NTI Cloud DevOps Capstone — the Platform
A production-shaped AWS platform: Terraform modules for VPC, EKS, RDS and ECR, a Jenkins pipeline with blocking SonarQube and Trivy gates, and a kube-prometheus-stack behind it.
- terraform
- ansible
- docker
- kubernetes
- helm
- jenkins
- prometheus
- grafana
- aws
Author
Imported from GitHub. The code stays with its author — EgyKode links to the original repository.
Why it exists
This is the finished platform, organised by technology rather than by lesson — Terraform/, ansible/, docker/, k8s/, helm/, jenkins/, monitoring/, docs/. It runs a Django application on PostgreSQL and Redis, served by Gunicorn behind Nginx and an ALB. What makes it worth reading is the production detail most tutorials skip: IRSA rather than node credentials, IMDSv2, Secrets Manager, NetworkPolicy and pod security, HPA and rolling updates, remote state with locking, and quality gates that block a deployment rather than merely reporting on it. If you would rather build it than read it, the same capstone is taught step by step as 19 labs — see the companion project below.
What's inside
- Terraform modules — VPC, EKS, RDS, IAM, ECR, Secrets Manager, Backup
- Ansible roles configuring the Jenkins host — Docker, Java, kubectl, Helm
- Multi-stage Docker build behind an Nginx reverse proxy
- Kubernetes manifests and a Helm chart, with HPA and NetworkPolicy
- Jenkins multibranch pipeline with SonarQube and Trivy as blocking gates
- kube-prometheus-stack with custom alert rules and Grafana dashboards
- Security-first: IRSA, IMDSv2, Secrets Manager, pod security