cdCon + GitOpsCon 2023
2023-05-08..2023-05-09
Vancouver, Canada
| title | author | length |
|---|---|---|
| Welcome & Opening Remarks | Fatih Degirmenci, Taylor James Dolezal | 10m |
Conference opens with logistics: sponsor booths and a boot crawl 5:40–7:30pm, reminders about the code of conduct, and networking opportunities. Organizers… | ||
| Keynote Session: State of the Union: Continuous Delivery Foundation | Fatih Degirmenci | 18m |
CDF announces 9 projects under its umbrella and welcomes new members NGINX produana Salesforce and test group while highlighting 2 graduated projects (Tekton… | ||
| Keynote Session: State of the Union: OpenGitOps | Scott Rigby, Christian Hernandez | 16m |
State update on GitOps that lists the actual four GitOps principles (declarative desired state, versioned immutable storage, pull model, continuous agent… | ||
| Keynote Session: CD and AI: Freeing Us Up to Do What We Do Best | Christie Warwick | 17m |
Keynote Session: CD and AI: Freeing Us Up to Do What We Do Best - Christie Warwick, Software Engineer, Google
Speakers: Christie Warwick
The future of… | ||
| Keynote Session: The Difference Between Screwing Around (DevOps) and Science (GitOps) Is Writing It Down | Luke Philips, Eve Ben Ezra | 15m |
Keynote Session: The Difference Between Screwing Around (DevOps) and Science (GitOps) Is Writing It Down - Luke Philips, Staff Software Engineer & Eve Ben… | ||
| Keynote Session:The Graduated Projects Panel | Dan Garfield, Mark Waite, Andrea Frittoli, Priyanka Ravi, Lori Lorusso | 35m |
Keynote Session:The Graduated Projects Panel - Dan Garfield, Codefresh; Priyanka Ravi, Weaveworks; Mark Waite, CloudBees; Andrea Frittoli, IBM & Moderated by… | ||
| Evaluating the Energy Footprint of GitOps Architectures: A Benchmark Analysis | Al-Hussein Hameed Jasim, Niki Manoledaki | 31m |
Benchmarked GitOps with Kepler (eBPF Prometheus exporter), Prometheus, Grafana and Minikube, measuring pod-level joules over an hour with… | ||
| Navigating Disaster Recovery in Kubernetes and Crossplane: Strategies and Tools for Managing Stateful Workloads with GitOps for Platform Teams | Carlos Santana | 33m |
Claim: GitOps alone doesn't solve disaster recovery for stateful cloud resources. Concrete tools and patterns: Velero backups to cross-region S3 for CRDs and… | ||
| CDEvents Project Summit | Andrea Frittoli | 01h 04m |
A common JSON event spec for continuous delivery that started in 2020 and lives in the CDF, with a Go SDK, CloudEvents binding, JSON schemas and examples… | ||
| People over Process over GitOps | Leigh Capili | 17m |
Argues that organizational habits beat tooling: Kubernetes and GitOps help but don’t fix people or process, and ExternalDNS, Flux and scripted “robots” only… | ||
| How GitOps Should I Be? Lessons from a Kinda-GitOps Environment | Michael Crenshaw | 13m |
Intuit runs a pragmatic hybrid GitOps setup: 45 Argo CD instances serving ~20,000 apps across ~200 clusters, with region failover that bypasses GitHub because… | ||
| Terraforming ArgoCD: The GitOps Bridge | Brian Fox | 17m |
Uses the Terraform provider for ArgoCD to bridge existing Terraform pipelines and Argo CD so clusters, projects, tokens and applications get provisioned in the… | ||
| Imperative to Declarative: Building a GitOps Driven Unified Control Plane at Autodesk | Cole Duclos, Greg Haynes | 16m |
Autodesk replaces a tangled Jenkins + Spinnaker + homegrown tools matrix with a unified control plane that uses Kubernetes API + CRDs and declarative GitOps… | ||
| Platform Engineering Done Right: Safe, Secure, & Scalable Multi-Tenant GitOps | Juozas Gaigalas | 15m |
Demo shows a practical GitOps control plane built on kind and vcluster where clusterctl exports manifests and Flux reconciles them so Flux manages clusters… | ||
| Multitenancy - Build Vs. “Buy”: Zcaler’s Journey | Neeta Rathi, Josh Carlisle | 35m |
