Building a Better Software Supply Chain
summary
A monolithic internal build system with 250 services across 1000 hosts is replaced by an open source Konflux platform on Kubernetes using Argo CD, Tekton with Tekton Chains and Tekton Results, Backstage and security CLIs. Goals include SBOMs and SLSA level 3 provenance; surprises include removing auto-generated GitOps deployments, decoupling build/deploy/test to stop 30-container monorepo blowups, losing a month to an exposed AWS key, a pen test finding privilege escalation, and tuning to reach 100 concurrent basic runs within minutes.
AI-written summary · about
chapters (14)
- 0:00Software supply chain intro
- 1:48Red Hat build system history
- 3:53Pipeline goals and requirements
- 4:35Red Hat Trusted App Pipeline demo
- 9:07Build system challenges learned
- 13:21Policy flexibility vs security
- 14:27Security breaches and automation
- 15:30Performance tuning and scalability
- 17:56Backup recovery and support
- 18:38Pentesting and vulnerabilities
- 20:44Pipeline limits and security checks
- 21:46GitHub secrets prevention
- 23:09Onboarding and self-service scaling
- 24:34Q&A
related talks
27mBuilding Trust Through Proactive Security - Key Parts of the Trusted Software Supply Chain
01h 02mTools for simplified large scale systems
40mSmoothing the continuous delivery path- a tale of two architectures
20mBuilding the Future How We Created Our New Platform For Growth
27mThrough the Looking Glass: Leveraging Overton Window Concepts To Redefin...
31mSharing is caring: Building a modern microservice architecture helps everyone get ahead
35mInto the Shopfloor: Moving Manufacturing Execution Systems To Kubernetes
29mTaming the Hybrid Beast with DevOps