Continuous Delivery Foundation / CDF Webcast

*cdCon + GitOpscon May 8 - 9, 2023*
Register now ➡️ https://events.linuxfoundation.org/cdcon-gitopscon/

*CD Foundation Links*
Spinnaker: https://spinnaker.io/
CD Foundation Website: https://cd.foundation/
Slack: https://join.slack.com/t/cdeliveryfdn/shared_invite/zt-nwc0jjd0-G65oEpv5ynFfPD5oOX5Ogg
Contact us: https://cd.foundation/about/contact/

Speaker: Gopinath Rebala
Gopinath is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures of OpsMx Enterprise for Spinnaker. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well known leader in continuous delivery and in the Spinnaker community.

LinkedIn: https://www.linkedin.com/in/gopinathrebala/

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Description: SAP is building up a one-stop-shop service ecosystem in order to scale compliant Continuous Delivery processes across the company.

Learn from Dirk Luedtke (Head of SAP CI/CD Product-Management) and Oliver Nocon (Chief Product Expert and creator of project “Piper”) how the ecosystem is built up, and what ingredients you can also use yourself.

Jenkins is the most popular Continuous Integration (CI) tool in the world, and many people have tried to extend Jenkins to handle Continuous Delivery. But Jenkins was not designed to deploy changes - especially at scale.

Learn how to extend Jenkins with Spinnaker - using both tools for what they do best. Spinnaker solves the biggest challenges you’ll encounter when using Jenkins for CD.

- Avoid a scripting nightmare
- Spinnaker replaces Jenkins scripts to eliminate the cost of maintaining custom code
- Repeal the plug-in tax
- Eliminate the extensive management of plugins you need when you use Jenkins to deploy at scale
- Create visibility
- Easily determine the overall health of your delivery process rather than digging through logs
- Automate approvals
- Use machine learning to determine the risk of moving a change into production

Slides: https://drive.google.com/file/d/1HpOFPHKwUU-YJw4_x7sHzEU7qGr_ZjII/view?usp=sharing

Speaker: Sven Ruppert
With convenience on the developer side, based on dependencies, abstraction layers and the composition of technologies we are getting up speed in our production pipeline. But at the same time, it’s Pandora’s box in terms of security too. How can you close this gap and eliminate the weaknesses? I’ll show you how to start with free tools to protect your stack against known security vulnerabilities, increase productivity while working fast efficient and comfortable and why quality based on an excellent test-coverage will be your safety belt.

Over the last 15 years, organizations have had difficulty with the entire software delivery process, but two artifacts in particular became a recurring problem. The problem stems from the Goldilocks principle: one of these artifacts is much too big to overcome efficiently, and one of them is much too small to make a significant impact, so we need to find the one that is just right.

So what artifact is “just right?” As the user, what we really care about are the Features: the stuff we use and interact with all the time to make our daily lives better. However, the systems we have today haven't advanced to the point where software features are the nearest proxy for customer value. In other words, the feature must be at the forefront of the UI.

In this talk, I will share why features are the proxy for value and explore the different levels of abstraction for the “just right” aspect of a Feature in order to shift people's mindset from thinking in terms of Builds or Releases, to thinking in terms of the customer and business value. I will share tactics to address the Goldilocks problem and how to have these discussions at the right level of the software in order to make prioritizations, decisions, and discoveries.

What Attendees Will Learn:
A different perspective about software delivery, which will help them make better decisions about which features to pursue and builds/releases to postpone.
Learn why features are the future and how they are the perfect middle-ground between individual builds and major releases.
How to ultimately break free from the Goldilocks problem of software delivery.

Speaker: Kat Cosgrove

Sometimes, it feels like DevOps has been around forever. Sometimes it feels like it's brand new. The truth is somewhere in the middle -- we've had pieces of it for a very long time, and the term itself has existed for around a decade, but the exact way we implement it has changed quite a bit over the years. Continuous Integration has been around since the 90s, but it isn't the same today as it was when Grady Booch first coined the term in 1991. Package management has changed a lot, too, and having context for the history of it not only helps us to see how far we've come, but makes it easier for new people to adapt. Join me on a journey through time, from package management as it began to what it looks like today.

CircleCI’s VP of Platform, Mike Stahnke will cover a view into anonymized team data from millions of DevOps workflows to share insights, behaviors, and metrics that help teams build better software faster. Attendees will leave with benchmarks to determine the performance of their own software delivery teams.

Managing Microservices is the focus of the new CDF project - Ortelius. Learn from Steve Taylor, Community Manager, how Ortelius versions, tracks and builds dependency maps of microservices across all clusters. If you are moving to a microservice architecture, you will want to hear about this new solution that will make site reliability easier in a microservice implementation.

Ketch is an application delivery framework open source project. Ketch fixes the last mile deployment, implements an application context, and removes the complexities of cloud-native application deployments.

In this session, we will review Ketch in detail:
- Across any cluster
- Built for multi tenancy
- Removing the complexities of K*s
- Ketch beyond the deployment

The featured speaker for this session will be Bruno Andrade, Founder of Shipa.io, the corporate sponsor and main contributor of Ketch.

While software architects have broken their monoliths into event-driven service architectures, many DevOps architects are still building monolithic inspired release pipelines. This results in complex pipeline code, tight integration of process and tools, lengthy diagnostics sessions to fix broken pipelines and puts strains on the underlying resources that build, deploy, test and validate.


In this session we introduce a new approach: Event-driven Continuous Delivery and Operation Automation for modern DevOps! This approach decouples the declaration of processes for delivery and remediation from tooling. It uses an “everything as code” approach which includes deployment, testing, quality gate, observability, promotion and remediation definitions.