Zscaler builds a GitOps-based multitenancy platform that replaces fragile GitHub Actions/SDK deployments with Kubernetes + Flux, Helm, Kustomize, Terraform… | ||
| Managing Software Upgrades with a kpt, GitLab and Flux Workflow in a Telecom Context | Peter Wörndle | 22m |
Proof-of-concept uses kpt + GitLab CI to run kpt package update and create merge requests that show a real 3-way diff for Flux-managed Helm deployments; a live… | ||
| Fidelity’s Software Delivery Platform – Frictionless Approach to Achieve.. | Jamie Plower, Evan Elms | 34m |
Fidelity builds a centralized Software Delivery Platform that captures end-to-end provenance (SCM commit → pipeline events → artifacts) into immutable ledgers… | ||
| Nuances of Influencing Developer Experience and Productivity Through Tech Products | Neetu Jain, Janani Rajendiran, Samantha Carvalho, Tracy Ragan | 36m |
Panelists consolidate 80+ years of experience to report concrete changes: adoption of DORA metrics and OKRs, building telemetry built into features to measure… | ||
| Implementing CI/CD at NGINX -- Lessons Learned Along the Way | Alessandro Garcia | 31m |
Two NGINX OSS projects move from a 30‑hour local build script to GitHub Actions pipelines, publishing Docker images weekly to Docker Hub, GitHub Container… | ||
| Trusted Open Source Artifacts on the Blockchain: A Hands-on Introduction to Pyrsia | Adam Gardner | 17m |
A decentralized package network called Pyrsia rebuilds artifacts from source on independent nodes, requires consensus across build nodes, and writes a… | ||
| Smart Control Plane for CICD Pipelines | Shripad Nadgowda, Ashish Batwara | 31m |
A control plane that auto-composes CI/CD pipelines on demand replaces thousands of static templates with zero pipelines until needed, using a marketplace tool… | ||
| Scaling Better Software Delivery: A Framework for Dev Enablement Through DevRel and Outreach | Tiffany Jachja | 26m |
Framework shows how Autodesk enables over 2,000 engineers across 200 teams for 30+ platform services by pairing targeted outreach, on‑the‑spot incident fixes… | ||
| Secure and Reliable Container Image Creation with Shipwright in the Supply Chain | Matthias Diester, Karan Kumar | 26m |
75% of container images in production show high or critical vulnerabilities and 85% of those have available fixes; Shipwright breaks builds so BuildKit or… | ||
| How the @#$! Do I Deploy That Many Apps to That Many Clusters? How Adobe Scaled on GitOps | Dan Garfield, Mike Tougeron | 36m |
Adobe models a system that bootstraps and manages ~285 clusters (28 regions, ~20,000 nodes, ~2,000 GPUs) and ~75–100 system apps per cluster — about 200,000… | ||
| GitOps Sustainability with Flux and arm64 | Tamao Nakahara, Liz Fong Jones | 29m |
Honeycomb migrates many services from x86 to arm64, reporting 30–40% price-performance gains and running 20–30% fewer instances while keeping latency steady… | ||
| Multi-Cluster GitOps Application Delivery Using ArgoCD and OCM Hub-Spoke Pull Model Pattern | Maggie Chen, Xiangjing Li | 34m |
Integration of Argo CD with OCM implements a pull hub-spoke model by creating a propagation controller that wraps Argo CD Application templates into… | ||
| Deliver a Multicloud Application with Flux and Carvel | Peter Tran | 20m |
A small Go app is containerized with kbuild and wrapped into an image package bundle (OCI) then versioned as a Carvel package; templated fields use ytt… | ||
| Managing GitOps as a Platform Service | Gerald Nunn, Andrew Block | 28m |
Platform teams run GitOps as a service using Argo CD or Flux and tools like Argo CD Autopilot and OCM, choosing among centralized vs distributed topologies and… | ||
| How to Preview and Diff Your Argo CD Deployments | Kostis Kapelonis | 29m |
