Categories
Bibliography DevOps Java Kubernetes Software Engineering Spring Framework

Continuous Delivery for Java Apps: Build a CD Pipeline Step by Step Using Kubernetes, Docker, Vagrant, Jenkins, Spring, Maven and Artifactory – B078B3FJ7J, 2017

See: Continuous Delivery for Java Apps: Build a CD Pipeline Step by Step Using Kubernetes, Docker, Vagrant, Jenkins, Spring, Maven and Artifactory, Publisher ‏ : ‎ Leanpub (December 14, 2017)

See also: Spring Bibliography, Spring Framework and Cloud Native

Fair Use Source:

This book will guide you through the implementation of the real-world Continuous Delivery using top-notch technologies. Instead of finishing this book thinking “I know what Continuous Delivery is, but I have no idea how to implement it”, you will end up with your machine set up with a Kubernetes cluster running Jenkins Pipelines in a distributed and scalable fashion (each Pipeline run on a new Jenkins slave dynamically allocated as a Kubernetes pod) to test (unit, integration, acceptance, performance and smoke tests), build (with Maven), release (to Artifactory), distribute (to Docker Hub) and deploy (on Kubernetes) a Spring Boot app to testing, staging and production environments implementing the Canary Release deployment pattern.

TABLE OF CONTENTS:

INTRODUCTION
Agile
Scrum
Scrum and Continuous Integration
Deployed vs Released
Scrum and Continuous Delivery
XP and Continuous Delivery
Automated Tests
Continuous Integration
Feature Branch
Continuous Delivery
Continuous Delivery Pipeline
Continuous Delivery vs Continuous Deployment
Canary Release
A/B Tests
Feature Flags

NOTEPAD APP: AUTOMATED TESTS, MAVEN AND FLYWAY
Pre-Requisites
The Notepad Application
Automated Tests
Unit Tests
Integration Tests
 Acceptance Tests
  Page Object
  Distributed Acceptance Tests with Selenium-Grid
 Smoke Tests
 Performance Tests with Gatling.io
Apache Maven
Maven Snapshot vs Release
The Default Lifecycle and its Phases
Maven Repositories
Repository Manager (Artifactory)
Maven Plugins: Surefire and Failsafe
Maven Profile
Running Unit Tests
Running Integration Tests
Running Acceptance Tests
Running Smoke Tests
Running Performance Tests
Publish Artifacts to Artifactory with Maven
Publish a Snapshot to Artifactory
Publish a Release to Artifactory
The release:prepare Goal
The release:perform Goal
 Flyway

DOCKER
Introduction to Docker
Difference Between Container and Image
Docker Hub
Create your Account
Official Docker Repositories
Image Tags
Non-Official Docker Images
Create a Repository, an Image and Push it to Docker Hub
 Running Containers on Docker
  Running Containers as Daemons
  Container Clean Up
  Naming Containers
  Exposing Ports
  Persistent Data with Volumes
  Environment Variables
Docker Networking
  Create a Bridge Network
  Container Static IP Address
  Linking Containers
 Most Used Docker Commands
  Images
  Containers
  Misc
 Building Docker Images: Dockerfile

JENKINS: PIPELINE AS CODE AND CHATOPS
 Jenkins Overview
 Jenkins Concepts
  Job (or Project)
  Build
  Artifact
  Workspace
  Executor
  Plugin
  Node, Master, and Agent (or Slave)
 ChatOps
  Create a Slack Workspace
  Integrate Slack with Jenkins
  Slack Notification Plugin
  Use Hubot to Interact with Jenkins
 Jenkins Pipeline
  Declarative Pipeline vs Scripted Pipeline
  Scripted Pipeline
  Using Docker with Jenkins Pipelines
  Running Docker from Within the Jenkins Container
Scaling Jenkins with Slaves

