April 2017 Summaries

JFrog Artifactory's integration with OpenShift, Red Hat's Kubernetes-based container platform, aims to simplify the management of enterprise-grade DevOps environments, allowing the entire development, testing, and production setup to be self-contained within OpenShift. This integration enables independent scaling of services to optimize resource utilization and performance, as the continuous integration and continuous deployment (CI/CD) flow can remain inside a private OpenShift cluster. Developers can utilize Artifactory to manage artifacts and seamlessly deploy them into the CI environment, with automated deployment to the OpenShift cluster based on promotion policies. The integration, which supports features like cloud-based object storage, filestore sharding, and high availability, was in testing and expected to be available by Q3 of 2017, with a demo version accessible via GitHub.

The described text covers a scenario where using CircleCI with NPM dependencies led to a build issue due to an unpublished module, highlighting the NPM gate problem where an open-source module's removal disrupted many builds. CircleCI is a cloud-based CI/CD platform that supports various languages and allows developers to test changes without managing a CI server. To ensure reproducible builds and prevent dependency loss, the text suggests integrating JFrog Artifactory, a repository manager, to store build artifacts and information. The process involves configuring CircleCI to fetch and cache dependencies from Artifactory and publish packages back to it. Detailed steps are provided for setting up a Maven project with CircleCI and JFrog CLI, including configuring Artifactory credentials and viewing published artifacts and build information. The integration ensures that developers have access to reproducible builds across different package formats, enhancing CircleCI's functionality with comprehensive artifact storage and build data management.

JFrog Xray, first released in July 2016, is a tool designed to perform deep recursive scans of artifacts in Artifactory repositories to identify issues and vulnerabilities. It is structured as a system of nine microservices, including a central Xray Server that communicates with Artifactory and external services to gather vulnerability data. For optimal performance, it's recommended to enhance CPU power, increase file descriptor limits, and ensure correct configuration of the Xray base URL for smooth operation. The installation process is user-friendly, whether via Docker or Linux, and the application can operate in both online and offline modes depending on security policies. These best practices, along with screencasts for setting file descriptor limits and using Xray Health Diagnostics, aim to enhance the installation process and performance of JFrog Xray.