Amazon EKS Cluster Management
Production-ready Kubernetes infrastructure with GitOps, observability & security
Project Overview
Designed and implemented a fully automated Amazon EKS cluster using Terraform. Adopted GitOps with Argo CD, enabled observability using Prometheus & Grafana, configured persistent storage via EBS CSI, and enforced RBAC with IAM integration.
Key Achievements
- Designed and deployed a production-grade private Amazon Elastic Kubernetes Service (EKS) cluster using Terraform (Infrastructure as Code) with reusable, modular architecture.
- Implemented a GitOps-based continuous deployment model using Argo CD for declarative, version-controlled Kubernetes workloads.
- Built a fully observable Kubernetes platform using Prometheus and Grafana, enabling real-time cluster and application monitoring.
- Configured dynamic persistent storage for stateful workloads using the AWS EBS CSI Driver with pod identity associations.
- Implemented secure Terraform remote state management using Amazon S3 with encryption enabled and DynamoDB for state locking.
- Designed fine-grained Role-Based Access Control (RBAC) by mapping AWS IAM identities to Kubernetes roles, enforcing strict namespace-level isolation.
- Deployed workloads exclusively in private subnets, ensuring zero direct public exposure of worker nodes.
- Enabled automatic scaling of worker nodes to efficiently handle dynamic workload demands.
- Implemented Kubernetes resource governance using LimitRange along with liveness and readiness probes to improve application stability.
- Integrated Spring Boot Actuator metrics to achieve application-level observability within the Kubernetes environment.
- Configured automated alerting for critical infrastructure and application metrics to support proactive incident response.
- Applied a least-privilege security model across IAM, Kubernetes RBAC, and storage access layers.
- Adopted cloud-native best practices to ensure scalability, resiliency, and operational excellence.
- Built a highly reproducible, auditable, and maintainable infrastructure using Infrastructure as Code principles.
Project Gallery
EKS Architecture
Argo CD Dashboard
Grafana Monitoring
Persistent Volumes