Skip to content

Three-Tier DevSecOps

A complete DevSecOps pipeline on AWS EKS — Kubernetes, Terraform, Jenkins, ArgoCD, security scanning and monitoring, end to end.
129
Forks
22
Stars
MIT
Licence
github.com/codewithmuh/three-tier-devsecops-project

Interface illustration — [ADD REAL PROJECT SCREENSHOT]

Project details

Type
Open source
Category
DevOps / Infrastructure
Status
Live

Technology

  • Kubernetes
  • Terraform
  • Jenkins
  • ArgoCD
  • AWS EKS
  • Trivy
  • SonarQube
  • Prometheus
  • Grafana

Overview

An open source reference implementation of a production DevSecOps pipeline: a three-tier application deployed to AWS EKS through Terraform, Jenkins and ArgoCD, with security scanning and full observability wired in.

It exists because most infrastructure tutorials stop at `kubectl apply`. This one goes all the way through to GitOps, scanning and monitoring — the parts that determine whether the system survives.

The challenge

Teams copy Kubernetes and Terraform configuration they do not understand, because complete working examples with the reasoning attached are rare.

That is precisely how fragile infrastructure gets built — it works on the first deploy and nobody can explain it on the day it breaks.

The solution

Infrastructure as code with Terraform provisioning AWS EKS, application delivery through Jenkins CI and ArgoCD GitOps.

Security built into the pipeline rather than bolted on — Trivy image scanning and SonarQube static analysis as pipeline gates.

Prometheus and Grafana monitoring included, so the deployed system is observable from the first run.

Key features

  • Terraform-provisioned AWS EKS cluster
  • Jenkins CI with ArgoCD GitOps delivery
  • Trivy and SonarQube security scanning as pipeline gates
  • Prometheus + Grafana monitoring
  • Three-tier application deployed end to end

Outcome

  • 129 forks and 22 stars on GitHub — used as a starting point by other teams.
  • MIT licensed and publicly maintained.
Get in touch

Have a project in mind?

Let's build something useful. Tell us what you're trying to achieve and we'll come back with an honest view of what it takes.

Within 1–2 business days · Working with clients in the United States and internationally