Terraform EKS Project | AWS Infra to Kubernetes, No kubectl apply

This is a cloud-native microservices 𝐞𝐯𝐞𝐧𝐭 𝐦𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 & 𝐭𝐢𝐜𝐤𝐞𝐭 𝐛𝐨𝐨𝐤𝐢𝐧𝐠 𝐩𝐥𝐚𝐭𝐟𝐨𝐫𝐦 where customers browse events, reserve seats, pay for tickets, and cancel for a refund — similar to BookMyShow or Eventbrite. The focus is a complete end-to-end DevOps lifecycle on 𝐀𝐦𝐚𝐳𝐨𝐧 𝐖𝐞𝐛 𝐒𝐞𝐫𝐯𝐢𝐜𝐞𝐬 (𝐀𝐖𝐒) where 𝐞𝐯𝐞𝐫𝐲 𝐫𝐞𝐬𝐨𝐮𝐫𝐜𝐞 — 𝐜𝐥𝐨𝐮𝐝 𝐢𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞 𝐚𝐧𝐝 𝐊𝐮𝐛𝐞𝐫𝐧𝐞𝐭𝐞𝐬 𝐰𝐨𝐫𝐤𝐥𝐨𝐚𝐝𝐬 — 𝐢𝐬 𝐩𝐫𝐨𝐯𝐢𝐬𝐢𝐨𝐧𝐞𝐝 𝐰𝐢𝐭𝐡 𝐓𝐞𝐫𝐫𝐚𝐟𝐨𝐫𝐦, with no kubectl apply and no application Helm chart. 🏗️ 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 — 𝟓 𝐜𝐨𝐧𝐭𝐚𝐢𝐧𝐞𝐫𝐢𝐳𝐞𝐝 𝐆𝐨 𝐦𝐢𝐜𝐫𝐨𝐬𝐞𝐫𝐯𝐢𝐜𝐞𝐬 (frontend, event, booking, payment, notification) over REST/JSON. The booking flow is a 𝐬𝐚𝐠𝐚 𝐰𝐢𝐭𝐡 𝐜𝐨𝐦𝐩𝐞𝐧𝐬𝐚𝐭𝐢𝐧𝐠 𝐭𝐫𝐚𝐧𝐬𝐚𝐜𝐭𝐢𝐨𝐧𝐬 — reserve seats → charge → confirm → notify — so a declined card releases the held seats and never leaks inventory. 𝐏𝐨𝐬𝐭𝐠𝐫𝐞𝐒𝐐𝐋 runs as a StatefulSet on 𝐄𝐁𝐒 𝐠𝐩𝟑. ☸️ 𝐊𝐮𝐛𝐞𝐫𝐧𝐞𝐭𝐞𝐬 & 𝐈𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞 — 𝐀𝐦𝐚𝐳𝐨𝐧 𝐄𝐊𝐒 built from 11 Terraform modules across 𝐝𝐞𝐯/𝐬𝐭𝐚𝐠𝐞/𝐩𝐫𝐨𝐝: VPC over 3 AZs, public/private subnets, NAT, managed node group, single 𝐄𝐂𝐑 repo, and IAM roles via 𝐈𝐑𝐒𝐀. Add-ons cover 𝐄𝐁𝐒 𝐂𝐒𝐈 and 𝐦𝐞𝐭𝐫𝐢𝐜𝐬-𝐬𝐞𝐫𝐯𝐞𝐫, with 𝐀𝐖𝐒 𝐋𝐨𝐚𝐝 𝐁𝐚𝐥𝐚𝐧𝐜𝐞𝐫 𝐂𝐨𝐧𝐭𝐫𝐨𝐥𝐥𝐞𝐫, 𝐂𝐥𝐮𝐬𝐭𝐞𝐫 𝐀𝐮𝐭𝐨𝐬𝐜𝐚𝐥𝐞𝐫, 𝐓𝐫𝐚𝐞𝐟𝐢𝐤 and 𝐜𝐞𝐫𝐭-𝐦𝐚𝐧𝐚𝐠𝐞𝐫 as Terraform-driven Helm releases. The app layer is 36 Kubernetes objects created directly by Terraform — Deployments, StatefulSet, Services, Ingresses, PDBs and 𝐇𝐏𝐀𝐬 (2→6 pods). State is in 𝐒𝟑 𝐰𝐢𝐭𝐡 𝐧𝐚𝐭𝐢𝐯𝐞 𝐥𝐨𝐜𝐤𝐟𝐢𝐥𝐞 𝐥𝐨𝐜𝐤𝐢𝐧𝐠 — no DynamoDB. ⚙️ 𝐂𝐈/𝐂𝐃 — 𝐆𝐢𝐭𝐇𝐮𝐛 𝐀𝐜𝐭𝐢𝐨𝐧𝐬 builds all 5 images in a 𝐦𝐚𝐭𝐫𝐢𝐱, scans them with 𝐓𝐫𝐢𝐯𝐲 for HIGH/CRITICAL before publishing, then pushes to 𝐄𝐂𝐑 tagged latest + the Git SHA, so every pod traces to an exact commit. 🔒 𝐇𝐓𝐓𝐏𝐒 — 𝐜𝐞𝐫𝐭-𝐦𝐚𝐧𝐚𝐠𝐞𝐫 + 𝐋𝐞𝐭'𝐬 𝐄𝐧𝐜𝐫𝐲𝐩𝐭 issue free certificates via the 𝐃𝐍𝐒-𝟎𝟏 𝐜𝐡𝐚𝐥𝐥𝐞𝐧𝐠𝐞, writing Route 53 records through an IRSA role — no static keys, no exposed port 80. Traefik terminates TLS, HTTP redirects to HTTPS, certs auto-renew. 🌐 𝐃𝐍𝐒 — Served on the bare apex domain 𝐯𝐢𝐣𝐚𝐲𝐠𝐢𝐝𝐮𝐭𝐡𝐮𝐫𝐢.𝐢𝐧 (no subdomain), 𝐆𝐨𝐃𝐚𝐝𝐝𝐲 delegated to 𝐑𝐨𝐮𝐭𝐞 𝟓𝟑. Since a CNAME is illegal at a zone apex, it uses an 𝐀𝐋𝐈𝐀𝐒 record pointing at the Traefik 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐋𝐨𝐚𝐝 𝐁𝐚𝐥𝐚𝐧𝐜𝐞𝐫. 📌 𝐏𝐫𝐨𝐣𝐞𝐜𝐭 𝐒𝐨𝐮𝐫𝐜𝐞 𝐂𝐨𝐝𝐞 & 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐖𝐢𝐭𝐡 𝐌𝐞 🔗 𝐆𝐢𝐭𝐇𝐮𝐛 𝐑𝐞𝐩𝐨𝐬𝐢𝐭𝐨𝐫𝐲: https://github.com/vijaygiduthuri/EVE... 💼 𝐋𝐢𝐧𝐤𝐞𝐝𝐈𝐧: www.linkedin.com/in/vijay-giduthuri-ab9075222 ✍️ 𝐌𝐞𝐝𝐢𝐮𝐦 𝐁𝐥𝐨𝐠𝐬:   / vijaygiduthuri67   #DevOps #AWS #Terraform #InfrastructureAsCode #Kubernetes #EKS #Docker #Golang #Microservices #CICD #GitHubActions #Traefik #CertManager #Route53 #CloudNative #DevSecOps #PlatformEngineering