Category: CI/CD

[Golang] Use -buildvcs=false to disable VCS stamping

Posted on By nim No Comments on [Golang] Use -buildvcs=false to disable VCS stamping

Trong 1 lần mình build image trên bitbucket pipeline thì nó bị lỗi này: The -buildvcs=false flag in the go build command is used to disable VCS (Version Control System) stamping during the build process. This flag is particularly useful in environments where the Go compiler might face issues accessing the version control metadata, such…

Read More “[Golang] Use -buildvcs=false to disable VCS stamping” »

Bitbucket

[Argo Workflow] Run in a test case Using a sidecar or two containers together.

Posted on By nim No Comments on [Argo Workflow] Run in a test case Using a sidecar or two containers together.

Tình huống của mình là team order DevOps run Automation test để kết nối vào Kafka.Yêu cầu là run 1 consumer cùng chạy với container Playwright(dùng để push message lên kafka)2 containers cũng sử dụng chung 1 folder vì consumer lấy kết quả của kafka và sẽ ghi xuống disk và Playwright sẽ đọc kết…

Read More “[Argo Workflow] Run in a test case Using a sidecar or two containers together.” »

ArgoWorkflows

[Argocd – Azure] Login to ArgoCD using Microsoft or Azure Accounts.

Posted on By nim No Comments on [Argocd – Azure] Login to ArgoCD using Microsoft or Azure Accounts.

1) Create issuer, clientID,  clientSecret on Azure Cloud Theo như những bài mà chúng ta cấu hình để login argocd bằng Google account hay cognito. Thì chúng ta cấu hình và lấy được issuer, clientID,  clientSecret và để authen thông qua Azure cũng như vậy. 2) Config the dex server of Argocd integrated with Azure…

Read More “[Argocd – Azure] Login to ArgoCD using Microsoft or Azure Accounts.” »

ArgoCD, Azure Cloud

[Argo Event] Building webhook trigger for any action by argo-event.

Posted on By nim No Comments on [Argo Event] Building webhook trigger for any action by argo-event.

1) Overview of Argo Event. “Argo Events is an event-driven workflow automation framework for Kubernetes which helps you trigger K8s objects, Argo Workflows, Serverless workloads, etc. on events from various sources like webhooks, S3, schedules, messaging queues, gcp pubsub, sns, sqs, etc.” Now let’s introduce the core concepts of the events: The EventBus acts as the…

Read More “[Argo Event] Building webhook trigger for any action by argo-event.” »

Argo Events, ArgoWorkflows

[Argo Workflow] Build the docker image with argo-workflow and Kaniko then push the image to ECR

Posted on By nim No Comments on [Argo Workflow] Build the docker image with argo-workflow and Kaniko then push the image to ECR

chúng ta có rất nhiều tool để CI: jenkin, github action, bitbucket, pipelie Hôm này chúng ta sẽ chọn Argo Workflow để build 1 solution để CI cho team.Nó sẽ chạy trong internal K8s cluster. trước khi làm được bài này thì mình có tham khảo các links:https://medium.com/@mrsirsh/a-simple-argo-workflow-to-build-and-push-ecr-docker-images-in-parallel-a4fa67d4cd60https://mikenabhan.com/posts/build-docker-image-argo-workflows/ Sau đây sẽ là Full configuration và…

Read More “[Argo Workflow] Build the docker image with argo-workflow and Kaniko then push the image to ECR” »

ArgoWorkflows, Uncategorized

[Gitleaks/njsscan/semgrep] Secure Your code by CAST and SAST tools

Posted on By nim No Comments on [Gitleaks/njsscan/semgrep] Secure Your code by CAST and SAST tools

Look into CAST tool Ở đây mình sẽ dụng Docker để run gitleaks Bạn sẽ cần replace: ${path_to_host_folder_to_scan} đây là folder chứa code của bạn.Và tiếp theo là phần [COMMAND]: Và bên dưới là phần chúng ta scan, mình sử dụng command detect. nếu bạn muốn output hiện thị chi tiết hơn thêm –verbose Để…

Read More “[Gitleaks/njsscan/semgrep] Secure Your code by CAST and SAST tools” »

CI/CD, DevSecOps

[ArgoCD] Failed to wait for service account secret: timed out waiting for the condition

Posted on By nim No Comments on [ArgoCD] Failed to wait for service account secret: timed out waiting for the condition

Nếu bạn gặp lỗi: FATA[0033] Failed to wait for service account secret: timed out waiting for the condition Đây là cách giải quết:https://github.com/argoproj/argo-cd/issues/9422 Just want to share my (hacky) work around on this. With that, to fix this by the ‘short term solution’, we may need to not only create a service account token Secret,…

Read More “[ArgoCD] Failed to wait for service account secret: timed out waiting for the condition” »

ArgoCD

[Renovate] Automate Dependency Management With Renovate From Mend

Posted on By nim No Comments on [Renovate] Automate Dependency Management With Renovate From Mend

Renovate is an automation tool for keeping your projects up-to-date. It automates the detection of outdated dependencies, the update of dependencies, and the creation of the Merge/Pull Request to get those updates integrated into your project. Self-host Renovate Bot https://jerrynsh.com/12-tips-to-self-host-renovate-bot/ https://github.com/renovatebot/docker-renovate/tree/main/docs

CI/CD, Git

[DevSecOps] Dependency Check Basics and Vulnerabilities

Posted on By nim No Comments on [DevSecOps] Dependency Check Basics and Vulnerabilities

NVD: National Vulnerability Database Imagine NVD as the ultimate library of computer vulnerabilities. It’s like Wikipedia, but for all the bad stuff that can happen to your computer. If a hacker finds a way to mess with a system, the NVD is where you’ll find all the deets. CVE: Common Vulnerabilities and Exposures CVE is…

Read More “[DevSecOps] Dependency Check Basics and Vulnerabilities” »

CI/CD, DevSecOps

[Argo-Workflows] Lesson23: Setup logging and artifact repository

Posted on By nim No Comments on [Argo-Workflows] Lesson23: Setup logging and artifact repository

Nếu các bạn đã sử dụng các hệ thông CI như github action và bitbucket thì bạn sẽ để ý chúng ta sẽ của artifact để lưu các result trả về trong quá trình CI để làm report để download,… 1) Setup Artifact for Argo Workflow. 1.1) Install Minio. Nếu bạn sài AWS thì có…

Read More “[Argo-Workflows] Lesson23: Setup logging and artifact repository” »

ArgoWorkflows