A New Way To Roll: Supply Chain Choreography For Enterprise Grade Kubernetes
Talkat KubeCon + CloudNativeCon North America 2022 · on Thursday, 2022-10-27· at 14:30· Ambassador Ballroom (Room 360)·
summary
Presents a Kubernetes-native CI/CD model called Cartographer that turns pipeline steps into reusable supply chain templates, wiring outputs (image URL, config path) to inputs so builds are pull-triggered rather than orchestrator-controlled. Demonstrates a live GitOps flow using Flux CD and kpack to build OCI images, Grype scanning and Cosign signing, Harbor registry and Tekton for tests, storing SBOMs/scan results in a metadata store. Claims easier tool-swapping, multi-team reuse, embedded security policies (aiming toward SLSA level 3), and shows the demo running end-to-end.
AI-written summary · about
chapters (11)
- 0:00Supply chain choreography intro
- 1:23CI/CD challenges and limits
- 4:53Lean principles for supply chains
- 9:30Introducing Cartographer
- 11:20Cartographer’s supply chain
- 15:17Templating and workflows
- 19:38Security in supply chains
- 21:44Live demo overview
- 23:51GitOps workflow demo
- 32:39Enterprise supply chain visualization
- 33:00Future of supply chains
related talks
01h 32mTutorial: Introduction to Supply Chain Choreography with Cartographer
32mWest Side CD: The Deployment Ballet Goes On
40mLet Your Software Supply Chain Ride with Kubernetes CI/CD
05mLightning Talk: Scaling Container Builds with Software Supply Chains
20mSimplifying Kubernetes: Streamlining Secure App Deployment in DevSecOps
40mTreating Kubernetes as a Linux Distro: APT-Style Packaging with FluxCD
45mFrom DevOps to GitOps: Supercharging Your Kubernetes Workload Deployments
26mEmpowering SRE with GitOps