The Pipeline: All Things CD & DevOps Podcast by The CD Foundation

Guest Speaker: Yoni Leitersdorf

You want to catch security issues in your cloud infrastructure before deployment but you don’t have a lot of time to spend on it. 

What is infrastructure as code (IaC) security? How do you inject IaC security into the CI/CD pipeline to catch security risks before deployment? How do you do that without impacting the pipeline and frustrating developers? 

You will also learn how we catch common security issues in CI such as:

• Privilege escalation in AWS due to overly permissive IAM permissions
• Drift issue caused by someone changing a security group leading to exposures
• Sharing IAM roles for resources in public and private subnets may not be a good idea

Yoni has successfully implemented IaC security in their CI/CD pipeline at Indeni. He will share best practices and tips to get IaC security implemented quickly. 

Support the show

Speakers: Priti Desai, IBM and Jerop Kipruto, Google

What do you use to build, test, and deploy your cloud native applications? Is your choice of CI/CD solution powerful yet flexible for all of your use cases? Have you heard about Tekton? Tekton is an Open Source CI/CD pipelines execution engine. Tekton Pipelines can define Steps, Tasks (collection of steps), Custom Tasks (advanced Run objects), and Pipelines (collection of Tasks and Custom Tasks). Pipelines also support resources to connect multiple Tasks through input/output models or workspaces to share a file system across many different Tasks. Tekton is implemented based on four core design principles: Reusability Simplicity Flexibility Conformance Tekton is highly optimized for building and deploying cloud native applications compared to other CI/CD tools. In this session, we will demonstrate migrating common CI/CD pipelines to Tekton by building a checklist for the migration.

Support the show

Join Balaji Siva from OpsMx to dive deeper into  techniques & tools that help increase developer productivity and how to reduce human intervention in software delivery. 

Support the show

Guest Speaker: Shaaron Alvares 

Join this episode for a preview of Shaaron's upcoming cdCon 2021 talk: Accelerate your Culture of Innovation with Everyday Inclusion!

Based on 10 years of research on cognitive diversity and innovation, we know that safer and more inclusive DevOps teams perform and innovate better. Companies that have more diverse management drive 19% higher revenue due to greater innovation. Racially diverse teams outperform non-diverse ones by 35%. And 67% of job seekers look for evidence of inclusion and equality programs when considering a new company. Yet, leaders still struggle to create an inclusive environment for their teams. In this presentation, Shaaron will share effective and actionable practices to help DevOps teams and managers embody inclusion through everyday interaction and collaboration.

Support the show

Guest Speaker: Nigel Kersten

Now in its tenth year, Puppet has opened its annual State of DevOps Report and we would like to invite listeners to take part. Nigel Kersten has been the primary author over the years and he joins us today to unpack what a decade of research has uncovered. 

Take the Survey: https://survey-d.dynata.com/survey/selfserve/53b/2103608?list=4&sponsor=6#? 

Support the show

Implementing continuous delivery practices yield many benefits for organizations, including the ability to deliver features faster, pivot quickly in response to industry and world events and respond to fast feedback and build a deeper relationship with users. Cloud, open source, and continuous delivery have combined to form the basis of technology modernization, but spoiler alert: it’s not just about the technology. The platforms and tooling are maturing, but bringing about organizational change requires relationship-building and other under-utilized “soft skills”.

The Continuous Delivery Foundation (CDF) end user council provides the opportunity for end-user organizations to have context-rich discussions on how various organizations pursue their modernization efforts in the most effective way. Topics covered include:

• Improving developer productivity with automation
• Enhancing security in delivery pipelines
• Technology modernization in highly regulated industries
• Measuring success of efforts

Support the show

Guest Speaker: Jonathan Hall 

Conventional wisdom tells us that Continuous Integration is the necessary first step to a CI/CD pipeline. I like challenging this “conventional wisdom” when I work with teams, to deploy CD before CI is complete or trusted. And as a thought experiment, I believe we can imagine installing CD without any CI at all, and see if what we come up with makes sense.

Support the show

In episode 10 of Season 2 we are joined by Manoj Garg from Natwest! We dive into what DevOps is like in a highly regulated industry such as finance and banking. Tune in to listen to Manoj's DevOps journey and how he is leading the charge at Natwest. 

Support the show

Ravi Lachhman, Harness
Andrea Frittoli, IBM
Emil Backmark, Ericsson
Mauricio Salatino, Camunda

Today’s CI/CD systems do not talk to each other in a standardized way. This leads to problems related to interoperability, notification of failure issues, and poor automation.

This group is looking at how events can help to create CI/CD systems with a decoupled architecture that is easy to scale and makes it resilient to failures. Using events could also increase automation when connecting workflows from different systems to each other, and as a result empowering tracing/visualizing/auditing of the connected workflows through these events.

Support the show

Aoife Fitzmaurice and Jimmy McNamara take us through a journey on how Fidelity Investments plan to rollout a Pipeline As Code capability to 12,000 developers. Leveraging cloud based kubernetes platforms to ensure best operational outcomes the team is driven to enable this best practice capability across Fidelity. This capability is key to assisting the growth of both an innersourcing and opensourcing culture throughout the firm.

Support the show