Operations | Monitoring | ITSM | DevOps | Cloud

March 2021

Intro to CircleCI Arm Compute Resource Classes

Arm Compute Resources Classes is a new feature in Preview from CircleCI which enables developers to execute CI/CD pipelines on Arm64 architectures. Join Angel Rivera, Senior Developer Advocate, and Alexey Klochay, Arm Compute Product Manager, both from CircleCI, to learn more about The Arm Compute preview program and how to easily implement them into CI/CD pipelines.

Integrating Logging into CI/CD

In my experience, pipeline monitoring and management is traditionally either left for the last developer who deployed, or unmonitored entirely. This lack of centralized monitoring and production-level resiliency can lead to significant development delays or even bring pipeline and train deliveries to a grinding halt. But we can do better.

Scaling Software Supply Chains Securely

Software supply chains are mission-critical for digital businesses, and as global conditions accelerate the growth in contactless interactions and transactions, many organizations are reviewing how to solve the challenge of scaling the volume and velocity of their software development and release processes to meet the digital demand. The latest JFrog Platform release delivers a rich payload of new capabilities to scale and secure the software supply chain for digital businesses.

Top Configuration Management Tools: Chef vs Puppet & More

In this latest consideration guide created to assist IT operators in which tools they choose for a range of different processes and activities, we’ve gathered a range of insights from some of our favourite specialists to take you through the essentials tools of configuration management. Configuration management is a systems engineering practise that ensures consistency of the configuration supporting both software and hardware of a company or product.

Managing CI/CD pipelines with Arm compute resource classes

CircleCI has released new Arm-based compute in preview. Arm processors and architectures are becoming widely available as development teams adopt them as compute nodes in many application infrastructures. Organizations that need to run microservices, application servers, databases, and other workloads in a cost-effective way will continue to turn to the Arm architecture.

Six Simple Steps to Your First CI/CD DevOps Pipeline in JFrog Pipelines

See how easy it is to get started, and start working with a simple “Hello World” DevOps pipeline. Along the way, you’ll learn some fundamental Pipelines concepts. Here’s what you’ll need: Login to your JFrog Cloud account with the JFrog Platform credentials provided to you by email.

Continuous integration for React Native applications

Apache Cordova, since its release in 2009, has created a paradigm shift for mobile application development. Before Cordova, only developers who knew platform dedicated languages for a particular type of mobile operating system could develop native mobile applications. There was Objective-C for developing iOS apps, or Java for Android apps and platforms like Blackberry. Windows Phone also had languages dedicated to building their mobile applications.

Missing Infrastructure: Accelerated Worldwide Delivery

Software development by distributed teams is nothing new. But since 2020, it’s no longer just teams that are globally dispersed, it is the individual team members themselves. Remote working is the new normal. So in this unpredictable, “modern” world we’re in, how do you put together a solution that delivers for every single team member, no matter their location?

How to help your team thrive in times of change

March 1, 2020, was a Sunday. I was getting ready for a work trip to San Francisco. Just before heading to the Berlin airport, I checked my phone. There was a text from my boss: Hey Lena, trying all channels. Don’t fly. I didn’t fly that day and I haven’t flown since. Two days later, as planned, I went from interim to permanent VP of Product Engineering at CircleCI. At the same time, Europe was going into lockdown, then the world went into lockdown.

Paving The Road, From Code To Kubernetes With JFrog And Microsoft

The shift to modern application architectures, often based on microservices running in cloud infrastructures and built using DevOps and CI/CD principles, has been a game changer for how applications are developed. The shift, however, introduces some new complexities. JFrog and Microsoft have been on the forefront of this shift. We’ve heard about these new complexities from you on your development journey, and your need for a simple, cloud-native, Kubernetes enabled way to deliver better quality software faster.

Create On-Demand Kubernetes Clusters for CI/CD With Kind and Codefresh

Wouldn’t it be handy to quickly spin up a Kubernetes cluster for CI testing, on-demand? Interested? If so, read on! Here at Codefresh, many of our customers develop Kubernetes-native applications. A common CI task is to create a Kubernetes cluster to test out deployment processes and integrations. Often, such tests can be greatly simplified if this cluster is ephemeral – that is, it is created on-demand for each build of a test pipeline.

9 Essential DevOps Tools for 2021

DevOps is a philosophy, a culture, and a set of practices adopted by product teams to shorten the software development life cycle, enhance collaboration and visibility, and accelerate time to market for new updates while ensuring high-quality releases. At the core of the DevOps principal is the organization of software development (Dev) and IT Operations (Ops) engineers into cross-functional teams that can effectively build, run, and monitor their own software releases.

Automating key rotation for CI/CD pipelines

With the new Contexts API release, developers can save their team valuable time while enhancing security practices. We know maintaining your organization’s security is crucial. There is the need to meet strict compliance guidelines, such as FedRAMP and GDPR, and what seems to be an increasing number of breaches, like the compromise of over 150,000 video security cameras as a result of a targeted Jenkins server.

