Continuous Delivery: The Missing Piece in the GitOps-OCI Security Puzzle
Talkat GitOpsCon North America 2024 · on Monday, 2024-04-15· at 16:30· Level 3 | Room 320 | Track 1·
summary
Claims that Continuous Delivery fills the GitOps‑OCI trust gap by automating artifact‑to‑git workflows and adding runtime verification. Implementation uses Argo CD with OCI images, an artifact repo that triggers automated PRs to Git, scanners like SonarQube, monitoring via Datadog/Prometheus, and ML for continuous verification that auto‑rolls back on regressions. A generative AI trained on docs produces root cause and patch suggestions for CVEs. The resulting golden pipeline deploys across four clusters and moves the org from sporadic releases to about one release per week with fewer manual fixes.
AI-written summary · about
chapters (7)
- 0:00Quest for secure software
- 4:16OCI and GitOps heroes
- 8:08GitOps security risks
- 10:14Golden pipeline
- 13:04Continuous verification challenges
- 14:54AI in remediation
- 19:56Conclusion and open floor for questions
related talks
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
29mCombining Progressive Delivery with GitOps and Continuous Delivery
30mThe Intersection of CD Gates and GitOps: A Match Made in Deployment Heaven
47mGitOps - Using Git as your source of truth for build, deploy and observability
57mPipelines: Everything Everywhere All At Once
28mGitOps and CI/CD: Maintaining Security in the Age of Automation
31mContinuous Delivery On Kubernetes With GitOps
40mHow GitOps Changes Everything in CI/CD