | 05m |
Welcome remarks mix community organizing, policy and logistics rather than technical content: an explicit call to oppose racism and transphobia and affirm… | ||
| Canonical GitOps | David Flanagan | 23m |
Claims that a single deployment description should live next to each service and that applying the Law of Demeter to GitOps removes overlay coupling. Compares… | ||
| Shipwright - What Happened in our First Year as a CDF Project | Sascha Schwarze, Enrique Encalada | 29m |
Shipwright declares and runs container image builds on Kubernetes with pluggable strategies like BuildKit, kaniko, ko, Buildah and Buildpacks, and ships 15… | ||
| Leading DevOps Transformation with Gamification | Ravi Devineni | 28m |
Northwestern Mutual aggregates CI/CD tool data into dashboards and runs a CI/CD pipeline certification that awards bronze/silver/gold badges and shows a… | ||
| Lightning Talk: Understanding DevOps Through the Lenses of Ancient Philosophy | Christoffer Vig | 11m |
For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/
Lightning Talk: Understanding DevOps Through the Lenses of… | ||
| Lightning Talk: Continuous Delivery…except for Database Changes | Robert Reeves | 11m |
Continuous delivery often excludes database changes, leaving DBAs as gatekeepers while apps ship faster; organizations that adopt database change management… | ||
| Expanding Interoperability in the CD Ecosystem | Ishan Khare, Mauricio Salatino | 35m |
A working platform cluster wires Crossplane (provisions GKE clusters), Knative + Tekton integration (Knative Eventing broker routes CloudEvents to Tekton… | ||
| Merge Strategies at Scale: Developer Happiness Through Better Code-submission Workflows | Ankit Jain | 32m |
Argues that simple merge queue validation fixes some breakage but scales poorly — 100 PRs/day with sequential revalidation can require ~50 hours of CI, whereas… | ||
| Toolchains Are Only As Strong As Their Weakest Link: A Discussion On Interoperability Across CI/C... | Mauricio Salatino, Andrea Frittoli, Fatih Degirmenci, Justin Abrahms, Melissa McKay | 33m |
A CDF interoperability SIG explains how a common language avoids brittle point‑to‑point glue: the cd events spec defines stages/steps and a vocabulary so tools… | ||
| Opentelemetry and Your Tests | Manuel De La Peña | 31m |
Hook test pipelines into OpenTelemetry so CI test runs become searchable traces and metrics rather than buried XML files. The workflow parses JUnit XML to… | ||
| Jenkins 2022 and Beyond? | Oleg Nenashev | 29m |
Jenkins claims to remain a flexible automation framework with about 5,000 contributors and roughly 1,800 plugins, but it is controller‑heavy, not cloud‑native… | ||
| Continuous Integration and Continuous Delivery Pipelines for Beginners and Managers | Ann Marie Fred | 28m |
Pipeline layout lists concrete steps and expected inputs, outputs and side effects: a setup step provisions workspace and secrets, source clones code, build… | ||
| The State of Continuous Delivery: The Evolution of Software Delivery Performance | Kara de la Marck | 17m |
Surveying >70,000 developers from Q3 2020–Q1 2022, the report finds 23% not involved in DevOps and only 20% running full CI/CD, while about a third still… | ||
| Security as Code: A DevSecOps Approach | Joseph Katsioloudes | 22m |
Shows how to codify security checks using CodeQL integrated into CI/CD, demonstrating the VS Code extension, built‑in dataflow templates, and a live query that… | ||
| Continuous Delivery and InnerSource - Why you Should be Doing Both | Tom Sadler, Steph Egan | 16m |
BBC iPlayer & Sounds runs shared CI/CD pipelines and a deployment tracker that annotates releases and measures deployment frequency and lead time; a… | ||
| DX Design: Diversity Experience as an Accelerator | Ann Marie Fred, Marky Jackson, Hope Lynch, Zainab Daodu | 01h 00m |
Panelists argue that designing for diversity requires concrete changes: intentional outreach, sponsorship, and enforced codes of conduct. Examples include a… | ||
| Lightning Talk: Safe to Fail Continuous Delivery Culture | Sylvia Lobo | 06m |
Argues that a failed Jenkins deploy taught teams to prototype, run “demolition derby” experiments and treat failure as data rather than blame; describes… | ||
| The Battle of Policies: OPA’s Rego vs. JSON Schema | Shimon Tolts | 25m |
Compares OPA Rego and JSON Schema by validating real Kubernetes manifests (schema versions, labels, image tags, probes, CPU/memory limits) inside CI/CD and as… | ||
| Modern Organizational Architecture, Are Microservices a Model for Diversity? | Brian Dawson | 20m |
Idea: treat organizational units like microservices, creating micro-cultures — small cross-domain teams with clear APIs for communication and autonomy over… | ||
| Failure Is Not an Option It's a Fact | Ixchel Ruiz | 07m |
Data from an April 2011 HBR review and a study of 1400 projects analyzed show failure types split into preventable vs complexity vs intelligent failures and… | ||
