Atlassian
Atlassian logoAtlassian · Feature trail

Deployment Orchestration and Health Monitoring

1 post · Jun 2021 – Aug 2026

What this trail covers

Bitbucket Cloud is evolving its Deployments functionality into a more modular system. This includes introducing Concurrency Groups for managing step execution order and Environments for decoupling environment-specific variables, permissions, and branch restrictions from the full Deployments framework. These features aim to provide greater flexibility and control over CI/CD workflows, allowing users to leverage specific components without being forced into the entire Deployments structure. Dynamic Pipelines extend this by allowing serverless functions to alter pipeline configurations in real-time, enabling advanced organizational CI/CD orchestration and custom workflow logic.

All Atlassian trails
  1. Evolving Atlassian's deployment controls enforcementThis post details the evolution of Atlassian's deployment controls enforcement, moving from an implicit delegated trust model to a standardized artifact metadata store. Key technical contributions include: 1. **Artifact Metadata Store (Metadata-API):** Developed using Grafeas as inspiration, this component standardizes and centralizes artifact metadata. It supports storing signed attestations for builds, deployments, and custom claims. 2. **Build Data Collection:** Integrations with Bitbucket Pipelines (via a connect plugin and queue) and Bamboo Server (via a server plugin and Streamhub) collect build provenance. This includes build ID, commands, source provenance, and produced artifacts. 3. **Artifact Attestations:** Attestations are used to record observations about artifacts, linking them to their producing build and verifying compliance status. This includes ephemeral token creation for Artifactory uploads and direct event ingestion for other artifact stores like Config Registry and Bifrost. 4. **Standardized Metadata Structure:** A uniform data structure for build, deployment, and attestation metadata was established, enabling querying and filtering across diverse systems. 5. **Policy Decision Making & Enforcement:** The system centralizes policy decision-making and standardizes enforcement across deployment mechanisms, moving towards explicit verification at deployment time. 6. **Minimizing Developer Friction:** The design prioritizes minimal adoption requirements and avoids changes to build configurations, aiming for a 20,000+ hour positive impact on developer productivity.