November 2022 Summaries

DevOps is constantly evolving, with a focus on merging development and operations to improve software quality. In 2022, trends like simplicity, efficiency, and security emerged as key areas of emphasis. The use of automation tools, such as CI/CD pipelines, became more widespread, and the importance of continuous integration and testing was highlighted. Open-source tools, like GitHub Co-Pilot, were also gaining traction. Additionally, the trend towards multi-cloud adoption continued, with companies recognizing the need for flexibility and scalability in their infrastructure. The use of AI and machine learning in software development was also becoming more prevalent, but concerns about trust and security remained a top priority. Overall, 2022 saw significant advancements in DevOps practices, tools, and technologies.

Open source has a profoundly positive impact on innovation, but requires loving care and engineering expertise to maintain and utilize effectively. Companies like EDB and Roadie facilitate open-source innovation by providing support, maintenance, and infrastructure, allowing teams to focus on their core competencies. The choice of proprietary over open-source products often comes down to the need for guarantees such as SLAs, support, and security patches, as well as expertise in areas like consultancy and production adoption. Building relationships with the maintainers and contributing to the open-source community are key to creating a flourishing ecosystem. Ultimately, commercial presence in the open-source community can accelerate innovation but should not be necessary.

Cloudsmith is a platform for package promotion workflows that aim to isolate and protect production repositories away from public upstreams, ensuring only clear and vetted packages are received. This process utilizes Cloudsmith's package promotion instructions, symbiotic features such as webhooks, quarantining, and upstreaming, which can be combined to create workflows and drive actions. The platform supports multiple environments, including development, staging, and production, allowing developers to test and validate their code before releasing it to users. With multiformat repositories, vulnerability scanning, and upstream proxying, Cloudsmith facilitates automation of copying and moving packages between pipelines, reducing bandwidth costs and improving security. By setting up workflows with webhooks, users can automate tasks such as promoting packages based on scan results, and future policy management features will enable verification of prerequisites for package promotion.

Highly available self-hosted open source software requires significant effort and dedicated staff to maintain. Many organizations prefer to use out-of-the-box products that offer easy setup, 24/7 support, and a stable ecosystem, rather than self-hosting and managing their own infrastructure. Companies like EDB and Roadie are filling this gap by offering commercial services built on top of open-source software, providing benefits such as reduced overall cost, increased security, high availability, and support. These companies also prioritize the stability and security of their offerings, making them attractive options for organizations looking to leverage the power of open source while minimizing the risks associated with self-hosting. By facilitating innovation and transparency in the open-source community, these commercial products are driving adoption and growth, ensuring the long-term viability of this critical infrastructure.