Continuous Delivery Foundation / Spinnaker Summit 2022 - Detroit

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Accelerating Collaborative Plugin Development - Joe Cavanagh & Benjamin Powell, Apple, Inc.

Spinnaker's plugin system can significantly benefit an organization by empowering technical users to solve their own problems. Joe and Ben will discuss how we can maximize code reuse, eliminate repository maintenance and toil, and unify CI/CD across many plugins. They will also discuss the mutual benefits of a well-maintained organizational plugin ecosystem for Spinnaker users, developers, and operators. * What is a plugin? * Why plugins? * What to consider when planning your ecosystem * Code Reuse * Plugin Repository * Build * Publish * Operation

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Continuous Software Delivery Using Spinnaker and Jenkins in Cloud - Irshad A Buchh & Paul Roberts, Amazon Web Services

Continuous deployment is the best practice that has kept companies like Netflix and Amazon years ahead of most other software development companies. Spinnaker levels the playing field for smaller companies struggling with manual glue code and error prone processes. In this session Irshad shall discuss how Spinnaker enables companies to deploy software in cloud as rapidly as a web-scale company at a fraction of the cost and effort when integrated with existing CI tools like Jenkins. Irshad shall explain how Spinnaker treats Kubernetes applications as first-class citizens and helps the IT team deploy the application into any version of Kubernetes including Amazon EKS rapidly. Irshad shall also discuss how Spinnaker’s pipelines and strategies make it possible to deploy, scale, and manage individual services that are part of a larger microservices-based application.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Developer Enablement through a GitOps Driven IaC Control Plane at Autodesk - Jesse Sanford, Autodesk & Manabu McCloskey, AWS

At this point GitOps is a well understood concept amongst DevOps practitioners. Talks and posts promising magnifications of developer enablement through GitOps abound. However, they rarely focus on the intersection of dev enablement and security/compliance. In this talk Jesse Sanford and Manabu McCloskey will walk through a recent PoC done at Autodesk that flexes GitOps for the delivery of compliant infrastructure as code using Managed Delivery and Crossplane. The PoC focused on using Crossplane to split the responsibilities over the ownership of the IaC and separating the concerns to the appropriate stakeholders in the organization. Security team members can develop security controls alongside platform and product engineers who develop capabilities and functionality on top of them. Additionally, using Spinnaker Keel, all parties can work through a unified git driven workflow where PRs serve as our change requests and merges trigger the updates to secure infrastructure across the organization. Finally, novel approaches for wiring up Keel with Crossplane through the use of the K8s plugin, and sharing of secrets between Clouddriver and Flux through a custom sidecar will be discussed.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Do's and Don'ts for Securing and Governing your Spinnaker Environment - Kyle Mitchell & David Beale, Armory

Spinnaker is powerful, flexible and complex. There are multiple ways to do everything and this talk will provide real-world advice and recommendations on the best (and worst) ways to secure and govern your environment. The presenters will draw from their experience deploying, managing and supporting Spinnaker across a range of customer environments (mid-size to large enterprise) and across multiple industries from retail to banking to tech. Recommendations and specific code configurations will be presented which you can bring back to your own organization to evaluate if changes are needed or as input in your Spinnaker planning process.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Documentation SIG - Tiffany Sonny, Armory

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Ephemeral Environments Paradigm Powered by Spinnaker - Christos Arvanitis & Edgar Ulises Garcia Gallegos, Armory

How do you run a full test cycle in a short-lived production replica environment in the most reliable, easy and cost effective way possible? How do you give your stakeholders an early view of the new features before your code is merged? And how does this workflow across the SDLC look for us at Armory? In this session we will explore how Spinnaker can unlock the paradigm of ephemeral environments for software and product teams and how we can bring production closer to development before the code is merged. Using Pipelines as Code and from Github actions to Spinnaker, Edgar and Christos will present and demo an end-to-end workflow spawning on-demand Spinnaker environments.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Events in Action With Spinnaker, Tekton and Keptn - Jalander Ramagiri & Adam Kenihan, Ericsson Software Technology

