CI/CD Content Overview
CI/CD Content Overview
- IBM Cloud Toolchain for IBM Cloud Schematics
- CI/CD to Kubernetes Using IBM Cloud Toolchains
- Cloud Native CI/CD with Kubernetes and OpenShift
There are multiple options for CI and CD tooling that work with IBM Cloud. A CI/CD solution MUST
- Deploy to multiple kinds of infrastructure, including bare metal, VSIs, or container based such as Kubernetes or OpenShift
- Be built around different types of code bases, including infrastructure as code or applications that expose some business function to users.
- Must integrate with third-party tools for building, testing and artifact storing such as SonarQube, Maven and Artifactory.
- Must be designed to handle all aspects of the SDLC lifecycle. Failing fast being a key best practice to follow.
- Must deploy across multiple environments located in different regions and accounts and must integrate with RBAC to protect access to the resources it talks to.
In this overview and the following CI/CD sections, we will introduce a subset of tooling that run on IBM Cloud. This is not to be considered an all-inclusive list, but we will demonstrate the flexiblity and patterns of the tools to solve the requirements of the above list.
We will show two options for CI/CD tooling: IBM Cloud Toolchain and open-source cloud-native CI/CD tools that run on top of Kubernetes or OpenShift. Both are options that can be used for your IBM Cloud deployments, and there are pros and cons to each approach.
Use CI/CD for IBM Cloud Schematics to enable a GitOps workflow for your Infrastructure as Code Terraform scripts. Get started by following the instructions in this pattern.
IBM Cloud Public is an open-standards, cloud-based platform where you can build, run, and manage applications that are accessed by http://cloud.ibm.com. The advantage of using IBM Cloud Toolchain is that it integrates seamlessly with all resources already deployed on IBM Cloud while providing full DevOps capabilities provided by the Open Toolchain. There are some built-in features as well such as enabling DevOps Insights to give you aggregate view of all tests that are running in your pipeline.
Included in the core set of tools for any DevOps toolchain on IBM Cloud: Git Repos and Issue Tracking, Delivery Pipeline, and Eclipse Orion Web IDE. Git Repos and Issue Tracking is based on the GitLab Community Edition, and offers planning boards and source code collaboration through merge requests. The Delivery Pipeline orchestrates build, test, and deployment jobs across multiple environments as changes progress from the Developer to production. Applications can be deployed in minutes to the Cloud Foundry environment or to a Kubernetes cluster on IBM Cloud, to either public or private clouds. The Eclipse Orion Web IDE gives Developers quick access to the code from any browser.
Open toolchain integrates more tools around Continuous Delivery such as Slack, Atlassian JIRA, Sonatype Nexus, JFrog Artifactory, Sauce Labs, PagerDuty, BM Cloud Availability Monitoring, IBM Vulnerability Advisor, and IBM Globalization Pipeline. You can also substitute other tools for the Continuous Delivery capabilities, including GitHub, GitHub Enterprise, and Jenkins. Developers can also use their favorite IDEs and editors, such as Visual Studio Code, Eclipse, and more.
IBM Cloud DevOps provides concrete practices and architectures for cloud development. It enables Developers to get started quickly with new projects that employ the rich catalog of services on the IBM Cloud. IBM Cloud DevOps also provides Developers an open and integrated set of tools for automating delivery with speed and control.
Ready to get started? Go here to get started with setting up a IBM Cloud Toolchain that deploys an application to Kubernetes.
An Overview of what DevSecOps is, and how it can help you speed up you cloud native solution delivery
One of the patterns emerging with development teams is the ability to use CNCF Tools as part of a more open multi cloud CI/CD strategy. This approach is aligning around the Kubernetes platform. The IBM Cloud supports both upstream Kubernetes for advanced cutting edge workloads and Red Hat OpenShift the proven mutli cloud distribution of Kubernetes that can install on IBM Cloud, Azure, AWS, VMWare and on Premise and many more places. This approach removes cloud vendor lock in around CI/CD tools and enables development teams to be more flexible and the target cloud they focus on deploying and developing with.
