DEPLOYMENT OF NODEJS APP IN KUBERNETES WITH DEVSECOPS CICD PIPELINE

I'm thrilled to announce that I have successfully implemented a comprehensive CI/CD pipeline for DEPLOY THE NODEJS APP IN
KUBERNETES WITH DEVSECOPS
CICD PIPELINE Project! This pipeline ensures seamless integration, continuous delivery, and robust security checks, enhancing our development process significantly. Here's a breakdown of the stages:
Create Two Ec2 with T2-Large Instance 30GB storage & Install Jenkins.

CI/CD Pipeline Stages:

1. Checkout SCM: Retrieves the latest code from our Git repository.
2. Tool Install: Install necessary tools like JDK 17 and Node.js 16.
3. Clean Workspace: Ensures a fresh build environment.
4. Checkout from Git: Fetches the code from the main branch.
5. SonarQube Analysis: Conducts code quality analysis with SonarQube.
6. Quality Gate: Validates code quality against predefined metrics.
7. Install Dependencies: Installs project dependencies using npm.
8. OWASP FS Scan: Performs a security scan using OWASP Dependency Check.
9. Trivy FS Scan: Conduct a security scan on the file system with Trivy.
10. Docker Build & Push: Builds the Docker image and pushes it to Docker Hub.
11. Trivy Image Scan: Scans the Docker image for vulnerabilities using Trivy.
12. Deploy to Container: Deploy the Docker container.
13. Deploy to Kubernetes: Applies Kubernetes deployment configuration. Key Highlights:
14. SonarQube Integration: Ensures code quality and adherence to best practices.
15. Security Scans: OWASP and Trivy scans enhance our security posture.