Jenkins integration to EC2, CodeDeploy, CodeCommit, CodePipeline, for DevOps.

1. Central VA AWS UG
Jenkins in AWS
1 7 F E B R U A R Y 2 0 1 6

2. 2
Agenda
Tonight’s AWS Architecture
Installation Options
Jenkins Overview
Security Options
Plugins
EC2 Integration (Roles, Users, Policies)

3. 3
Jenkins Overview
“Jenkins is an open source continuous integration tool written in Java. The project was forked from
Hudson after a dispute with Oracle.
Jenkins provides continuous integration services for software development. It is a server-based
system running in a servlet container such as Apache Tomcat.” -
https://en.wikipedia.org/wiki/Jenkins_(software)
Easy Integration
900+ Plugins
Easy Installation
Customization

4. 4
Tonight’s Architecture

5. 5
Tonight’s Architecture

6. 6
Tonight’s Architecture

7. 7
Jenkins Installation Options
LTS Version*
Java, Git, Maven
Yum (AWS 64bt Linux AMI) or AWS Marketplace (Bitnami Jenkins on Ubuntu)

8. 8
Groovy Startup Script
Performs post initialization tasks
Jenkins.properties/init.groovy in $JENKINS_HOME

9. 9
Jenkins Plugins
Plugins are the key to enhancing Jenkins functionality, usability, and interoperability. Most plugins are
OSS.
Cloudbees - https://www.cloudbees.com/products/cloudbees-jenkins-platform/enterprise-
edition/features
Some are better supported than others.
Integration
900+
Customization

10. 10
Jenkins Security
Authorization
Test with Mock Realm
Realms (test with Mock Realm)
Combine with AWS Shared Responsibility Model

11. 11
EC2 Plugin
Easy to use EC2 IAM Roles
EC2 instances and IAM Roles (Don’t use *s)
Starting and managing slaves, to achieve dynamic horizontal scaling across the AWS cloud.
Setup AWS CLI as Jenkins user (sudo su -s /bin/bash jenkins, aws configure)
Demo

12. 12
CodeDeploy Setup
IAM Users, Groups, Roles, Policies, Trust Relationships (resources that can assume the role)
AWS CodeDeploy Plugin
Deployment target EC2 instances run codedeploy-agent, and use IAM Role
Code deployment agent will run on deployment targets
Setup S3 bucket for Jenkins Code Deployment Plugin

13. 13
CodeCommit Setup
Create IAM user, with groups and permissions (polices).
Use as Git repository.
Deployment target EC2 instances run codedeploy-agent, and use IAM Role
Use aws-cli that supports CodeCommit and Credential Helper commands.
Disable OSX Keychain Access Utility (Code Commit 15 minute password expiration)

14. 14
Syncing Jenkins Config to AWS Code Commit
SCM Sync Config shared additionnal includes
SCM Sync configuration plugin

15. 15
AWS CodePipeline
Visualization of CD stages
CD Service
Requires role with appropriate CodePipeline policies
Requires S3 bucket versioning enabled.
Can be integrated with remote Jenkins via AWS CodePipeline Plugin

16. 16
Questions?

17. THANK
YOU.