Identity
OIDC, temporary AWS credentials, IRSA, and EKS Pod Identity remove long-lived secrets.
Project workflow · DevSecOps / GitOps
Amazon EKS DevSecOps & GitOps Platform
A controlled path from Git commit to a secure, observable workload on Amazon EKS—with Git-based promotion and deterministic rollback.
Architecture summary
Delivery path
- Developer
- GitHub / GitLab
- Jenkins / Hosted CI
- Tests + gates
- Docker
- Amazon ECR
- GitOps repo
- Argo CD
- Amazon EKS
- Prometheus stack
Nine-stage control plane
Project workflow
Open a stage for implementation details or run the release simulation.
Ready · choose an outcome and run the workflow
Enforced controls
Platform guardrails
Artifact security
Non-root containers, immutable tags, vulnerability gates, and KMS-encrypted ECR storage.
Runtime policy
Gatekeeper, NetworkPolicy, probes, limits, PDBs, and least-privilege workload access.
Recovery
Git history, Argo CD revisions, application health, metrics, alerts, and documented rollback.
Repository
Review the implementation
Terraform modules, Helm charts, CI pipelines, policies, dashboards, and operational runbooks.