KUBERNETES
 Why Kubernetes?
 Set up a Kubernetes Cluster using Vagrant
 Hands-on Introduction to Kubernetes
 Kubernetes Concepts
  Namespaces
  Pods
  Labels
  Replica Sets
  Services
  Service Discovery using DNS
  Service Discovery using Namespaces
  Volumes
  Handling External Configurations
  Config Maps
  Changing Logback Log Level at Runtime
  Secrets
  Using Secrets as Environment Variables
  Using Secrets as Files from a Pod
  Deployments
  Readiness Probes
  Liveness Probes
  Canary Release
Kubernetes Architecture
Kubernetes Master Components
Etcd
API Server
Controller Manager
Scheduler
 Kubernetes Node Components
  Service Proxy
  Kubelet
  cAdvisor
 Kubernetes Add-ons
  Web UI (Dashboard)
   Monitoring Kubernetes with Heapster, InfluxDB and Grafana
   Web UI Overview
  DNS

HANDS-ON PROJECT

APPENDICES

Categories
Bibliography DevOps Software Engineering

B07QT9QR41

See: The Unicorn Project: A Novel about Developers, Digital Disruption, and Thriving in the Age of Data

Fair Use Source:

Categories
Bibliography C# .NET DevOps JavaScript Software Engineering

B01N3C5ECP ISBN-13: 978-1787286610

See: Continuous Integration, Delivery, and Deployment: Reliable and faster software releases with automating builds, tests, and deployment, Publisher ‏ : ‎ Packt Publishing (October 30, 2017)

Fair Use Source:

Categories
Bibliography DevOps Software Engineering

B07F2KCM75

See: Hands-On Continuous Integration and Delivery: Build and release quality software at scale with Jenkins, Travis CI, and CircleCI

Fair Use Source:

Categories
Bibliography DevOps Python Software Engineering

B07SR2KMXD

See: DevOps in Python: Infrastructure as Python 1st ed. Edition

Fair Use Source:

Categories
Bibliography DevOps Python Software Engineering

B07MR53BFL ISBN-13: 978-1484242803

See: Python Continuous Integration and Delivery: A Concise Guide with Examples, 1st ed. Edition, Publisher ‏ : ‎ Apress; 1st ed. edition (December 28, 2018)

Fair Use Source:

Categories
Bibliography DevOps Software Engineering

B079YWMY2V

See: Release It!: Design and Deploy Production-Ready Software 2nd Edition

Fair Use Source:

Categories
Bibliography DevOps Software Engineering

B07CSMJSQZ

See: Continuous Delivery and DevOps – A Quickstart Guide: Start your journey to successful adoption of CD and DevOps, 3rd Edition

Fair Use Source:

Categories
Bibliography DevOps Java Software Engineering

B07KFQ99CT ISBN-13: 978-1491986028

See: Continuous Delivery in Java: Essential Tools and Best Practices for Deploying Code to Production, 1st Edition, Publisher ‏ : ‎ O’Reilly Media; 1st edition (November 29, 2018)

Fair Use Source:

Categories
Bibliography DevOps Software Engineering

B096YGZVZ9

See: Continuous Delivery Pipelines: How To Build Better Software Faster

Fair Use Source:

Categories
Bibliography DevOps Software Engineering

B0026772IS

See: Continuous Integration: Improving Software Quality and Reducing Risk (Addison-Wesley Signature Series (Fowler)) 1st Edition

Fair Use Source:

Categories
Bibliography DevOps Software Engineering

B003YMNVC0

See: Continuous Delivery: Reliable Software Releases through Build, Test, and Deployment Automation (Addison-Wesley Signature Series (Fowler)) 1st Edition

Fair Use Source:

Categories
Bibliography

B07CT6XV2D

See: Jenkins 2: Up and Running: Evolve Your Deployment Pipeline for Next Generation Automation

Fair Use Source:

Categories
Cloud DevOps DevSecOps-Security-Privacy Linux Software Engineering

DevOps toolchain

See also: CloudOps, toolchain

“A DevOps toolchain is a set or combination of tools that aid in the delivery, development, and management of software applications throughout the systems development life cycle, as coordinated by an organization that uses DevOps practices.

