| | |
|---|
| | | |
|---|
| | | 1. For the rest of the lab, ensure that you are working from the `master` branch |
|---|
| | | ```bash |
|---|
| | | cd todolist-fe |
|---|
| | | git checkout master |
|---|
| | | ``` |
|---|
| | | |
|---|
| | |
|---|
| | | |
|---|
| | | 4. Create a new object in `inventory/group_vars/all.yml` to drive the `ocp-pipeline` template with the parameters file you've just created. It can be put under the existing `todolist-fe-build` object. |
|---|
| | | ```yaml |
|---|
| | | - name: todolist-ocp-pipeline |
|---|
| | | - name: todolist-fe-pipeline |
|---|
| | | template: "{{ playbook_dir }}/templates/ocp-pipeline.yml" |
|---|
| | | params: "{{ playbook_dir }}/params/ocp-pipeline" |
|---|
| | | namespace: "{{ ci_cd_namespace }}" |
|---|
| | |
|---|
| | | |
|---|
| | | 10. Update the `todolist-api/.openshift-applier/inventory/group_vars/all.yml` with a new object to drive the params and template |
|---|
| | | ```yaml |
|---|
| | | - name: todolist-ocp-pipeline |
|---|
| | | - name: todolist-api-pipeline |
|---|
| | | template: "{{ playbook_dir }}/templates/ocp-pipeline.yml" |
|---|
| | | params: "{{ playbook_dir }}/params/ocp-pipeline" |
|---|
| | | namespace: "{{ ci_cd_namespace }}" |
|---|
| | |
|---|
| | | 2. Head to <CLUSTER_URL> on OpenShift and move to your ci-cd project `Builds > Images`. You should see the `jenkins-slave-arachni` image. |
|---|
| | |  |
|---|
| | | |
|---|
| | | 3. Just like you did with the `jenkins-slave-npm`, configure the `jenkins-slave-arachni` pod template to bypass SSL certificate checks in the Jenkins global configuration settings. Log in to Jenkins and navigate to `Manage Jenkins` > `Configure System` page. |
|---|
| | | |
|---|
| | | 4. Locate the `Kubernetes Pod Template` section by scrolling to the bottom of the page and click on `Add Pod Template` to add a new pod template for the Arachni scanner slave. |
|---|
| | |  |
|---|
| | | |
|---|
| | | 5. For the new pod template, enter `jenkins-slave-arachni` in the `Name` and `Labels` fields. |
|---|
| | | |
|---|
| | | 6. In the `Containers` section for the pod template, add a new container template with the following details: |
|---|
| | | * Enter `jnlp` in the `Name` field |
|---|
| | | * Enter `docker-registry.default.svc:5000/rsriniva-ci-cd/jenkins-slave-arachni` in the `Docker image` field |
|---|
| | | * Enter `/tmp` in the `Working directory` field |
|---|
| | | * Enter `${computer.jnlpmac} ${computer.name}` in the `Arguments to pass to the command` field |
|---|
| | | |
|---|
| | | 7. Add a new environment variable for the container template called `GIT_SSL_NO_VERIFY` and set its value to `true`. Your final `jenkins-slave-arachni` kubernetes pod template should look like the following: |
|---|
| | |  |
|---|
| | | |
|---|
| | | 8. Click `Save` at the bottom of the page to save your global Jenkins settings. |
|---|
| | | _____ |
|---|
| | | |
|---|
| | | <!-- ## Extension Tasks |
|---|
