CI/CD Agility and Controlling Pipeline Sprawl Outline

on YouTube ↗33m

" summary

CI/CD agility means moving continuously and the concrete obstacles are stale secrets (one example: a secret unchanged for five years) and exploding YAML configs across repos (one engineer reports managing 3,000 repositories). Recommended fixes: implement HashiCorp Vault or similar for secret storage and autorotation, identify repeated steps and create parameterized pipeline libraries or shell scripts, and use CircleCI Orbs or a registry to publish reusable, versioned pipeline modules to stop pipeline sprawl and reduce vendor lock‑in.

AI-written summary · about

" chapters (31)

1. 0:00Intro
2. 1:26ci/cd : agility
3. 2:05CI/CD Tooling Obstacles
4. 2:57My job is to inspire
5. 4:47Managing Pipelines at Scale
6. 6:25secrets: provide : access
7. 6:56exposed : pipelines
8. 8:24inadequate : mechanisms
9. 10:01tooling : protect : secrets
10. 10:36random: pwd: generation
11. 11:20auto: rotate : passwords
12. 12:13pipeline : secrets:protected
13. 13:26recap: Security
14. 14:05pipeline : config: file
15. 14:591:1 ratio 1 x code repo = 1 x pipeline config
16. 16:16yaml is not a programming language
17. 16:38yaml is a data structure
18. 17:19syntax can be redundant
19. 18:47syntax: growth: complexity
20. 19:14config: repo: sprawl
21. 20:39difficult : to: maintain
22. 21:55separation of concerns
23. 22:32common : pipeline : patterns
24. 22:55create : abstractions
25. 23:26parameterized : reusable : modules
26. 25:41pipeline : libraries
27. 26:03name: Set S3 Bucket Environment Variable command: export JAR_FILE"build/app v10 zla export AWS_53_BUCKET="s3://bucket/current/
28. 27:18centrally: managed: functionality
29. 28:27adds portability: minimizes vendor lock-in
30. 30:39CircleCl : Orbs: Registry
31. 32:08recap: Pipeline Sprawl

" related talks

• 20mCI/CD Agility and Controlling Pipeline SprawlAngel Rivera · DevOpsDays NYC 2020
• 31mCI/CD Agility and Controlling Pipeline SprawlAngel Rivera · cdCon 2020
• 47mCI/CD Agility and Controlling Pipeline SprawlAngel Rivera · sfday 2020
• 32mAre your CI/CD Pipelines SecureAngel Rivera · Jfokus 2021
• 01h 00mContinuous Integration and Delivery - from the trenchesKristian Bank Erbou · NDC Oslo 2016
• 32mPractical Tips & Tricks for CI/CD SuccessZan Markan · GOTO Amsterdam 2022
• 38mSecuring your CI/CD PipelineJeroen Willemsen · DevOps Pro Europe 2019
• 33mAre your Pipelines Secure? Lock-down unsecured CI/CD PipelinesAngel Rivera · DevOpsDays Raleigh 2020