Inception the container version
summary
Built a Kubernetes deployment flow to replace EC2 hosting for a SaaS that runs for ~800 companies and ~7,000 developers with ~5–6k deploys/day. Solves three hard problems: secrets-in-build and image squashing (released habitus image squasher), policy validation of Kubernetes YAML to stop risky changes (open source copper policy validator), and per-customer/environment config/versioning via a new formations (namespaced environments) model. Assembles CI, retagged artifacts, security scans, integration tests and templating into a product called Skycap that is production-proven.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:49Our Old Stack
- 5:40Step 1
- 6:10The (Deployment) Shopping List
- 8:44Secrets Are Configuration
- 11:21The Kubes Vending Machine
- 12:34Environments Are Not Enough
- 13:45First Round of Solutions
- 16:01Copper
- 18:10Service Dependencies
- 19:37Script Maintainability
- 23:14Deployment Flow
- 25:25Skycap Container Deployment Pipeline
- 28:07Second Round of Solutions
- 29:28Bonus Step
- 30:19What's next?
related talks
38mContinuous deployment at Skyscanner
35mKubernetes journey
44mEvolving Dev and Ops with Kubernetes: Enterprise Adoption for Security, Speed, and Ease
33mBlueprints of Innovation: Engineering Paved Paths for a User-friendly Developer Platform
42m18 Months Before the Mast
29m9-1-1: Cloud Native - Kubernetes For Public Safety Systems
37mDesigning Cloud Ready Applications
42mIt (Only) Starts with Containers