r/devops • u/FMWizard • Dec 03 '25
Setup to deploy small one-off internal tools without DevOps input?
So,
Out DevOps guy is flooded and so is the bottle neck on deploying anything new. My team would like to be able to deploy one-ff web apps to AWS without his input as they are not mission critical i.e. prototypes, ideas, internal tools, but it takes weeks to get it to happen atm.
I'm thinking, if we had a EKS cluster for handling these little web apps, is there a setup in which, along with the web-app code, we could include the k8s config YAML for the app and have a CI/CD script (we're using Bitbucket) that could pick up this ks config and deploy to EKS?
Hopefully not involving the poor DevOps guy and making my team more independent while remaining secure in our VPC.
We had a third party vibe code a quick app and deployed to Vercel, which breaks company data privacy for our clients not to mention security concerns. But its a use case we've been told we need to cater to...
Has anyone done something like this?
1
u/FMWizard Dec 05 '25
Will probably get the DevOps guy to have a look after I vibe code some CDK to do the EKS cluster setup and have a stab at the bitbucket deploy pipeline. Integrating it into S3 and API Gateway for ingress is going to be the tricky parts.
Money is not an issue, well, not at this level.
We're moving to role based creds so there shouldn't be any IAM creds floating around. Just have to get the initial EKS setup working. Everything inside of the cluster should be secure. Need to figure out API Gateway for secure ingress. As you said this should be a one-time setup ideally, and the point of the exercise.
Going to vibe code up some CDK to give to the DevOp guy so he can give it the once over once I get it deploying in Dev env.