How to use variables in bamboo for building and deploying and how to store sensitive information

dannypk — Fri, 13 Dec 2019 19:13:14 +0000

Hello Dear Coders,

Last time I wrote an article regarding security with Nexus and NPM Packages. Once your packages are secure, how do your CI Builds are supposed to work and do things like npm install or how can they run your docker containers?

This article will show you how to do that if you are using Bamboo.

Bamboo has some 2 types of variables:

global variables
plan specific variables

If the global variables share the same name as the plan specific variables, then the plan specific variable will overwrite the global variable.

How to define a global variable:

Go to Bamboo and open administrator panel by clicking the cogwheel
From the left panel, under Build Resources choose Global Variables
Create a new variable by giving it a name and a value and click Add.

How to define a plan variable:

Go to the Plan and press E(dit) key or go to Actions and click Configure plan
Go to Variables
The same step as on global variable

Now you can use that variable in your plans. But what about sensitive information ?

Bamboo provides us with a feature that allows us to store sensitive information. If your variable name contains one of the keywords "PASSWORD" or "SECRET", it will automatically encrypt that information

That's a very nice feature and very helpful.

After the variables are configured, we can create our task and use our variables like this:

export PORT=${bamboo.PORT}
echo \_auth = ${bamboo.SECRET_NEXUS_AUTH} >> .npmrc
./docker-build.sh ${bamboo.CONTAINER_NAME} ${bamboo.PORT}

In your build logs, you will see that the variables are encrypted and the sensitive data is not stored.

The same way you can use the variables in your deployment tasks.

Thanks for reading and I hope this will bring a bit of security to your projects. Comments are welcome ! :)

Nexus package manager: How to access your NPM packages after securing Nexus

dannypk — Wed, 11 Dec 2019 15:47:53 +0000

Dear coders,

I joined Medium.com some days ago and I wrote an interesting article there. But then i found out about dev.to and from now on I will start creating content here. But since I already wrote the article there, I will just link it.

https://medium.com/@daniel.pacurici/nexus-package-manager-how-to-access-your-npm-packages-after-securing-nexus-239aa121a96c

Looking forward for your thoughts. Thank you and happy coding !

DEV Community: dannypk

How to use variables in bamboo for building and deploying and how to store sensitive information

Bamboo has some 2 types of variables:

How to define a global variable:

How to define a plan variable:

Nexus package manager: How to access your NPM packages after securing Nexus