The typical implementation process for CloudBees CI software involves the following steps, generally taking a few days to several weeks depending on complexity:
Decide on deployment architecture (e.g., cloud-native or traditional platforms).
Configure connections between the Operations Center and controllers.
Perform one-time setup actions such as configuring security settings, plugins, and role-based access controls.
Define and create pipelines using Jenkinsfile or templates for CI/CD workflows.
Customize plugins, shared libraries, and pipeline templates to meet project-specific requirements.
Test pipelines and configurations to ensure proper functionality and integration.
CloudBees CI can be customized extensively to fit specific business needs. Here are the key data points:
Enables centralized configuration management for controllers and operations centers, allowing customization of plugins, folders, jobs, permissions, and credentials.
Provides shared and reusable pipeline templates that can be centrally managed and customized for different teams and projects.
Offers granular RBAC models to customize access permissions and security policies across teams.
Supports predictive and schedule-based scaling to adapt resources dynamically based on workload demands.
Includes tools like Beekeeper Upgrade Assistant for managing plugin versions and enforcing compliance, tailored to enterprise needs.
Allows deployment on-premises, in the cloud, or hybrid environments, enabling flexible infrastructure configurations.
Integrates with tools like ServiceNow, GitHub, Slack, and Bitbucket for tailored workflows and real-time feedback.
Features advanced security settings like secrets management, credential masking, and CyberArk integration for customized security protocols.
Dynamically allocate shared build agents across controllers to optimize resource utilization based on specific project needs.
CloudBees CI offers training and support for new users through various programs and resources:
CloudBees University:
Offers role-based learning paths, including self-paced and instructor-led courses.
Includes hands-on labs in cloud-based environments for practical experience.
Self-Paced Courses
CloudBees CI: Essentials (1-hour course) provides a high-level overview of core features, terminology, and use cases.
CloudBees CI Level 1: Basics (4-hour course) covers navigation, pipelines, and basic user tasks with hands-on labs.
Instructor-Led Training
Two-day virtual sessions provide foundational experience with CloudBees CI for admins and DevOps engineers.
Certification Programs
Certifications like CloudBees CI Essentials and CI Associate validate knowledge and skills for different roles.
Customizable Learning Paths
Training is tailored to roles such as developers, administrators, or DevOps professionals.
Documentation
Extensive guides covering installation, configuration, pipelines, plugins, and troubleshooting.
Knowledge Base
Searchable repository of articles for resolving common issues and learning best practices.
Community Engagement
Access to forums and user groups for collaborative learning and problem-solving.
Customer Support
CloudBees CI employs security measures to protect data across its platform. Key features include:
Encryption:
Data transmission is secured with SSL/TLS encryption protocols, ensuring confidentiality during transit.
Passwords are hashed using AES-256 encryption with random salts for enhanced security.
Authentication and Access Control
Role-Based Access Control (RBAC) allows granular permission management across teams.
Two-Factor Authentication (2FA) secures access to the dashboard and sensitive resources.
Pipeline Security
Pipeline policy enforcement integrates security into CI/CD workflows, supporting DevSecOps practices.
Compliance Standards
Meets stringent certifications such as SOC 2 Type II, HIPAA, GDPR, and U.S. Department of Defense (DoD) specifications for secure software delivery.
Secure Containers
Hardened Docker container images minimize vulnerabilities and ensure secure communication between controllers and agents.
Centralized Security Management
Operations Center enforces consistent security settings across all connected client controllers, with options for delegation or centralized control.
Backup and Recovery
CloudBees CI releases updates approximately once per month through rolling releases. These updates are managed as follows:
Each monthly release includes new features, important fixes, and security patches.
Maintenance Updates
Maintenance and security updates are provided for the latest rolling release only.
Diagnostic Support
CloudBees offers diagnostic support for rolling releases up to one year old. Older versions may require upgrading to receive support.
Upgrade Process
Administrators can upgrade managed controllers and plugins via automated processes, including bulk upgrades using cluster operations.
CloudBees CI's policy on data ownership and portability ensures transparency and user control. Key points include:
Customers retain full ownership of their data, including all intellectual property rights. CloudBees acknowledges that all rights, title, and interest in the data belong to the customer.
CloudBees does not monetize or sell customer data. It only uses data as necessary to deliver services and improve products.
Customers can request their data for export within 30 days of contract termination. Data is provided in a machine-readable format for easy transfer to other platforms.
CloudBees CI provides flexible terms for scaling up or down to accommodate changing organizational needs. Key points include:
Horizontal Scaling: Add more Jenkins controllers or agents to distribute workloads across multiple nodes, ensuring higher capacity and efficiency.
Dynamic Scaling: Automatically adjust resources in real-time based on workload demand, using predictive scaling to anticipate future needs.
Shared Agents: Dynamically allocate idle agents across projects experiencing high build volumes, optimizing resource utilization.
Cluster Autoscaler: Kubernetes-based autoscaling provisions additional nodes when resources are needed.
Hibernation for Managed Controllers: Automatically scale Kubernetes replicas of managed controllers to zero during inactivity, reducing resource consumption.
Manual Scaling Procedures: Administrators can manually scale down build resources or agents using predefined procedures in Kubernetes environments.
Subscription Term Length: The subscription term is specified in the Order Form and can vary based on the agreement.
Automatic Renewal: Subscriptions renew automatically unless terminated before the renewal date.
Renewal Rates: Renewal rates are based on CloudBees' then-current subscription rates unless otherwise specified in the Order Form.
Notification: Customers are notified before license expiration and must renew to continue using the software.
License Expiration Consequences: If not renewed, access to the software is blocked, and applications may stop functioning.
Termination for Breach: Either party can terminate the agreement if the other party materially breaches it and fails to remedy it within 30 days of written notice.
Effect of Termination: Upon termination, all licenses are immediately revoked, and customers must cease using the software and associated documentation.
Data Portability: Customers have 30 days post-termination to export their data, subject to payment of all outstanding fees.
Uninstallation Requirements: Customers must uninstall or destroy all copies of the software and certify compliance in writing.
CloudBees CI meets several compliance standards to ensure secure and regulated software delivery. These include:
SOC 2 Type II: Ensures robust auditing of operational controls for data security and privacy.
HIPAA: Complies with regulations for safeguarding sensitive healthcare information (Protected Health Information - PHI).
GDPR: Adheres to the General Data Protection Regulation for protecting the personal data of EU residents.
PCI DSS: Meets Payment Card Industry Data Security Standards for secure handling of cardholder data.
FedRAMP: Federal Risk and Authorization Management Program compliance for secure cloud services used by U.S. government agencies.
NIST RMF: Aligns with the National Institute of Standards and Technology Risk Management Framework for security controls.
DISA STIG: Complies with Defense Information Systems Agency Security Technical Implementation Guides for DoD environments.
DoD CtF Certification: Achieved Certificate to Field (CtF) from the U.S. Air Force Platform One team, enabling deployment in highly secure environments.
CIS Benchmarks: Implements Center for Internet Security benchmarks for best practices in IT security.
Cloudbees CI
By CloudBees, Inc
