buy me a coffee
© / 2026

A production-style DevOps build: a containerized task app deployed onto a self-provisioned, multi-node k3s cluster on AWS, with high availability, autoscaling, zero-downtime rollouts, HTTPS, and GitOps.

ROLE

DevOps Engineer

Responsibility

Provisioned AWS infrastructure with Terraform (VPC, subnets, security groups, and compute) using remote state in S3 with DynamoDB locking, and configured a multi-node k3s cluster with Ansible roles for node hardening and server and agent setup. Modeled the workload with Kustomize bases and overlays, exposed it through ingress-nginx with cert-manager and Let's Encrypt TLS, and ran continuous delivery with an ArgoCD app-of-apps GitOps setup. Reverse-engineered the application contract (env vars, ports, image tags, and health checks) from source to write correct manifests, with metrics-server, network policies, and a database migration job.


Capstone Phoenix is a production-style DevOps build: a containerized task application deployed onto a self-provisioned, multi-node k3s cluster on AWS.

The infrastructure is provisioned with Terraform (VPC, subnets, security groups, and compute) using remote state in S3 with DynamoDB locking, and configured with Ansible roles for node hardening and k3s server and agent setup. The workload is modeled with Kustomize bases and overlays.

Traffic flows through ingress-nginx with cert-manager and Let's Encrypt for HTTPS, delivery runs through an ArgoCD app-of-apps GitOps setup, and the cluster ships with metrics-server, autoscaling, network policies, and a database migration job for safe, zero-downtime rollouts.



Key technologies: AWS, Terraform, Ansible, k3s, Kubernetes, Kustomize, ArgoCD, ingress-nginx, cert-manager, Docker, GitHub Actions.
Check it out
https://github.com/Rufai-Ahmed/capstone-phoenix