1.
Choreographed
CI/CD
Meet Cartographer:

2.
> whoami
Bridging Dev and Ops.
● 20+ years of experience as developer and architect
● Working with Kubernetes 5+ years
● Working with Netic Kubernetes offerings
@langecode
in/thor-lange-26b388
Thor Anker Kvisgård Lange
Platform Development Specialist

3.
Code not in production does not
provide any ROI
In a nutshell

4.
From feature to production
production
?

5.
Path-to-production
Thoughtworks Technology
Radar - October 2022
Path-to-production
mapping
techniques

6.
”First, the steps in the process are listed in
order, from the developer workstation all the
way to production.
Thoughtworks
Path-to-production mapping
Path-to-production

7.
Path-to-production
New
Code
Code
Analysis
Build QA CAB Deploy
Example

8.
pipeline
CI/CD to the rescue?
Watch
repository
Build image Tests
Generate
configuration
Deploy
Continuous Integration
Server
(Orchestrator)

9.
Numerous CI solutions
…and many more

10.
Current challenges
pipeline - team A
A B C D E
pipeline - team C
B C D E
pipeline - team B
F B C D
CI Orchestrator

11.
Cartographer
A supply chain choreographer

12.
The orchestration pattern
orchestrator
(conductor)
A
B
C

13.
The choreography pattern
A
B
C
watches
watches

14.
Leveraging existing components

15.
Supply chain choreography
blueprint
Watch
repository
Build image Tests
Generate
configuration
Deploy
Cartographer Controller
workload delivery
Match supply chain or
delivery blueprint
Owns
Dev Ops
SRE/Platform/…

16.
Defining a workload
apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
name: kubernetes-info
namespace: cartographer-build
labels:
netic.dk/workload-type: simple-image
spec:
serviceAccountName: build
source:
git:
url: https://git.netic.dk/scm/kub/kubernetes-info.git
ref:
branch: main
params:
- name: observability
value: true
supply chain
source
optional params

17.
New workload
blueprint
Watch
repository
Build image Tests
Generate
configuration
Deploy
Cartographer Controller
workload
Dev
Watch
repository
Build image Tests
Generate
configuration
Deploy

18.
Demo

19.
Build and push container image
Simplest possible demo?

20.
Demo - blueprint
supply chain blueprint
Watch repo Build image
apiVersion: carto.run/v1alpha1
kind: ClusterSupplyChain
metadata:
name: supply-chain
namespace: cartographer-build
spec:
selector:
netic.dk/workload-type: simple-image
resources:
- name: source-provider
templateRef:
kind: ClusterSourceTemplate
name: source
- name: image-builder
templateRef:
kind: ClusterImageTemplate
name: kaniko-image
params:
- name: image_prefix
value: registry.netic.dk/netic-oaas/
sources:
- name: source
resource: source-provider

21.
Demo - create workload
apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
name: cartographer-demo
namespace: cartographer-build
labels:
netic.dk/workload-type: simple-image
spec:
serviceAccountName: build
source:
git:
url: https://git.netic.dk/scm/pd/cartographer-demo.git
ref:
branch: main
workload
GitRepository
(fluxcd)
Runnable
(Cartographer)

22.
Demo - run

23.
Demo - add vulnerability scanning
...
- name: image-builder
templateRef:
kind: ClusterImageTemplate
name: kaniko-image
params:
- name: image_prefix
value: registry.netic.dk/netic-oaas/
sources:
- name: source
resource: source-provider
- name: trivy-scanner
templateRef:
kind: ClusterImageTemplate
name: trivy-image-scanning
images:
- name: image
resource: image-builder
supply chain
blueprint
Watch repo
Build image
Scan image

24.
Demo - scanning result

25.
Cartographer Recap
● Opinionated path-to-production
● Supply chain and delivery blueprint
● Hide complexity
● Standard contract
● Separation of concerns
Takeaways

26.
Alfred Nobels vej 25, DK-9220 Aalborg Ø * Tlf. 77 77 08 88 netic.dk company/netic-as
Thanks for listening.
..and we are hiring:
https://www.netic.dk/ledige-stillinger/

27.
References
● https://www.thoughtworks.com/radar/techniques/pat
h-to-production-mapping
● https://tanzu.vmware.com/developer/guides/supply-
chain-choreography/
● https://kccnceu2022.sched.com/event/605caab6b752
f79dcaa5a5a2b02735ea