Generally, DevOps tools fit into one or more activities, which supports specific DevOps initiatives: Plan, Create, Verify, Package, Release, Configure, Monitor, and Version Control.[1][2]” (WP)

Toolchains

“In software, a toolchain is the set of programming tools that is used to perform a complex software development task or to create a software product, which is typically another computer program or a set of related programs. In general, the tools forming a toolchain are executed consecutively so the output or resulting environment state of each tool becomes the input or starting environment for the next one, but the term is also used when referring to a set of related tools that are not necessarily executed consecutively.[3][4][5]

As DevOps is a set of practices that emphasizes the collaboration and communication of both software developers and other information technology (IT) professionals, while automating the process of software delivery and infrastructure changes, its implementation can include the definition of the series of tools used at various stages of the lifecycle; because DevOps is a cultural shift and collaboration between development and operations, there is no one product that can be considered a single DevOps tool. Instead a collection of tools, potentially from a variety of vendors, are used in one or more stages of the lifecycle.[6][7]” (WP)

Stages of DevOps

Further information: DevOps

Plan

Plan is composed of two things: “define” and “plan”.[8] This activity refers to the business value and application requirements. Specifically “Plan” activities include:

  • Production metrics, objects and feedback
  • Requirements
  • Business metrics
  • Update release metrics
  • Release plan, timing and business case
  • Security policy and requirement

A combination of the IT personnel will be involved in these activities: business application owners, software developmentsoftware architects, continual release management, security officers and the organization responsible for managing the production of IT infrastructure.

Create

Create is composed of the building (see also build automation), coding, and configuring of the software development process.[8] The specific activities are:

Tools and vendors in this category often overlap with other categories. Because DevOps is about breaking down silos, this is reflective in the activities and product solutions.[clarification needed]

Verify

Verify is directly associated with ensuring the quality of the software release; activities designed to ensure code quality is maintained and the highest quality is deployed to production.[8] The main activities in this are:

Solutions for verify related activities generally fall under four main categories: Test automation , Static analysis , Test Lab, and Security.

Packaging

Packaging refers to the activities involved once the release is ready for deployment, often also referred to as staging or Preproduction / “preprod”.[8] This often includes tasks and activities such as:

  • Approval/preapprovals
  • Package configuration
  • Triggered releases
  • Release staging and holding

Release

Release related activities include schedule, orchestration, provisioning and deploying software into production and targeted environment.[9] The specific Release activities include:

  • Release coordination
  • Deploying and promoting applications
  • Fallbacks and recovery
  • Scheduled/timed releases

Solutions that cover this aspect of the toolchain include application release automation, deployment automation and release management.

Configure

Configure activities fall under the operation side of DevOps. Once software is deployed, there may be additional IT infrastructure provisioning and configuration activities required.[8] Specific activities including:

  • Infrastructure storage, database and network provisioning and configuring
  • Application provision and configuration.

The main types of solutions that facilitate these activities are continuous configuration automationconfiguration management, and infrastructure as code tools.[10]

Monitor

Monitoring is an important link in a DevOps toolchain. It allows IT organization to identify specific issues of specific releases and to understand the impact on end-users.[8] A summary of Monitor related activities are:

  • Performance of IT infrastructure
  • End-user response and experience
  • Production metrics and statistics

Information from monitoring activities often impacts Plan activities required for changes and for new release cycles.

Version Control

Version Control is an important link in a DevOps toolchain and a component of software configuration management. Version Control is the management of changes to documents, computer programs, large web sites, and other collections of information.[8] A summary of Version Control related activities are:

  • Non-linear development
  • Distributed development
  • Compatibility with existent systems and protocols
  • Toolkit-based design

Information from Version Control often supports Release activities required for changes and for new release cycles.