Java 16 Commits to Git and GitHub: A Personal Reflection

I was introduced to Git and GitHub in May of 2014 – just shy of 10 years since Git was created in 2005. That same day I was also handed a MacBook Pro laptop and an IntelliJ license, the main tools with which I was to begin my new role as a developer in a new position at a new company. It all sounds lovely, right?

Introducing server 3.x: enterprise-focused Kubernetes for self-hosted CircleCI installations

Server 3.x, which is now available to all CircleCI customers, was designed to meet the strictest security, compliance, and regulatory restraints. This self-hosted solution can scale under heavy workloads, all within your team’s Kubernetes cluster on your private network, but with the dynamically scaling cloud experience of CircleCI. Offering an exceptional on-premise service means keeping that service up-to-date with the latest releases.

Scaling my application: am I ready?

Most applications begin with a small to medium-sized user base. Even with migration projects, you would not immediately open your new application to the entire existing user base. Instead, you would first test with some internal users, then open up to early adopters. Nevertheless, if your application is successful, at some point you will face the need to scale it. Nevertheless, if your application is successful, at some point you will face the need to scale it.

Skipping artifact downloads in Bitbucket Pipelines

Allowing steps to skip downloading artifacts has been a highly requested feature from our customers. You can now disable artifact downloading on certain steps that do not require any artifacts, which will allow faster builds and can reduce your costs as a result. Disabling artifact downloads during a step is as easy as switching off a flag. Note that these steps can still produce artifacts to pass down to future steps.

How to set up Software Security and Compliance for Your Artifacts

The simplest way to ensure the safety of all the open source (OSS) components used by your teams and sites, is with a software composition analysis (SCA) tool. You need an automated and reliable way to manage and keep track of your open source usage. With JFrog Xray, you can set up vulnerability and license compliance scanning built into your software development lifecycle (SDLC).

The essential steps to building your own DevOps pipeline

Keeping up with customer demand and staying ahead of the competition requires fast releases and efficient code. This is where DevOps comes into play. Where DevOps is the practice, mindset, and culture of combining software development (i.e. Dev) and IT operations (i.e. Ops) to accelerate the development lifecycle and provide continuous delivery without compromising quality.

Leading Your Team to DevOps Maturity

There are many reasons teams get stuck in the process of adopting DevOps. Now Rob Zuber, CircleCI CTO, brings an inspiring and practical guide to moving your team further up the DevOps maturity ladder, regardless of where you are now. In this ebook, Rob brings two decades of experience leading teams to work for you, with practical takeaways and strategies that work for real-world teams, from startups to enterprise companies.

Bitbucket Pipelines and OpenID Connect: No more secret management

Bitbucket Pipelines now allows you to talk to your favorite third-party applications without an access token or secret. You no longer need to store your secrets in Bitbucket Pipelines. You can generate an OpenID Connect token in Bitbucket Pipelines, and use that to talk to any third-party application that supports OpenID Connect.

Automate (and scale) your Android deployment with Bitbucket Pipelines

We’ve launched a new Android template in Bitbucket Pipelines. This template helps you automate building and testing an Android project in a Docker container, using Gradle as your build tool. Access the template code here or go to the Pipelines tab of your repo and select the Android template. This blog walks you through how this template is structured and has tips on how you can scale it.

CI/CD and Security Testing Automation with CircleCI and NeuraLegion

Join CircleCI and NeuraLegion for a hands-on workshop around automating CI/CD and Dynamic Application Security Testing (DAST). Benefits of CI/CD Benefits of shifting AppSec left What is Developer Focused DAST? How to automate DAST and CI/CD We'll utilize CircleCI orbs during a 50 minute hands-on workshop to integrate a NexPloit engine into a CircleCI pipeline. We'll cover tips for pipeline failure, recommit, and rescan. Lastly, we’ll review results in NeuraLegion's dashboard.

My Build, My Way | JFrog Pipelines Extensions

Once my new projects are almost ready to share with the team and I can build and test them locally, I’ll need a CI automation tool to test and deploy each release. As a Principal Consultant Declarative Systems, I’ve been recommending JFrog Artifactory to clients looking to bullet-proof their deployments since 2016. After considering different CI solutions, we found that JFrog Pipelines has the best integration with Artifactory which made choosing this platform a no-brainer.

Publishing a Python package

For many software engineers and developers, using standard libraries or built-in objects is just not enough. To save time and increase efficiency, most developers build on work done by others. Whatever the coding problem, there is likely another programmer who has already created a solution for it. There is usually no need to repeat the problem-solving process. This principle is known as Do not Repeat Yourself or DRY.

Java Artifacts Just Got Better: jpackage is Production Ready in Java 16

If you shudder thinking about compilation for different platforms, I know the feeling. One of the Java promises, the WORA (Write Once, Run Anywhere) principle, while revolutionizing platform independence, it stopped short of one more step – to be able to deploy anywhere. Personally, I think that WORADA sounds awesome, but I guess before Docker it didn’t occur to people that eliminating “works on my machine” is as simple as shipping your machine.

