Loading...
Need this managed for you, not just automated?
We're also a hands-on DevOps consultancy — Kubernetes, CI/CD, and cloud infrastructure.
Need this managed for you, not just automated?
We're also a hands-on DevOps consultancy — Kubernetes, CI/CD, and cloud infrastructure.
An opinionated path from zero to platform maturity — written by a practitioner, not a course vendor. Each stage builds on the previous. Skip ahead at your peril.
Everything else rests on this. Weak foundations cause invisible problems at every layer above.
Linux fundamentals
Process management, filesystem hierarchy, file permissions, and systemd service lifecycle.
systemd Cheat SheetShell scripting
Bash conditionals, loops, and functions for automating ops tasks.
Git workflows
Branching, rebasing, conflict resolution, and tagging for releases.
Advanced Git Cheat SheetCLI tools: curl & jq
Test APIs, inspect HTTP responses, and process JSON output from the terminal.
curl Cheat SheetKubernetes runs on cloud. Understanding the environment beneath it — IAM, networking, managed services — prevents a whole class of outages.
Cloud fundamentals
Regions, availability zones, the shared responsibility model, and how global vs regional services behave under failure.
IAM & identity
Roles, policies, assume-role, and OIDC federation for workload identity — the foundation of every permission boundary.
AWS CLI: IAM & STSVPCs & cloud networking
Subnets, route tables, security groups, NACLs, and VPC peering — where most cluster connectivity bugs live.
CIDR CalculatorManaged services landscape
RDS, ElastiCache, SQS, S3 — when managed beats self-hosted and when it doesn't.
Cloud CLI proficiency
EKS, ECR, S3, IAM, EC2, and SSM from the terminal — the daily workflow for platform engineers.
AWS CLI Cheat SheetCost awareness from day one
On-demand vs reserved vs spot pricing, the Cost Explorer, and why right-sizing matters before you have a budget problem.
FinOps GuideContainers are the unit of deployment. Understand them deeply before layering orchestration on top.
Docker architecture
Images, layers, registries, and the container runtime model.
Writing production Dockerfiles
Multi-stage builds, non-root users, and layer caching.
Dockerfile GeneratorImage hardening
Pinning digests, distroless bases, and vulnerability scanning.
Dockerfile Best PracticesContainer networking
Bridge networks, port mapping, and DNS resolution between containers.
Podman & rootless containers
Daemonless alternative to Docker, rootless mode, and Quadlet for systemd integration.
Podman Cheat SheetKubernetes is the lingua franca of platform engineering. Invest the time — it pays off across every subsequent stage.
Kubernetes core concepts
Pods, Deployments, Services, ConfigMaps, and Secrets.
Writing production manifests
Resource limits, probes, and securityContext for production workloads.
K8s Deployment Generatorkubectl & k9s fluency
Day-to-day commands for debugging, patching, and exec alongside the k9s TUI.
Kubectl Cheat SheetRBAC & namespaces
Least-privilege access control, service accounts, and audit logging.
Blog: RBAC in PracticeHelm & Kustomize
Helm for templated chart releases; Kustomize for overlay-based config management.
Blog: Helm Best PracticesAdmission controllers
OPA/Gatekeeper and Kyverno for policy enforcement — preventing misconfig before it reaches the API server.
Cluster upgrades & lifecycle
Zero-downtime upgrade strategy, node drain sequencing, and version skew rules.
Blog: Zero-Downtime UpgradesManual infra doesn't scale and can't be reviewed. IaC is how platform teams ship reliably and sleep at night.
Terraform fundamentals
Providers, resources, state, and the plan/apply lifecycle.
Terraform Cheat SheetModule design
Composable, reusable modules with clear input/output contracts.
Terraform Module ScaffolderState management
Remote backends, state locking, and workspace isolation.
Delivery pipelines are a product. Build them with the same discipline you apply to application code.
Pipeline design principles
Fast feedback, hermetic builds, and artifact promotion patterns.
Helm chart releases
Chart versioning, OCI registries, and release management at scale.
Helm Cheat SheetProgressive delivery
Blue/green, canary, and feature flags for safe rollouts.
Pipeline tooling tradeoffs
GitHub Actions vs GitLab CI — ecosystem fit and runner costs.
Actions vs GitLab CIAutoscaling config
HPA, KEDA, and VPA — scaling on CPU, memory, and custom metrics.
Autoscaling Config GeneratorYou can't improve what you can't measure. Observability turns production from a black box into a debuggable system.
The three pillars
Metrics, logs, and traces — what each answers and when to use them.
SLOs and error budgets
Define SLIs, set SLO targets, and translate burn rates into alerts.
SLO/SLI CalculatorAlert rule design
Multi-window, multi-burn-rate alerts that page for the right reasons.
Prometheus Alert Rule BuilderLog analysis & jq
Structured logging, regex filters, and parsing JSON log streams from kubectl and cloud providers.
jq Cheat SheetOpenTelemetry & distributed tracing
Instrument services with OTel, collect traces, and migrate away from vendor-specific agents.
Blog: OpenTelemetry MigrationSecurity is not a gate at the end. Bake it into every stage, or spend weekends explaining breaches.
Secrets management
Vault, External Secrets Operator, and sealed secrets — tradeoffs and when each fits.
Blog: Secrets ManagementCertificate lifecycle & OpenSSL
cert-manager, cert rotation, and using OpenSSL to inspect and test TLS certificates.
OpenSSL Cheat SheetKubernetes network policies
Default-deny namespaces, ingress/egress rules, and policy testing.
Network Policy GeneratoreBPF-based security
Cilium and Tetragon for kernel-level network observability and runtime threat detection.
Blog: eBPF & Platform EngineeringA mature platform team is judged by developer velocity and cost efficiency — not just uptime.
Cost attribution
Namespace-level cost allocation, showback, and chargeback models.
Right-sizing workloads
VPA recommendations, Goldilocks, and LimitRange policies.
Multi-cluster patterns
Active-active vs active-passive, cross-cluster failover, and when multi-cluster is worth the operational cost.
Blog: Multi-Cluster Patterns & PitfallsInternal developer platform
Golden paths, self-service infrastructure, and paved roads vs guardrails.
Platform team model
Team Topologies, platform as a product, and measuring developer experience.
The toolkit has live tools, cheat sheets, and playbooks for most stages above — no account required. Generate configs, calculate SLOs, and build runbooks in seconds.