Understanding DevOps Pipeline

​

DevOps Pipeline at a Glance

​

1. Continuous Integration (CI)

​

1.1 Install Dependencies

npm install

​

1.2 Dependency Vulnerability Checks

npm audit
dependency-check .

​

1.3 Unit Tests & Coverage

npm test
npm run coverage

​

1.4 Static Code Analysis

​

1.5 Containerization

docker build -t myapp:${BUILD_NUMBER} .

​

1.6 Image Vulnerability Scan

snyk container test myapp:${BUILD_NUMBER}

​

1.7 Push to Container Registry

docker push myregistry/myapp:${BUILD_NUMBER}

​

2. Continuous Deployment (CD)

1. Deploy the Docker container on an EC2 instance:
   ssh ec2-user@ec2-instance \
     "docker pull myregistry/myapp:${BUILD_NUMBER} && \
      docker run -d -p 80:3000 myregistry/myapp:${BUILD_NUMBER}"
   
2. Execute integration tests to validate endpoints.
3. Create a pull request (PR) from your feature branch to main—this triggers the continuous delivery pipeline.

​

3. Continuous Delivery

1. Update Kubernetes manifests with the new image tag.
2. Let Argo CD sync the cluster automatically.
3. Run Dynamic Application Security Testing (DAST) using OWASP ZAP.
4. Peer review and merge the PR.
5. A manual approval step in Jenkins authorizes the final deployment.

6. Deploy updated Lambda functions:

aws lambda update-function-code \
  --function-name my-function \
  --zip-file fileb://function.zip

aws lambda update-function-configuration \
  --function-name my-function \
  --environment Variables="{KEY=value}"

7. Verify the Lambda endpoints:

aws lambda invoke --function-name my-function out.json

​

4. Post-Build

1. Archive test results, coverage, and vulnerability reports in Jenkins.
2. Upload to Amazon S3 for audit and compliance:
   aws s3 cp reports/ s3://my-bucket/reports/ --recursive
   
3. Notify your team via Slack webhook.

​

Links and References

• Jenkins Documentation
• Docker Official
• AWS CLI Reference
• OWASP Dependency-Check
• SonarCloud
• Snyk
• Argo CD
• OWASP ZAP