Apache

Loweh Goodness thank you for sharing which is very informative for those who start to build strong Devsecops.

This GitHub Actions workflow automatically deploys application manifests into a Kubernetes cluster whenever code is pushed to the main branch. Here’s the step-by-step explanation you can give in interviews: GitHub Actions Kubernetes Deployment Workflow Explanation name: Kubernetes Deployment on: push: branches: - main jobs: deploy: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup kubectl uses: azure/setup-kubectl@v4 - name: Configure kubeconfig run: | mkdir -p ~/.kube echo "${{ secrets.KUBECONFIG }}" > ~/.kube/config - name: Deploy to Kubernetes run: | kubectl apply -f deployment.yaml kubectl apply -f service.yaml Explanation name: Kubernetes Deployment Defines the workflow name displayed in GitHub Actions. on: push: branches: - main This workflow triggers automatically whenever code is pushed to the main branch. jobs: Defines the tasks executed by the workflow. runs-on: ubuntu-latest GitHub creates a temporary Ubuntu virtual machine runner to execute the pipeline. Checkout Step - name: Checkout uses: actions/checkout@v4 Downloads repository source code into the GitHub Actions runner. Without this step: deployment.yaml service.yaml application code will not be available. Setup kubectl - name: Setup kubectl uses: azure/setup-kubectl@v4 Installs kubectl CLI tool inside the runner machine to interact with the Kubernetes cluster. Configure kubeconfig - name: Configure kubeconfig run: | mkdir -p ~/.kube echo "${{ secrets.KUBECONFIG }}" > ~/.kube/config Creates Kubernetes configuration file securely using GitHub Secrets. The kubeconfig contains: cluster endpoint authentication token certificates Deploy to Kubernetes - name: Deploy to Kubernetes run: | kubectl apply -f deployment.yaml kubectl apply -f service.yaml Deploys Kubernetes manifests into the cluster. deployment.yaml → Creates Pods and Deployments service.yaml → Exposes application service Real-Time CI/CD Flow Developer Pushes Code ↓ GitHub Actions Triggered ↓ Runner VM Created ↓ Repository Checked Out ↓ kubectl Installed ↓ Kubernetes Authentication Configured ↓ Deployment Applied to Cluster Interview Answer “This GitHub Actions workflow automates Kubernetes deployments. Whenever code is pushed to the main branch, GitHub Actions creates a runner, checks out the source code, installs kubectl, configures kubeconfig securely using GitHub Secrets, and deploys Kubernetes manifests using kubectl apply commands.”