Using a declarative or scripted pipeline in DevOps
Summarize
Summary of Using a declarative or scripted pipeline in DevOps
This content explains how to integrate Jenkins pipelines with ServiceNow DevOps using Jenkinsfiles for automation and orchestration. Jenkinsfiles define pipeline stages as text files checked into source control, and each root-level stage maps automatically to an orchestration task in ServiceNow DevOps. This linkage enables automated job notifications, change control, artifact management, and security scanning directly from Jenkins pipelines.
Show less
To enable job notifications from Jenkins to DevOps, the pipeline’s Track field must be set to True.
Key Features
- Jenkinsfile Commands: Provides several DevOps-specific Jenkins pipeline commands such as
snDevOpsChange(for change control),snDevOpsArtifactandsnDevOpsPackage(for artifact and package registration),snDevOpsGetChangeNumberandsnDevOpsUpdateChangeInfo(to retrieve and update change request details), andsnDevOpsSecurityResult(to integrate security scanning results). - Jenkins Server Configuration: Pipelines can specify a Jenkins server configuration per step via the
configurationNameattribute. Without this, the default configuration is used. Incorrect names cause failures unless error ignoring is enabled. - Stage Mapping: Only root-level stages in the Jenkinsfile map to DevOps orchestration tasks; nested or parallel stages do not map individually but are associated with their parent root-level stage.
- Jenkins Snippet Generator: Utility to generate pipeline code snippets for DevOps orchestration tasks, simplifying scripted pipeline creation by allowing users to configure variables and generate ready-to-use code blocks.
- Parallel and Sub-Stage Support: Nested or parallel stages trigger actions associated with the parent root-level stage. Only one change request is created at the parent stage level regardless of how many nested or parallel stages execute
snDevOpsChangecommands.
Practical Implications for ServiceNow Customers
- Using Jenkinsfiles with DevOps integration automates orchestration tasks, reducing manual effort and increasing deployment consistency.
- Setting the
Trackfield to True is essential to receive Jenkins job status notifications in DevOps, ensuring visibility into pipeline progress. - Leveraging the provided Jenkins commands enables detailed change management, artifact handling, and security scanning directly within your CI/CD pipelines.
- Using the Jenkins Snippet Generator accelerates pipeline development and reduces errors by providing templated, customizable steps.
- Understanding stage mapping rules helps properly structure Jenkinsfiles so that change requests and orchestration tasks align with your release process and governance needs.
- For pipelines with nested or parallel stages, customers should expect that all orchestration tasks and change requests will be associated with the parent root-level stage, which simplifies tracking but limits granularity on nested stages.
When you use a Jenkinsfile, steps are created, mapped, and associated to orchestration tasks automatically instead of manually.
Jenkinsfile is a text file that contains the definition of a Jenkins pipeline and is checked into source control.
Each root-level stage configured in the Jenkinsfile is discovered as a separate orchestration task in DevOps that is mapped to an individual step.
DevOps Jenkinsfile commands
- snDevOpsChange(ignoreErrors:{true/false},changeRequestDetails:{setCloseCode:{true/false},attributes:})
Where ignoreErrors specifies the setting to prevent job failure if there is an error (true/false)
Where changeRequestDetails specifies closure code and change request fields from within the pipeline
Enables change control for each root-level stage that is mapped to a DevOps step.
- snDevOpsArtifact
Registers artifacts when configuring Artifacts and packages.
- snDevOpsPackage
Creates a package for artifacts when configuring Artifacts and packages.
- snDevOpsGetChangeNumber
Retrieves the change request number in a Jenkins pipeline based on specific change details.
- snDevOpsUpdateChangeInfo
Updates the change request details associated with a Jenkins pipeline.
- snDevOpsSecurityResult
Configures security scans on any stage of the pipeline and the scan details are retrieved from the corresponding stage to DevOps Change Velocity.
You can specify the Jenkins server configuration in any of these steps by passing the configurationName attribute in your pipeline. If the configuration name is not specified in any step, the default configuration will be used in that step. Passing an incorrect configuration name will result in the step to fail unless the Ignore ServiceNow DevOps errors option is selected while configuring the Jenkins plugin.
Jenkins snippet generator for DevOps
- SnDevOpsArtifact
- SnDevOpsChange
- SnDevOpsPackage
- snDevOpsGetChangeNumber
- snDevOpsUpdateChangeInfo
- snDevOpsSecurityResult
snDevOpsChange changeCreationTimeOut: 3600, changeRequestDetails: '{ "attributes": { "short_description": "Test description", "priority": "1", "start_date": "2021-02-05 08:00:00", "end_date": "2022-04-05 08:00:00", "justification": "test justification", "description": "test description", "cab_required": true, "comments": "This update for work notes is from jenkins file", "work_notes": "test work notes", "assignment_group": "a715cd759f2002002920bde8132e7018" }, "setCloseCode": false, "autoCloseChange": true }', changeStepTimeOut: 18000, configurationName: 'Jenkins1', pollingInterval: 60Parallel and sub-stage support
When a stage (or set of parallel stages) is nested within a pipeline stage, these rules apply:
- Any action from the nested stage is processed as part of the parent root-level stage
- Only one change request is created (at the parent root level) even if multiple stages nested under the parent root-level stage trigger a change
- Orchestration tasks created are always associated with the parent root-level stage (not the nested stage)
Sub stage
In this sub-stage example, if a change request gets created from the sub stage (deploy PROD), the details of the parent root-level stage (deploy) are used in the change request, and orchestration tasks are also associated with the parent root-level stage (deploy).
stage("deploy") {
stages{
stage('deploy UAT') {
when{
branch 'dev'
}
stage('deploy PROD') {
when {
branch 'master'
}
steps{
snDevOpsChange()
}
}
}
Parallel stage
In this parallel stage example, if a change request is created from a sub stage (UAT test-1 and/or UAT static code test), only the first change request is created (using the details of the parent root-level stage, UAT test) regardless of whether both sub stages (UAT test-1 and UAT static code test) get triggered.
There is no indication of which parallel stage generated the change, and orchestration tasks are associated with the parent root-level stage (UAT test).
stage('UAT test') {
parallel {
stage('UAT test-1') {
steps {
snDevOpsChange()
// 'UAT test-1' tasks
}
post {
success {
// post success tasks. E.g.: junit '**/target/surefire-reports/*.xml'
}
}
}
stage('UAT static code test') {
steps {
snDevOpsChange()
// 'UAT static code test' tasks
}
}
}
}