Deploying applications to Kubernetes from your CI pipeline with Shipa and CircleCI

Kubernetes can bring a wide collection of advantages to a development organization, but efficiently deploying applications to Kubernetes is something many organizations are still working to perfect. Properly using Kubernetes can significantly improve productivity, empower you to better utilize your cloud spend, and improve application stability and reliability. On the flip side, if you are not properly leveraging Kubernetes, your would-be benefits become drawbacks.

Forbes names CircleCI to America's Best Startup Employers list

Our team at CircleCI has been hard at work this past year. From rolling out major product additions like CircleCI Insights and private orbs, along with educational resources like our developer hub and State of Software Delivery Report that includes the first CI/CD benchmarks for high-performing engineering teams, it seems like every day there is something new to look forward to. All of this has taken place during unprecedented times for everyone across the globe.

What's New with JFrog Artifactory and Xray

Get the latest on self-hosted Docker rate limits, cutting through violation noise and new package type support. Without doubt, 2020 has been one of the most challenging years for everyone in recent history, but especially for those in the world of DevOps. JFrog has strived to continue developing and innovating at the same pace, to give our customers an even better end-to-end DevOps experience, and help customers maintain their drum-beat of on-time releases.

How to Leverage Your Kubernetes Cluster Resources to Run Blazingly Fast and Secure CI/CD Workflows in Just a Few Minutes

This blog will take you on a step-by-step journey to show you how you can leverage your Kubernetes cluster resources to run your CI/CD workflows using the Codefresh hybrid solution. What Is the Codefresh Hybrid Solution and How Does It Work? The Codefresh hybrid solution provides you with a way of running the platform’s workflows on your Kubernetes resources, keeping your private resources safe while enjoying the benefits of a SaaS solution.

Deploying applications to Kubernetes from your CI pipeline with Shipa

Kubernetes can bring a wide collection of advantages to a development organization. Properly using Kubernetes can significantly improve productivity, empower you to better utilize your cloud spend, and improve application stability and reliability. On the flip side, if you are not properly leverag Kubernetes, your would-be benefits become drawbacks. As a developer, this can become incredibly frustrating when your focus is on delivering quality code fast.

Continuous integration for a Bazel Android project

Bazel (pronounced like the tasty herb: “bay-zell”) is an universal build tool developed by Google. Some notable companies like Twitter and projects like the Android Open Source project have migrated to Bazel. In this tutorial, you will learn how to build a Bazel Android project and set it up for continuous integration with CircleCI. We will wrap up by automatically running tests and producing a binary APK file. In addition to the written guide there is a working sample project.

Automate Your AWS Lambda Development Cycle

AWS Lambda is a serverless compute service that lets you run code without provisioning or managing servers. It is great if you want to create a cost-effective, on-demand service. You can use it as part of a bigger project where you have multiple services or as a standalone service to do a certain task like controlling Alexa Skill.

We're Bringing Cloud DevOps to Government Clouds on AWS and Azure

Helping software producers achieve compliance with regulatory requirements has been a huge part of our focus at JFrog. That’s why many in the most regulated industries such as banking, finance, manufacturing, and retail are our customers for DevOps. We’re excited to announce that JFrog DevOps Platform solutions – JFrog Artifactory and JFrog Xray – are now available with native deployment templates for customers using AWS GovCloud (US) and Azure Government clouds.

Managing Docker Images with the JFrog Platform

Managing Docker images from development to production is a challenge for many companies looking to scale. IImages full of packages containing layers of different file types creates a needle in a haystack situation when hunting down security vulnerabilities or dependency issues. On top of worrying about what versions of what images are ready for release, in order to create a streamlined delivery process for Docker images, you also need to incorporate security into your pipeline. In this webinar, we will cover some important topics on why your teams should use Artifactory as your Docker Registry and the many benefits and advantages that come along with it.

Accelerate Cloud Adoption with CircleCI and Altostra's No-Code Infrastructure Platform

IaC languages like CloudFormation have made cloud management more efficient at scale, but have also added layers of complexity and more risk for human error. To get to market fast, developers need to accelerate software delivery while ensuring quality. CircleCI’s industry-leading CI/CD platform seamlessly integrates with Altostra’s no-code infrastructure to simplify cloud application development, leaving no room for error.

How High Performing Teams Automate Artifact Management and CI/CD

Join CircleCI and JFrog as we discuss best practices for artifact management, security analysis and quality assurance in continuous integration and continuous delivery (CI/CD). Learn how high performing development teams utilize CircleCI and JFrog to speed up their development process and deliver better code, faster and with confidence.

Vulnerability Management and DevSecOps with CI/CD

Many of the world's highest performing software development teams have adopted DevOps practices, simplifying software builds, testing, and deployment. But standard DevOps process fails to address a vital issue: security and vulnerability management. Learn how to shift security left and get your entire team onboard to maintain the security of their libraries and container images.