One open source tool which implements this new approach is Keptn which was heavily inspired by Google’s SRE practice around SLIs & SLOs. Join us, see Keptn in action and get inspired on what the future of DevOps tooling can look like.

Speaker: Dan Garfield from Codefresh


With the increase in popularity of GitOps, we are getting more and more tools that are focused on specific aspects of it. As we move towards Git being the only source of truth, and employing different tools to converge the actual state into whatever our desires are, we face observability challenges.


How can we gain insights into the desired and the actual state, and connect those with all the other transient information that led to those states? How can we combine all the information we have into a single source of truth beyond the desired state and the actual state? Can we gain visibility that will guide us towards better insight into the outcomes of GitOps processes and allow us to have all the information we need to make future decisions?


Let's see whether we can answer those and a few other questions. If we can, we might have a better understanding of where GitOps is and where it is going.

Speaker: Viktor Farcic

GitOps is nothing new. Or, to be more precise, the principles of GitOps existed long before the term was invented. But hey, that's the pattern in our industry. It is the fate of all good practices to be misunderstood, so we need to come up with new names to get people back on track. That is not to say that we are in a constant loop. Instead, I tend to think of it as a periodic reset trying to eliminate misinterpretations. GitOps is one of those resets. It fosters the practices and the ideas that existed for a while now and builds on top of them.

We'll explore the fundamental principles of GitOps and the outcomes of those principles. We also try to answer some fundamental questions like "why do we want GitOps?", "why isn't everyone using GitOps?", and whether GitOps is mature enough for everyone to adopt it. More importantly, we'll try to see how GitOps fits into continuous delivery and how it might change the way we define application lifecycle pipelines.

Through a hands-on demo, we'll explore a full lifecycle of applications in production. We'll use Terraform to create and manage a Kubernetes cluster and Argo CD to deploy applications. We'll rely on Codefresh to run pipelines that will tie those and other tools together.

Speaker: Baruch Sadogursky

Surprisingly, implementing a secure, robust and fast promotion pipelines for container images is not as easy as it might sound. Automating dependency resolution (base images), implementing multiple registries for different maturity stages and making sure that we actually run in production containers from the images we intended can be tricky. In this talk, we will compare different approaches, compile a wish-list of features and create a pipeline that checks all the boxes using free and open-source tools.

Presenter: Jason Odoom, Cybersecurity Engineer @ Booz Allen Hamilton


This webinar will present an introduction to the DevOps CI/CD process while providing a brief demo using Jenkins and other tools such as Artifactory and Ansible.



The topics that will be covered are:
- What is DevOps?
- What DevOps isn't
- What is CI/CD?
- A brief introduction to Jenkins
- How to implement a DevOps process

Speakers: Isaac Mosquera and Kate MacAleavey


What does culture have to do with continuous delivery? Everything. Companies implement new tools to accelerate delivery but don’t account for the necessary beliefs that underpin a successful transformation. Culture work is the competitive differentiator for digital transformation, expediting the adoption of CI/CD tools. Continuous delivery embodies the values strongly correlated with high performance: trusting and empowering developers to make deployment decisions, prioritizing safety in service of velocity, building resilient systems with chaos engineering, replacing controls with context by providing as much information as possible to support decisions, and fostering an experimental culture by creating a safe-to-try, safe-to-learn environment. As more organizations undergo digital transformation it’s critical to work on the associated cultural changes. More companies are finding that it’s a combination of new technologies and new behaviors that truly unlock innovation.

Speaker: Steven Terrana, Sr. Lead Technologist from Booz Allen Hamilton

Description: This webinar will cover an introduction to DevSecOps and a live demonstration of how to get up and running with the Jenkins Templating Engine (JTE).

Through JTE, find order in the chaos of managing DevSecOps pipelines at scale. Bring organizational governance, optimize pipeline code reuse, and simplify pipeline maintainability for your team by creating tool-agnostic, templated pipelines that can be reused across teams regardless of the tools being used.

CDF Ambassador presents the concept of Continuous Product Oriented Practice! In this webinar, guest, Garima Bajpai will cover:


- Continuous Product Oriented Practice focus on integrating “Value” in product
management from product inception to retirement in the devOps way
- Breaking Each step is in its own silo including planning ​
- Product Canvas, DevOps way!

Speaker: Nirmalya Sen from OpsMx

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

We will cover how to install Spinnaker, create an application and pipeline to deploy to a kubernetes cluster. In the process we will learn about Spinnaker basics.

Speaker: Ravi Lachhman from Harness.io

A major goal of the Continuous Delivery Foundation is to drive education and adoption of Continuous Delivery practices. Recently at Harness, we concluded research spanning a year by interviewing over 100 firms in their Continuous Delivery maturity. We analyzed and aggregated the results and uncovered common challenges that many organizations face. In this webinar, we will go over common challenges and approaches to overcome these challenges while educating Continuous Delivery is certainly a journey. For example, only four percent of organizations we interviewed leveraged a canary based approach. Not sure even what a canary based approach is, tune in!

Speaker: Tracy Ragan, CEO of DeployHub

As you migrate to microservice you will quickly begin to see that your CD pipeline needs some tweaking. With microservices you shift your focus to pushing loosely coupled and independently deployed services to your cluster versus installing a complete software application. You no longer have a broad packaging step that defines an application version in the same way as you do in traditional methods. Tracking your application versions is still critical to the overall health of your CD pipeline from tracking change requests to making data-driven decisions about new releases. In this webinar, we will review how you can use DeployHub to map and version the logical view of your application even when it has been decoupled. We will show how DeployHub evolves your CD pipeline to support a microservice implementation while still tracking your application’s complete configuration.