April 2019 Summaries

Google's introduction of Anthos, a hybrid cloud solution, enhances cloud DevOps by integrating Google Cloud Platform (GCP) and Google Kubernetes Engine (GKE) with JFrog's DevSecOps tools, such as Artifactory and Xray. This combination allows for a seamless cloud-native architecture that supports secure and efficient software delivery pipelines. By utilizing Anthos, enterprises can leverage the scalability of the public cloud while maintaining sensitive data securely on-premises. JFrog's platform plays a crucial role in this setup by managing artifacts, ensuring compliance, and automating deployment processes. The integration facilitates rapid, secure, and high-quality software releases, making it particularly beneficial for industries with stringent data regulations, such as financial services. Through this hybrid cloud approach, businesses can achieve both operational flexibility and compliance, with the added advantage of zero downtime during maintenance and upgrades.

JFrog offers two main options for integrating their Artifactory onto Google Cloud Platform, facilitating enhanced DevOps processes with Google Cloud Marketplace. Users can choose between a SaaS subscription with Cloud Pro X, managed by JFrog, which integrates Artifactory with Xray for security and compliance scanning, or a self-managed Artifactory Enterprise installation on a Kubernetes cluster using Google Kubernetes Engine (GKE), which supports high availability and customization. Both offerings aim to streamline the software supply chain by providing a reliable artifact repository, supporting containerization, and enabling hybrid cloud solutions through Google’s Anthos, allowing enterprises to maintain on-premises DevOps or utilize cloud-native services. With these solutions, JFrog ensures that software packages are securely managed, traceable, and compliant across various stages of delivery, whether on the cloud or in hybrid environments.

Artifactory, a popular binary repository manager for DevOps, enhances build traceability by integrating with issue-tracking systems like Jira through the JFrog CLI. This integration allows users to directly link issues, such as bugs or feature requests, to specific builds, providing clarity on why a build was created. By using a consistent format for commit messages that include issue ticket information, developers can ensure that build information in Artifactory reflects all resolved issues. The JFrog CLI command, build-add-git, facilitates this by extracting issue data from Git check-ins and incorporating it into build information. This seamless integration is part of JFrog's broader mission to support continuous updates and improve software delivery efficiency by making every build fully traceable, not only in terms of its content but also its purpose.