This repository contains the infrastructure code and deployment manifests for Project Bedrock, the inaugural EKS deployment at InnovateMart Inc.

As part of InnovateMart’s modernization initiative, we provisioned an Amazon EKS cluster and deployed the Retail Store Sample App (a microservices-based e-commerce application).

• AWS Region: us-east-1
• Networking: VPC with public/private subnets
• EKS Cluster: bedrock-eks
• Node Group: EC2 worker nodes running Kubernetes workloads

• ikohsylva – cluster creator with system:masters

• dev-readonly – developer IAM user with read-only Kubernetes access

• Load Balancer: AWS ELB exposing the app publicly

Retail Store Sample App URL

• terraform init
• terraform plan
• terraform apply -auto-approve

This will provision:

• VPC with subnets
• EKS Cluster + Node Group
• IAM roles and policies

• aws eks update-kubeconfig \ --region us-east-1 \ --name bedrock-eks \ --profile <your-profile>

• kubectl apply -f retail-store-sample-app/deploy/

• kubectl get pods -A
• kubectl get svc -A

Developer should use the dev-readonly IAM user.

• aws configure --profile dev-readonly

• aws eks update-kubeconfig --region us-east-1 --name bedrock-eks --profile dev-readonly

• kubectl get pods -A
• kubectl describe pod <pod-name>
• kubectl logs <pod-name>

Workflow defined in .github/workflows/terraform.yml

• Feature branches → run terraform plan
• Main branch → run terraform apply

AWS credentials managed securely via GitHub Secrets.

• Move databases to AWS RDS & DynamoDB
• Add AWS Load Balancer Controller + Ingress + Route53 + ACM for HTTPS
• Advanced RBAC for developer and QA teams