vishal-tinani // gui-mode // projects/2
Vishal Tinani
DevOps Specialist
← BACK TO PROJECTS
GitOps-Driven DevSecOps Delivery Pipeline
Implemented GitOps delivery using ArgoCD continuously reconciling cluster state from Git. Embedded Trivy, SonarQube gates, and secure secret injection with HashiCorp Vault.
$ cat project-plan.md
- Adopt a declarative GitOps posture for EKS clusters utilizing ArgoCD manifest controllers.
- Bootstrapping HashiCorp Vault to centralize production secrets, using mutual TLS for pod authentication.
- Design build security gates integrating SonarQube static code checks and Trivy container image scanning.
$ get --toolchain
ArgoCDKubernetes (EKS)TerraformGitHub ActionsDockerTrivySonarQubeHashiCorp Vault
$ history --commands
helm install argocd argo/argo-cd -n argocd --create-namespaceargocd app create devsecops-app --repo https://github.com/Tinanivishal/devops-gitops.gittrivy image --severity HIGH,CRITICAL Tinanivishal/devsecops-app:latestvault server -config=/vault/config/vault.hcl$ grep --errors --challenges
⚠️ CHALLENGE: ArgoCD getting out-of-sync loops due to dynamic metadata injection from Vault.
✔️ RESOLUTION: Configured ArgoCD diff customization options to ignore metadata annotations injected during secrets orchestration.
$ render --infrastructure --architecture
GitOps Declarative Synchronization Flow
🐙
Git Repository
Manifest Source
⚙️
ArgoCD Controller
State Reconciliation
🔑
Vault Cluster
Secrets Engine
🐳
EKS Pods
Running Workloads