Design and Implement a Multi-Environment CI/CD Pipeline

ADVANCED
160 minutes
5 tasks

In this lab, learners will design and implement a Continuous Integration/Continuous Deployment (CI/CD) pipeline on Google Cloud Platform. You will build a pipeline that spans multiple environments, such as development, testing, and production, using Cloud Build and Cloud Deploy. The pipeline will include advanced deployment strategies like canary and blue/green deployments. Additionally, you will focus on integrating security by implementing Artifact Registry with vulnerability scanning and Binary Authorization. This lab will also cover IAM roles and organization policies to ensure that teams can securely deploy applications at scale. Finally, learners will learn to automate repetitive tasks via Infrastructure as Code using Terraform, thereby enabling efficient environment bootstrapping.

Scenario

A software development company, 'Cloud Innovations', aims to modernize its application deployment process across multiple environments. The company needs a reliable CI/CD pipeline with proper IAM roles and security integrations. The production environment must maintain a 99.95% uptime SLA while accommodating the dynamic nature of deployment strategies, like canary releases for new features and rollbacks in case of failures.

Learning Objectives

  • Design a multi-environment CI/CD pipeline using Cloud Build and Cloud Deploy
  • Implement security integrations with Artifact Registry and Binary Authorization
  • Configure IAM roles and organization policies for secure deployment processes
  • Use Terraform to manage Infrastructure as Code for environment provisioning

tasks (5)

task 1: Create Google Cloud projects for development and production environments

20 min

task 2: Set up Cloud Build and Cloud Deploy for both environments

40 min

task 3: Implement security with Artifact Registry and Binary Authorization

30 min

task 4: Configure IAM roles and organization policies

30 min

task 5: Automate environment bootstrap with Terraform

40 min

Prerequisites

  • Basic understanding of CI/CD processes
  • Familiarity with Google Cloud services and IAM policies
  • Knowledge of Infrastructure as Code principles

Skills Tested

Designing multi-environment CI/CD pipelinesImplementing security with Artifact Registry and Binary AuthorizationConfiguring IAM roles and organization policiesUsing Terraform for Infrastructure as Code