diff options
Diffstat (limited to 'ci-arch.mdwn')
| -rw-r--r-- | ci-arch.mdwn | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/ci-arch.mdwn b/ci-arch.mdwn index fa1851e..adf52f1 100644 --- a/ci-arch.mdwn +++ b/ci-arch.mdwn @@ -486,6 +486,62 @@ stages for manual and capacity testing, and security test/review; depending on the change and the component in question, some or all of these may be necessary. +## CI internal components + +{ height=50% } + +Note: this is speculative for now, until we actually implement at +least one of the candidates. + +The CI system consists, at least conceptually, of several internal +components, depicted in the architecture diagram above. The actual +implementation may end up using different components, but the +conceptual roles will probably still be there. + +* CI interacts with **Gerrit** and production externally. Also test + environments, but those ephemeral. Gerrit is code review and git + server, and produces an event stream to which CI reacts. + +* The **controller** listens to the Gerrit event stream and commands + the various workers to do things as appropriate. It is the conductor + of the symphonic CI orchestra. + +* The **VCS worker** interacts with Gerrit in its role as a git + server. Only the VCS worker has credentials for accessing Gerrit. + The VCS worker retrieves source code via git, does merge and other + git operations, pushes changes back to Gerrit (when it's OK to do + that), and publishes snapshots of the working tree to the artifact + store. Build workers get their source code from the artifact store, + not from Gerrit directly. This avoids having to give build workers + credentials, or network access, to gerrit, and having to push + speculative changes to Gerrit. + +* The **artifact store** store blobs of things that CI needs or + produces: git working trees, built artifacts, etc. + +* The **build worker** runs builds and tests. It gets the source code + from the artifact store and publishes built artifact back to the + artifact store. There can be any number of build workers running in + VMs or containers. + +* The **deployment worker** deploys built artifacts to an environment, + such as a test environment or the production environment. + +* The **log store** stores build logs, what Jenkins calls "console + output": the stdout and stderr of the command run to do a build, + and to run tests. Also the commands to deploy, and to interact with + Gerrit. + +* A **test environment** is an isolated environment that is + sufficiently like production to running tests. The test may be + automated or manual. There can be any number of test environment, + and they might be ephemeral, if that turns out to be useful. + +* The **production environment** is what the world sees. It's the + actual Wikipedia in all the various languages, and all the other + sites we run. + ## Normal change to an individual component * a developer pushes a change to one program that runs in production |