DevOps

55 boards, 50 lessons, 436 review questions and 14 narrated videos, in 10 chapters. Read them in order. Each chapter builds on the one before.

Your progress0 of 50 read

Start here → The Shipping Container (Docker)

WatchDevOps, end to end14 All 14 videos →

Contents

Part one · Build

1Containers & Docker5 lessons
A container from first principles - what the shipping-container analogy gets right, running one, writing the recipe that builds it, and running many at once.
The Shipping Container Running a Container The Recipe Many at Once
2Kubernetes13 lessons
From one crate to a fleet - the cluster, pods and deployments, self-healing and autoscaling, and how traffic actually gets in through services and ingress.
after Containers & Docker
From One Crate to a Fleet VM vs K8s & the Cluster The Harbor Master Pods, ReplicaSets & Deployments Self-Healing and Autoscaling Config, Secrets & Storage Getting Traffic In Services & Ingress Under the Hood The Sandbox Architecture

Part two · Scale

3Regions, networks and doors7 lessons
Where your code actually lives when it 'runs in the cloud', and who may reach it - regions, private networks, routes, firewalls, peering, load balancers and IAM, on one map.
after Names into addresses
The Map Regions, AZs & the Backbone VPC & Subnets Routing & Gateways Security - SG vs NACL Connectivity Load Balancing & DNS IAM & Identity Everything
4One machine, one proxy, one bucket3 lessons
The same ground at the size of one box: a VM and SSH, an EC2 instance, nginx in front of it, and a bucket behind a CDN.
after Regions, networks and doors
VMs, Bare Metal & SSH EC2 & Security Groups nginx Reverse Proxy S3 & CloudFront
5Who may do what6 lessons
The two planes, why IAM has so many boxes, a folder-level lock on a bucket, and borrowed passes across accounts - IRSA, OIDC and a Lambda writing next door.
after Regions, networks and doors
The Two Planes - Permission vs Network Why So Many Boxes - Identity vs Permission The Locked Filing Cabinet - folder-level S3 The Badge Machine - IRSA end to end OIDC - Passport and Stamp-Book Lambda Cross-Account S3 Write - file sync
6Rooms someone else runs3 lessons
The services a cloud runs for you - a database, a queue, a function - then the same harbour on your laptop with LocalStack, then the bill nobody reads.
after One machine, one proxy, one bucket, Who may do what
7CI/CD, IaC & Operations8 lessons
Provisioning as code and one cargo plan for three ports, the assembly line that ships a commit and the parts it trusts, and the watchtower and least-privilege habits that keep it safe once it's there.
IaC and GitOps The Assembly Line The Watchtower Least Privilege and 12-Factor
8Ship it3 lessons
One small app taken all the way: tested, built, scanned and signed on the line, synced to a cluster from git and rolled back the same way, then watched until an alarm fires on a broken promise.
after CI/CD, IaC & Operations, Kubernetes
9AI/ML Ops1 lesson
What it takes to keep an AI model answering millions of people without getting slower or dumber - serving engines, GPUs on Kubernetes, training at scale, retrieval plumbing, and the evals that catch drift before a user does.
after Neurons to a language model, Kubernetes
- 01AI/ML Ops - the deep-dive set24 Q
The Map Serving Engines GPUs on Kubernetes Training at Scale Registry & Artifacts RAG Infra Scaling & Cost Evals & Drift Everything

Part three · Depth

10The Paved Road1 lesson
How Netflix, Spotify and Airbnb built the internal platform that runs their product - one opinionated, pre-wired path so most teams never touch raw infrastructure.
- 01Company Platforms - Netflix / Spotify / Airbnb20 Q
The Map Netflix, The Paved Road Netflix, Deploys & Chaos Spotify, The Squad Myth Spotify, Backstage & Golden Paths Spotify, To the Cloud Airbnb, Monorail to SOA Airbnb, Data & Deploy Platform Everything

Borrowed from other tracks (16)

You don't need to take those tracks. These are the only lessons this track uses from them, and each is linked where it is needed.