Cloud & DevOps

Example: GitHub Actions CI/CD Pipeline

name: Deploy Pipeline
on:
  push:
    branches: [main]

jobs:
  build-and-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - run: npm ci
      - run: npm run lint
      - run: npm run test -- --coverage
      - run: npm run build

  security-scan:
    needs: build-and-test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: npx audit-ci --critical
      - uses: aquasecurity/trivy-action@master
        with:
          scan-type: 'fs'
          severity: 'CRITICAL,HIGH'

  deploy-staging:
    needs: security-scan
    runs-on: ubuntu-latest
    environment: staging
    steps:
      - run: aws ecs update-service --force-new-deployment

  deploy-production:
    needs: deploy-staging
    runs-on: ubuntu-latest
    environment:
      name: production
      url: https://app.example.com
    steps:
      - run: aws ecs update-service --force-new-deployment

Integration: How the three pillars connect

Application Code
  |
  +-- stdout/stderr ------> Fluent Bit --> CloudWatch Logs --> Kibana
  |                                                              |
  +-- metrics endpoint ----> Prometheus --> Grafana Dashboards <--+ (correlated)
  |                                              |
  +-- trace context -------> OpenTelemetry --> X-Ray / Jaeger <----+
                               Collector
                                  |
                            All three link via
                            trace_id / request_id