Tech Stack
Overview
A production-grade Food Delivery web application designed to showcase comprehensive expertise in modern DevSecOps practices. The project demonstrates an end-to-end CI/CD lifecycle using Jenkins, deeply integrated with strict security scanning via OWASP Dependency-Check, SonarQube for code analysis, and Trivy for container vulnerability detection. It leverages ArgoCD to facilitate a robust GitOps workflow, automating the deployment of containerized microservices onto a managed AWS EKS cluster. To ensure high reliability, the platform includes a complete observability stack configured via Helm, utilizing Prometheus for metrics and Grafana for visual dashboards, alongside automated Jenkins SMTP email alerts.
Challenges & Solutions
Integrating security seamlessly into the software supply chain
Solution: Architected a comprehensive DevSecOps pipeline using Jenkins, incorporating OWASP for dependency checks, SonarQube for continuous code quality analysis, and Trivy to scan Docker images prior to deployment.
Ensuring consistent, automated, and self-healing deployments
Solution: Adopted a GitOps methodology by implementing ArgoCD, which continuously synchronizes the cluster state with the Git repository, deploying the application smoothly onto a scalable AWS EKS Kubernetes cluster.
Maintaining deep visibility into cluster health and application performance
Solution: Configured and deployed an advanced monitoring stack via Helm, integrating Prometheus for efficient metric scraping and Grafana for rich dashboards, supplemented by proactive email alerts triggered directly by the Jenkins pipeline.