This project involved deploying an end-to-end three-tier application (Frontend, Backend, Database) on Kubernetes, integrating DevSecOps practices with CI/CD pipelines, security scans, and monitoring. The setup leveraged AWS, Kubernetes, and open-source tools to ensure a secure and scalable deployment.
Key Features:
- Domain & Networking: Configured domain via GoDaddy and set up an Application Load Balancer for traffic management.
- CI/CD Pipeline: Built automated pipelines with Jenkins and Terraform, including code quality analysis (SonarQube), dependency checks, security file scans, Docker image builds, and Trivy scans for ECR images.
- Continuous Deployment: Used ArgoCD for seamless updates across the Kubernetes cluster.
- Secrets Management: Managed sensitive data (ECR, DB credentials) using Kubernetes Secrets.
- Monitoring: Implemented Prometheus and Grafana for real-time health monitoring of the Kubernetes environment.
- Three-Tier Architecture: Deployed Frontend, Backend, and Database using Kubernetes Pods, Services, and Persistent Volumes.
Challenges: Integrating multiple security tools in the CI/CD pipeline required careful configuration. Ensuring seamless ArgoCD deployments across tiers was complex.
Outcome: Delivered a secure, scalable, and observable three-tier application, reinforcing expertise in Kubernetes and DevSecOps.
