DevSecOps Mega Project | Multi-AZ Amazon EKS + Jenkins + Trivy + SonarQube + ECR + GitHub
📚 Complete DevSecOps CI/CD Pipeline | Multi-AZ Amazon EKS + Jenkins + Trivy + SonarQube + ECR + GitHub
In this mega project lecture we build a full production-ready DevSecOps CI/CD pipeline from scratch. We install and configure Jenkins (controller and agent), SonarQube, Docker, Maven, Trivy, Amazon ECR, and deploy a real application to a Multi-AZ Amazon EKS cluster. You will learn how security integrates into a CI/CD pipeline end-to-end using SAST, SCA, image scanning, coverage enforcement, and rollback automation. This session is ideal for beginners and intermediates who want a clean, practical, hands-on walkthrough of a real-world DevSecOps pipeline.
👉 GitHub Notes: https://github.com/CloudWithVarJosh/J...
👉 Join the Channel to show your support: / @cloudwithvarjosh
Pre-Requisites:
SDLC: • Day 1: Modern SDLC Explained | Build Autom...
Branching Strategies: • Day 2: What is CI/CD? | CI/CD Explained | ...
Maven: • Maven Tutorial for DevOps | Maven Beginner...
SonarQube: • SonarQube Tutorial for DevOps | Introducti...
🛠 What You’ll Learn Today
Full CI/CD pipeline setup using Jenkins controller and agent
SonarQube installation, SAST, code quality, coverage enforcement
Trivy FS and Image scanning for SCA and container security
Amazon ECR authentication, image build, tagging, and push
Multi-AZ EKS cluster setup, access control, and application deployment
Rollback automation, post-actions, and production-grade pipeline design
⏰ Timestamps
00:00:00 Introduction
00:01:35 Pre-requisites
00:02:23 Demo overview: what we will do
00:11:52 Lab: Install Jenkins controller on EC2
00:27:24 Lab: Install Jenkins agent on EC2
00:33:47 Establish controller ↔ agent communication
01:02:58 Lab: Install and configure SonarQube
01:21:42 Demo start: End-to-end DevSecOps pipeline
01:21:47 Stage 1: Git checkout & Jenkinsfile setup
01:37:00 Stage 2: Trivy FS scan & Jenkinsfile walkthrough
01:54:55 Stage 3: Build + SonarQube (Maven build, SAST, coverage)
02:17:39 Stage 4: ECR login (authenticate Jenkins agent to ECR)
02:31:06 Stage 5: Build container image
02:44:34 Stage 6: Trivy image scan (vulnerability scan)
02:49:38 Stage 7: Push image to ECR
02:51:56 Stage 8: Create cluster & grant access
02:54:00 Stage 9: Deploy app (apply manifests)
03:30:06 Add post-actions in Jenkins pipeline
03:34:04 Pipeline improvements and best practices
03:38:16 Outro
Playlists:
👉 CKA 2025 Playlist: • CKA Certification Course 2025
👉 Kubernetes Projects: • Kubernetes Projects
👉 Jenkins: • Jenkins: Basics To Production
🔗 Stay Connected:
👉 LinkedIn: / varun-joshi-2b516752
👉 GitHub: https://github.com/CloudWithVarJosh
🔖 Hashtags
#DevSecOps #EKS #Jenkins #SonarQube #Trivy #AWS #ECR #Kubernetes #CICD #CloudWithVarJosh #Docker #Maven #Security #SAST #SCA #DevOps #MultiAZ