Problem: Git diffs show templates not final Kubernetes manifests when teams use Helm or Kustomize, so approvals can be wrong. The talk evaluates UI diffs… | ||
| High-Security, Zero-Connectivity & Air-Gapped Clouds: Delivering Complex Software with the Open Component Model & Flux | Dan Small, Mohamed Ahmed | 27m |
Shows a concrete pipeline: components described with Open Component Model (OCM) into a Software Bill of Delivery (SBoD), signed and verified, transferred… | ||
| Intelligent Deployments at Scale: Effortless Continuous Deploy... | Florentin Simion, Anca Suliman | 35m |
Two years of work produce a fully automated Continuous Deployment pipeline for a globally distributed, data‑intensive Adobe service that processes billions of… | ||
| Learn New Ways of Tracking Security and DevOps Intelligence with Ortelius | Tracy Ragan | 35m |
742% growth in malicious supply chain attacks and 65–80% of companies needing more visibility drive Ortelius to do specific work: it ingests SBOMs from CI… | ||
| Testing 100's of OS Images with Jenkins: A Journey from Pull Request to Production Release | Vipul Gupta | 21m |
Jenkins builds 90 balenaOS image types per pull request (about an hour) and hands artifacts to Leviathan, which schedules flashing and runs tests on Autokit… | ||
| Operating Tekton with Secure Defaults | Christie Warwick, Wendy Dembowski | 16m |
Five concrete secure defaults: run Tekton Chains to generate provenance (requires type hints), enforce provenance-at-deploy with Kyverno or the Sigstore policy… | ||
| Continuous Delivery Delivers Value and So Do You: How to Get Budget, Build Your Case, and Be the Hero | Robert Reeves | 32m |
A concrete case shows a CD pilot that cuts DB change SLA from 72 hours to 15 minutes, moves DBAs out of tier‑one support with self-service DB changes, and… | ||
| The Continuous Delivery Paradox - Balancing Business Value with Speed | Carl Coryell-Martin, Garima Bajpai, Gautham Pallapa, Rick Clark | 31m |
Panelists argue that deployment velocity without business impact is misleading: 1,000 deployments a day can be vanity, and Log4J exposes non‑declarative… | ||
| Continuous Delivery Lessons Learned Through Hypergrowth | Andrew Fong | 31m |
Built deployment tooling that runs a one-minute sync dbops cron across 10k+ machines using SSH, HDPool and monit, supporting daily deploys with teams of 10–40… | ||
| Enter the Machines: Reducing Friction in DevOps Using AI | Eran Bibi | 31m |
Generates real artifacts on demand: a CLI called aiac CLI produces Terraform (example: RDS manifest) or GitHub Action YAML in 5–20 seconds and accepts… | ||
| Manage Kubernetes Add-Ons for Multiple Clusters Using Cluster Run-Time State | Gianluca Mardente, Gaurav Khatri | 14m |
Sveltos runs in a management cluster and uses Cluster API or registered clusters to apply add‑ons to matched managed clusters by label selector. It introduces… | ||
| Welcome Back & Remarks | Christian Hernandez, Lori Lorusso | 12m |
Day two opens with housekeeping: thank-you to sponsors: Armory, OpsMX, Harness, Puppet and reminder of the conference code of conduct. The CDF announces… | ||
| Keynote Session: Developer Empathy - The Overlooked Tool to Elevate Open Source Communities | Kunal Kushwaha | 22m |
A keynote argues that developer empathy measurably improves products and teams: a designer-made site that "looked great" but was unusable caused real product… | ||
| Keynote Session: The Survival Guide To Being A Junior Engineer | Fatima Taj | 19m |
A huge refactor involving multiple teams hits a crisis when three of five engineers leave and the project is 60% complete when departures force a single… | ||
| Keynote Session: Compliance at the Point of Change: Security and Dev.. | Nic Cheneweth, Bryan Oliver | 22m |
Claim: shifting compliance enforcement to the deployment boundary reduces developer friction while preserving auditability. The pattern separates doing vs… | ||
