</>Học Dev
Bài học

Tuần 8 - Ngày 4: CI/CD và DevOps trên AWS

Tuần 8 – Ngày 3

Tuần 8 - Ngày 4: CI/CD và DevOps trên AWS

Tổng quan CI/CD

┌─────────────────────────────────────────────────────────────┐│CI/CDPIPELINE││││SOURCEBUILDTESTDEPLOYMONITOR│││││││││▼▼▼▼▼││CodeCommitCodeBuildCodeBuildCodeDeployCloudWatch││GitHub+Tests+Scans+PipelinesX-Ray││Bitbucket││││◄───────CodePipelineorchestrates───────►│└─────────────────────────────────────────────────────────────┘

AWS Developer Tools

1. AWS CodeCommit

ManagedGitRepository:├──Fullymanagedsourcecontrol├──Secure,encrypted├──IntegrateswithIAM├──Pullrequests,branches└──TriggersforautomationBestPractices:-Branchprotectionrules-CodereviewviaPRs-IntegratewithCodeGuruReviewer

2. AWS CodeBuild

┌─────────────────────────────────────────────────────────────┐│CODEBUILD││││Managedbuildservice:││├──Compilessourcecode││├──Runstests││├──Producesartifacts││└──Scalesautomatically││││BuildEnvironments:││├──Managedimages(AmazonLinux,Ubuntu,Windows)││├──CustomDockerimages││└──GPU-enabledbuilds││││buildspec.yml:││├──phases:install,pre_build,build,post_build││├──artifacts:outputfiles││└──cache:speedupbuilds│└─────────────────────────────────────────────────────────────┘

buildspec.yml Example:

version: 0.2
phases:
  install:
    runtime-versions:
      nodejs: 18
  pre_build:
    commands:
      - npm install
  build:
    commands:
      - npm run build
      - npm test
  post_build:
    commands:
      - echo "Build completed"
artifacts:
  files:
    - '**/*'
  base-directory: dist
cache:
  paths:
    - node_modules/**/*

3. AWS CodeDeploy

┌─────────────────────────────────────────────────────────────┐│CODEDEPLOY││││DeploymentTargets:││├──EC2/On-premises││├──ECS(Blue/Green)││└──Lambda(Trafficshifting)││││DeploymentStrategies:││├──In-place(EC2)││├──Blue/Green(EC2,ECS)││├──Canary(Lambda:10%,wait,100%)││├──Linear(Lambda:10%everyXminutes)││└──All-at-once│└─────────────────────────────────────────────────────────────┘DeploymentConfiguration:-Minimumhealthyhosts-Rollbacksettings-Lifecyclehooks

appspec.yml (EC2):

version: 0.0
os: linux
files:
  - source: /
    destination: /var/www/html
hooks:
  BeforeInstall:
    - location: scripts/before_install.sh
  AfterInstall:
    - location: scripts/after_install.sh
  ApplicationStart:
    - location: scripts/start.sh
  ValidateService:
    - location: scripts/validate.sh

4. AWS CodePipeline

┌─────────────────────────────────────────────────────────────┐│CODEPIPELINE││││Orchestrationservice:││├──Visualworkflowdesigner││├──Stage-basedexecution││├──Parallelactions││└──Manualapprovalgates││││PipelineStructure:││┌──────────┐┌──────────┐┌──────────┐┌──────────┐│││Source│→│Build│→│Test│→│Deploy│││└──────────┘└──────────┘└──────────┘└──────────┘││││Integrations:││-GitHub,GitLab,Bitbucket││-Jenkins││-CloudFormation,CDK││-ECS,EKS,Lambda,S3│└─────────────────────────────────────────────────────────────┘

Deployment Strategies Deep Dive

1. Rolling Deployment

┌────────────────────────────────────────────────────────────┐│ROLLINGDEPLOYMENT││││Step1:[v1][v1][v1][v1]→Allrunningv1││Step2:[v2][v1][v1][v1]→Firstbatchupdated││Step3:[v2][v2][v1][v1]→Secondbatchupdated││Step4:[v2][v2][v2][v2]→Allrunningv2││││Pros:Noextrainfrastructure││Cons:Mixedversionsduringdeployment│└────────────────────────────────────────────────────────────┘

