Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/omidiyanto/golang-weatherapp-googleoauth-devsecops
https://github.com/omidiyanto/golang-weatherapp-googleoauth-devsecops
devsecops jenkins kubernetes snyk sonarqube trivy
Last synced: 11 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/omidiyanto/golang-weatherapp-googleoauth-devsecops
- Owner: omidiyanto
- Created: 2024-11-12T16:58:40.000Z (3 months ago)
- Default Branch: master
- Last Pushed: 2024-11-15T11:37:40.000Z (3 months ago)
- Last Synced: 2024-11-26T01:12:25.420Z (2 months ago)
- Topics: devsecops, jenkins, kubernetes, snyk, sonarqube, trivy
- Language: HTML
- Homepage: https://weatherapp.omidiyanto.my.id
- Size: 18.1 MB
- Stars: 2
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
🌟 DevSecOps Project - Golang Weather Application🚀
## CI/CD Pipeline Architecture
## Overview
This Simple **Golang Weather Application** is part of a DevSecOps project, designed to implement modern CI/CD practices with security and monitoring in mind. The application retrieves weather data from an external API, processes it, and displays the results to users. It is built using **Go (Golang)**, dockerized with **Docker**, and deployed with **Kubernetes**. The project leverages various DevSecOps tools to ensure code quality, security, and performance throughout the development lifecycle.
The project integrates a **CI/CD pipeline** that automates build, testing, security testing and analysis (SCA and SAST), and deployment to the Kubernetes. It also includes monitoring and alerting capabilities with **Prometheus** and **Grafana**, ensuring the application is highly available and secure in production environments.
### Key Features:
- **Go (Golang)**: The backend is built using Go, a statically typed, compiled language known for its efficiency and performance.
- **Dockerized Application**: Easily deployable using Docker containers.
- **Kubernetes**: Orchestrates and scales the application efficiently.
- **DevSecOps Integration**:
- **SonarQube** as Static Application Security Testing (SAST) tools for static code analysis and quality checks.
- **Snyk** as Software Composition Analysis (SCA) tools for security scanning of dependencies.
- **Trivy** for container image vulnerability scanning.
- **Prometheus & Grafana** for real-time monitoring and visualization.
- **Jenkins** for automated CI/CD pipeline execution.
- **Cloudflare** for enhanced security and domain provider.
## Installation
To get started with the Golang Weather Application and DevSecOps pipeline, follow these steps:
### Prerequisites:
- Kubernetes Cluster
- Jenkins
- Prometheus & Grafana
Note: You can automatically prepare the required infrastructure following my repository here
```
https://github.com/omidiyanto/IaC-Project-k8s-jenkins-prometheus-grafana.git
```
### Steps:
1. Run Sonarqube and Install Trivy
Run sonarqube as container:
```bash
docker run -d --name sonar -p 9000:9000 sonarqube:lts-community
```
Installing trivy:
```bash
sudo apt-get install wget apt-transport-https gnupg lsb-release
wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
sudo apt-get update
sudo apt-get install trivy
```
2. Install Jenkins Plugins
- Golang
- Github integration
- SonarQube Scanner
- Snyk
- Docker
- Kubernetes
3. Configure Jenkins Tools
- Golang
- Sonarqube Scanner
- Snyk
- Docker
4. Configure Jenkins Global System
- Add Sonarqube Server
- Configure E-Mail Notification
- Configure Extended E-Mail Notification
5. Get Snyk, Sonarqube, Quay.io token/API_KEY
6. Configure Required Secrets/Credentials in Jenkins
7. Run the Pipeline using Jenkinsfile
## Run Locally
### Build Command
Run the following command in your terminal, replacing the placeholders with your actual credentials:
```bash
docker build -t : .
```
### Run Command
Run the following command in your terminal to start running as container
```bash
docker run -d -p 5000:5000 \
-e GOOGLE_CLIENT_ID= \
-e GOOGLE_CLIENT_SECRET= \
-e OPENWEATHER_API_KEY= \
-e REDIRECT_URI= \
--name GO_WEATHERAPP :
```