Automated and secure application deployment using GitOps and KubernetesKeserović, Džana (Avtor) Sedlar, Urban (Mentor) KubernetesGitOpsArgo CDHelmCI/CDsecurity scanningcontainerizationDevOpsDeploying containerized applications to Kubernetes typically requires a lot of manual work. Teams write scripts, run commands by hand, and are uncertain whether the cluster matches their configuration. Security checks are often treated as a separate step or skipped entirely, which means vulnerabilities in code, dependencies, or Kubernetes manifests can reach production unnoticed. This thesis presents a fully automated deployment pipeline that combines GitOps with integrated security scanning. The desired state of the system is stored in git, and Argo CD, running inside the cluster, continuously keeps the cluster in sync with it. The application, a blog CMS built with React, Node.js, and PostgreSQL, is packaged as a Helm chart. A CI/CD pipeline in GitHub Actions runs three security checks before every deployment: SonarQube for static code analysis, Snyk for dependency vulnerability scanning, and KubeLinter for Kubernetes configuration validation. Only after all checks pass does the pipeline build the Docker images, push them to the registry, and update the Helm chart. Argo CD then detects the change and rolls it out automatically. The cluster also uses Keycloak and Rancher for centralized authentication and role-based access control. The result is a system where every deployment is triggered by a git commit, every version is traceable, and nothing reaches the cluster without passing security checks first.D. Keserović20262026-06-19 12:05:38Magistrsko delo/naloga183830sl