| Keynote Session: GitOps as an Evolution of Kubernetes | Brendan Burns | 26m |
Kubernetes starts as a deployment fix that moves teams from brittle scripting (deploys succeed ~85% then ~95%) to declarative configs; GitOps installs like… | ||
| Control Plane, Service, or Both? – Argo CD Multi-Cluster Architectures | Nicholas Morey | 29m |
Compares two Argo CD deployment patterns and their trade-offs: a management cluster gives a single control plane but creates a single point of failure… | ||
| Application Configuration Management at the Edge: Taming Thousands of Deployment Targets | Cora Iberkleid, Maria Gabriella Brodi | 34m |
Proposes grouping edge sites into reusable profiles and producing per-app-per-profile OCI bundles so the registry holds only the installers each site needs… | ||
| Flux at the Point of Change - Using the K8s Golang SDK and the Flux Api to Automatically Fix and Deploy CVEs in Your Base Images | Bryan Oliver | 21m |
Claims an end-to-end system that automatically remediates CVEs by updating Dockerfiles and enforcing versions at cluster admission using Kubernetes Client-Go… | ||
| Extending Observability to the Application Lifecycle with ArgoCD, Flux and Keptn | Ana Medina, Adam Gardner | 30m |
Keptn lifecycle toolkit installs as a Helm chart and attaches to Argo/Flux by namespace annotations, caching metrics from Prometheus, Dynatrace and DataDog… | ||
| Automate with Terraform + Flux + EKS: Level Up Your Deployments | Priyanka Ravi | 27m |
Demo shows Flux driving Terraform Controller to provision an EKS cluster from a Kind bootstrap, using Terraform Cloud as backend and writing module outputs to… | ||
| Navigating the Shift to GitOps: Overcoming Challenges in Migrating from Jenkins.. | Gopinath Rebala, Balaji Sivasubramanian | 18m |
Three practical migration patterns with tradeoffs and a surprising adoption stat: about 50% of Argo CD users enable progressive rollouts. Option one adds Argo… | ||
| GitOps for Machine Learning Pipelines | Rishit Dagli, Shivay Lamba | 16m |
Shows that GitOps applies beyond CI/CD by wiring GitHub, Kubernetes and Kubeflow to run, version and promote ML work: experiments are declared as PRs, 100… | ||
| GitLab + Flux! | Priyanka Ravi, Viktor Nagy | 22m |
GitLab integrates Flux as its recommended GitOps engine and wires Flux into the GitLab Agent for Kubernetes so clusters keep a bi-directional connection while… | ||
| Software Delivery and the Rube Goldberg Machine: What Is the Problem We Are Trying to Solve? | Melissa McKay | 31m |
Compares delivery pipelines to Rube Goldberg machines and names concrete pain points: dozens of brittle tools, fragile glue code, dependency surprises like… | ||
| Strategies for Testing Your Pipeline | Nader Ziada | 21m |
Advocates replacing fragile Bash steps with a language that has unit tests, using Go to compile and package tested tools into task images, and building a small… | ||
| Ortelius Project Summit | Steve Taylor, Tracy Ragan, Andrew Block | 34m |
Ortelius collects supply‑chain evidence into a catalog and moves its metadata to a blockchain‑backed, immutable SBOM ledger with IPFS/Filecoin long‑term… | ||
| Adopting CDEvents and Embracing Interoperability | Andrea Frittoli | 32m |
CD Events now ships releases 0.1 through 0.3 with concrete integrations and roadmapped features rather than vague promises. It already has a Jenkins plugin… | ||
| Behind-the-Scenes of Puppet’s 2023 State of DevOps Report: Platform Engineering Edition | David Sandilands | 24m |
Puppet’s 2023 State of DevOps: Platform Engineering Edition analyzes 48,430 respondents (surveyed 14 Sep–25 Oct 2022) and shows concrete shifts: 65% vs 40% of… | ||
| CI/CD for Data - Building Dev/Test Data Environments with Open Source Stacks | Vinodhini Duraisamy | 20m |
