InfraSec

Automate the building and deployment of static frontend applications using an Argo Workflows pipeline and AWS CloudFront.

Don’t run your frontend applications on servers or containers. Move your project to a content distribution network (CDN) and gain the following benefits:

1. Increase application responsiveness
2. Reduced operational overhead
3. Improved Security

Using Argo Workflows to build container images with Kaniko and push them to different registries. This post goes over sending the image to multiple ECR repositories in different AWS partitions but it could easily be switched out with another registry (Docker, GitHub, etc.).

Using AWS EKS with IAM OIDC providers set up in two accounts, allows different pods/service accounts to assume permissions in each account.

This post goes over how to setup single sign on ArgoCD. I use GitHub for the OAuth client but any client should also work.