Ship-it flows

End-to-end checkpoints — copy each block in order.

Reviewed: ·Tested on: Kubernetes 1.29, Terraform 1.8, Ubuntu 22.04

App → ECR → EKS via GitHub Actions

Build image, push to registry, deploy to Kubernetes — one pipeline.

5 checkpoints · ~45 min

🪣

Bitbucket → Docker → EKS

Pipeline builds image and deploys to Kubernetes using your Bitbucket repos.

4 checkpoints · ~40 min

🏗️

Terraform EKS cluster from GitHub repo

Provision VPC + EKS, then merge kubeconfig and deploy.

5 checkpoints · ~60 min

🦊

App → GKE via GitLab CI

Build, scan, push to registry, deploy to GKE — GitLab-native pipeline with prod-delta hardening.

5 checkpoints · ~45 min

🤖

App → ECR → EKS via Jenkins

Declarative pipeline — build, scan, push, deploy with prod-delta hardening for enterprise Jenkins.

5 checkpoints · ~50 min

🌐

502 debug path (nginx → ingress → pod)

Follow checks in order when users see Bad Gateway.

4 checkpoints · ~15 min

🐳

Docker Compose → production Kubernetes

Translate a compose stack to deploy + ingress + prod hardening.

5 checkpoints · ~30 min

🔄

Bootstrap GitOps with Argo CD

Install Argo CD, connect repo, and sync an app to the cluster.

4 checkpoints · ~40 min

🔐

Vault secrets → Kubernetes (External Secrets)

Store secrets in Vault, sync to K8s Secrets with ESO — zero plain YAML in git.

4 checkpoints · ~35 min

🛡️

Bastion jump host

Hardened SSH jump box for private subnet access — keys only, audit, no direct prod.

4 checkpoints · ~30 min

🔵

Blue-green deployment on Kubernetes

Two deployments — switch Service selector or Ingress weight for zero-downtime cutover.

4 checkpoints · ~45 min

📈

Prometheus + Grafana monitoring stack

Metrics scrape, dashboards, and alert rules — Compose or K8s.

4 checkpoints · ~50 min