| Lightning Talk: Automated Testing Done Right | Aditya Bansal | 06m |
Claims that catching defects in maintenance costs 100x more expensive than earlier fixes, and that a practical pipeline combines a unit/integration/end-to-end… | ||
| The State of Art in Tackling Flaky Tests | Kohsuke Kawaguchi | 28m |
Industry data shows one in seven tests exhibit flakiness while only ~1.5% of runs fail frequently, and GitHub finds ~24% of tests fail at least once but <1%… | ||
| Journey to Automated Releases | Kranthi Challa, Deepa Padmanabhan | 25m |
Netflix UI team describes a concrete pipeline: split deployment builds per-app clusters and routes via keymaster so apps deploy independently, plus mandatory… | ||
| How to Grow and Mentor an Open Source Community & Achieve Collaboration with Over 170... | Trista Pan | 25m |
Project grows from zero to 16,000 GitHub stars with ~5,000 forks, 318 contributors and 47 releases by prioritizing a clear value proposition, GitHub workflows… | ||
| DevSecOps with Shipwright and Tekton | Adam Kaplan, Vincent Demeester | 20m |
A Go hello‑world is built locally and in CI using Shipwright and Tekton: ko assembles two images (artifact plus SBOMs), Shipwright buildruns push to an… | ||
| How we Build CI/CD Observability with OpenTelemetry | Michael Friedrich | 34m |
GitLab adds span instrumentation to the Runner (Go) and plans Ruby server traces, sending data to an OpenTelemetry collector and visualizing with Jaeger UI. A… | ||
| Abusing CI/CD - Top Ways to Reach Production | Omer Gil | 29m |
CI/CD pipelines are a massive attack surface: 58 million Jenkins executions/month is one cited metric, and real incidents include SolarWinds, Codecov and… | ||
| 25 Years of (mistakes) Learning in CI/CD | Laurent Tardif | 25m |
25 years of CI/CD evolution from ClearCase and monthly third Wednesday builds that take a week to merge, to Java’s “compile once” portability, to Jenkins +… | ||
| What a Life! - Understanding the Lifecycle of a Tekton Pipeline | Vibhav Bobade, Billy Lynch | 24m |
Tekton controller resolves and pins image to digest for reproducibility and forensics, then creates a TaskRun per task and a Pod per TaskRun, with each step… | ||
| Continuous Software Delivery using Jenkins, Spinnaker and Terraform... | Irshad A Buchh, Paul Roberts | 32m |
Demo builds a containerized Spring PetClinic, provisions Jenkins on EC2 and EKS clusters with Terraform Cloud, and shows end-to-end automation working live… | ||
| Cloud Security in Continuous Delivery | Chen Goldberg | 17m |
Cloud migration leaves encryption, region placement and cost policies as concrete failure points — an AWS EBS volume left unencrypted exposes data and linked… | ||
| Keynote Session: Community Awards & Closing Remarks | Fatih Degirmenci | 24m |
Ceremony hands out 15 awards with a glass Möbius strip trophy to underline the continuous mindset; project awards are selected by each project while CDF awards… | ||
| Keynote: The Future of Continuous Delivery | Sarah Novotny, Hong Wang, Isaac Mosquera, Tim Jacomb, Fatih Degirmenci | 20m |
Companies say Kubernetes becomes the de facto OS for deployment and many teams adopt Argo workflows or GitOps pull models to handle edge and offline devices… | ||
| Keynote: You're Good at CI, You're Good at CD, But Where's the Work Taking You? | Michael Stahnke | 06m |
Claim: modern delivery treats change as the unit of work, not just commits. CI/CD pipelines and rapid releases plus tactics like 1% canary rollouts and… | ||
| Keynote: How to Win Friends and Reduce Tech Debt with Developer Experience | Amara Graham | 19m |
Camunda runs a developer experience team of three under devrel and the CTO focusing on docs, contributor flows, community hub/forums and product-adjacent tools… | ||
| Keynote: The Four Keys: Measuring Software Delivery | Dave Stanke, Roger Martinez | 20m |
Research shows software delivery performance is predictable using four metrics; the open source Four Keys project automatically ingests webhooks from… | ||
| Keynote: The Cost of Agility at Scale: It's All Fun and Games Until the Bill Comes | Tim Banks | 14m |
Cloud-native speed creates big bills unless teams measure and design for cost: a real case shows 107 CPU years in a month from unchecked Lambda invocations… | ||
| Keynote: Continuous Delivery 2.0 – Intelligent CD for the Complex Enterprise | Gopal Dommety | 07m |
Identifies three operational dilemmas — dilemma of choice, dilemma of control, and dilemma of intelligence — and proposes an implementation stack: an OpenCD… | ||
| Keynote: Software Delivery and Developer Experience in the Age of Platform E... | KellyAnn Fitzpatrick | 20m |
Argues that building internal platforms (examples: Netlify, Gatsby, Vercel, Render) is the practical response to the developer experience gap, claiming… | ||
| Keynote: Intelligent Deployments: Focus on Building Great Co... | Stephen Atwell, Christopher Baldwin | 05m |
