How we build containerized services at GitHub using GitHub

This post details GitHub's "paved path" for building containerized services using Kubernetes and Docker. It outlines the onboarding process for new services, including scaffolding with Hubot and GitHub Apps, generating Kubernetes manifests, and setting up CI builds. The deployment process is described, involving ChatOps commands, fetching Docker images, updating manifests, and applying them to clusters, with integration of merge queues and deployment pipelines. Security measures are detailed, such as pre-built Docker images, vulnerability scanning (Dependabot, code scanning, secret scanning), authentication/authorization, internal network access, branch protection, and centralized secret management. The end-to-end deployment flow from merge to rollout is illustrated with a diagram and step-by-step explanation.