Sample work · Software & Web Apps
Cloud and DevOps: Helm Chart, Rolling Update, Terraform and CI Pipeline
A small app with Docker image, Helm chart and CI file, deployed to a local Kubernetes cluster. The update ran under load without errors, as did the rollback. Plus a Terraform module, tested against an AWS replica.
Sample work (demo), not a client job. Built as a trial task with invented example data; the check figures below come from the automatic test run and are not polished.
What was built
- Helm chart with Deployment, Service, ConfigMap and Autoscaler, probes and limits set
- Rolling update and rollback under load, measured by responses during the update
- Terraform: formatting, validation, plan and apply with proofreading, then without deviation
- Cross-checks: incorrect port, missing readiness probe and an overly open Terraform module are detected
Everything ran locally: a cluster with one node, no production operation. No real AWS, Azure or GCP account, Terraform only against a replica; costs, limits and real permissions are not shown by this. Autoscaling not measured. Without Ingress, TLS, secrets management, GitOps and monitoring. The CI file is checked with actionlint, but has not run on GitHub.
How it was checked
Automatic test run on 2026-11-01, taken from the log (test data invented, figures measured):
- 18/18 fulfilled: CI step unit tests runs green (4 tests)
- actionlint: CI file (test->build->deploy) without messages
- CI cross-check: unknown job 'bild' and context 'sha_kurz' detected
- Docker images 1.0.0 and 2.0.0 built (non-root, version via build arg)
Limits
What this sample does not cover, so nobody expects more:
- All local: a kind cluster with one node (Docker Desktop, 4 GB RAM) - no multi-node operation, no true high availability, no production operation, no load spikes; rolling update with 2 ...
- No real AWS/Azure/GCP accounts: AWS only against the moto replica (S3, IAM) - Terraform plan/apply there says nothing about account limits, service control policies, costs, regions or real ...
- HPA only rolled out as a manifest and accepted by the API server; autoscaling not measured (no metrics-server installed)
- No Ingress/TLS/cert-manager, no service mesh, no secrets management (Vault, Sealed Secrets, External Secrets), no GitOps (Argo CD/Flux), no Prometheus/Grafana/logging stack
- CI file only checked statically with actionlint - not executed on GitHub (no customer repository/runner); customer container registry (ECR/GHCR/Docker Hub) and credentials not used
- hadolint and tflint not installed (hadolint does not publish a checksum); Terraform provider is downloaded from registry.terraform.io on first run (free, without account) ...
- Plan check for open policies is a separate rule (placeholder in action/resource, missing public access block), no replacement for tfsec/Checkov/OPA
Something like this for your business?
Describe briefly what you need. You get a fixed price before I start; nothing happens without your yes.