Skip to main content

Composed Based Deployment

Here we'll deploy our pipeline in the Docker Container using compose.

Pre-requisites:

  • Jenkins Server for running pipelines
  • Hashicorp Vault for storing secrets
  • Docker Swarm (This could be your localhost as well)
  • Private Docker Registry
  • Ansible for deploying swarm nodes

Setting up the Pipeline

git clone https://github.com/SamagraX-RCW/devops.git

  • Run the scripts to install Docker Ansible and Vault Cli

chmod +x ./scripts/setup.sh
./scripts/setup.sh

  • Install and Start Jenkins Service

chmod +x ./scripts/jenkins_init.sh
./scripts/jenkins_init.sh

Jenkins init image

sudo systemctl restart jenkins

Jenkins Restart image

Jenkins dashboard image

  • Configure Jenkins Credentials for Private Registry

    • Update the Registry Credentials in Jenkins:

      Dashboard > RCW > deploy-staging > Credentials > docker-server

      Update with http://localhost:80, also create new credentials for registry username and password**

    • Update the job credentials for anisble deployment

      Dashboard > RCW > deploy-staging > credentials/identity/schema > configure

      ansible-playbook -i ~/devops/ansible_workspace_dir/inventory/hosts --extra-vars  "deploy_host_name=master[0] VAULT_TOKEN='${VAULT_TOKEN}' VAULT_ADDR='${VAULT_ADDR}'" ~/devops/ansible_workspace_dir/main.yml --tag deploy-credential

  • Now run the compose file to deploy Registry, Nginx and Vault

docker compose up -d

Docker Compose image

  • Configure Vault

    • Run the script to init the vault & generate unseal tokens
    make start

    Note: This will store the registry username & password (admin/admin) inside the vault

    • Run the script to get registry username and password from vault
    chmod +x ./scripts/get_secrets.sh
    ./scripts/get_secrets.sh

    • Add Vault Server Address and Token Secret

    cat ./keys.txt

    Copy the root key and paste inside -> Dashboard > Manage Jenkins > System > Environment Variables

    Add VAULT_TOKEN=xxxxx and VAULT_ADDR=http://127.0.0.1:8200

  • Configure Ansible hosts

    • Copy the hostname and paste in inside the ./ansible_workspace_dir/inventory/hosts file

    • The RCW Services will be deployed to the hosts after the Jenkins build

  • SSL Configuration for Nginx(Optional)

    • Copy the SSL certificates and paste it inside the nginx_config/ssl folder

    • Now run the script

      chmod +x ./scripts/set_up_ssl.sh
      ./scripts/set_up_ssl.sh

    • This script will store the ssl certs content inside the Vault as KV(key value) and keep as environment variable inside the Nginx container

Adding Ansible Roles for Services

chmod +x /scripts/roles.sh
./scripts/roles.sh

  • Give the name of the role

    eg. monitoring

  • Now give the variables for that role

    eg. no. of replicas : 1/2/

Contents

Edit this page