Company runs 70 people with 20 engineers and one devops and moves from monoliths to Kubernetes across APAC, EMEA and NA; adoption barrier is scarce resources… | ||
| Keynote: The Great Personal Re-Invention: How the Great Resignation Blended Profe... | Grace Francisco | 20m |
Mass resignation statistics headline a shift: 47 million quits in 2021 and 5 million new businesses (a 55% jump vs 2019). Career specifics show moves from tech… | ||
| Demo Theater: Practical Path to Infrastructure as Code at Scale | Sean O'Dell | 12m |
Spacelift presents a collaborative CI/CD platform for IaC that runs Terraform, Pulumi, CloudFormation and Kubernetes, integrates with Git providers and… | ||
| Building DevOps Metrics for your Choice of CD Tools Through CD... | Andrea Frittoli, Erik Sternerson | 34m |
Proposal: a CDEvents specification plus language SDKs that standardizes CI CD messages like change merged artifact published service deployed and incident… | ||
| Repurposed Purpose: Using git's DAG for Supply Chain Artifact Resolution | Ed Warnicke | 35m |
Proposes a way to get a complete, reproducible tree for any binary, shared object, container or class file by using GitBOM built from git object ids, letting… | ||
| DevOps Intelligence: Scaling Governance, Compliance, and Security across an Enterpri... | Jamie Plower | 33m |
Fidelity standardizes CI/CD with a reusable Fidelity Pipeline Library and an event-driven evidence store that extracts metadata (git SHAs, build IDs, artifact… | ||
| Reducing Deployment Risks with Progressive Automated Canary and Spinnaker in a Reg... | Carlos Martini | 32m |
Shows a Spinnaker pipeline that deploys fresh baseline and canary Kubernetes manifests, uses Istio to split 10% traffic to canary and baseline while prod gets… | ||
| Making your CI/CD Pipelines Speaking in Tongues with Open... | Ivan Fernandez Calvo, Victor E. Martínez | 30m |
Shows a working pipeline that emits traces, metrics and logs to an OpenTelemetry collector and an Elastic backend using a Jenkins OpenTelemetry plugin plus a… | ||
| Microservice Supply Chain and the Ortelius Application SBOMs | Tracy Ragan | 33m |
Ortelius catalogs microservices and their versions in a relational registry, consumes each component SBOM, CVEs, Swagger and deployment metadata from CI/CD and… | ||
| Deploy, Release, CI/CD, Oh My! DevOps for the Rest of Us | Jeremy Meiss | 34m |
Slides and examples map buzzwords to concrete practices: AIOps aggregates logs and ML to detect anomalies, GitOps (Weaveworks) uses Git as single source of… | ||
| Automating Industry Regulation (SoX, SoC 2) Enforcement... | Balaji Sivasubramanian, Gopinath Rebala | 33m |
Shows a concrete path to embed compliance into delivery: collect CI/CD metadata into a central data lake, store policies and pipeline specs in Git, and enforce… | ||
| Trust but Verify | Olivier Vernin | 20m |
Kubernetes makes reproducible CI easy but still lets humans expose clusters or run corrupted images; the concrete answer shown is a policy engine that ships… | ||
| Lessons Learned Evolving K8s Extensions: The Future Of Tekton Pipelines | Lee Bernick | 22m |
Tekton prototypes a co-located pipeline run that executes an entire Pipeline inside one Pod using an emptyDir volume instead of PVCs, turning tasks into… | ||
| What is the Unit of Work in Modern Delivery? | Michael Stahnke | 23m |
Claim: the unit of work shifts from a commit to the stream of external and runtime changes that actually affect users. Concrete failures include an ELB… | ||
| Creating Inclusive Environments Workshop | Gin Pham | 34m |
Organization runs a statewide Trans-Safe program that combines on-the-ground advocacy at the capitol, business trainings, mutual-aid referral networks and… | ||
| Keynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys... | Brian Behlendorf | 22m |
OpenSSF lays out concrete programs: a 150 million dollar mobilization plan over two years with ten themes, $30M already pledged, and specific investments like… | ||
| Continuous Delivery Best Practices | Tara Hernandez, Terry Cox | 24m |
Community-maintained best practices site lives on GitHub with a Learn section, contribution guidelines, issue tracker and examples to clone and PR; it… | ||
| Setup a Private, Secure, Cloud-native, Ultra-fast Repository in 60 sec w/Cloudsmith | Adil Leghari | 15m |
Demo claims a private, secure, cloud-native, ultra-fast repository created in 60 seconds and the demo actually logs in with Google SSO, creates an organization… | ||
| Keynote: Securing JavaScript | Myles Borins | 20m |
npm faces account takeovers of high-impact modules like ua-parser-js, rc and co (downloads 7.5–13M weekly) that injected malware; initial response times drop… | ||
| How Shifting Left is Helping CapitalOne in its CICD Pro... | Gokul Prabagaren, Nagesh Kumar Vinnakota | 23m |
Capital One exits on-prem data centers, runs nearly all workloads in cloud and reports 85% automated deployments with 67% of deliveries within one hour to a… | ||
| nothing matches | ||