Search for a command to run...
AWS EC2 instances with base configuration
No comments yet. Be the first to comment.
A step‑by‑step guide to building a secure, automated CI/CD pipeline on AWS using Jenkins, GitHub, Argo CD, Kubernetes, Prometheus, and Grafana. This series covers everything from code quality checks and vulnerability scanning to GitOps deployments and monitoring dashboards.
Install plugins, tools, and configuration
Azure Solution for SmartBuildings
RAG
Make it variables and reusable
Scaling pipeline to accept Dynamic inputs
Scaling with branches
What will we set up in this part?
Jenkins Master
Jenkins Slave
EKS
SonarQube
ArgoCD
Trivy
[Note] This project will be implemented in the Singapore region (ap-southeast-1).
sudo apt update
sudo apt install openjdk-21-jre-headless
java -version
openjdk 21.0.8 2025-07-15
OpenJDK Runtime Environment (build 21.0.8+9-Debian-1)
OpenJDK 64-Bit Server VM (build 21.0.8+9-Debian-1, mixed mode, sharing)
sudo wget -O /etc/yum.repos.d/jenkins.repo \
https://pkg.jenkins.io/rpm-stable/jenkins.repo
sudo dnf upgrade
# Add required dependencies for the Jenkins package
sudo dnf install jenkins
sudo systemctl daemon-reload
#start at boot with
sudo systemctl enable jenkins
#start the Jenkins service
sudo systemctl start jenkins
#check the status of the Jenkins service
sudo systemctl status Jenkins
Get your password from
sudo cat /var/lib/jenkins/secrets/initialAdminPassword
Now, access the Jenkins Master in your browser using the EC2 public IP on port 8080 and configure it.
Install suggested plugins
Note - If we install suggested pugins then it may slows down Jenkins UI
Ex.
Access ID: AKIAZDZTBOHGUD5KKPX3
Secret access key • uPBtoXTLltBRhxoMs8IdfUzQM42LAASsm9nzOgQa
"https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
sudo apt install unzip
unzip awscliv2.zip
sudo ./aws/install
aws configure
aws sts get-caller-identity
curl -o kubectl https://amazon-eks.s3.us-west- 2.amazonaws.com/1.19.6/2021-01-05/bin/linux/amd64/kubectl
chmod +x ./kubectl
sudo mv ./kubectl /usr/local/bin
kubectl version --short --client
curl --silent --location "https://github.com/weaveworks/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz" | tar xz -C /tmp
sudo mv /tmp/eksctl /usr/local/bin
eksctl version
Create EKS Cluster (Master machine)
Note It may take several minutes to create a new cluster
eksctl create cluster --name=wandercluster \
--region=ap-south-1 \
--version=1.30 \
--without-nodegroup
eksctl utils associate-iam-oidc-provider \
--region ap-south-1 \
--cluster wandercluster \
--approve
eksctl create nodegroup --cluster=wandercluster \
--region=ap-southeast-1 \
--name=wandercluster \
--node-type=t2.large \
--nodes=2 \
--nodes-min=2 \
--nodes-max=2 \
--node-volume-size=29 \
--ssh-access \
--ssh-public-key=my-devops-key
docker run -itd --name SonarQube-Server -p 9000:9000 sonarqube:lts-community
public-ip-of-jenkins-master:9000Note- Initial username= admin and password= admin
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
watch kubectl get pods -n argocd
sudo curl --silent --location -o /usr/local/bin/argocd https://github.com/argoproj/argo cd/releases/download/v2.4.7/argocd-linux-amd64
sudo chmod +x /usr/local/bin/argocd
kubectl patch svc argocd-server -n argocd -p '{"spec": {"type": "NodePort"}}'
Or you can manually edit the manifest file also by going inside it, using this command:
kubectl get svc -n argocd
port: 31797
public-ip-master-node:317979Note: If you find an error like this in the above image, then run the command below:
kubectl port-forward svc/argocd-server -n argocd 31797:80 --address 0.0.0.0 &
kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d; echo
Username: admin •
Now, go to User Info and update your argocd password wnx0ZrUozW5oZeDq
sudo apt update
sudo apt install openjdk-21-jre-headless
java -version
Create an IAM role with administrator access, and attach it to the Jenkins Slave node. Select Jenkins slave EC2 instance --> Actions --> Security --> Modify IAM role
"https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
sudo apt install unzip
unzip awscliv2.zip
sudo ./aws/install
aws configure
ssh-keygen
ssh) where your ssh keys are generated, and copy the content of the public key and paste to authorized_keys file.
Name: Node • Type: permanent agent
Number of executors: 2
Remote root directory: /home/ubuntu
Labels: Node
Usage: Only build jobs with label expressions matching this node
Launch method: Via ssh
Host: public ip of Jenkins slave
Manage Jenkins---> Credentials: Add --> Kind: ssh username with private key --> ID: Worker --> Description: Worker --> Username: ubuntu --> Private key: Enter directly --> Add Private key
Host Key Verification Strategy: Non-Verifying Verification Strategy
Availability: Keep this agent online as much as possible
Note: the public IP should be the master’s instance-generated private, which is stored in id_ed25519.
If any error occurs, open the settings icon of the Node and make changes, then launch the agent again.
sudo apt install docker.io -y
sudo usermod -aG docker ubuntu && newgrp docker
sudo apt-get install wget apt-transport-https gnupg lsb-release -y
wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
sudo apt-get update -y
sudo apt-get install trivy -y
If not yet, then -> Go to your Jenkins Master EC2 instance and allow for SMTPS
Now, we need to generate an application password from our Gmail account to authenticate with Jenkins
Open Gmail and go to Manage your Google Account --> Security
Note- [Important] Make sure 2-step verification is on
Note- App password will be in this form "atqw gvjh ifrr wdkf" make sure when you enter in jenkins it should have no space between them like "atqwgvjhifrrwdkf"
The next configuration is in Part 3