2. Blue/Green Deployment

┌────────────────────────────────────────────────────────────┐│BLUE/GREENDEPLOYMENT││││BLUE(Current)GREEN(New)││┌─────────────┐┌─────────────┐│││v1│v1││v2│v2│││└─────────────┘└─────────────┘││▲│││││[LoadBalancer]───Switchtraffic───►││││Step1:DeploytoGreen││Step2:TestGreen││Step3:SwitchtrafficBlue→Green││Step4:KeepBlueforrollback││││Pros:Instantrollback,nodowntime││Cons:Doubleinfrastructurecostduringdeploy│└────────────────────────────────────────────────────────────┘

3. Canary Deployment

┌────────────────────────────────────────────────────────────┐│CANARYDEPLOYMENT││││Step1:10%traffictov2,90%tov1││││┌─────────────────────────────────┐│││[v1][v1][v1][v1][v1][v1][v1][v1][v1]│90%││└─────────────────────────────────┘││┌─────┐│││[v2]│10%││└─────┘││││Step2:Monitormetrics,errors││Step3:IfOK,graduallyincreaseto100%││Step4:Ifissues,rollbackimmediately││││Pros:Earlydetectionofissues││Cons:Complexrouting,monitoringrequired│└────────────────────────────────────────────────────────────┘

Infrastructure as Code

AWS CloudFormation

┌─────────────────────────────────────────────────────────────┐│CLOUDFORMATION││││Template→Stack→Resources││││KeyConcepts:││├──Templates(YAML/JSON)││├──Stacks(resourcecollection)││├──StackSets(multi-account/region)││├──ChangeSets(previewchanges)││└──DriftDetection││││BestPractices:││├──Usenestedstacksformodularity││├──Parameterizetemplates││├──UseMappingsforregion-specificvalues││└──Enableterminationprotection│└─────────────────────────────────────────────────────────────┘

AWS CDK (Cloud Development Kit)

Defineinfrastructureusingprogramminglanguages:├──TypeScript├──Python├──Java├──C#└──GoCDK→CloudFormationtemplate→ResourcesBenefits:-Typesafety-IDEsupport-Reusableconstructs-Testingcapabilities

Terraform on AWS

Multi-cloudIaCtool:├──HCL(HashiCorpConfigurationLanguage)├──Statemanagement(local,S3,TerraformCloud)├──Providerecosystem└──ModulesforreusabilityAWSProviderfeatures:-AllAWSservicessupported-Importexistingresources-Driftdetection

CodeGuru

CodeGuru Reviewer

AI-poweredcodereview:├──Securityvulnerabilities├──Performanceissues├──Bestpractices├──AWSSDKusage└──IntegrateswithPRs

CodeGuru Profiler

Applicationperformance:├──CPUutilizationanalysis├──Memoryprofiling├──Heapusage├──Latencyidentification└──Costrecommendations

Exam Scenarios

Scenario 1: Zero-Downtime Deployment

Requirement:DeployupdateswithoutdowntimeSolution:├──ECSwithBlue/GreenviaCodeDeploy├──ALBfortrafficshifting├──Healthchecksbeforeswitch└──Automaticrollbackonfailure

Scenario 2: Multi-Account Pipeline

Requirement:DeploytoDev,Staging,ProdaccountsSolution:├──CodePipelineincentralaccount├──Cross-accountIAMroles├──ManualapprovalbeforeProd└──CloudFormationStackSets

Scenario 3: Container CI/CD

Requirement:BuildanddeploycontainersSolution:├──CodeCommit→CodeBuild(buildimage)├──PushtoECR├──CodeDeploytoECS├──Blue/Greendeployment└──Automatedrollback

Quick Reference

┌─────────────────────────────────────────────────────────────┐│CI/CDTOOLSELECTION││││Need│Service││────────────────────────┼───────────────────────││Sourcecontrol│CodeCommit,GitHub││Build/Test│CodeBuild││DeployEC2│CodeDeploy││DeployECS│CodeDeploy(Blue/Green)││DeployLambda│CodeDeploy(Canary/Linear)││DeployK8s│ArgoCD,Flux││Orchestratepipeline│CodePipeline││IaC│CloudFormation,CDK,Terraform││Multi-accountdeploy│StackSets,CodePipeline││Codereview│CodeGuruReviewer││Performanceanalysis│CodeGuruProfiler│└─────────────────────────────────────────────────────────────┘

Tài liệu tham khảo chính thức

Tiếp theo: Quiz Tuần 8