Demonstrates a CI/CD approach that versions an entire data lake with lakeFS (git-like API over S3/MinIO/Azure/GCS), creates isolated branches in milliseconds… | ||
| CDF Awards | 28m | |
Ceremony hands out 18 awards across CDF and graduated projects, with project MVPs for CD Events, Jenkins X, Ortelius, Persia, Screwdriver CD, Shipwright and… | ||
| End User Town Hall | Tiffany Jachja, Brett Smith, Peter Wörndle, Gerard McMahon | 40m |
Enterprise teams describe an event-driven pipeline that stitches Kubernetes, OpenStack, VMware and basement mainframes together via SDKs and a JSON-to-event… | ||
| GitOps Approaches and Trade-offs | Stephen Atwell | 35m |
Covers concrete GitOps decisions: choose trunk-based development over branch-per-environment, keep an environment folder per repo, use Helm or Kustomize for… | ||
| Dev-Native GitOps for any Runtime | Tom Bereknyei | 36m |
Position software packaging as first-class: use Nix to make developer environments reproducible, produce immutable build artifacts, and then use Flux plus… | ||
| A Quantitative Study on Argo Scalability | Andrew Anderson, Jun Duan | 15m |
Measured Argo CD scalability shows 10k applications in <40 minutes when using Argo CD with a wrapper plugin for per-app customization, Cluster Loader 2 to… | ||
| Exotic Runtime Targets: Ruby and Wasm on Kubernetes and GitOps Delivery Pipelines | Kingdon Patrick Barrett | 15m |
Builds a Ruby Kubernetes operator that fetches an OCI package downloads page, writes HTML to a file, calls a Rust-compiled Wasm HTML parser via WASI/Wagi to… | ||
| Managing GitOps Deployments in Multi-cluster Production Environments | Roberto Carratala Sanchez | 26m |
Demo shows Argo CD deploying a multi-service app across four managed clusters (cloud and on‑prem) using Argo CD ApplicationSet and a monorepo. Clusters… | ||
| Identity-based Source Integrity with Gitsign | Billy Lynch | 29m |
Explains how Gitsign applies Sigstore’s keyless model to Git commits using OIDC and ephemeral keys, issuing 10-minute certificates via Fulcio and recording… | ||
| Kubernetes Quick Wins and Migration Best Practices: RingCentral Example | Ivan Anisimov | 31m |
RingCentral describes a multi-year Kubernetes migration that yields concrete practices: greenfield analytics launched in four months, five‑nines production SLA… | ||
| Continuous Delivery on Arm: A Practical Approach | Pranay Bakre | 31m |
Shows a hands‑on path to run CI/CD natively on Arm using AWS Graviton (m6g/m7g), Azure Ampere and GCP t2a, with concrete claims: 30–40% performance gain on… | ||
| Meet the Continuous Delivery Foundation Technical Oversight Committee | Andrea Frittoli, Melissa McKay | 29m |
Explains how the Technical Oversight Committee runs project lifecycles: reviewing applications, enforcing project lifecycle requirements (public governance… | ||
| Security Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time | Dwayne McDaniel | 28m |
OWASP documents 242 projects (about 155 usable) with 18 flagships, 36 labs and 114 incubators, and maps many tools to the SDLC so teams can act instead of… | ||
| Save Your Pipelines (and Clusters!) with Tekton Results | Adam Kaplan, Dibyo Mukherjee | 30m |
Tekton Results archives PipelineRun and TaskRun JSON and logs off-cluster so etcd doesn’t fill its 8 GB limit and clusters don’t die, storing records in a… | ||
| Intentional and Unintentional Compromises in Test Automation | Mark Waite | 33m |
Jenkins git plug-in lives on 300,000 installations yet spends 15 months with no tests initially, revealing a claim that some projects ship without tests… | ||
| The Intersection of CD Gates and GitOps: A Match Made in Deployment Heaven | Carlos Santana, Christina Andonov | 30m |
Claims that GitOps equals automatic pushes are false: GitOps supports staged pipelines with GitHub Actions building and versioning images (demo bumped… | ||
| nothing matches | ||