DevSecOps: The Java Developer's Guide to Automating with Groovy

@jeanneboyarsky Jeanne Boyarsky Tuesday May 21, 2018 Oracle Code New
York DevSecOps: The Java Developer’s Guide to Automating with Groovy speakerdeck.com/boyarsky

@jeanneboyarsky 2

@jeanneboyarsky About Me •  16 years as Java Developer • 
Years of tooling & Groovy 3

@jeanneboyarsky Will cover •  Groovy syntax & idioms •  Using
Groovy from Nexus •  Using Groovy from Jenkins •  Live demo 4

@jeanneboyarsky Oracle Code One Lab https://github.com/boyarsky/OracleCodeOne2018- HOL-Automating-Stack-Groovy •  Nexus -
Groovy •  Jenkins - Groovy •  Bonus – Java Sonar rule 5

@jeanneboyarsky GROOVY SYNTAX & IDIOMS 6

@jeanneboyarsky 7 Groovy Java

@jeanneboyarsky Java à Groovy 8 int lastYear = 2018; int
year = 2019 def nextYear = 2020 Can use Java syntax Without semicolon or type

@jeanneboyarsky Strings 9 def city = ’NYC' println 'Here: $city'
println "Here: $city" println "In ${city.class}" Java String GString Here: $city Here: NYC In class java.lang.String

@jeanneboyarsky Multiline string 10 def name = 'Jeanne' def text
= """ Name ______ $name """ Name ______ Jeanne Coming in Java 13 (raw string literals) 14? (text blocks) with new syntax

@jeanneboyarsky What does this print? 11 def name = 'Jeanne'
def text = ’’’ Name ______ $name ’’’ Name ______ $name

@jeanneboyarsky Getters vs properties 12 def animal = 'dog' println
animal.getBytes() println animal.bytes

@jeanneboyarsky == vs equals() def monday ='monday' def nextMonday =
new String('monday') def tuesday ='tuesday' println monday == null println null == monday println monday == tuesday println monday == nextMonday 13 Can use Java syntax True!

@jeanneboyarsky What is the truth? 14 Value Result Null False
Empty String False Empty List False 1 character String True

@jeanneboyarsky Elvis has entered the building 15 println Jenkins.instance .getItemByFullName(jobName)
?.lastBuild ?.timestamp ?.time

@jeanneboyarsky Optional Parens 16 def ch = 'abc'.charAt 1 println
ch Optional when no ambiguity Ambiguity: •  Zero params •  Within println

@jeanneboyarsky ArrayList++ 17 def list = ['cookie', 'chocolate’] list <<
'candy' println list.getClass() class java.util.ArrayList println list[1] chocolate ArrayList does what now?!

@jeanneboyarsky ArrayList++ 18 println list [cookie, chocolate, candy] println list[-1]
candy println list.min() candy list.sort() println list [candy, chocolate, cookie]

@jeanneboyarsky MetaClass def list = [1,3,5,7] println list.metaClass.methods println list.metaClass.methods*.name.sort().unique()
19 •  Method signatures •  Method names

@jeanneboyarsky Streams/lambas def list = [1,3,5,7] list.stream().filter({n -> n >=
5}).forEach({n -> System.out.println(n)}) println list.grep { num -> num >= 5 } println list.grep { it >= 5 } 20 “it” implies param •  grep vs filter •  less plumbing

@jeanneboyarsky Countdown! (10..1).each{ println "--> $it" } println 'Blast off!'
21

@jeanneboyarsky Stream Mapping Java Groovy filter grep map collect forEach
for limit take distinct unique anyMatch/allMatch any/every findFirst find 22

@jeanneboyarsky Lazy? 23 Groovy; not lazy Java streams

@jeanneboyarsky Functions incrementBy = 4; def add(num) { num +
incrementBy } println add(2) 24 no def Return optional Types optional

@jeanneboyarsky Named Params def config = new SelectorConfiguration( name: ‘selector',
description: ‘packages', ) 25 Only the default constructor exists!

@jeanneboyarsky More on Groovy http://groovy-lang.org/style-guide.html http://docs.groovy-lang.org/next/html/ documentation/working-with-collections.htm http://docs.groovy-lang.org/2.4.7/html/groovy-jdk/ overview-summary.html 26

@jeanneboyarsky USING GROOVY IN JENKINS 27

@jeanneboyarsky 28 println 'Hello Oracle Code One! ' println GroovySystem.version
Hello Oracle Code One! 2.4.11

@jeanneboyarsky 29

@jeanneboyarsky 30 Jenkins/Hudson split

@jeanneboyarsky 31 System scripts can access object model Can’t choose
Groovy version

@jeanneboyarsky Three ways to find methods JavaDoc https://javadoc.jenkins.io https://javadoc.jenkins.io/plugin Groovy
def instance = Jenkins.getInstance() println instance.metaClass.methods*.name .sort().unique() println instance.metaClass.methods Google Reuse existing scripts 32

@jeanneboyarsky Sample Object model code import jenkins.model.Jenkins def instance =
Jenkins.getInstance() def realm = Jenkins.getInstance().securityRealm realm.createAccount('olivia', 'olivia') instance.save() 33

@jeanneboyarsky Pipeline Syntax Helper 34

@jeanneboyarsky Convert to Pipeline Plugin 35

@jeanneboyarsky 36

@jeanneboyarsky 37

@jeanneboyarsky Script Security Plugin 38 ERROR: Build step failed with
exception org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessExce ption: Scripts not permitted to use staticMethod jenkins.model.Jenkins getInstance Options: •  Approve each script manually •  Sandbox - whitelist APIs •  Authorized Build plugin to run as admin

@jeanneboyarsky USING GROOVY IN NEXUS 39

@jeanneboyarsky 40 log.info'Hello Oracle Code One! ’ log.info GroovySystem.version

@jeanneboyarsky Nexus Built Ins 41 repository (RepositoryApi) ScriptApi blobStore (BlobStoreApi)
core (CoreApi) security (SecurityApi)

@jeanneboyarsky And then there is 42 container GlobalComponentLookupHelper selectorManager =
container.lookup(SelectorManager.class.name) securitySystem = container.lookup(SecuritySystem.class.name) authorizationManager = securitySystem.getAuthorizationManager('default')

@jeanneboyarsky Eclipse (or IntelliJ) 43

@jeanneboyarsky LIVE DEMO 44

@jeanneboyarsky What we will cover Code Examples Walkthrough •  Nexus
object model •  Jenkins object model •  Jenkins pipeline Demo – Nexus and Jenkins 45

@jeanneboyarsky 46

DevSecOps: The Java Developer's Guide to Automa...

DevSecOps: The Java Developer's Guide to Automating with Groovy

More Decks by Jeanne Boyarsky

Other Decks in Programming

Featured

Transcript