Updating Dependency-Track

Service location:

Dependency-track.attracs.com (35.235.240.177) is located in a docker container inside of a virtual machine in GCP, under attracs-devops project. The virtual machine is one of the two in the instance group devops-instance-group , most likely the devops-instance-group-x3wj .

Update procedure:

The docker container in question is located in etc/docker-dependency-track with its docker-compose.yml file. Running sudo docker-compose pull inside of this directory will update the apiserver_1 and frontend_1 containers to the latest image, thus updating the service.

Confirming everything works:

In order to confirm that the update worked and the service still works, running sudo docker-compose up -d will bring the containers up and spew out any errors should there be any errors at startup. Then, if there are proper firewall whitelists in place in the GCP firewall, you can just enter the URL specified in this document and something like this should pop up: The credentials are stored in 1Password under the Devops vault. After logging in to this service, you can see the version information on the lower right corner of the page:

To Do

To Do: We already have some ansible scripts for this Dependency-Track in github repository attracs-linux-playbooks/docker/docker-dependency-track, we could make another ansible script for updating the images that does the same as previously outlined.