Continuous Delivery Summit 2022
2022-10-25
Detroit, United States
[Continuous Delivery Summit 2019 - San Diego, Continuous Delivery Summit 2022]
as the organisers put it
CD Summit aims to connect the Continuous Delivery community to allow them to share & discuss how to improve the world’s capacity to deliver software with security & speed.
| title | author | length |
|---|---|---|
| Welcome | Fatih Degirmenci, Lori Lorusso | 05m |
Conference opens as the Continuous Delivery Foundation holds its third in-person Summit co‑located with KubeCon North America 2022 and lists eight hosted… | ||
| Hacking the OSS Supply Chain | Stephen Chin | 10m |
More than 80% of enterprise apps use open source and the ecosystem already contains concrete failures: dependency confusion that netted a researcher ~$130k… | ||
| Tekton State of the Union | Dibyo Mukherjee, Al Huizenga | 15m |
Tekton reaches a stable v1 API next month with a four-release long‑term support cadence and no new breaking changes to core pipelines. Pipelines add remote… | ||
| How We Gained Observability Into Our CI/CD Pipeline | Dotan Horovits | 26m |
Engineers instrument Jenkins to export branch, commit, machine and step data into environment variables, write a JSON summary at job end, and persist it to… | ||
| Decoupling DevSecOps from CI/CD Pipelines | Kayra Otaner, Jeff Woods | 25m |
Argues that security must run outside the main CI/CD pipeline, claiming a separate security escort pipeline owned by security can automatically produce… | ||
| CDEvents Roadmap | Andrea Frittoli | 06m |
CDEvents ships a v0.1 spec that standardizes events across orchestration, SCM, CI and CD and already produces lead time and deployment frequency metrics; the… | ||
| Keeping builds green at scale | Alec Stewart | 22m |
Companies adopt a merge queue that replays PRs on the latest main to prevent implicit conflicts; simple queues work for small teams with ~30 minute CI but… | ||
| Operating Tekton Efficiently and Securely for multi-team use cases | Wendy Dembowski | 14m |
Runs a single Tekton installation with per-team node pools and two Tekton Chains controllers per team to write provenance to team registries; uses GKE… | ||
| Bringing Continuous Delivery to Open Source | Sudhindra Rao | 30m |
Shows that many projects ship with tiny teams and huge hidden risk — e.g. a typical web app pulls in >1,000 npm dependencies and pandas has 1,400 committers… | ||
| Canary Deployments for Infrastructure Upgrades | Stephen Atwell | 14m |
Frequent infrastructure upgrades broke monitoring and secrets (Prometheus twice, Kubernetes/Vault once), so the response is an automated canary/blue‑green… | ||
| Why Kubernetes Applications Require a New Approach to Testing using Testkube | Bruno Leonel André Lopes | 24m |
Testkube runs tests in-cluster as tests as Kubernetes CRDs, decoupling test orchestration from CI/CD and replacing heavy pipeline scripting with a Kubernetes… | ||
| Closing the Supply Chain Security Loop with Rust & Pyrsia | Stephen Chin, Joel Marcey | 29m |
Pyrsia is implemented in Rust and runs a peer-to-peer artifact network with an immutable ledger and a BFT consensus library, using Rust P2P libraries rather… | ||
| Workflows - Quick, Easy CI with Tekton | Dibyo Mukherjee | 10m |
Tekton Workflows is an experimental YAML abstraction that layers on Tekton Pipelines, Triggers and Results to provide automated GitHub triggering… | ||
| Bringing Shipwright to Beta - and Beyond! | Adam Kaplan | 09m |
Shipwright announces beta API v0.12 that stabilizes the core: the build strategy stays separate from build definition, the API enforces single Source per build… | ||
| An OSS project's attempt to secure it's supply chain | Ankit Mohapatra | 26m |
Jenkins X builds SBOMs with Syft, scans them with Grype, and starts signing binaries and SBOMs with Cosign while moving to keyless signing and Tekton Chains… | ||
| Tracking DevOps Data in Event Driven CD Pipelines | Brad McCoy | 21m |
Ortelius provides a centralized microservice catalog with semantic versioning and SBOM visibility and is wired into an event-driven GitOps pipeline using Keptn… | ||
| CDF Project Maintainers' Panel | Adam Kaplan, Dibyo Mukherjee, Andrea Frittoli, Brad McCoy, Sudhindra Rao, Cameron Motevasselani, Lori Lorusso | 42m |
CDF projects report concrete progress: Pyrsia 0.2 ships a working peer‑to‑peer binary network built in Rust using libp2p, and the repo and network are live… | ||
| MLOps with Spinnaker: through the eyes of a beginner | Shivay Lamba | 07m |
Shows how to productionize notebooks by containerize Jupyter notebooks with Docker, wire training and steps into Kubeflow pipelines for repeatable ML… | ||
| Closing Remarks | Fatih Degirmenci, Lori Lorusso | 03m |
Announcements recap: Tecton graduated as the second project within the CDF, a new project called Persia joins focusing on software supply chain security and… | ||
| nothing matches | ||