There are two patterns from this approach:
- There are a core set of Development Tools that are installed inside the Kubernetes environment with the use of Operators the management and support of these tools can be controlled with centralized operations teams
- Integration of centralized operations tools like Source Code Management, Artifact Management, Image Management, Logging and Monitoring
This model enables agile cloud native development teams to execute quickly while also conforming to the enterprise standards required for CI/CD. This pattern also enable the reduction of costs of managing expensive centralized multi tenant CI services and enables the development teams to use a percentage of their development cluster to support CI activities. This approach with Tekton enable the centralized operations teams to impose specific pipeline tasks that need to be supported by development teams without the complex
This short video introduces the cloud native concepts of CI/CD DevOps with Red Hat OpenShift:
Each Cluster can have a selection of CNCF DevSecOps tools installed using IasC(Infrastrcture As Code) using Terraform. The cluster then turns from a production state cluster into a cluster that is used for multi tenant development teams.
The following describes the requirements:
- Installation: Install the CNCF Tools using Terraform this create a new Developer Environment
- Cluster: A Kubernetes or Red Hat OpenShift cluster that both hosts the tools and itself is a deployment target for application builds
- Software Delivery Lifecycle: Deployment target environments that support the application development lifecycle: dev, test, and staging
- Backend services: Cloud services commonly required by cloud-native applications for monitoring, security, and persistence
- CI/CD: A prebuilt, ready-to-run continuous delivery pipeline incorporating best-of-breed open source software tools supporting
Tektonfor CI and
- Code Patterns: Prebuilt code templates for common application components and tasks incorporating best practices that developers can add to their codebase as needed
- Dashboard: Integration of the tools into the OpenShift dashboard, and a centralized developer dashboard to help developers use the environment’s capabilities
A core set of tools are sourced from the IBM Cloud Catalog that can be found in the IBM Cloud. This approach helps assemble these reliable open source development tools into an end-to-end developer experience that is fully integrated with IBM Cloud’s managed container orchestration services.
Typically a Cloud System Admin installs and sets up a new Developer Environment, providing a place for the developers to start developing the minimum viable product (MVP). The objective is to reduce the time required for a team to configure and prepare their development environment. The key benefit is to make the end-to-end CI/CD development lifecycle consistent across each platform and make the out-of-the-box developer experience as simple as possible.
The installation is performed using Terraform, driven by scripts with a modular configuration so unneeded tools can be easily disabled or new tools added. The combination of tools selected are proven in the industry to deliver real value for modern cloud-native development.
After installation, the Developer Environment consists of a set of CNCF tools installed into your nominated kubernetes cluster.
This diagram illustrates the Developer Environment:
The diagram shows the components in the environment: the cluster, the deployment target environments, the cloud services, and the tools.
- An or 3-node cluster
- Cluster namespace that encapsulates the tooling installed in the cluster: tools
- Cluster namespaces for deployment target environments: dev, test, and staging
CNCF DevOps Tools
The following best-of-breed open source software tools are installed in the cluster’s tools namespace:
|Continuous Integration||Jenkins CI||Yes||Jenkins is a common tool for Continuous Integration|
|Continuous Integration||Tekton CI||Tekton is an emerging tool for Continuous Integration with Kubernetes and OpenShift|
|Code Analysis||SonarQube||Yes||SonarQube can scan code and display the results in a dashboard|
|Artifact and Helm Storage||Artifactory||Yes||Artifactory is an artifact storage and Helm chart repository|
|Continuous Deployment||Argo CD||ArgoCD support Continuous Delivery with GitOps|
|Contract API Testing||Pact||Pact enables API contract testing|
|End to End Tracing||Jeager||Monitor and troubleshoot transactions in complex distributed system|
To install the CNCF tools into your nominated kubernetes cluster follow the steps below:
|Software Delivery Lifecycle||Overview of the Tools you will be using with the Sandbox||Video||30 min|
|Install Tools||Install CNCF DevOps tools with Schematics||Schematics Install||15 mins|
|Install Dev Tools||Install Pre Prerequisites Client Developer Tools||Install Dev Tools||30 mins|
|Continuous Integration||Understand how Jenkins and Tekton support Continuous Integration||CI Tools||15 mins|
|Deploy Application||Understand how to Deploy an App with CI pipeline that enables testing||Deploy App||15 mins|
|Continuous Delivery||Understand how to enable Continuous Delivery||CD Tools||15 mins|
|Code Patterns||Starter code to enable fast on ramp for developers||Code Patterns|