Many organizations use more than one CI/CD tools as part of their pipelines and most of the times the organizations implement their own glue code in order to make the tools work with each other. Due to these concerns, CDEvents project hosted by the CDF started working on a common specification for Continuous Delivery events based on CloudEvents hosted by the Cloud Native Computing Foundation (CNCF). CDEvents enables interoperability in the complete software production ecosystem, helping CI/CD tools and services to communicate with each other about occurrences in a CI/CD ecosystem. As part of its work, the community created a Go-SDK to introduce native CDEvents support to various cloud native CI/CD technologies such as Keptn and Tekton. A new Java-SDK has also been developed to bring other CI/CD technologies into the picture such as Spinnaker. In this session, we will talk about the interoperability challenges within the CI/CD ecosystem and how CDEvents aims to overcome those. We will also talk about Java SDK and our proposal to contribute CDEvents support to Spinnaker Community which enables Spinnaker to communicate with other CI/CD tools within the ecosystem.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

First-time Spinnaker Contributors Workshop - Fernando Freire, Armory

Are you curious about how to get involved in open source and the Spinnaker project? Jump start your contributor journey by attending our first-time contributors workshop. You’ll learn how to leverage Kustomize, Telepresence, and many more useful tools to jumpstart your next Spinnaker contribution. Using these tools you’ll make your first modifications to the project by adding a brand new stage to Spinnaker.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Getting Started with the Spinnaker Operator and Amazon EKS - Fernando Freire, Armory & Praseeda Sathaye, AWS

Spinnaker is a cloud-native continuous delivery platform that provides fast, safe, and repeatable deployments for every enterprise. Learn from practitioners at AWS and Armory about how to get started with the Spinnaker Operator on Amazon EKS. We’ll take you through the journey of setting up a fresh EKS cluster, installing the Operator, and using Kustomize with Git to create a GitOps workflow to manage the lifecycle of your cluster. We’ll also cover basic deployment patterns in Spinnaker so you can quickly onboard teams in your organization. Join us and learn how to accelerate your organizations’ delivery velocity today!

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Integrating Fortify Security Scans in Spinnaker Pipelines - Asiya Yunusa & AbdulBasit Kabir, Interswitch Group

Creating custom stages in Spinnaker can be broadly simplified into two steps adding the stage definition in the Orca configuration and specifying what action the stage should perform in its configuration. Custom stages provide a way to extend Spinnaker for use with applications that do not have tested integrations. This session demonstrates how to create a custom stage that sends an API request to Fortify Software Security Center and then parses the response for values that will determine the pipeline behavior.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Introducing Spinnaker for GCP Serverless Deployments with Cloud Run and other GCP Related Enhancements - Kiran Godishala, OpsMx

Would you like to deploy serverless applications in GCP using Spinnaker? Cloud Run is a fully-managed compute environment for deploying and scaling serverless HTTP containers without worrying about provisioning machines, configuring clusters, or autoscaling. Spinnaker now has native support for Cloud Run for deployments. This talk will discuss the features built into Spinnaker for Cloud Run and other enhancements made over the past year for the GCP environment.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Keynote: Faster, Safer, Trusted - The Evolution of Autodesk’s Cloud Deployment Platform - Jesse Sanford & Cole Duclos, Senior Principal Engineers, Autodesk

Autodesk’s Developer Enablement organization has a goal to increase developer productivity 100X. To do so, Autodesk has invested heavily in building their next-generation cloud deployment platform powered by open-source tools like Spinnaker.

Autodesk began their Spinnaker journey 4 years ago. Over that time, they have built a user-friendly abstraction overlaying Spinnaker and AWS. From imperative pipeline patterns to declarative GitOps models, their offering has matured, allowing hundreds of developers to deliver software easily. By reducing the toil that comes with deploying and managing secure and compliant applications, Autodesk engineering teams can now focus on innovative features, providing immediate value to their customers.

In this talk Cole Duclos and Jesse Sanford will talk about Autodesk’s past, present, and future CD platform, how Spinnaker has been central to that vision and hopefully pass along a few learnings along the way.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Keynote: Spinnaker - The Future of Your Enterprise CD? Three Reasons Why - Gopal Dommety, CEO, OpsMx

Continuous Delivery is a uniquely exciting space to be working in today, sitting at the intersection of so many trends and innovation. While Spinnaker has proved to be the robust CD platform that enterprises need, what will be Spinnaker’s role going forward in a world increasingly dominated by containers, Kubernetes, and multi-cloud deployments?

