We are in process of setting-up automatic deployment for our application. Our servers are hosted in a cloud environment. Currently, we are doing manual deployment and uploading artifacts in SparrowHub artifactory. We want to integrate sparrowhub with Atlassian bamboo to automatically upload the artifacts.
"Artifactory Generic Deploy" plugin of Bamboo only allows artifact to upload in JFrog artifactory but our artifacts are available in sparrowhub. We are not able to find anything on integrating sparrowhub with bamboo. Please provide inputs. Thanks in advance.
I am afraid you have a slight mixup of terms.
Atrifactory is a universal artifact repository manager made by JFrog.
it has a Bamboo plugin.
SparrowHub is a different product. it us a repository of sparrow plugins.
HTH,
Related
Basically I am trying to implement an automated Jenkins pipeline. which will automatically build and test my codes from SVN repository. The pipeline has to be set such that, it riggers a test and build each time a code is committed to the SVN repository. All the servers are on premises. I am trying to implement a Jenkins Build and CI/CD pipeline concept with SVN as my Source code repository. This is my requirement.
I am new to SVN and on premises servers. My expertise are in with Git and Github, Terraform and AWS Cloud platform. So I must say I am lost with this one.
I have ben doing some research and mostly found things on Github and Cloud platforms with Jenkins. Which is exactly opposite what I want.
How do I go about this? Is there any good, clear concise documentation I could use? or video? or tutorials?
I have quite a few applications with source and binary code in Bitbucket repositories. Jenkins is my CI/CD platform which is locally installed. For the most part, Jenkins jobs simply pull binary files from the Bitbucket repo and deploy to target hosts (Windows). Our devs generally execute builds locally and push the source and binary files (.Net) to the repos. A few projects are npm or ant/maven builds. My CISO would like to integrate vulnerability scanning using JFrog Xray into the CI process. Therefore, I have several questions.
Will JFrog/Xray perform a scan as a build step without switching to Artifactory for version control?
Which version of JFrog/Xray do I need? Will the free version work?
Do I need to install JFrog/Xray locally, or can I use a hosted version?
Is there any documentation for my use case? I've reviewed JFrog's documentation, but most related to using Artifactory.
Is there an alternative to JFrog/Xray that would be better?
Nope, Xray without Artifactory never works
Artifactory does have the OSS version for Maven projects which is free that will be onprem but no Xray onprem, though you can refer to this link to create a free JFrog platform with Artifactory and Xray.
For local version which is onprem environment licensing is needed and for cloud you can go with the free versions available.
As you referred documents, Artifactory is needed for Xray to work.
I'm new to Bamboo and currently learning & using the Bamboo as a standalone server in my company. There I can see the much-advanced options like creating the Build Plans, separate deployment projects based on different environments and also can integrate with notifications and triggers.
I wanted to do a lot of research and learning by myself at home so I was looking for a cloud-based version of Bamboo which I can straight away use to perform similar task like creating build plans, etc. I do not see anything cloud version of Bamboo but I can see BitBucket (cloud-based). What I know is that it is a source code repository like GitHub and GitLab and it has integration with inbuilt CI/CD.
Q1. Is BitBucket a cloud version of source code repository plus Bamboo?
Q2. If not, then do we have cloud version of Bamboo with exact options like build plans, deployment projects, etc
Q3. Also, I'm looking if there is any Bot which I can use like SlackBot or DeployBot to invoke or trigger the Bamboo Build Plan with a chat command? Slack I'm familiar but not DeployBot. I can get the Bamboo build notifications to my Slack channel but not the other way around.
I'm learning and doing research & development hence required clarification on my doubts from experts in this DevOps field to show me the right path.
Please suggest as I'm looking for setting up Bamboo with Bot instructing my build plans.
Thank you
Doing hands-on experience in company on Bamboo and learning as much as I can and playing around with it.
Bamboo Cloud was discontinued in January 2017. Bitbucket Cloud can still notify your Bamboo instance via webhook, assuming you configure Bamboo and your firewall and the webhook properly, or you can use Bitbucket Pipelines for the all-in-one approach.
You can also use Bitbucket Server if you'd prefer to keep everything behind the firewall.
So I'm setting up a CI solution using Jenkins and I've been instructed to use SonaType's Nexus Repository as a binary repository that ties into Jenkins. The idea as I understand is that it will provide immediate rollback to previous compiled binaries.
Some of the other engineers who have experience with Jenkins have questioned this decision, because they believe Jenkins can already do this. Apparently Jenkins will store build results for immediate rollback deployment anyway, so the inclusion of Nexus is of dubious benefit.
Is it true that Jenkins can already offer immediate rollback without a third-party service or plugin? If so, what is the benefit of using Nexus with Jenkins if any?
One of the benefits of use an artifact repository (Nexus, Jfrog Artifactory..) with Jenkins(or another CI tool like Bamboo) is that you can deploy your artifacts to a repository in Nexus(or Artifactory) with their control version (include SNAPSHOT in maven) previously to send these artifacts to each environment (integration environment, production environment...).
This is a good practice because when you do an install of your projects, for example:
mvn install
Your projects downloads all dependencies from the artifact repository (Nexus, Artifactory...) and theses dependencies are organized and availables for al your team.
I am relatively new to Artifactory. We are using gardle artifactory plugin to publish the artifacts & also we are using Jenkins CI to automate builds.
In Artifactory Snapshot we have urls like (dev, stg, perf, prodfix) version & filename(abc-dev.jar).
1.) After dev build, I have to promote abc-dev.jar to stg URL(abc-stg.jar).similarly for rest of environment.
Kindly advise how we can achieve this.
In Jenkins, there's a Pipeline DSL that you can use to promote your builds. See the documentation here:
https://wiki.jenkins-ci.org/display/JENKINS/Artifactory+-+Working+With+the+Pipeline+Jenkins+Plugin