DEV Community

Cover image for DEPLOYMENT OF NODEJS APP IN KUBERNETES WITH DEVSECOPS CICD PIPELINE
Bhavesh Kansagara
Bhavesh Kansagara

Posted on

DEPLOYMENT OF NODEJS APP IN KUBERNETES WITH DEVSECOPS CICD PIPELINE

I'm thrilled to announce that I have successfully implemented a comprehensive CI/CD pipeline for DEPLOY THE NODEJS APP IN
KUBERNETES WITH DEVSECOPS
CICD PIPELINE Project! This pipeline ensures seamless integration, continuous delivery, and robust security checks, enhancing our development process significantly. Here's a breakdown of the stages:
Create Two Ec2 with T2-Large Instance 30GB storage & Install Jenkins.

CI/CD Pipeline Stages:

  1. Checkout SCM: Retrieves the latest code from our Git repository.
  2. Tool Install: Install necessary tools like JDK 17 and Node.js 16.
  3. Clean Workspace: Ensures a fresh build environment.
  4. Checkout from Git: Fetches the code from the main branch.
  5. SonarQube Analysis: Conducts code quality analysis with SonarQube.
  6. Quality Gate: Validates code quality against predefined metrics.
  7. Install Dependencies: Installs project dependencies using npm.
  8. OWASP FS Scan: Performs a security scan using OWASP Dependency Check.
  9. Trivy FS Scan: Conduct a security scan on the file system with Trivy.
  10. Docker Build & Push: Builds the Docker image and pushes it to Docker Hub.
  11. Trivy Image Scan: Scans the Docker image for vulnerabilities using Trivy.
  12. Deploy to Container: Deploy the Docker container.
  13. Deploy to Kubernetes: Applies Kubernetes deployment configuration. Key Highlights:
  14. SonarQube Integration: Ensures code quality and adherence to best practices.
  15. Security Scans: OWASP and Trivy scans enhance our security posture.
  16. Automated Deployments: Streamlined deployments to Docker and Kubernetes.

Top comments (0)