SRE Thailand Bootcamp

Week 9: Advanced CI/CD — GitHub Actions

Theme: Build production-grade CI/CD pipelines for containerized applications.

Learning Objectives

1. Write multi-job GitHub Actions workflows with matrix builds
2. Implement CI pipeline: lint → test → build → scan → push
3. Implement CD pipeline: deploy to kind cluster
4. Manage secrets securely with GitHub Environments and Actions Secrets

Reading Materials

• GitHub Actions Documentation
• GitHub Actions Workflow Syntax
• GitHub Actions Security Hardening
• Docker Build Push Action
• Kind GitHub Action
• GitHub Environments
• Trivy Container Scanner

Finger Exercises (choose 2)

1. Create a GitHub Actions workflow that runs go test ./... on push to main. Add linting with golangci-lint.
2. Add a container scan step with Trivy to the workflow. Fail on HIGH or CRITICAL vulnerabilities.
3. Create a GitHub Environment called "staging" with required reviewers. Configure a deployment protection rule.

Project

Create a GitHub Actions CI/CD pipeline for the Phase 1 Go + Python app:

• CI (on PR):
  1. Checkout + cache Go modules
  2. Run unit tests
  3. Run golangci-lint
  4. Build container images
  5. Scan images with Trivy
  6. Push to Docker Hub or GHCR (only on merge to main)
• CD (on push to main):
  1. Deploy to a kind cluster running in the action
  2. Run smoke tests (curl each endpoint)
  3. Post deployment status to a Slack webhook

Add README badges: build status, test coverage (optional), Trivy scan result.

Time Budget