April 2024 Summaries

Kubernetes is increasingly becoming the leading platform for hosting and running applications, and Octopus has introduced a new deployment target called the Kubernetes agent to enhance the experience of deploying to Kubernetes. This lightweight application, installed into a Kubernetes cluster, registers with the Octopus Server as a deployment target, simplifying deployments by eliminating the need for Workers, external credentials, or custom tools. Available as an early access preview in Octopus Cloud, the Kubernetes agent addresses limitations of the existing Kubernetes API deployment target by utilizing in-cluster authentication, reducing the need for custom tooling, and using polling communication to resolve network access issues. The agent, built on Octopus Tentacle, executes deployment scripts inside short-lived Kubernetes pods, allowing for scalable workload management. Installation is streamlined via a Helm chart, enabling easy setup and management, and switching from a Kubernetes API target to the agent requires minimal changes to deployment configurations.

Octopus Deploy has launched a GitHub App for Octopus Cloud customers to enhance integration with GitHub, following the previous implementation of OpenID Connect support between GitHub Actions and Octopus. This new app removes the need to manage GitHub credentials in Octopus, mirroring the benefit of not needing to manage Octopus credentials in GitHub, thereby improving security and ease of use for projects using Config as Code with GitHub. By installing the Octopus GitHub App in a GitHub organization and granting it access to selected repositories, users can configure Octopus for GitHub integration without shared credentials, reducing the risk of token leakage. This advancement aims to establish GitHub and Octopus Deploy as a powerful combination for Continuous Delivery, although it currently caters to cloud customers with future considerations for self-hosted server users.

Octopus has enhanced its IT Service Management (ITSM) integration, initially introduced in version 2022.3, by expanding functionalities and improving user experience based on feedback. From version 2024.2.6455, users benefit from improved logging for change request (CR) creation, offering better visibility and error tracking, particularly for permission and configuration issues. Other enhancements include support for emergency changes, automatic transitioning of CRs to a closed state, and the ability to customize CR fields using project-level variables. The ITSM providers have been moved to a dedicated menu for easier access, and the integration with ServiceNow and Jira Service Management remains available to all Enterprise customers, with ongoing improvements driven by user feedback.

Octopus Deploy has integrated OpenID Connect (OIDC) to enhance security and streamline credential management for its users. By using OIDC, customers can minimize the number of credentials stored in Octopus, eliminating the need for credential rotation and improving security by allowing granular permission control. Octopus can function as both a client, authenticating with Azure and AWS during deployments, and a resource server, enabling trusted providers like GitHub Actions to authenticate with it. This approach enables passwordless deployments and enhances security by enforcing subject claims for environment-specific access. Customer feedback highlights the efficiency of using OIDC, with examples such as a GitHub web app that builds and deploys using only a Docker Hub secret and communicates with services using managed identities, further reducing the need for stored credentials. The integration of OIDC simplifies maintenance and enhances the security posture of deployment processes.