The perfect pipeline in a vacuum

In interviews for a position that involves understanding DevOps, I like to ask candidates this question (and sometimes they also ask me):

What do you think the ideal pipeline from commit to production should be? / Describe the ideal CI / CD / etc

. , CI/CD .

?

1. , .

   
   
   
   
   

2. , .

   
   
   
   
   

3. , "", . , ( ) , . , , " — " DevOps.

   
   
   
   
   

4. . , . : Jira production. gitflow, gitlabFlow, githubFlow.

   
   
   
   
   

, - CI, , ?

CI?

• ;

  
  
  
  
  

• ;

  
  
  
  
  

• ;

  
  
  
  
  

• ;

  
  
  
  
  

• ;

  
  
  
  
  

• Merge;

  
  
  
  
  

• MR code review.

  
  
  
  
  

.

Code scanning

— .

— Senior/Lead Backend Developer. , // . , .

:

• ;

  
  
  
  
  

• ;

  
  
  
  
  

• .

  
  
  
  
  

.

, git push



.

gitlab-ci

stages:
  - code-scanning

.code-scanning:
 only: [pushes]
 stage: code-scanning
 
      
      

        
        
        
      

    
        
        
        
      
      

        
        
        
      

    
    

Linters

– ! . " ".

— .

. - . , , CI. soft skills, .

Code Quality

code quality



— , ML- : , , ., code security



.

Code Security

, code security



. :

1. //.

   
   
   
   
   

2. C .

   
   
   
   
   

, , . "" production , git



. , , vault



, git

, .

Code Coverage

, , code coverage



.

, .

Unit test

code quality



, .

Build

artifacts/packages/images .. , .

:

• semVer ( gitflow);

  
  
  
  
  

• romVer;

  
  
  
  
  

• c;

  
  
  
  
  

• datetime, timestamp;

  
  
  
  
  

• etc

  
  
  
  
  

, .

, – .

Scan package

/ . . registry .

Deploy

.

.

• rolling – ;

  
  
  
  
  

• recreate – , production;

  
  
  
  
  

• blue/green – 90% production ;

  
  
  
  
  

• canary – 99% production .

  
  
  
  
  

Stateful

, stage production, production - , stateful . , , / . stage/pre-production .

/ .

helmwav' GitHub. helmwave.

Integration testing

. - . . , . .

Performance testing (load/stress testing)

stage/pre-production . , , production.

,

,

Code Review / Approved

Merge Request. pipeline , , c.

/:

• QA;

  
  
  
  
  

• Security;

  
  
  
  
  

• Tech leads;

  
  
  
  
  

• Release managers;

  
  
  
  
  

• Maintainers;

  
  
  
  
  

• DevOps;

  
  
  
  
  

• etc.

  
  
  
  
  

, MR , MR:

• production;

  
  
  
  
  

• QA release ;

  
  
  
  
  

• DevOps' , : helm-charts / pipeline / / etc.

  
  
  
  
  

Developing flow

, , -​. -, gitflow, gitlabFlow, githubFlow .

, – . , gitflow . GithubFlow . gitlabFlow , , - , feature-.

, :

• Gitflow: feature -> develop -> release-vX.X.X -> master (aka main) -> tag
  
  
  
  ;

  
  
  
  
  

• GitHubFlow: branch -> master (aka main);

  
  
  
  
  

• GitLabFlow: environmental branches.

  
  
  
  
  

TL;DR

_

Feature-

Pre-Production -> Production

P.S.

- , , , , – update.

. ?

.