Apr 11
Loading video player...
In this video, we architect and automate a production-grade DevSecOps pipeline from scratch. This project demonstrates how to integrate security into every stage of the CI/CD lifecycle ("Shift Left") while leveraging GitOps principles for reliable Kubernetes deployments. We move beyond simple deployments to explore how industry-standard tools interact to create a secure software supply chain. You will see how infrastructure is provisioned as code, how pipelines are hardened with automated security gates, and how ArgoCD ensures the cluster state matches your configuration repository. 🛠️ The Tech Stack & Architecture: Infrastructure as Code (IaC): Terraform: Complete provisioning of AWS VPC, Subnets, IAM Roles, and the EKS Cluster. We treat infrastructure as ephemeral and reproducible. Continuous Integration (CI) & Security: Jenkins: The automation engine orchestrating the pipeline. SonarQube: Integrated for Static Application Security Testing (SAST) to catch code smells and vulnerabilities early. Trivy: Applied for container image scanning (CVE detection in OS/layers) and filesystem scanning. Docker: Building optimised container images. Continuous Delivery (CD) & GitOps: ArgoCD: The GitOps controller running inside K8S. It monitors the manifest repository and automatically syncs changes to the cluster, ensuring zero drift. AWS EKS: The managed Kubernetes control plane hosting the workload. 📋 Key Workflows Covered: Infrastructure Provisioning: bootstrapping a secure AWS environment using Terraform modules. Pipeline Automation: Configuring Jenkins with shared libraries and Docker agents. Security Gates: Failing the build automatically if SonarQube quality gates are not met or if Trivy detects critical vulnerabilities. GitOps Synchronisation: How ArgoCD detects changes in the Git manifest repo and triggers a rolling update on EKS without direct kubectl access. 👉 GitHub Repo: https://github.com/AmanPathak-DevOps/End-to-End-Kubernetes-DevSecOps-Tetris-Project 👉 Medium Blog: https://blog.stackademic.com/devsecops-mastery-a-step-by-step-guide-to-deploying-tetris-on-aws-eks-with-jenkins-and-argocd-3adcf21b3120 👉 Drop your questions in the comments — I’ll try to reply to as many as possible Let’s build, learn, and grow together. 📚 Stay Connected 🎥 Website: https://amanpathak.com/ 🔗 Medium: https://medium.com/@amanpathakdevops 💬 GitHub Repo: https://github.com/AmanPathak-DevOps/ 💼 LinkedIn: https://www.linkedin.com/in/aman-devops/ 🎞️ Instagram: https://www.instagram.com/amanpathak.devops/ 🐦 Twitter / X: https://x.com/the_aman_pathak #DevOps #Terraform #Jenkins #AWS #Kubernetes #DevSecOps #DevOpsProject #CloudEngineering #Cloud #cloudstorage #ArgoCD #Monitoring #Grafana #GitOps #Prometheus #kubernetesmonitoring #projects #devopsprojects #cloudprojects #endtoendprojects #industryprojects