In this presentation Gopal will share his perspective on the future of Spinnaker based on his work with some of the world’s largest Spinnaker deployments. He will highlight the important efforts now underway to make Spinnaker easier to adopt at scale, improve the developer experience with smart GitOps, and add control to emerging new tools like Argo CD. Together, these initiatives promise to keep Spinnaker at the center of your future CD strategy.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Keynote: Technical Oversight Committee Q&A - Cameron Motevasselani, Armory; Praseeda Sathaye, AWS; Gopinath Rebala, OpsMX; Dadisi Sanyika, Apple & Moderated by Kelsey Hightower, Google

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Kubernetes SIG & Cloud SIG - AWS, GCP, Azure - Gopinath Rebala, OpsMx

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Let's Work Together! : CI/CD Interoperability using CDEvents - Vibhav Bobade, Uffizzi

The CloudEvents format was introduced to standardise event formats in the cloud ecosystem. This has allowed different event brokers to consider a single format for communication. The need for better interoperability between CI/CD systems is gaining importance, as companies continue to have multiple CI/CD systems in their environment. To facilitate interoperability between them in an event-driven fashion, the CDEvents community was born which would use CloudEvents as the base format for the CDEvents format as a standard for communication between different CI/CD systems. In this talk, the speaker will go over the CDEvents support for Spinnaker, and how to interoperate with other CI/CD systems using CDEvents.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Lightning Talk: A Culture of Resiliency through Chaos - Scott Glaser & Prakash Ramesh, Salesforce

Releasing software changes at a high velocity is one thing. How do you ensure your applications continues to run release after release with high resilience and reliability? In this talk we will share how any organization can develop a culture of reliability, identify pitfalls and common mistakes that can be made, and how to build your own roadmap towards developing key reliability and resilience capabilities in your own team and organization. Drawing from practices and tools such as Chaos Engineering and Observability we will share how you can collaborate and continuously learn to improve your application reliability.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Lightning Talk: Automating Industry Regulation (SoX, SoC 2) Enforcement During Software Delivery - Balaji Sivasubramanian & Gopinath Rebela, OpsMx

The development teams in Enterprises are increasingly deploying to environments that must adhere to various industry regulations like SoX, SoC 2, FedRamp, etc. With the increased frequency of deployments and the need to audit them, these control and enforcement must be automated as part of the CI/CD process. This talk will show how to integrate OPA policy integration with Spinnaker and share sample policies for enforcing compliance rules based on real-world regulatory requirements. Also, we will demo the integration, including an audit of the policy enforcement.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Managing Accounts Across AWS Partitions - David Byron, Salesforce

Leveraging Spinnaker to manage web-scale application deployments on AWS can present many challenges. One challenge is supporting multiple AWS partitions such as Gov Cloud and Commercial whilst maintaining sub-linear growth in Spinnaker operations and cost. In AWS, it's not possible to assume roles across partitions. Open-source spinnaker only supports one AWS managing account, which means managed accounts must all be in the same partition. Salesforce has added support for multiple managing accounts, making it possible to support managed accounts in multiple partitions in one spinnaker instance.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Panel Discussion: Spinnaker Success - CD as a Service using Spinnaker - Balaji Sivasubramanian, OpsMx; AbdulBasit Kabir & Asiya Yunusa, Interswitch Group & Arun Kumar, Cisco

Enterprises are looking to deliver releases faster and safer. Spinnaker is a leading tool for providing CD as a Service/product for scalable multi-cloud deployments among these Enterprises. Spinnaker allows the ability to enable self-service, control (through policy integration), and deploy safely with automated verification. In this session, we will talk to InterSwitch and TBD end-user that leverages Spinnaker to deliver CD as a product to learn about their use cases, best practices, and lessons learned.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Platform SIG - David Byron, Salesforce & Cameron Motevasselani, Armory

The Platform SIG session at Spinnaker Summit will cover updates, the current state of the release process, the ongoing work in that area, and any other topics attendees want to discuss.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Policy as [versioned] Code - How to do it Right - Chris Nesbitt-Smith, UK Government | LearnK8s | Control-Plane

Beyond just "don’t run everything as root" In this talk Chris will trace back the origins of how policies are often incepted, how it can get out of hand, be slow if not impossible to update and measure compliance, and often lead us to question of **is the policy helping or hindering**.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

RBAC In Spinnaker - Groups, Application vs. Account Permissions and How to Use Them. - Jason McIntosh, Armory, Inc.

