Spinnaker is an open-source continuous delivery platform, originally built at Netflix and developed with Google, designed for one job that most CI tools handle badly: releasing software safely to production across more than one cloud. It is not a build system. It picks up where the build ends, taking an artifact — a container image, a machine image, a Helm chart, a Debian package — and moving it through environments with a deployment strategy, health checks and a rollback path that exists before the deployment starts.
Spinnaker's model is deliberately opinionated. An Application contains Clusters; a Cluster contains Server Groups; a Server Group is a versioned set of identical instances or a Kubernetes workload. Because every deployment creates a new server group rather than mutating an existing one, rollback is a traffic decision rather than a redeploy, and that single property is why teams adopt it. On top sit the deployment strategies: red/black, rolling red/black, highlander and canary, each with defined behaviour for what happens to the previous version and when it is disabled or destroyed.
Underneath, Spinnaker is a set of microservices rather than a monolith — Deck for the UI, Gate as the API gateway, Orca orchestrating pipeline execution, Clouddriver talking to every cloud provider and caching their state, Front50 persisting pipeline and application metadata, Rosco baking images with Packer, Igor integrating CI systems, Echo handling triggers and notifications, Fiat for authorisation, and Kayenta running automated canary analysis against Prometheus, Datadog or a cloud metrics source. Halyard, and now the Operator, configure the whole thing. That architecture is the reason Spinnaker does so much, and also the reason it needs deliberate operational skill.
Why this skill matters now
Deployment is where most delivery pipelines are weakest. Teams automate build and test thoroughly and then push to production with a script that has no defined rollback, no traffic control and no statistical check on whether the new version is actually healthy. Spinnaker exists because Netflix needed to answer those three questions at scale, and the answers it encodes — immutable server groups, named deployment strategies, automated canary analysis — remain the reference model even for organisations that ultimately choose something else.
The multi-cloud argument is real but often misunderstood. Spinnaker's value is not that it can deploy anywhere; it is that one pipeline definition, one approval model and one audit trail cover Kubernetes, EC2, ECS, Lambda, GCE and Cloud Foundry at once. Organisations with more than one target and a compliance obligation find that consolidation hard to replicate any other way.
The hiring gap sits in two places. Very few engineers can genuinely operate Spinnaker: eleven microservices, Halyard or Operator configuration, storage backends, authentication and Fiat authorisation, and upgrades that must not lose pipeline metadata. Fewer still can configure Kayenta properly — choosing metrics that actually indicate harm, setting judge thresholds that neither pass everything nor fail on noise, and running retrospective analysis before trusting a canary to gate production.