An opinionated path from zero to platform maturity — written by a practitioner, not a course vendor. Each stage builds on the previous. Skip ahead at your peril.
Linux fundamentals
Process management, filesystem hierarchy, file permissions, and systemd.
Shell scripting
Bash conditionals, loops, and functions for automating ops tasks.
Git workflows
Branching, rebasing, conflict resolution, and tagging for releases.
Advanced Git Cheat SheetDocker architecture
Images, layers, registries, and the container runtime model.
Writing production Dockerfiles
Multi-stage builds, non-root users, and layer caching.
Dockerfile GeneratorImage hardening
Pinning digests, distroless bases, and vulnerability scanning.
Dockerfile Best PracticesContainer networking
Bridge networks, port mapping, DNS resolution between containers.
Kubernetes core concepts
Pods, Deployments, Services, ConfigMaps, and Secrets.
Writing manifests
Resource limits, probes, and securityContext for production workloads.
K8s Deployment GeneratorRBAC & namespaces
Least-privilege access control, service accounts, and audit logging.
Helm packaging
Chart structure, values files, and templating for reusable deployments.
Helm Chart Starter KitTerraform fundamentals
Providers, resources, state, and the plan/apply lifecycle.
Module design
Composable, reusable modules with clear input/output contracts.
Terraform Module ScaffolderState management
Remote backends, state locking, and workspace isolation.
Pipeline design principles
Fast feedback, hermetic builds, and artifact promotion patterns.
Progressive delivery
Blue/green, canary, and feature flags for safe rollouts.
Pipeline tooling tradeoffs
GitHub Actions vs GitLab CI — ecosystem fit and runner costs.
Actions vs GitLab CIAutoscaling config
HPA, KEDA, and VPA — scaling on CPU, memory, and custom metrics.
Autoscaling Config GeneratorThe three pillars
Metrics, logs, and traces — what each answers and when to use them.
SLOs and error budgets
Define SLIs, set SLO targets, and translate burn rates into alerts.
SLO/SLI CalculatorAlert rule design
Multi-window, multi-burn-rate alerts that page for the right reasons.
Prometheus Alert Rule BuilderLog analysis
Structured logging, regex filters, and parsing patterns for fast triage.
Log Parser SandboxSecrets management
Vault, External Secrets Operator, and sealed secrets — tradeoffs.
Certificate lifecycle
Cert-manager, cert rotation, and preventing surprise TLS outages.
SSL Certificate CheckerCompliance requirements
What SOC 2, HIPAA, and PCI-DSS actually require from infra teams.
Compliance for DevOpsZero Trust networking
mTLS, network policies, and service mesh for lateral movement prevention.
Cost attribution
Namespace-level cost allocation, showback, and chargeback models.
Right-sizing workloads
VPA recommendations, Goldilocks, and LimitRange policies.
ECS & Fargate cost modeling
Compare ECS Fargate vs EC2 vs K8s for your workload profile.
ECS Hosting CalculatorPlatform team model
Golden paths, internal developer platforms, and paved roads vs guardrails.
The toolkit has live tools for most of the stages above — no account required. Generate configs, calculate SLOs, and build runbooks in seconds.
Explore the Toolkit