chapter one
1 Why CI/CD isn’t enough
This chapter covers
- Identifying the gap between CI and CD
- Seeing where a promotion control plane fits
- Gaining governed promotion, lineage, artifact identity
- Walking one promotion end to end
Most modern engineering teams believe they’ve solved software delivery. They have CI pipelines that build and test code on every commit, and GitOps tools like Argo CD that deploy to Kubernetes and keep cluster state in sync with version-controlled configuration. Many would describe their processes as fully automated. And yet production releases still feel risky. The build serving customers may not be the exact one that was validated in a pre-prod environment; a mutable image tag can quietly introduce an unexpected discrepancy; and when someone asks who approved a change and whether it was verifiably tested, the answer can take days to reconstruct, if it exists at all.