June 2019 Summaries

Administrators face challenges in troubleshooting ongoing events within JFrog Artifactory, and as environments scale, efficient log analysis becomes crucial. The ELK Stack (Elasticsearch, Logstash, and Kibana) offers a robust solution for analyzing JFrog Support Bundle logs, with Kibana providing intuitive charts and reports that facilitate interactive navigation through large datasets. The example outlined uses Docker to run ELK, enabling the analysis of Support Bundles based on predefined filters. Logstash is used to ingest, transform, and send log data to Elasticsearch, while Filebeat forwards logs to Kibana for visualization. Customized dashboards and filters in Kibana help identify issues such as potential misuse or performance bottlenecks by displaying relevant data like HTTP status codes and user activities. This approach streamlines the troubleshooting process, making it more efficient than manual log tailing. Integration with ELK allows for advanced filtering and visualization, aiding in the identification of problematic queries or errors. The blog encourages exploring Elastic's documentation for further integration between Artifactory and ELK.

Software engineers play a crucial role in maintaining the functionality of modern devices, especially as the Internet of Things (IoT) continues to expand across various industries, including the automotive sector. JFrog focuses on ensuring the safety and continuous improvement of autonomous vehicles through "Liquid Software," which emphasizes constant, seamless updates to vehicle software. Key rules for this approach include prioritizing safety, ensuring software is always current without user intervention, allowing cars to improve over time, and reducing anxiety for both drivers and developers by fostering trust in the update process. JFrog's IoT team has demonstrated these principles using RC vehicles, showcasing how their platform can facilitate real-time software updates in motion. They employ technologies like the Yocto build system, Automotive Grade Linux, and various IoT tools to streamline software delivery, testing, and security, aiming to enhance trust and reliability in autonomous vehicles.

JFrog has made several significant announcements at its annual user conference, swampUP 2019, in San Francisco, including the introduction of a new unified experience for its DevOps products and the release of JFrog Pipelines. The new JFrog Unified Experience, set to launch in the second half of 2019, aims to integrate all JFrog products into a single user interface with centralized metadata, enhancing the management of the DevOps pipeline. JFrog Pipelines, emerging from the acquisition of Shippable, is a centralized CI/CD tool designed to automate the entire development process and is now part of the JFrog Enterprise+ platform. Additionally, JFrog Xray has been enhanced with VulnDB intelligence following a partnership with Risk-Based Security, providing customers with advanced vulnerability data. The conference, supported by major industry leaders like AWS and Google Cloud, offers tracks focusing on Cloud Native DevOps, DevOps for Enterprise, DevSecOps, and DevOps for IoT, allowing attendees to customize their experience.

By integrating JFrog Artifactory with Portshift, DevOps engineers can achieve enhanced visibility and control over their CI/CD artifacts from Artifactory's Docker repository during runtime, thereby bridging the gap between the CI/CD pipeline and the container runtime environment. This integration facilitates compliance by allowing engineers to prove and track artifact deployment, aids in managing artifact repositories by identifying unused artifacts, and provides real-time visibility of Docker images running in production. Portshift, as an identity-based workload protection platform, generates signed identities for applications during CI/CD and extends Artifactory's key information to runtime, creating a detailed runtime map of application containers across cloud infrastructures. Additionally, Portshift reports runtime execution details back to Artifactory, providing comprehensive insights into each Docker image's usage, which simplifies the identification of unused images and streamlines decision-making processes. The integration supports all types of Kubernetes clusters and enhances both the efficiency and security of DevOps operations by ensuring that only authorized artifacts are running in the cloud environment.