Dev

[zlovtnik]

Summary by CodeRabbit

• New Features

  • Added a private CI workflow for building and publishing container images.
  • Added automated image update management through Argo CD.
  • Added a local CI environment with Jenkins, registry, and secure Docker integration.

• Improvements

  • Development tracing now uses in-memory storage with a defined trace limit.
  • Removed the standalone registry from the standard Compose setup.

• Documentation

  • Added setup, operations, security, publishing, and GitOps workflow guidance.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: bf13938d-1de8-4b93-93cb-9fc898327f98

📥 Commits

Reviewing files that changed from the base of the PR and between 1e9c37a and 46d34fe.

📒 Files selected for processing (19)

• .env.example
• Jenkinsfile
• README.md
• cyber-stack/README.md
• cyber-stack/argocd/application-image-updater.yaml
• cyber-stack/argocd/appproject-image-updater.yaml
• cyber-stack/argocd/image-updater-dev.yaml
• cyber-stack/argocd/kustomization.yaml
• cyber-stack/matrix/dev/patches/jaeger-storage.yaml
• docker-compose.ci.yaml
• docker-compose.yaml
• docker/jenkins/Dockerfile
• docker/jenkins/casc/jenkins.yaml
• docker/jenkins/plugins.txt
• docs/jenkins-ci.md
• docs/local-registry-workflow.md
• docs/runbook.md
• docs/threat-model.md
• scripts/check-gitops.py

---

📝 Walkthrough

Walkthrough

The change adds a private Jenkins CI stack, a Docker image build and publication pipeline, Argo CD Image Updater resources and validation, development Jaeger memory storage, and related operational documentation.

Changes

Private Jenkins CI pipeline

Layer / File(s)	Summary
Jenkins image and controller configuration .env.example, docker/jenkins/...	Adds pinned Jenkins tooling, Configuration as Code, credentials, job polling, and CI settings.
Private Compose CI environment docker-compose.ci.yaml, docker-compose.yaml	Adds registry, Docker-in-Docker, Jenkins, network, volume, health-check, and secret configuration. Removes the registry from the default Compose file.
Build and publication pipeline Jenkinsfile	Checks out recursive submodules, validates delivery configuration, checks registry access, builds images, and publishes commit-tagged images.
CI operations and security contract README.md, cyber-stack/README.md, docs/..., docs/threat-model.md	Documents Jenkins operation, image publication, GitOps handoff, private Docker access, and build-network isolation.

Argo CD Image Updater integration

Layer / File(s)	Summary
Image Updater resources cyber-stack/argocd/...	Adds the Image Updater Application and AppProject, registers them with Kustomize, and configures synchronization annotations.
GitOps validation contract scripts/check-gitops.py, cyber-stack/README.md	Validates registry mappings, Image Updater Application settings, and namespace-scoped AppProject permissions.

Development Jaeger storage

Layer / File(s)	Summary
In-memory Jaeger storage cyber-stack/matrix/dev/patches/jaeger-storage.yaml	Uses memory storage for up to 10,000 traces and removes Badger volume configuration.

Estimated code review effort: 4 (Complex) | ~60 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Jenkinsfile
  participant DockerInDocker
  participant Registry
  participant ArgoCD
  Jenkinsfile->>DockerInDocker: Build first-party images
  Jenkinsfile->>Registry: Publish commit-tagged images
  ArgoCD->>Registry: Read development image metadata
  ArgoCD->>ArgoCD: Synchronize Image Updater resources

Loading

Possibly related PRs

• zlovtnik/ssl-proxy#44: Related Argo CD configuration and GitOps validation changes.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dev

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}