Understanding DevOps Pipeline

• AWS EC2 (Docker container)
• Kubernetes via GitOps (Argo CD)
• AWS Lambda (serverless)

​

Continuous Integration (CI)

​

CI Stages Overview

​

1. Install Dependencies

npm install

​

2. Dependency Vulnerability Scans

owasp-dependency-check --project my-app
npm audit --audit-level=moderate

​

3. Unit Tests & Coverage

npm test
# Generate HTML/LCOV report
nyc --reporter=lcov npm test

​

4. Static Code Analysis (SonarCloud)

sonar-scanner \
  -Dsonar.projectKey=my-app \
  -Dsonar.organization=my-org \
  -Dsonar.host.url=https://sonarcloud.io \
  -Dsonar.login=$SONAR_TOKEN

​

5. Containerization

docker build -t my-app:${BRANCH_NAME}-${BUILD_NUMBER} .

​

6. Image Vulnerability Scan (Snyk)

snyk test --docker my-app:${BRANCH_NAME}-${BUILD_NUMBER}

​

7. Push to Container Registry

docker tag my-app:${BRANCH_NAME}-${BUILD_NUMBER} \
  123456789012.dkr.ecr.us-east-1.amazonaws.com/my-app:latest

docker push 123456789012.dkr.ecr.us-east-1.amazonaws.com/my-app:latest

​

Continuous Deployment (CD)

1. Run Container on EC2
   ssh ec2-user@ec2-instance \
     "docker pull 123456789012.dkr.ecr.us-east-1.amazonaws.com/my-app:latest && \
      docker run -d --name my-app -p 80:3000 \
      123456789012.dkr.ecr.us-east-1.amazonaws.com/my-app:latest"
   
2. Integration Tests
   curl --fail http://ec2-instance/api/health
   curl --fail http://ec2-instance/api/endpoint
   
3. Open Pull Request
   Contributors open a PR to merge feature/* into main, kicking off Continuous Delivery.

​

Continuous Delivery (CDel)

1. Deploy to Kubernetes via GitOps
   Update the image tag in your Git manifest:
   git checkout main
   sed -i "s|image: my-app:.*|image: my-app:${BUILD_NUMBER}|g" k8s/deployment.yaml
   git commit -am "chore: update image to ${BUILD_NUMBER}"
   git push origin main
   
   Argo CD auto-detects the change and syncs the cluster.
2. Dynamic Application Security Testing (DAST)
   zap-baseline.py -t http://my-k8s-loadbalancer/api -r zap-report.html
   
3. Merge Pull Request
   After security review, approve and merge into main.
4. Approval & AWS Lambda Deployment
   Jenkins pauses for a manual approval. Once approved:
   aws lambda update-function-code \
     --function-name my-app-function \
     --image-uri 123456789012.dkr.ecr.us-east-1.amazonaws.com/my-app:latest
   
   aws lambda update-function-configuration \
     --function-name my-app-function \
     --environment Variables={NODE_ENV=production} \
     --publish
   
5. Lambda Invocation Tests
   aws lambda invoke \
     --function-name my-app-function \
     --payload '{}' response.json
   jq . response.json
   

​

Post-Build Reporting

• Archive & Publish Reports
  archiveArtifacts artifacts: 'reports/**/*'
  aws s3 sync reports s3://my-app-ci-reports/${BUILD_NUMBER}/
  
• Slack Notifications
  slackSend(
    channel: '#ci-cd',
    color: currentBuild.currentResult == 'SUCCESS' ? 'good' : 'danger',
    message: "${env.JOB_NAME} build #${env.BUILD_NUMBER}: ${currentBuild.currentResult}"
  )
  

​

Links and References

• Jenkins
• Argo CD (GitOps)
• AWS Lambda
• SonarCloud
• OWASP Dependency Checker
• Snyk