Skip to content

Commit

Permalink
Merge pull request #184 from cloudbees-days/cloudbees-cdro-compliance
Browse files Browse the repository at this point in the history
Adding outline structure to the CDRO plus Compliance modules
  • Loading branch information
zvercodebender committed Oct 13, 2023
2 parents 134eb3f + 32756ed commit f067151
Show file tree
Hide file tree
Showing 16 changed files with 190 additions and 1 deletion.
2 changes: 1 addition & 1 deletion labs/cloudbees-cdro-compliance/content/labs/_index.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "CloudBees CD/RO Labs"
title: "CloudBees CD/RO with Compliance Labs"
chapter: true
weight: 1
---
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
title: "Module 1: Cloudbees Release Orchestration"
chapter: true
weight: 2
---

# Module 1: Cloudbees Release Orchestration

The CloudBees CD/RO Service Catalogs help you accelerate application deployment. Service Catalogs automate routine deployment tasks and make them available as templates that end users can use by providing the minimum number of parameters and without the need to be a CloudBees CD/RO expert.

The labs in this module will provide an overview of Service Catalogs. Labs include the creation of a custom Service Catalog item, and an example using a more complex Service Catalog item we provide.
Workshop Labs:

CloudBees Release Orchestration
- Creating A Release From the Service Catalog
- Release Quality Gates
- Dealing with Security Exceptions
- Gathering Release Evidence
- Audit Ready Pipelines
- Release Command Center Dashboard
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
title: "Release Command Center"
chapter: true
weight: 2
---

# Module 2: Release Command Center and Analytics Dashboards
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
title: "Audit Ready Release Pipelines"
chapter: true
weight: 2
---

# Audit Ready Release Pipelines
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
title: "Cloudbees Software Delivery Overview"
chapter: true
weight: 2
---

# What is the Cloudbees Platform?
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
title: "Release Pipeline - Quality Gates"
chapter: true
weight: 2
---

# What are Quality Gates and how do they work?
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
title: "Release Evidence"
chapter: true
weight: 2
---

# Gathering Release Evidence
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
title: "Cloudbees Release Orchestration"
chapter: true
weight: 2
---

# What is CLoudBees Release Orchestration?
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
---
title: "Creating a Service Catalog Item"
chapter: false
weight: 3
---

Use the CloudBees CD/RO Service Catalog to package up easy-to-use functionality such as:

- **Creating models from parameterized templates**

Create models from templates by wrapping DSL code that is executed by a Service Catalog item.

- **Running custom automation**

Invoke a procedure from a Service Catalog item to implement automated tasks.

In this lab you will create a Service Catalog, and then create and run a [procedure based Service Catalog item](https://docs.cloudbees.com/docs/cloudbees-cd/latest/self-service/#_procedure_based_catalog_items) using the procedure you created earlier.

## Create a new catalog

1. Select the **Service catalog** link from the banner at the top. ![Service catalog in banner](te-service-catalog-banner.png?width=50pc)
2. Create a new catalog by selecting the plus button (**+**) in the upper right.
3. Select **Create new** on the **New Catalog** dialog.
4. Provide a name for the catalog such as *Trial Catalog* and select your *Trial Project* target project for it, and then click **OK**. ![New Catalog dialog](te-service-catalog-new-dialog.png?width=50pc)

## Add a catalog item

1. After you create the *Trial Catalog* the Service Catalog Item dialog appears. Enter a **name**, such as *Hello Catalog Item*, an item **description** and then click the **Define** button. ![New Catalog Item](te-service-catalog-new-item.png?width=50pc)
2. The New Catalog item definition dialog appears.
3. In the **Display** section, locate the **Select Button Label** field. Select **Execute**.

{{% notice note %}}
The **Button Label** of a Service Catalog Item is just a descriptive label of what end users should expect as an outcome of using the Service Catalog Item and does not in any way control what the Service Catalog item does. Also, besides the explicit options there is also an **Other...** option that allows you to provide whatever label you want.
{{% /notice %}}

4. Next, in the search input for the icon, enter *Automation* and select the **Automation** icon. ![Catalog Item label and icon](te-service-catalog-item-label-icon.png?width=50pc)
5. Scroll down to the **Definition** section.
6. Select the **Procedure** option on the left, and then select the project and procedure you created in the previous lab. ![Catalog Item definition](service-catalog-item-definition.png?width=50pc)

{{% notice note %}}
There are three types of Service Catalog Item definitions: DSL, Plugin and Procedure. You can learn more [here](https://docs.cloudbees.com/docs/cloudbees-cd/latest/self-service/#_catalog_items).
{{% /notice %}}

7. Select **OK** to save the Service Catalog Item definition.

## Run the Service Catalog item

1. At the top of the Service Catalog page, select **View Catalog**. ![Execute the catalog item](te-view-catalog-execute.png?width=50pc)
2. Click the **Execute** button of the Service Catalog item you just created.
3. Select **OK**.
4. The Job Details appear. Verify that the procedure ran as expected.
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
---
title: "Module 2: Cloudbees Compliance"
chapter: true
weight: 2
---

# Module 2: Cloudbees Compliance

The CloudBees Compliance... marketing description here?

The labs in this module will provide an overview of Compliance. Labs include an overview of CloudBees Compliance and demonstration of use case scenarios.
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
---
title: "Day in the life - Application Developer"
chapter: false
weight: 3
---

# A day in the life of an Application Developer

As a developer
* Watch a new jira being raised for the newly introduced issue
* Review the jira relating to the newly introduced vulnerability and the associated context
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
---
title: "Day in the life - Application Lead"
chapter: false
weight: 3
---

# A day in the life of an Application Development Lead

As an app lead/app-sec lead
* Review the updated security posture (Security Center)
* Walk through triage workflow – Fix required/Risk Accepted / False positive
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
title: "CloudBees Compliance"
chapter: false
weight: 3
---

# What is CloudBees Compliance?

Introduction of the product with slide deck. (15 min) - L&G Demo or the new Dark Demo.
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
---
title: "Day in the life - Cybersec Lead"
chapter: false
weight: 3
---

# A day in the life of a Cyber Security Engineer

As a Cybersec or second line of defense what visibility does CBC provide into the effectiveness of Compliance (SSDF) adoption across my applications and services.
* Application dashboard - Review application Compliance (SSDF) effectiveness metrics
* Service/Organisation Dashboard
* What evidence can I get out of the box to help with audits and release governance process?
* What release Gating controls are available?
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
title: "Compliance Demo - Create & Configuration Appliation"
chapter: false
weight: 3
---

# Creat and Configure an Application

Create a new application as an example and walk through the setup, context and accounts setup.
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
---
title: "Day in the life - Shared Services Security Lead"
chapter: false
weight: 3
---

# A day in the life of a Shared Services Security Lead

A day as a security lead (or shared services)
* Review compliance construct within CBC – L1 control ->L 2 controls ->Policies
* Activation of compliance across org Hierarchy and inheritance
* Activation of plugins within CBC to toolchain

0 comments on commit f067151

Please sign in to comment.