The Pipeline That Nobody Wants to Touch

There is a particular kind of DevOps pipeline that most engineers eventually encounter. It works. Nobody really likes it. Nobody is entirely sure who originally wrote it.

And everyone knows that changing it before a Friday production deployment is probably a bad idea. Maybe it started as a simple Jenkinsfile.

Over the years, someone added a security scan. Someone else added a manual approval. Then came a workaround for an old deployment system. A shell script appeared because the Jenkins plugin couldn’t do something reliably.…