(untitled)

I would like to discuss your SDLC. I'm setting up a new set of applications for myself. Pic related is what I have so far. I'm thinking about dumping Nexus in favor of Artifactory due to Nexus' lack of OpenID Connect functionality. That means I will need something else to do docker and npm registries though, since I don't want to pay for Artifactory Pro. Also thinking about adding selenium to the mix, but haven't gotten that far yet. What is your pipeline like Lain?

>>15604 Everything runs on a cluster of VMs provisioned with SaltStack. Each service is run with Hasicorp Nomad, registers to the Consul service catalog, uses Vault for secrets. Auth to these services is via an OpenLDAP instance per cluster. Jenkins provisioned with groovy scripts and JobDSL plugin. Build artifacts go to in-cluster minio instance (S3 compat server) and docker registry Projects mainly use lang-specific test frameworks, we've not looked into SonarQube yet. We make heavy use of docker-compose and the nomad cluster for functional tests.

>>15605 Are you running your own docker registry or just using what AWS provides? I think I'm going to go with Harbor, but they haven't got OpenID Connect yet (issue is open, they seem to be targeting the 1.8.0 release). I'd like to set up container scanning with clair, but not sure how well that will work on ARM containers.

>>15606 It's not much more complicated than `docker run registry:2` on the nomad cluster, using the S3 backend. We're not actually on AWS, but run https://github.com/minio/minio as an S3 endpoint for the registry to use as storage.

Turns out Artifactory only supports SSO in Pro. Womp womp. There's an open source keycloak integration for Nexus, so maybe I try that next. If it works out, maybe I can get them to accept it as an OpenID connect contribution so it doesn't require a separate install. I tried adding tuleap for issue tracking, but started running into errors just getting the container running so I dropped it in favor of Redmine. Then I discovered installing Redmine plugin for SSO is worse, so I may go back and give Tuleap another try.