January 2018 Summaries

Integrating GitLab CI with the JFrog Platform, including Artifactory and Xray, streamlines the software release process by ensuring artifacts are managed and protected against security and license compliance risks. This integration allows GitLab CI to automatically trigger a pipeline when changes are made, with Artifactory tracking artifact deployment and managing dependencies through JFrog CLI. Artifactory's Build Integration links generated packages to their relevant builds and collects detailed metadata, while Xray scans artifacts for vulnerabilities, preventing insecure binaries from reaching production. The process involves setting specific configurations and variables within GitLab, using a step-by-step approach with a gradle build example, and supports viewing detailed build information and Xray scan results on the JFrog Platform.

Artifactory has introduced native support for Helm Chart repositories, allowing users to manage Kubernetes applications more efficiently by leveraging Helm, the package manager for Kubernetes. This integration enables users to deploy Helm Charts to local repositories, proxy remote Helm repositories, and aggregate them into a single virtual repository, providing easier access and control through a single endpoint. Virtual repositories are emphasized as the ideal approach, offering enhanced security, controlled domains, and simplified access to multiple repositories. Best practices include using separate virtual repositories for stable and incubator charts, adopting SemVer v2 versioning, and keeping users informed by customizing Helm package search capabilities. Additionally, the recalculation of the index.yaml file is supported for ensuring the integrity of repository metadata, with options to manage the metadata retrieval cache period and manually trigger recalculations. JFrog CLI can be used to deploy Helm Charts, as the Helm client does not support direct deployment.