Plan to do a walk through with: * enabling group integration using as an EXAMPLE an Okta dev Account & configuring spinnaker using SAML * setting access controls on accounts including how accounts interface with clouds (k8s as an example) * setting access controls on application * Limitations on these configurations * Setting up application restrictions * Using Manual Judgements to elevate permissions * Discuss X509 on top of the above & show the configuration * Go through Fiat, how it operates, show the permissions cache, sync operation impact, and integrates with the above

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Renaissance, Act 1: Building the Next Generation of the Spinnaker Community - Maria Ashby, Armory

The Spinnaker Project has a bright future in terms of the quality of engineering and the new features being proposed. However, its growth has stagnated in the last year and we require new users to achieve all of our project goals. In this talk, I will propose a community engagement strategic plan that involves revamping the Spinnaker training process, new content ideas, and community support for new Spinnaker users. I will also reintroduce the Contributor-Experience SIG and talk about its roadmap for the next year. Finally, I will end with a call- to action for members to get involved in more community events like future Gardening Days and in-person meet-ups.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Sharding Clouddriver with Stormdriver - Michael Graff, OpsMx

OpsMx's Stormdriver allows Clouddriver instances to be sharded in various ways, including using both the standard Java Clouddriver and the Go implementation for Kubernetes. This is a presentation on the challenges, success stories, and general ideas surrounding how to scale Clouddriver per account, cloud, or any other axis.

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Shore - A Framework For Spinnaker Pipelines - Eyal Mor & Simon Chammah, Autodesk

“Shore” (verb) is a tool used to develop deployment pipelines for different pipeline based products like Spinnaker. Developed in Autodesk, it is currently driving “most” of the Platform Pipelines Development in the company. As part of the summit we will introduce Shore Framework to the world, And unveil the project in the Open Source Space. Presentation will include (still preliminary may change) * Developing Pipelines is a hard task * What is Shore (and why?) * The use of Shore in Autodesk * Open Sourcing to the world on Stage * Roadmap & Future Why is Developing pipelines hard? Developing CI/CD pipelines is a hard task in a Platform. They need to be resilient, easy to use and extendable pieces of software that are run by another system (AKA Spinnaker, Jenkins, Tekton, ArgoCD, Waypoint, etc...) When developing, extending or testing pipelines on any 3rd party system there are a few key problems that come up. * Local development can be very hard * Stages/Pipelines are not inherently testable * Collaboration and code re-usability could be re-defined

For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/

Spinnaker as a Platform: Driving Cloud Adoption in Healthcare - Joel Vasallo, TAG - The Aspen Group

Adopting the cloud is at the forefront of many companies goals in the coming years. To truly recognize the power of the cloud most companies need to undergo a digital transformation; avoiding forklifting monoliths and adopting DevOps practices. While exciting, this also poses many risks, challenges, and key decisions; such as tooling, rearchitecting, and ultimately modernization of applications. We all want to leverage containers and Kubernetes but there should be a paved road to get there. The goal of platform engineering teams should be to build paved roads to drive adoption and empower engineers to build, deploy, and own their applications.

In this talk, we will share some strategies from TAG (The Aspen Group) on how we did this using Spinnaker including:

Basic overview of the technical challenges we encountered when we started our cloud journey
Brief overview of Spinnaker and why we chose it at TAG
How Spinnaker was used to drive adoption of the cloud and ultimately transformation to Kubernetes as the core
Considerations and solutions to meet and address compliance requirements using Spinnaker
Next phase of where the platform is going using Spinnaker as an engine