Skip to content

Latest commit

 

History

History
147 lines (107 loc) · 5.39 KB

readme.md

File metadata and controls

147 lines (107 loc) · 5.39 KB
Raw

DevOps

| Guides | Projects |

This is my DevOps Repo.
This serves as my Playground, Portfolio, Research-Notebook, Cheat-Sheet and Guide.

Guides

Projects

1. Static Website CI-CD Pipeline

| Repo |

  • we deploy a static react app via terraform to gh-pages

2. The Pod Shop

| AppConfigs | SourceCode |

This is my first cluster based DevOps project that includes CI-CD and gitops principles.

  • We have a simple Web App with a forum and rtmp stream of a win95 vm that runs dooms ⛓️‍💥
    • we use Microservices via gRPC, kubevirt for virtualisation and react as frontend
  • k8s cluster is selfhosted via proxmox
    • we will use Tailscale Github Actions Integration instead of ssh to deploy to our k8s cluster
  • IAC,k8s and other app configs have their own repo -> gitops best practices
  • sensitive data will get managed by vault and gh secrets
  • we have an external jenkinspipeline for our test plans that get triggered via webhook and sheduled jobs in gh actions
  • we report back to github (out central "CI-CD" service 🕵️) and publish our tests and report back to github
    • we use gh actions plugins like publish reports to create a status report section (including markdown summary)
    • we setup a bot that reports via gh and messaging service like slack
  • elastic stack will be our main SIEM

So from my understanding, there a no Best Practices for every project... It took me a while to get started... but thanks to excellent help and support from @mkunikow via devops discord channel I could get a better understanding of modern CI-CD and how to approach my project.

POD SHOP

CI-CD Pipeline

graph TD;
%%{init:{
  'theme':'base',
  'themeVariables': {
    'lineColor':'#6A7FABCC',
    'fontSize':'16px'
  }
}}%%
    p1(pull Request and review)
    pub1(publish test results)
    pub2(publish test results)
    cronjob

    subgraph local_infra
	base
	dcworkshop1
	dcworkshop2
        style base fill:#f9d5e5,stroke:#b6a7a8,stroke-width:2px
        style dcworkshop1 fill:#f9d5e5,stroke:#b6a7a8,stroke-width:2px
        style dcworkshop2 fill:#f9d5e5,stroke:#b6a7a8,stroke-width:2px
    end

    subgraph Jenkins
        c1(CodeQuality And Linting)
        t1(testing plans)
        d1(Deployment)
        style c1 fill:#FFAF87,stroke:#377771,stroke-width:2px, primaryTextColor:#4C6085
        style t1 fill:#FFAF87,stroke:#377771,stroke-width:2px, primaryTextColor':'#4C6085'
        style d1 fill:#FFAF87,stroke:#377771,stroke-width:2px, primaryTextColor:#4C6085
	style Jenkins fill:#,stroke:#4C6085,stroke-width:2px font: #6A7FABCC
    end


    subgraph PublicRepo
	Main
	Development
        style Main fill:#FFE66D,stroke:#000,stroke-width:2px
        style Development fill:#FFE66D,stroke:#000,stroke-width:2px
        style PublicRepo #FF6B6B,stroke:#4C6085,stroke-width:2px
    end

    subgraph PrivateRepo
	Main2[Main]
	Development2[Development]
	style Main2 fill:#D4ADCF,stroke:#C1CAD6,stroke-width:2px
        style Development2 fill:#D4ADCF,stroke:#C1CAD6,stroke-width:2px
        style PrivateRepo C1CAD6:#856084,stroke:#856084,stroke-width:2px
    end

    Development --> c1
    c1-->pub1
    pub1-->p1
    p1-->Development

    Development2 -.-> Main2
    Main2 -.-> Development

    Main -->cronjob
    cronjob-->t1
    t1-->pub2
    pub2-->Main
    Development -.-> Main
    d1-->local_infra
    Main-->d1
Loading

Release Management & Test Scheduling

successfull Production-Commits will be pushed to release-candidate Branch

Phase Description Branch Crontab Time
Development Commits trigger Jenkins CI-CD pipeline production * * * * *
IAC Scanns the App Configuration folder test * * * * *
Compliance Compliance Checks, IAM Policy Validation, Network Policy Enforcement, Topology Verification test 0 */4 * * *
WebSecurity Running Web and Application Security Tests to avoid hacks like xss test 0 */4 * * *
Integration Executing Integration Tests (Back & Frontend) test 0 16,22 * * *
Performance Cluster-wide back- and frontend performance test test 30 16,22 * * *
Build Building the final version of the application for release release-candidate 0 23 * * *
Release Deploying the built application to production production & release 0 0 * * *