Pankajsinghveersatech patch 3.0

.github/workflows/deploy.yml

@@ -0,0 +1,32 @@
+name: Build and Push to Amazon ECR
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    environment: ecr-push  # MUST match your GitHub environment name
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v3
+
+    - name: Configure AWS Credentials
+      uses: aws-actions/configure-aws-credentials@v2
+      with:
+        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        aws-region: eu-north-1
+
+    - name: Login to Amazon ECR
+      uses: aws-actions/amazon-ecr-login@v1
+
+    - name: Build, Tag, and Push Docker image
+      run: |
+        IMAGE_URI=476768693646.dkr.ecr.eu-north-1.amazonaws.com/devops_sec:latest
+        docker build -t netflix .
+        docker tag netflix:latest $IMAGE_URI
+        docker push $IMAGE_URI

.github/workflows/main.yml

@@ -0,0 +1,47 @@
+name: Deploy to AWS ECR and EKS
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build-push-deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v3
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: eu-north-1
+
+      - name: Login to Amazon ECR
+        uses: aws-actions/amazon-ecr-login@v1
+        with:
+          region: eu-north-1
+
+      - name: Build Docker Image
+        run: |
+          docker build -t netflix .
+
+      - name: Tag Docker Image
+        run: |
+          docker tag netflix:latest 476768693646.dkr.ecr.eu-north-1.amazonaws.com/devops_sec:latest
+
+      - name: Push Docker Image
+        run: |
+          docker push 476768693646.dkr.ecr.eu-north-1.amazonaws.com/devops_sec:latest
+
+      - name: Update kubeconfig for EKS
+        run: |
+          aws eks --region eu-north-1 update-kubeconfig --name netflix-cluster
+
+      - name: Deploy to EKS
+        run: |
+          kubectl apply -f Kubernetes/deployment.yaml
+          kubectl apply -f Kubernetes/service.yaml

Kubernetes/deployment.yml

@@ -16,6 +16,6 @@ spec:
     spec:
       containers:
       - name: netflix-app
-        image: nasi101/netflix:latest
+        image: 476768693646.dkr.ecr.eu-north-1.amazonaws.com/devops_sec:latest
         ports:
         - containerPort: 80

Kubernetes/node-service.yaml

@@ -1,14 +1,16 @@
-kind: Service
 apiVersion: v1
+kind: Service
 metadata:
   name: node-exporter
   namespace: prometheus-node-exporter
+  labels:
+    app: node-exporter
 spec:
+  type: NodePort
   selector:
-      app: node-exporter
+    app: node-exporter
   ports:
-  - name: node-exporter
-    protocol: TCP
-    port: 9100
-    targetPort: 9100
-  type: NodePort
+    - name: metrics
+      protocol: TCP
+      port: 9100
+      targetPort: 9100

Kubernetes/service.yml

@@ -6,9 +6,11 @@ metadata:
     app: netflix-app
 spec:
   type: NodePort
-  ports:
-  - port: 80
-    targetPort: 80
-    nodePort: 30007
   selector:
     app: netflix-app
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+      nodePort: 30007
+      protocol: TCP

Kubernetes/wget-log

@@ -0,0 +1,6 @@
+--2025-06-16 19:40:25--  https://code.visualstudio.com/sha/download?build=stable
+Resolving code.visualstudio.com (code.visualstudio.com)... 13.107.246.53, 2620:1ec:bdf::53
+Connecting to code.visualstudio.com (code.visualstudio.com)|13.107.246.53|:443... connected.
+HTTP request sent, awaiting response... 404 Not Found
+2025-06-16 19:40:25 ERROR 404: Not Found.
+

apps/netflix-app.yaml

@@ -0,0 +1,18 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: netflix-app
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://github.com/pankajsinghveersatech/DevSecOps-Project-first.git
+    targetRevision: HEAD
+    path: Kubernetes
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

aws/README.md

@@ -0,0 +1,54 @@
+# AWS CLI v2
+
+This bundle contains a built executable of the AWS CLI v2.
+
+## Installation
+
+To install the AWS CLI v2, run the `install` script:
+```
+$ sudo ./install 
+You can now run: /usr/local/bin/aws --version
+```
+This will install the AWS CLI v2 at `/usr/local/bin/aws`.  Assuming
+`/usr/local/bin` is on your `PATH`, you can now run:
+```
+$ aws --version
+```
+
+
+### Installing without sudo
+
+If you don't have ``sudo`` permissions or want to install the AWS
+CLI v2 only for the current user, run the `install` script with the `-b`
+and `-i` options:
+```
+$ ./install -i ~/.local/aws-cli -b ~/.local/bin
+``` 
+This will install the AWS CLI v2 in `~/.local/aws-cli` and create
+symlinks for `aws` and `aws_completer` in `~/.local/bin`. For more
+information about these options, run the `install` script with `-h`:
+```
+$ ./install -h
+```
+
+### Updating
+
+If you run the `install` script and there is a previously installed version
+of the AWS CLI v2, the script will error out. To update to the version included
+in this bundle, run the `install` script with `--update`:
+```
+$ sudo ./install --update
+```
+
+
+### Removing the installation
+
+To remove the AWS CLI v2, delete the its installation and symlinks:
+```
+$ sudo rm -rf /usr/local/aws-cli
+$ sudo rm /usr/local/bin/aws
+$ sudo rm /usr/local/bin/aws_completer
+```
+Note if you installed the AWS CLI v2 using the `-b` or `-i` options, you will
+need to remove the installation and the symlinks in the directories you
+specified.