Devops

DevOps Engineering Mastery

Production-grade infrastructure, deployment, and operations across Docker, Kubernetes, Cloudflare, and Google Cloud Platform.

Platform Selection

Quick Start

# Docker: build + run
docker build -t myapp . && docker run -p 3000:3000 myapp

# Docker Compose: multi-service
docker compose up -d

# Cloudflare Worker
npx wrangler init my-worker && cd my-worker && npx wrangler deploy

# GCP Cloud Run
gcloud run deploy my-service --image gcr.io/project/image --region us-central1

# Kubernetes
kubectl apply -f manifests/ && kubectl get pods

# Terraform
terraform init && terraform plan && terraform apply

Reference Navigation

Containerization

• Docker Fundamentals — Dockerfile best practices, multi-stage builds, layer caching, security
• Docker Compose — Multi-service apps, networks, volumes, health checks, profiles
• Container Optimization — Image size reduction, build caching, security scanning, distroless

Orchestration

• Kubernetes Core — Pods, Deployments, Services, ConfigMaps, Secrets, Namespaces
• Kubernetes Operations — kubectl mastery, debugging, resource management, scaling
• Helm Charts — Chart structure, templates, values, hooks, repositories
• Kubernetes Security — RBAC, NetworkPolicies, PodSecurityStandards, secrets management
• GitOps & CI/CD — ArgoCD, Flux, GitHub Actions, progressive delivery

Cloud Platforms

• Cloudflare Platform — Workers, R2, D1, KV, Pages, Queues, Durable Objects
• GCP Services — Cloud Run, GKE, Cloud SQL, Cloud Storage, IAM

Infrastructure as Code

• Terraform Patterns — Modules, state management, workspaces, best practices

Monitoring & Observability

• Monitoring Stack — Prometheus, Grafana, alerting, SLIs/SLOs, log aggregation

Architecture Patterns

Development → Staging → Production

Local Dev:     Docker Compose (all services locally)
CI/CD:         GitHub Actions → build → test → push image
Staging:       Cloud Run (auto-deploy on PR merge to staging)
Production:    Cloud Run / GKE (deploy on release tag)

Cost Optimization

Best Practices

Containers: Non-root user, multi-stage builds, .dockerignore, health checks, security scanning Kubernetes: Resource limits, PDB, HPA, NetworkPolicies, secrets encryption, namespace isolation CI/CD: Fast feedback (lint → unit → build → integration → deploy), cache dependencies, parallel jobs Security: Image scanning, RBAC, secrets in vault, TLS everywhere, audit logging Monitoring: RED metrics (Rate, Errors, Duration), SLIs/SLOs, alerting on symptoms not causes

Related Skills

Converted and distributed by TomeVault — claim your Tome and manage your conversions.