Jenkins and AWS DevOps Tools
Download as PPTX, PDF•2 likes•1,485 views
This document summarizes a presentation about using Jenkins in AWS. It discusses installation options for Jenkins including using the LTS version or AWS Marketplace. It also overview Jenkins plugins and security options. The presentation demonstrates integrating Jenkins with AWS services like EC2 for managing slave instances, CodeDeploy for deployments, CodeCommit for source control, and CodePipeline for continuous delivery pipelines. It provides details on setting up IAM roles, policies and configuring the required AWS plugins in Jenkins.
Jenkins and AWS DevOps Tools
- 1. Central VA AWS UG Jenkins in AWS 1 7 F E B R U A R Y 2 0 1 6
- 2. 2 Agenda Tonight’s AWS Architecture Installation Options Jenkins Overview Security Options Plugins EC2 Integration (Roles, Users, Policies)
- 3. 3 Jenkins Overview “Jenkins is an open source continuous integration tool written in Java. The project was forked from Hudson after a dispute with Oracle. Jenkins provides continuous integration services for software development. It is a server-based system running in a servlet container such as Apache Tomcat.” - https://en.wikipedia.org/wiki/Jenkins_(software) Easy Integration 900+ Plugins Easy Installation Customization
- 7. 7 Jenkins Installation Options LTS Version* Java, Git, Maven Yum (AWS 64bt Linux AMI) or AWS Marketplace (Bitnami Jenkins on Ubuntu)
- 8. 8 Groovy Startup Script Performs post initialization tasks Jenkins.properties/init.groovy in $JENKINS_HOME
- 9. 9 Jenkins Plugins Plugins are the key to enhancing Jenkins functionality, usability, and interoperability. Most plugins are OSS. Cloudbees - https://www.cloudbees.com/products/cloudbees-jenkins-platform/enterprise- edition/features Some are better supported than others. Integration 900+ Customization
- 10. 10 Jenkins Security Authorization Test with Mock Realm Realms (test with Mock Realm) Combine with AWS Shared Responsibility Model
- 11. 11 EC2 Plugin Easy to use EC2 IAM Roles EC2 instances and IAM Roles (Don’t use *s) Starting and managing slaves, to achieve dynamic horizontal scaling across the AWS cloud. Setup AWS CLI as Jenkins user (sudo su -s /bin/bash jenkins, aws configure) Demo
- 12. 12 CodeDeploy Setup IAM Users, Groups, Roles, Policies, Trust Relationships (resources that can assume the role) AWS CodeDeploy Plugin Deployment target EC2 instances run codedeploy-agent, and use IAM Role Code deployment agent will run on deployment targets Setup S3 bucket for Jenkins Code Deployment Plugin
- 13. 13 CodeCommit Setup Create IAM user, with groups and permissions (polices). Use as Git repository. Deployment target EC2 instances run codedeploy-agent, and use IAM Role Use aws-cli that supports CodeCommit and Credential Helper commands. Disable OSX Keychain Access Utility (Code Commit 15 minute password expiration)
- 14. 14 Syncing Jenkins Config to AWS Code Commit SCM Sync Config shared additionnal includes SCM Sync configuration plugin
- 15. 15 AWS CodePipeline Visualization of CD stages CD Service Requires role with appropriate CodePipeline policies Requires S3 bucket versioning enabled. Can be integrated with remote Jenkins via AWS CodePipeline Plugin
- 16. 16 Questions?
- 17. THANK YOU.
Editor's Notes
- #11: Set <useSecurity> element to false to disable security settings.
- #12: Labels – control where builds execute. Choose whether for not to use auto-install options for Java/Maven or use AWS AMIs to pre-configure slaves.
- #13: YAML appsepc.yml Similar to Travis CI Control app configuration at the project level. http://docs.aws.amazon.com/codedeploy/latest/userguide/app-spec-ref.html
- #14: http://stackshare.io/stackups/github-vs-gogs-vs-aws-codecommit
- #16: Allows multiple stages and actions to be configured. Issues: Jenkins jobs names does not support nesting in folders. No way to stop long running pipeline without deleting pipeline.