DevSecOps From First Principles in AWS #20 | Jenkins Shared Libraries & Secret Vaults

Description

00:00 Intro to Jenkins Shared Libraries 01:40 Managed vs Self-Hosted Secret Vaults 04:01 How Jenkins Plugins Actually Work 06:15 HashiCorp Vault vs Azure KeyVault 07:25 Why Native Jenkins Credentials Fail 11:57 Understanding Vault Seal and Unseal 13:53 Managing Pipelines for 60 Microservices 15:37 The Duplicated Jenkinsfile Nightmare 16:37 Intro to Jenkins Shared Libraries 19:28 Shared Library Folder Structure Explained 22:13 Simplifying the Developer Jenkinsfile 23:36 Testing with Jenkins Test Harness 26:32 Shared Library Code Decision Matrix 29:12 Fixing Scattered Production Credentials 34:16 Hiding Vault Logic from Developers 36:21 Monolithic vs Granular Pipeline Steps 40:09 Moving Towards Platform Engineering 42:17 Conclusion and Practice Homework