Philadelphia DevSecOps Workshop - Secure Software Factory

Philadelphia DevSecOps Workshop - Secure Software Factory

[Gist Page]
https://bit.ly/2wNXhjV

[Lab Guide]
http://redhatgov.io/workshops/secure_software_factory/

[OpenShift Console]
https://phl.redhatgov.io

[OpenShift Login - Replace X with your student Number]
userX

[OpenShift Password - Replace X with your student Number] 
passwordX

[oc login]
oc login https://phl.redhatgov.io --insecure-skip-tls-verify

[Jenkins]
OpenShift credentials

[Nexus user/password]
admin/admin123

[SonarQube user/password]
admin/admin

[Gogs Git Server user/password]
gogs/gogs

[Quay Enterprise Login Page]
http://quay-enterprise-quay-enterprise.apps.phl.redhatgov.io/


[jenkins stage if using quay enterprise and quay credentials created are same as openshift credentials]
[Substitute X for student number]
    stage('Clair Container Scan') {
      steps {
            sh "oc login -u userX -p 'passwordX' --insecure-skip-tls-verify https://phl.redhatgov.io 2>&1"
            sh 'echo "$(oc whoami):$(oc whoami -t)" > /tmp/srccreds'
            sh 'skopeo --debug copy --src-creds="$(cat /tmp/srccreds)" --src-tls-verify=false --dest-tls-verify=false --dest-creds=userX:passwordX docker://docker-registry.default.svc:5000/cicd-userX/jboss-eap70-openshift:1.5 docker://quay-enterprise-quay-enterprise.apps.sjc.redhatgov.io/userX/jboss-eap70-openshift:1.5'
        }
    }
    
[Quay.io]
http://quay.io
sign up for account

[jenkins stage if using quay.io Substitute X for student number]
[substitute <quay user> <quay password> with quay.io credentials]
[you can generate an encrypted password from the account settings]

    stage('Clair Container Scan') {
      steps {
            sh "oc login -u userX -p 'passwordX'  --insecure-skip-tls-verify https://sjc.redhatgov.io 2>&1"
            sh 'echo "$(oc whoami):$(oc whoami -t)" > /tmp/srccreds'
            sh 'skopeo --debug copy --src-creds="$(cat /tmp/srccreds)" --src-tls-verify=false --dest-tls-verify=false --dest-creds=<quay user>:<quay password> docker://docker-registry.default.svc:5000/cicd-userX/jboss-eap70-openshift:1.5 docker://quay.io/<quay user>/jboss-eap70-openshift:1.5'
        }
    }