Blog

The CI in CI/CD Might Just be the Apple of the OEM eye

Written by Excelfore | Apr 25, 2024 3:19:09 PM

In the SDV era, the rising demand for diverse features challenges OEMs to swiftly integrate components, with Continuous Integration emerging as a crucial catalyst for accelerating innovation in the automotive industry.

Addressing the CI Advantage in CI (Continuous Integration) /CD (Continuous Development)

The automotive space demands rapid validation cycles, a challenge solved by adoption of  CI practices. Integrating CI into PLM processes not only expedites validation but also facilitates streamlined software releases  via tools like Excelfore's eSync OTA. 

The adoption of CI via solutions like eSync OTA streamlines deliveries and bug fixes into diverse Electronic Control Units (ECUs). This practice builds  a cohesive system that undergoes prompt testing for validation. This transformation is particularly crucial in the tightly coupled automotive environment, where hardware intricately interacts with software. The automation and speed introduced by CI significantly contribute to the efficiency of PLM integration.

Secondly, the security aspect gains prominence in the context of CI/CD and PLM (Program Lifecycle Management)  integration. The urgency to roll out critical fixes and security patches is emphasized, enhancing the overall resilience of the automotive system. CI/CD practices, when integrated into PLM, facilitate the swift identification and resolution of security vulnerabilities, ensuring that the software remains robust and compliant with industry standards. This not only aligns with the need for quick validation but also addresses the importance of maintaining a secure and resilient automotive ecosystem.



How eSync OTA Helps in the Complex Integration Process 

Excelfore's internal build processes, incorporating continuous integration, are structured to enhance the seamless integration of eSync into customer environments. Aligned with the eSync Alliance standard, eSync is cloud agnostic and  ensures compatibility across diverse cloud platforms.

Within Excelfore's comprehensive framework, Continuous Integration and Continuous Deployment (CICD) workflows play a pivotal role in executing various operations such as build processes, releases, security checks, and deployment preparations. In the initial phase of eSync’s development’s internal CICD workflows, the system systematically builds all source codes, conducts rigorous tests e.g using tools such as coverity, including vulnerability assessments. It subsequently generates a Docker image, seamlessly integrating it into the release cycle. Should any vulnerabilities be detected during testing, the system iteratively communicates with developers.

Upon acceptance of the image, the workflow transitions to the release phase, where the release image is constructed, incorporating all identified fixes. This release image undergoes a comprehensive testing regimen encompassing verification, validation, and security assessments before progressing through the release process to reach the end customer. 

In addition to the above, eSync significantly enhances the Continuous Integration (CI) processes within the broader CI/CD framework, offering a tailored solution for Original Equipment Manufacturers (OEMs). By providing flexible endpoints that integrate into existing CI/CD workflows, eSync OTA ensures a consistent and efficient workflow for integrating and deploying changes. Excelfore's configurable CI/CD model employs a rules-based engine operating on defined scripts, creating a layer for integration with the release system. This model introduces granularity through rules defined at the Component and Campaign levels, allowing precise testing of firmware payloads on individual ECUs or comprehensive software releases for entire vehicles. This not only streamlines software release management but also empowers campaign managers to focus on critical decision-making, reducing the complexity of workflow prerequisites and enhancing overall efficiency in the integration process.  

How eSync deals with Security Challenges

eSync OTA components establish trust through X.509 certificates. eSync enhances security in interactions with CI/CD systems by providing x509 certificates as a trusted means of identity verification. Unlike less secure usernames and passwords, certificates are digitally signed, holding user identity and roles. 

This allows the eSync to respond to API requests or restrict access based on user permissions embedded in the certificates. The integration also follows the RAML standard, ensuring well-documented APIs and facilitating easy transitions to the latest versions during server upgrades. For efficient delivery in the CI pipeline, eSync ships its SaaS service as an immutable Docker image. This approach ensures consistency and ease of orchestration using the Kubernetes platform within their ecosystem or any Kubernetes cluster. 

The Need for Standardization 

The absence of standardized processes and protocols, as highlighted in the challenges section, poses a significant barrier to seamless integration. It not only complicates collaboration with local and global suppliers but also increases the learning curve for new technologies and impedes scalability. In the automotive ecosystem, initiatives like the eSync Alliance play a pivotal role in promoting standardization. Standardized formats and protocols eliminate inconsistencies, ensuring seamless communication and accurate data exchange. With standardized practices Global suppliers and technology partners become accessible, fostering knowledge sharing and accelerated innovation. Standardization lays the groundwork for future-proof technologies and enables seamless integration of new solutions.

In a landscape where standardization is paramount, eSync, and initiatives like the eSync Alliance, play a crucial role. By promoting standardized formats and protocols, eSync eliminates inconsistencies, facilitates seamless communication, and accelerates knowledge sharing. This not only addresses challenges within PLM integration but also positions the automotive industry for future-proof technologies and innovations.

Excelfore, with its mature core technology and innovative solutions like eSync OTA, stands as a beacon in the automotive realm. From tackling challenges within PLM integration to fortifying security and promoting standardization, Excelfore's contributions redefine the trajectory of the automotive industry. As the industry navigates the future, eSync emerges not just as a solution but as a trusted partner, steering the automotive landscape towards unprecedented heights of efficiency, security, and innovation.