Hybrid CI/CD allows building code behind a firewall but deploying to various environments using Codefresh and Kubernetes. The Codefresh Hybrid Runner installs on Kubernetes clusters and polls Codefresh for pipelines while requiring no open firewall ports. This provides secure access to private resources for building while allowing deployment to on-premises, cloud, or disconnected environments from a single consistent interface.

1. Hybrid CI/CD
with Kubernetes and Codefresh
GUY SALTON

2. Guy
Salton
Solutions Architect
guy.salton@codefresh.io

3. CI/CD Behind-the-Firewall
Private Network
CI/CD
Resources
gitArtifacts

4. Continuous Integration/Delivery

5. The Basic Software Lifecycle

6. In Codefresh every step is a docker image
● Natively runs and scales on
Kubernetes
● Support for Kubernetes/Helm
deployments
● Complete code to cloud
traceability

7. Why Hybrid?

8. Hybrid Scenarios
Build with BTF Resources
Access code, secrets, artifacts, etc
that are behind the firewall.
Deploying to Poorly
Connected Environments
Deploy to clusters that are only
intermittently connected
Deploying BTF
Deploy to clusters in:
storefronts
private clouds
on prem data centers

9. Customers
that choose
Hybrid
CI/CD
Scale
Use Kubernetes native scaling
Secure
Access to internal services behind firewall
Manage
No need to to maintain the whole platform

10. Codefresh Hybrid Runner

11. Codefresh Hybrid Runner

12. Codefresh Hybrid Runner characteristics
● Runs on Kubernetes
● Open-source installer
● Uni-directional
communication
● Runner polls Codefresh
● No open ports needed

13. Hybrid CI/CD with Codefresh

14. ● Multiple Hybrid runners
● Customer can select any cluster
● Assign runtime to each pipeline
● Custom cloud environments
● On-premise environments
● Mix and match
Runtime environments

15. Full control on pipeline environment location
Codefresh SAAS
Google Cloud K8s
AWS cloud
On-premise Datacenter

16. Full control on pipeline environment arch
Codefresh SAAS (Linux)
Cloud K8s (Linux)
Custom cluster (ARM)
On-premise Datacenter (Windows)

17. Demo

18. Run pipelines on Docker for desktop

19. Summary
● SAAS, Hybrid, On prem
● Hybrid can be installed on any cluster
● Secure access, no open firewall ports
● Multiple runtime environments
● Consistent experience for CI/CD