IBM Cloud Docs
Part 1: Set up prerequisites

Part 1: Set up prerequisites

This tutorial is part 1 of a 4-part tutorial series where you learn IBM Cloud® DevSecOps best practices by using a complete reference implementation that is available as a service and powered by IBM Cloud® Continuous Delivery. In part 1 of this tutorial series, you review some background information and set up prerequisites.

Before you begin

See the following documentation to get more information about DevSecOps and its implementation in Continuous Delivery:

Set up an IBM Cloud account

Set up an IBM Cloud account. Depending on your IBM Cloud account type, access to certain resources might be limited. Depending on your account plan limits, certain capabilities that are required by some DevSecOps toolchains might not be available. For more information, see Setting up your IBM Cloud account and Upgrading your account.

Store secrets values in a secrets management vault

Ensure that all of the secret values that you need are stored in a secrets management vault. Managing IBM Cloud secrets can help you to choose from various secrets management and data protection offerings. If you don't already have an instance of the secrets management vault provider of your choice, create one. For information about IBM Cloud® Secrets Manager, see Getting started with Secrets Manager.

Create a Kubernetes cluster

Create a Kubernetes cluster. The cluster might take some time to provision. As the cluster is created, it progresses through these stages: Deploying, Pending, and Ready. Learn more..

Create a Container Registry namespace

Create an IBM Cloud® Container Registry namespace. IBM Cloud Container Registry provides a multi-tenant private image registry that you can use to store and share your container images with users in your IBM Cloud account. Select the location for your namespace, and click Create. Learn more.

Complete optional steps

Complete any or all of the following optional steps. If you don't complete these steps now, you can complete them in the next tutorial.

  1. Create an image signing key with the proper encoding to sign your application docker images.
  2. Create an IBM Cloud API key. Save the API key value by either copying, downloading it or adding it to your vault. Alternatively, you can create the API key during the template-guided setup process.
  3. Validate that the recommended IAM permissions are assigned to corresponding integrations.
  4. Install the IBM Cloud CLI.
  5. Create an IBM Cloud Object Storage instance and bucket. Learn more.
  6. Create an IBM Cloud Satellite cluster group if you want to deploy your application to multiple clusters that are grouped as a Satellite cluster group by using Satellite Config. Learn more.

If you want to automatically set up the DevSecOps infrastructure for your toolchains by using an IBM Cloud® Schematics workspace and a Terraform-based quick start template, skip the previous steps and go to Set up your DevSecOps infrastructure and CI toolchain for deploying a secure app. After the prerequisites and CI toolchain are successfully configured, proceed to the Continuous Deployment (CD) toolchain introduction.

Looking for help?

Get help fast directly from the IBM Cloud Continuous Delivery development teams by joining us on Slack.

For more support options, see Getting help and support for Continuous Delivery.

Next steps

When you have your prerequisites in place, continue to the next tutorial in the series:

Part 2: Set up a Continuous Integration (CI) toolchain.

This tutorial uses an example Node.js app, but you can also deploy other language-based apps.