OCI DevOps CI/CD Pipeline — Documentation

📌 Overview

This project demonstrates a fully automated CI/CD pipeline using Oracle Cloud Infrastructure DevOps. Whenever code is pushed to the repository, the pipeline:

• Triggers a build pipeline
• Runs automated tests
• Builds a Docker image
• Pushes the image to OCI Container Registry (OCIR)
• Deploys the app to OKE or Compute Instance via Deployment Pipeline

It is designed as a realistic production-style project showcasing practical CI/CD skills.

📐 Architecture Diagram

⚙️ CI/CD Deployment Flow

1️⃣ Code Commit / Push

Developer pushes new code to GitHub. This triggers OCI DevOps via webhook.

2️⃣ Build Pipeline

• Installs dependencies
• Runs pre-checks
• Builds Docker image
• Stores artifacts in Artifact Registry

3️⃣ Test Automation

Unit tests and integration tests run automatically.

4️⃣ Container Push

Image is pushed to OCI Container Registry (OCIR).

5️⃣ Deployment Pipeline

Deploys container to:

• OKE (Kubernetes)
• OR Compute (Docker service)

📄 build_spec.yaml

version: 0.1
component: build

steps:
  - type: Command
    name: "Install dependencies"
    command: |
      pip install -r requirements.txt

  - type: Command
    name: "Run tests"
    command: |
      pytest

  - type: Command
    name: "Build Docker Image"
    command: |
      docker build -t myapp:latest .

  - type: Command
    name: "Push to OCIR"
    command: |
      docker tag myapp:latest <region.ocir.io/tenancy/myapp:latest>
      docker push <region.ocir.io/tenancy/myapp:latest>
    

📄 deployment_spec.json

{
  "deploymentType": "OKE",
  "namespace": "default",
  "image": "",
  "replicas": 2,
  "ports": [
    {
      "containerPort": 80,
      "protocol": "TCP"
    }
  ]
}
    

🟦 Requirements

• OCI tenancy with DevOps enabled
• OCIR repository created
• IAM Policies:
  • Allow DevOps to manage builds
  • Allow DevOps to manage artifacts
  • Allow DevOps to use OKE
• OKE cluster OR OCI Compute instance

📘 Lessons Learned

• OCI DevOps has a clean integration with OCIR & OKE
• Environment variables & secrets should be stored in Vault
• Build pipelines scale automatically
• Deployment logs help quickly debug deployment failures

🚀 Future Enhancements

• Terraform IaC for full environment provisioning
• Add Slack or Discord deployment notifications
• Add Blue/Green or Canary deployment strategy
• Enable Security Scanning on Docker images