IBM Cloud Docs
Part 1: Set up prerequisites

Part 1: Set up prerequisites

This tutorial is part 1 of a 3-part tutorial series where you learn IBM Cloud® DevSecOps best practices to develop Infrastructure as Code (IaC) (Terraform configuration) and deploy it by using a complete reference implementation that is available as a service and powered by IBM Cloud® Continuous Delivery. In part 1 of this tutorial series, you review some background information and set up prerequisites.

Before you begin

See the following documentation to get more information about DevSecOps and its implementation in IBM Cloud® Continuous Delivery:

Set up an IBM Cloud account

Set up an IBM Cloud account. Depending on your IBM Cloud account type, access to certain resources might be limited. Depending on your account plan limits, certain capabilities that are required by some DevSecOps toolchains might not be available. For more information, see Setting up your IBM Cloud account and Upgrading your account.

Create resource group

Resource groups organize your account resources in customizable groupings so that you can assign users access to multiple resources at a time. Every toolchain is associated with a resource group. By default, the toolchain is created in the Default resource group. For more information, see Creating a resource group.

Store secrets values in a secrets management vault

Ensure that all of the secret values that you need are stored in a secrets management vault. Managing IBM Cloud secrets can help you to choose from various secrets management and data protection offerings. If you don't already have an instance of the secrets management vault provider of your choice, create one. For more information, see Getting started with Secrets Manager.

Complete the optional steps

Complete any or all of the following optional steps:

  1. Create a code signing key with the proper encoding to sign your infrastructure code.
  2. Create an IBM Cloud API key. Save the API key value by either copying, downloading it, or adding it to your vault. Alternatively, you can create the API key during the template-guided setup process.
  3. Validate that the recommended IAM permissions are assigned to corresponding integrations.
  4. Install the IBM Cloud CLI.
  5. Create an IBM Cloud Object Storage instance and bucket. For more information, see What is Cloud Object Storage?

Looking for help?

Get help fast directly from the IBM Cloud Continuous Delivery development teams by joining us on Slack.

For more support options, see Getting help and support for Continuous Delivery.

Next steps

When you have your prerequisites in place, continue to the next tutorial in the series:

Part 2: Set up a CI toolchain for Infrastructure as Code.

This tutorial uses an example Terraform configuration to create a KeyProtect service instance and a root key.