The Production-Grade End-to-End DevSecOps Project

Name: The Production-Grade End-to-End DevSecOps Project
Rating: 4.6 (131 reviews)

End-to-End DevSecOps Project: Build, Test in QA & Safely Promote to Production on AWS EKS

Created byAditya Jaiswal

Last updated 4/2026

English

English [Auto],

What you'll learn

Build End-To-End CI/CD pipelines using GitHub Actions with branch-based promotion from QA to Production
Design real-world branching strategy with feature, QA, and production flows aligned to CI/CD pipelines
Implement DevSecOps practices including Gitleaks, Trivy, Checkov, SBOM, and SonarQube in real pipelines
Configure secretless authentication to AWS using GitHub OIDC and securely access EKS without static credentials
Integrate AWS Secrets Manager with Kubernetes using External Secrets Operator (ESO) and IRSA
Deploy and manage stateful applications (MySQL) on Kubernetes using StatefulSets, Services, and persistent storage
Design and deploy a production-grade AWS EKS architecture with ALB, Route 53, and ACM for secure HTTPS traffic routing
Implement complete observability stack with Prometheus, Loki, Tempo, and Grafana for metrics, logs, and traces
Purchase and configure a custom domain, generate SSL/TLS certificates using AWS ACM, and integrate secure HTTPS routing into your Kubernetes application via Rou

Course content

14 sections • 42 lectures • 9h 11m total length

Course Overview11:44
Get a complete overview of the course, project structure, and learning roadmap. Understand how you will build, deploy, secure, and monitor a production-grade application on AWS using DevOps practices.

Project Information1:11
Get an overview of the project, its goals, and what you will build throughout the course
Project Tech Stack9:30
Understand the complete tech stack including frontend, backend, database, and DevOps tools used in the project
Project Architecture8:13
Explore the high-level architecture and how different components interact in a real-world system
Understanding Project Source Code10:30
Walk through the codebase to understand application structure, logic, and key components
API Calls5:01
Understand how the frontend communicates with the backend using APIs and how data flows through the system

Generate YAML File To Write the Pipeline In GitHub Actions4:19
Triggers in GitHub Actions Pipeline3:12
Explore how trigger events start a GitHub Actions pipeline by defining on push conditions, such as QA branch changes only in client, server, or pipeline folders, ensuring precise CICD automation.
Pipeline Stage-1 | Gitleaks16:43
Pipeline Stage-2 | Chekov Scan For K8s, Terraform & Dockerfile18:01
Chekhov scan is integrated into the end-to-end DevSecOps pipeline to validate Terraform, Kubernetes, and Dockerfile configurations, run in parallel, generate JSON reports, and upload artifacts.
Pipeline Stage-3 | Trivy File System Scan For Backend & Frontend13:46
Scan frontend and backend dependencies with trivy fs to detect vulnerabilities against the NVD and Red Hat databases. Generate table and json reports for CI/CD artifacts.
Pipeline Stage-4 | Linting9:30
Execute linting as a lightweight static code check in the pipeline to catch syntax errors, bad practices, and formatting issues before running tests.
Pipeline Stage-5 | Unit Test Cases2:28
Discover how to run unit test cases for frontend and backend in pipeline stage-5 using npm test after linting, with client and server tests executed in their folders.
Pipeline Stage-6 | SonarQube Code Quality Check & Code Compliance31:47
Pipeline Stage-7 | Frontend Build5:19
Pipeline Stage-8 | Docker Build, Push & Image Scan31:31
Pipeline Stage-9 | SBOM [Software Bill Of Materials]3:39
Explore how to integrate sbom into a devsecops pipeline using anchor, generating detailed dependency reports and sub-dependencies, scanning for global issues, and uploading artifacts before image push.

Infra Part-1 | EKS Cluster Setup23:51
Set up a qa eks cluster and namespace, configure storage, deploy stateful database with headless service, and expose app via ingress with alb and acm ssl using github oidc.
Infra Part-2 | Understanding OIDC Auth To EKS29:50
Infra Part-3| OIDC Auth Setup Practical7:04
Set up github actions OIDC authentication on AWS by creating the OIDC provider and trust policy, granting EKS describe cluster permission to a QA IAM role.
Infra Part-4 | ALB Controller Setup5:57
Install and configure the ALB controller to implement ingress rules for external access, create a service account with IAM policy, and deploy the AWS load balancer controller via helm.
Infra Part-5 | MySQL Database Setup [Theory]17:49
Explore setting up a MySQL database on Kubernetes with a storage class for dynamic EBS volumes, a statefulset, and secret management via AWS secret manager and external secrets operator.
Infra Part-6 | MySQL Pods Setup With Secrets in AWS Secret Manager21:20
Deploy MySQL pods with AWS secret manager integration using ESO and external secrets, syncing a Kubernetes secret to AWS. Configure service accounts, IAM roles, OIDC provider, and EBS CSI driver.

Requirements

Basic understanding of what DevOps is and why it matters (no deep expertise needed)
Comfortable running commands in a Linux terminal

Description

Most DevOps courses teach you concepts. This one makes you build things.

You'll work through a complete, production-grade DevSecOps project from scratch — the kind you can talk about in interviews and put on your resume. No toy examples. No hand-waving. Real pipelines, real infrastructure, real security.

Here's what you'll build:

End-to-end CI/CD pipelines using GitHub Actions, with branch-based promotion from feature branches through QA to production
A real branching strategy aligned to your pipeline — feature, QA, and production flows
DevSecOps tooling embedded directly into your pipelines — Gitleaks, Trivy, Checkov, and SBOM scanning so security ships with your code
Secretless AWS authentication via GitHub OIDC, with secure EKS access and no static credentials
Secrets management using AWS Secrets Manager, External Secrets Operator, and IRSA
Stateful workloads (MySQL) on Kubernetes using StatefulSets and persistent storage
A production-grade AWS EKS architecture with ALB, Route 53, and ACM for HTTPS routing
A full observability stack — Prometheus, Loki, Tempo, and Grafana — for metrics, logs, and traces
Custom domain setup with SSL/TLS certificates via AWS ACM, wired into your Kubernetes app

By the end, you'll own a real, working DevSecOps environment on AWS and understand every layer of it.

This course is for beginners, developers transitioning into DevOps, and anyone who wants hands-on AWS and Kubernetes experience that reflects how production teams actually work. Basic Linux knowledge is all you need — everything else is taught inside.

Who this course is for:

Beginners who want to learn DevOps the right way — by building a real project, not just watching slides
Developers and software engineers ready to transition into DevOps, platform, or cloud engineering roles
DevOps learners who want hands-on experience with AWS, Kubernetes, and CI/CD
Anyone serious about going from zero to production-level DevOps skills as fast as possible

The Production-Grade End-to-End DevSecOps Project

What you'll learn

Explore related topics

Course content

Course Overview1 lecture • 12min

Watch This First1 lecture • 2min

Project Architecture & Structure5 lectures • 34min

Branching & DevOps Environments2 lectures • 24min

Repository Setup on GitHub2 lectures • 18min

Local Run Of The Project2 lectures • 39min

Understanding CICD Flow With Diagram1 lecture • 19min

Understanding GitHub Actions [Theory]2 lectures • 27min

CI For QA Practical Implementation11 lectures • 2hr 20min

DevOps Deployment Infrastructure Setup6 lectures • 1hr 46min

Requirements

Description

Who this course is for: