Apr 24
Loading video player...
In this video, you will learn how to build a **complete DevSecOps pipeline** from scratch and deploy a real application to Kubernetes — without using managed services like EKS. This project is designed to be **simple, practical, and production-oriented**, helping you understand how modern DevOps workflows actually work in real environments. --- ## 🔥 What You Will Learn ✅ Build a simple HTML application (running on port 80) ✅ Set up a full CI/CD pipeline using GitHub Actions ✅ Scan both **Docker images and Kubernetes configs** using Trivy ✅ Deploy directly to an EC2 instance (no EKS) ✅ Use **K3s** as a lightweight Kubernetes cluster ✅ Configure **Traefik** as an Ingress controller ✅ Access your app via public IP 👉 Final result: ``` http://EC2_PUBLIC_IP ``` --- ## 🧩 Project Structure ```bash project4-k8s-security/ ├── app/ # Simple HTML app ├── Dockerfile # Container setup ├── k8s/ # Kubernetes manifests └── .github/workflows/ # CI/CD pipeline ``` --- ## ⚙️ Key Features * 🔐 **Security-first approach** (DevSecOps) * 🚀 **Fully automated CI/CD pipeline** * ☸️ **Kubernetes deployment with K3s** * 🌐 **Ingress routing using Traefik** * 🔍 **Multi-layer security scanning**: * Kubernetes YAML * Docker Image * Running Cluster --- ## ☁️ Infrastructure Setup * EC2 instance (minimum 1GB RAM) * Open ports: `22, 80, 443, 6443` * Install: * K3s (includes Traefik) * Trivy (security scanner) --- ## 🔄 CI/CD Workflow ```text Push Code → Scan YAML → Build Image → Scan Image → Push Image → Deploy to K8s → Verify → Scan Cluster ``` This ensures security is applied at **every stage of the pipeline**. --- ## 🧠 Why This Project Matters This is not just a demo — it reflects a **real-world DevSecOps workflow**: * Secure your application before deployment * Automate everything with CI/CD * Run Kubernetes without complex infrastructure * Validate your system in a live environment --- ## 🎯 Final Result After pushing your code: ```bash git push origin main ``` 👉 The pipeline runs automatically and deploys your app. 🌐 Open your browser: ``` http://EC2_PUBLIC_IP ```