DevOps 🚀

Continuous Integration, Continuous Delivery, Platform Engineering, DevSecOps, and Reliability.

1. CI/CD & Delivery Engineering

CD Master Architecture — Build once, deploy everywhere; artifact immutability and promotion
GitHub Actions Deep Dive — Keyless cloud OIDC federation, reusable workflows, and caching
Git Strategy & Production Workflows — Trunk-Based Development, conventional commits, and rebase discipline
Pipeline Design — Stage order, build once and promote, test strategy, speed, pipeline security
Deployment Strategies — Rolling, blue-green, canary, shadow and feature flags; rollback and data compatibility
Release and Versioning — SemVer, immutable artifacts, promotion, changelogs, dependency updates
DORA Metrics — Measuring delivery performance without gaming it
GitOps with Argo CD — Declarative continuous delivery on Kubernetes

A comprehensive 20-module end-to-end security pipeline curriculum:

DevSecOps Curriculum Overview
- Stage 0 — Foundations & Threat Modeling (Culture, secure SDLC, threat modeling)
- Stage 1 — Code Security (SAST, Secrets detection, SCA, SBOM generation)
- Stage 2 — Build & Image Hardening (Container scanning, IaC security, pipeline hardening)
- Stage 3 — Deploy & Attestations (OIDC pipeline identity, Cosign signing, SLSA, Policy-as-Code)
- Stage 4 — Runtime & Incident Response (Secret management, runtime detection, capstone pipeline)

Platform Engineering & Internal Developer Platforms (IDP) — Developer portals, Golden Paths, Backstage, and Crossplane control planes
Internal Developer Platforms — Capabilities, platform as a product, the thinnest viable platform, metrics
Platform Engineering vs DevOps vs SRE — Team Topologies interaction modes, RACI matrix, team evolution
Golden Paths — Paved roads, guardrails over gates, worked end-to-end developer journey
Developer Experience (DevEx) & Inner Loop — Fast feedback, Telepresence, mirrord, SPACE and DevEx metrics
Backstage — Catalog, templates, TechDocs, plugins, and template failure handling
Workload Specifications & Score — Separating intent from environment via score.yaml and OAM
Platform Orchestrators & Dynamic Configuration — Kratix Promises, Humanitec, and context-aware resource resolution
Crossplane for Platform APIs — Crossplane v2 namespaced control planes, renderable manifests
Ephemeral Environments & EaaS — On-demand PR preview environments, vCluster, database branching
FinOps & Cost Allocation for Platforms — OpenCost, automated label inheritance, showback vs chargeback

Infrastructure as Code — Declarative versus imperative, provisioning versus configuration, choosing tools
Terraform — The plan and apply loop, HCL, modules, lifecycle controls, refactoring safely
Terraform State and Collaboration — Backends, locking, splitting state, team workflows, drift
OpenTofu — The open-source fork
Ansible — Agentless configuration management
Packer — Machine images and immutable infrastructure

SRE Overview — Reliability as a target, toil, and how SRE relates to DevOps
SLOs and Error Budgets — Choosing SLIs, setting targets, burn rate, error budget policy
On-Call — Rotation design, what should page, runbooks, preventing burnout
Incident Management and Postmortems — Roles, mitigation first, blameless reviews