Tino S. aka "Nox" pandorasNox

Using git credential store for non-interactive operations over https, without exposing password in remote URL (save, retrieve passwords)

Demoing git credential store usage in CI/CD context - i.e. https non-interactive:

Setup
Save credentials
Get credentials
Selectively remove credentials
Clean-up

Setup

yaml syntax hints

# using yaml alias - referencing a single value
test: &ref "foobar"
bar: *ref

# works also with bigger objects
bob: &bob
 isPerson: true

gitlab rules examples

# .gitlab-ci.yml

image: alpine:latest

only on branches:
 rules:

container image tags known issues

tags are normally used to discribe versions
working mostly like git tags
BUT have the same issue like git tag as that it is a changeable reference, although normally one should not change such tag reference
- in reality though we have observed it multiple times that the underlying image to a tag changed
- assumption in some cases was, that a fixup or similar was applied backwards
- but this broke enough deployments for us to show an issue
a possible solution:

kubernetes intro

what is kubernetes

(official definition): Kubernetes is a portable, extensible, open source platform for managing containerized workloads and services, that facilitates both declarative configuration and automation.
insimpler terms: it's a container orchestrator (which mainly manages containers)
it support a distributed cluster architecture
- where a cluster describes a collection of multiple nodes/server (normally 3/5/7... consensus relevant)
- as it useses, to store the cluster state, the etcd distributed key-value store, which under the hood uses the Raft consensus algorithm
- with that it manages containers across the cluster, so across all the nodes
it normally is used distributed but also can run as a single node instance, mostly for development purpose

docker-compose

everything you learn you actually already know
- it's absolutly the same as with just docker
- only difference is, it's more declerative
let's learn and compare pure docker vs docker-compose

agenda

linux 101

Why?

understanding the basic's of dealing with the os
throughout your career you will e.g. seciffcily encounter cli regualary
cli basics are automation basics

What?

bios vs os (2m)
gui vs cli (2m)

automation basics - principles

why automation?

not to put applications into production
to support the process of putting applications into production

devops

devops is a cultural movement

$ docker run -it --rm ubuntu:18.04

in container

    4  apt-get update && apt-get install -y gnupg gnupg1 gnupg2 apt-transport-https curl
    5  curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add -
    6  cat <<EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list

	#!/bin/bash

	##### BEGIN SETTINGS #####

	SYSTEM=debian
	ARCH=armhf
	SUITE=testing
	DEVICE=image.bin
	HOSTNAME=unknown