See also

References

  1. ^ Edwards, Damon. “Integrating DevOps tools into a Service Delivery Platform”dev2ops.org.
  2. ^ Seroter, Richard. “Exploring the ENTIRE DevOps Toolchain for (Cloud) Teams”infoq.com.
  3. ^ “Toolchain Overview”nongnu.org. 2012-01-03. Retrieved 2013-10-21.
  4. ^ “Toolchains”elinux.org. 2013-09-08. Retrieved 2013-10-21.
  5. ^ Imran, Saed; Buchheit, Martin; Hollunder, Bernhard; Schreier, Ulf (2015-10-29). Tool Chains in Agile ALM Environments: A Short IntroductionLecture Notes in Computer Science9416. pp. 371–380. doi:10.1007/978-3-319-26138-6_40ISBN 978-3-319-26137-9.
  6. ^ Loukides, Mike (2012-06-07). “What is DevOps?”.
  7. ^ Garner Market Trends: DevOps – Not a Market, but Tool-Centric Philosophy That supports a Continuous Delivery Value Chain (Report). Gartner. 18 February 2015.
  8. a b c d e f g Avoid Failure by Developing a Toolchain that Enables DevOps (Report). Gartner. 16 March 2016.
  9. ^ Best Practices in Change, Configuration and Release Management (Report). Gartner. 14 July 2010.
  10. ^ Roger S. Pressman (2009). Software Engineering: A Practitioner’s Approach (7th International ed.). New York: McGraw-Hill.

Categories

Sources:

Fair Use Sources:

Categories
Artificial Intelligence DevSecOps-Security-Privacy History Networking Software Engineering

Over-the-Air Vehicle Software Updates – 2014 AD

Return to Timeline of the History of Computers

2014

Over-the-Air Vehicle Software Updates

Elon Musk (b. 1971)

“In January 2014, the National Highway Traffic Safety Administration (NHTSA) published two safety recall notices for components in cars that could overheat and potentially cause fires. The first recall notice was for General Motors (GM) and required owners to physically take their cars to a dealership to correct the problem. The second was for Tesla Motors, and the recall was performed wirelessly, using the vehicle’s built-in cellular modem.

The remedy described by the NHTSA required Tesla to contact the owners of its 2013 Model S vehicles for an over-the-air (OTA) software update. The update modified the vehicle’s onboard charging system to detect any unexpected fluctuations in power and then automatically reduce the charging current. This is a perfectly reasonable course of action for what is essentially a 3,000-pound computer on wheels, but an OTA fix for a car? It was a seismic event for the automotive industry, as well as for the general public.

Tesla’s realization of OTA updates as the new normal for car maintenance was a big deal in and of itself. But the “recall” also provided an explicit example of how a world of smart, interconnected things will change the way people go about their lives and take care of the domestic minutiae that are part and parcel to the upkeep of physical stuff. It was also a glimpse into the future for many, including those whose jobs are to roll up their sleeves and physically repair cars. The event also called into question the relevance of NHTSA using the word recall, because no such thing actually took place, according to Tesla CEO Elon Musk. “The word ‘recall’ needs to be recalled,” Musk tweeted.

This was not the first time Tesla had pushed an update to one of its vehicles, but it was the most public, because it was ordered by a government regulatory authority. It also served as a reminder of the importance of computer security in this brave new connected world—although Tesla has assured its customers that cars will respond only to authorized updates.

Indeed, OTA updates will likely become routine for all cars for that very reason—timely security updates will be needed when hackers go after those 3,000-pound computers on wheels.”

SEE ALSO: Computers at Risk (1991), Smart Homes (2011), Subscription Software “Popularized” (2013), Wikileaks Vault 7 CIA Surveillance and Cyberwarfare (2017)

Don’t think of the Tesla as a car with a computer; think of it as a computer that has wheels.

Fair Use Sources: B07C2NQSPV