Tetris DevSecOps Kubernetes Pipeline

Costhigh

Deployability ci cd ready

Status devsecops lab

Validation npm --prefix Tetris-V1 test --if-present

Node.js Docker Kubernetes Terraform Jenkins aws terraform jenkins

Use the guide first.

The full learning guide is on this page. Open the repository files only when a step asks you to inspect code, fork the project, or download raw assets.

Read safety guide Project files on GitHub

Project Guide

Welcome to an immersive DevSecOps learning experience! This project guides you through deploying a Tetris game on AWS EKS while mastering the art of DevSecOps.

🛡️ 2026 DevSecOps Enhancements (What You Will Learn)

This repository’s architecture showcases a mature DevSecOps pipeline deployed to EKS:

1. Supply Chain Security: We integrate OWASP Dependency-Check into the CI pipeline to actively scan and block deployments that rely on compromised or vulnerable open-source libraries.
2. Zero-Trust GitOps Delivery: By employing ArgoCD, the deployment model shifts from “push” (where Jenkins holds cluster admin credentials) to “pull”. ArgoCD securely syncs state directly from inside the EKS cluster boundary, drastically reducing the external attack surface.

Directories 📂

1. EKS-TF: Explore Terraform scripts for deploying EKS clusters on AWS.
2. Jenkins-Pipeline-Code: Jenkins pipeline code for automated CI/CD.
3. Jenkins-Server-TF: Terraform scripts for provisioning Jenkins servers on AWS EC2.
4. Manifest-file: Kubernetes manifest files for Tetris application deployment.
5. Tetris-V1: Initial version of the Tetris game application.
6. Tetris-V2: Enhanced version of the Tetris game application.

Getting Started 🚀

1. Clone the Repository:

   git clone https://github.com/DevCloudNinjas/DevOps-Projects.git

2. Explore the Directories: Navigate into each directory to find detailed scripts, pipelines, and configurations.

3. Follow the Blog: Implementation details and insights are documented in the associated blog post.

Tools Explored 🛠️

1. Jenkins: Automated CI/CD pipelines
2. ArgoCD: Continuous deployment to Kubernetes
3. Kubernetes: Orchestration for containerized applications
4. Trivy: Container vulnerability scanner
5. OWASP Dependency-Check: Ensuring secure dependencies
6. Docker: Containerized application deployment
7. SonarQube: Unveiling code quality insights
8. Terraform: Infrastructure as Code for AWS EKS

Blog Implementation 📝

To implement this project, follow the step-by-step guide in our detailed blog post. Learn how each tool plays a crucial role in achieving DevSecOps excellence.

Acknowledgments 🙌

Special thanks to the open-source community and the contributors who make learning and collaboration an incredible journey.

License 📄

This project is licensed under the Apache-2.0 license see the LICENSE file for details.