diff --git a/.github/SECRETS.md b/.github/SECRETS.md
new file mode 100644
index 00000000..19164443
--- /dev/null
+++ b/.github/SECRETS.md
@@ -0,0 +1,29 @@
+# Required GitHub Actions Secrets
+
+The following secrets must be configured in the repository settings:
+
+## Docker Hub
+- `DOCKERHUB_USERNAME`: Docker Hub username (madhupdevops)
+- `DOCKERHUB_TOKEN`: Docker Hub access token
+
+## SonarQube
+- `SONAR_TOKEN`: SonarQube authentication token
+- `SONAR_HOST_URL`: SonarQube server URL
+
+## Email Notifications
+- `EMAIL_USERNAME`: SMTP username for notifications
+- `EMAIL_PASSWORD`: SMTP password for notifications
+- `EMAIL_TO`: Recipient email address
+- `EMAIL_FROM`: Sender email address
+
+## Setup Instructions
+1. Go to repository Settings > Secrets and variables > Actions
+2. Add each secret with the corresponding value
+3. Ensure the GitHub token has write permissions for repository dispatch
+
+## Migration Notes
+These secrets replace the Jenkins credentials that were previously used:
+- Jenkins `docker` credential → `DOCKERHUB_USERNAME` + `DOCKERHUB_TOKEN`
+- Jenkins `Github-cred` credential → Built-in `GITHUB_TOKEN`
+- Jenkins SonarQube configuration → `SONAR_TOKEN` + `SONAR_HOST_URL`
+- Jenkins email configuration → Email secrets above
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
new file mode 100644
index 00000000..3d18f778
--- /dev/null
+++ b/.github/workflows/cd.yml
@@ -0,0 +1,77 @@
+name: CD Pipeline (GitOps)
+
+on:
+ repository_dispatch:
+ types: [ci-complete]
+ workflow_dispatch:
+ inputs:
+ docker_tag:
+ description: 'Docker tag to deploy'
+ required: true
+
+env:
+ DOCKER_TAG: ${{ github.event.client_payload.docker_tag || github.event.inputs.docker_tag }}
+
+jobs:
+ cd:
+ runs-on: ubuntu-latest
+
+ steps:
+ - name: Workspace cleanup
+ run: |
+ sudo rm -rf $GITHUB_WORKSPACE/*
+ sudo rm -rf $GITHUB_WORKSPACE/.[!.]*
+
+ - name: Checkout code
+ uses: actions/checkout@v4
+ with:
+ ref: DevOps
+ token: ${{ secrets.GITHUB_TOKEN }}
+
+ - name: Verify Docker tag
+ run: |
+ echo "DOCKER TAG RECEIVED: ${{ env.DOCKER_TAG }}"
+
+ - name: Update Kubernetes manifest
+ run: |
+ cd kubernetes
+ sed -i -e 's|trainwithshubham/bankapp-eks:.*|trainwithshubham/bankapp-eks:${{ env.DOCKER_TAG }}|g' bankapp-deployment.yml
+
+ - name: Commit and push changes
+ run: |
+ git config --local user.email "devin-ai-integration[bot]@users.noreply.github.com"
+ git config --local user.name "Devin AI"
+ echo "Checking repository status: "
+ git status
+ echo "Adding changes to git: "
+ git add .
+ echo "Commiting changes: "
+ git commit -m "Updated K8s Deployment Docker Image Version to ${{ env.DOCKER_TAG }}"
+ echo "Pushing changes to github: "
+ git push origin DevOps
+
+ - name: Send notification email
+ uses: dawidd6/action-send-mail@v3
+ if: always()
+ with:
+ server_address: smtp.gmail.com
+ server_port: 587
+ username: ${{ secrets.EMAIL_USERNAME }}
+ password: ${{ secrets.EMAIL_PASSWORD }}
+ subject: "BankApp Application has been updated and deployed - ${{ job.status }}"
+ to: ${{ secrets.EMAIL_TO }}
+ from: ${{ secrets.EMAIL_FROM }}
+ html_body: |
+
+
+
+
Project: ${{ github.repository }}
+
+
Build Number: ${{ github.run_number }}
+
+
URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+