DevOps World | Jenkins World 2019 San Francisco

In this 2 hours workshop we'll explore what Tekton Pipelines offers by first learning about its design and then putting it to use with some example pipelines.
Class capacity: 30

GitOps is a way to do continuous delivery by using Git as source of truth for declarative infrastructure and applications. In this session, we will walk through how Intuit reinvented its CI/CD pipeline following GitOps principles using open source Jenkins and Argo CD on Kubernetes. This improved developer productivity by reducing build, test and deployment time from more than 6o minutes to less than 10 minutes.

There's no better way to understand container security than seeing some live hacking! This sessions explains and distinguishes the security concern of each layer in the container stack by actually exploiting each layer. We'll take on Kubernetes itself, the Kubernetes configuration, the container engine (sandbox escaping), OS dependencies in your images and, of course, your application dependencies. Each successful hack will help you better understand the mistakes you can make, their implications and how you can avoid them.

In large development organizations, with 1,000+ developers working on codebases with millions of lines of code, issues seen in small to medium-sized businesses become exacerbated at scale. This creates a different set of challenges for DevOps.

To maintain software quality and keep costs down in such an environment, DevOps needs to focus on the basic foundations of driving quality: traceability, repeatability, governance, visibility, and communications. One approach is to employ techniques, similar to those seen in large manufacturing facilities.  This presentation explores how the application of Kubernetes, Jenkins, and GitOps to the DevOps stack, can provide a solution to the problems seen by DevOps at scale.

Jenkins and Kubernetes are like secret agents in the cloud, but there's a frequently overlooked observation of “who did what, and when, and from where,” on the CI/CD pipelines on Kubernetes. With the backend auditing introduced in Kubernetes 1.13, we now have one ‘single source of truth’ endpoint to dynamically update audit events. Using the Kubernetes AuditSink API object and audit backend to capture events at a remote endpoint dynamically, not only can we look at, but also observe audit events related to our CI/CD pipelines and record an audit trail chronologically. In productizing our pipelines solution, this enables us to meet GDPR compliance and identify risk patterns that help towards threat modeling the pipelines and related systems on it. It is elementary my dear Watson, with dynamic audit backends in Kubernetes!