DevOps World | Jenkins World 2019 Lisbon

Do you have several independent development projects? Do you need to scale Jenkins Pipelines across projects as efficiently as possible while keeping teams autonomous? We will share with you: 
* How we address this within the SAP ecosystem for a few hundred development projects in order to comply with our high quality and security standards.
* How you can adopt it for your own scenarios also outside the SAP scope.

Our solution is available as an open source project and based on:
* Jenkins Pipelines as Code. 
* Jenkins Shared Groovy Libraries. 
* Kubernetes and Docker. 

We combined it with:
* Smart pipeline logic. 
* Layered yaml-based configuration. 
* Advanced quality process for the library itself. 

Get insights into the open source Jenkins library offering you a highly configurable and flexible way to scale CI/CD best practices throughout your teams while keeping them in the driver seat. Besides looking at the status quo, we will also share ideas how this might evolve in the light of the Continuous Delivery Foundation established early 2019.

This session is a condensed form of a two-hour training course that Wadeck and Mark presented remotely, along with demonstrations of areas of particular importance when securing Jenkins. This talk covers: Jenkins security concepts, Authorization, Authentication, Secure builds, Agent security, Configuration and administration security and Security best practices.

We've spent six years studying secure coding practices of DevOps and continuous delivery organizations by surveying over 15,000 IT professionals.  We've analyzed their staffing practices, educational priorities, automation choices and process improvements that improve their cybersecurity preparedness. Our study has also uncovered details of where automation fails, awareness falls short and breaches happen.



Come participate in this session where we will share the 10 habits practiced by the DevSecOps Elite that you can then apply to -- or further mature within -- your own organization. We will also uncover what our analysis revealed about securing CI/CD pipelines, including what popular Jenkins plug-ins are used for security.