Continuous Delivery Foundation CD Summit 2022 - Detroit, 4 Nov 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: CDEvents Roadmap - Andrea Frittoli, IBM

Description

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

CDEvents Roadmap - Andrea Frittoli, IBM

CDEvents is a common specification for Continuous Delivery events. 2022 has been an exciting year for the project: we implemented SDKs for golang, python and java and worked with various communities like Tekton, Spinnaker and Keptn. Whether you’re interested in adopting CDEvents, contributing to it or simply curious about the project, join this lighting talk to learn about CDEvents, what we are working on and what we are planning for the upcoming year.

A

All right um last Quick talk before the break, so hopefully that vote can keep you awake for this um yeah so and welcome to City events roadmap.

A

um My name is Andrea fritoli I'm, an open source, Advocate um I work for IBM I live in ways where I enjoy the wind, so my air looks always like scrambled um I, wear a few hats, I'm a City events maintainer and a co-chair of the event Sig, but I'm also on the CDF Toc, so the technical oversight committee and the member of the governing board as a maintenance representative, okay. So what uh City events? uh City events is a specification.

A

So it's a project hosted by the CD Foundation and we specify what uh standard events in the CI CD space should look like, and why do we need such a thing? So why do we need City events? Well, if I have to say this in a single word, it would be interoperability.

A

So there are a lot of tools that are involved in setting up your CI CD workflows.

A

And if you look in the diagram, you start from the sem build test, signing deploying artifacts and there are a lot of tools involved and if you want to implement something like even driven workflows, City events give you a format for the different components that are running in in your workflow to talk to each other, and why do you want to have like even driven workflows that you get like more scalability, more reliability and and more flexibility in your workflow?

A

So if you can imagine you if you got like a single pipeline running from source to build test and sign and deploy what happens if you now want to run some other test, if you want to run some security testing parallel, for instance, and you, if you have this, uh if you use this event-driven approaches, then you can use triggers and policies to decide what should be part of your workflow and the other use case.

A

That is really important for City events that we look at very carefully is observability also something that was discussed already today. But it's important also when you have more complexity in your workflow, you have distributed workflow driven through events to have a single point of observability. So you have you need to have the capability to view, what's going on in your workflow to store that data to notify your user when something goes wrong and to collect devops metrics so where we are at with City events, and this is the third announcement from today.

A

So today we announced that we have the first release of City events and what does that mean? Well in this release? um We have events that cover four different uh stages: orchestrations software configuration management, CI and CD, and we provide enough data to produce metrics for like lead time for changes and deployment frequency. We also released the go SDK and we're going to release the python SDK soon and the Java SDK is work in progress. So this is what we get in our city. Events, initial release.

A

So what's next, and this is what we have in the roadmap. So the v01 release gives us like the foundation to start growing on City events and, let's start from the right- and we are. These are the communities that we have been working with, but now that we have a release, we can get really serious with integrating City events into different tools.

A

So we have pocs and we have worked with several communities like tecton, Jenkins, Spinnaker, captain and flux, and I mean we have interest on CD events from shipwright and Jenkins sex as well and in terms of features for CD events. We're looking at this supply chain security area.

A

So we want to extend the build and artifact data models to include information like as s-bomb provenance and signature, and also specifically important for the event-driven workflows.

A

If you want to rely on an event to start a certain part of your workflow, it's important that you know that you can trust that event, so something that we'll be investigating is, can we assign events? Can we make sure that the consumer of an event knows that an event has been not tampered with?

A

Other things that we want to work on is to extend the work that we started on. Devops metrics so include things like incident events, so that we can cover the full span of the four dollar metrics.

A

Also, we want to further announce the data model enrich what we do about what we have about test events, for instance, to enable more like policy driven workflows. Let's say if you have a standard way to talk about your test, so you can have like a well your usual unit test and end-to-end test, but you can also have like fuzzing type of tests. You can have static analysis, Dynamic analysis.

A

So if you have a standard way to talk about this test, then you can Implement policies in your workflow to take decision, whether you're going to deploy an artifact to the next stage based on which tests were executed in your workflow. We're also looking at things like composition and links between events.

A

Yeah, that's all that I had for today. So thank you for uh for listening and if you have any question I'll be around.

A

So here are some links, some references to the city, event, community and specification, and that's the case, and you can reach me on Twitter or GitHub LinkedIn or I'm, on the CDF slack as well as, and we have a City events channel on the CDF slack so feel free to reach out and they'll be around for the whole day and the whole week actually so feel free to to find me if you want to know more about City events.