DevOps & Automation Bootcamp

You can navigate server filesystems, manage system processes, configure file permissions, and diagnose network connectivity on Linux systems.

1. Linux essentials for DevOps3 hrs
   • SSH key generation
   • file hierarchy standard
   • standard streams
   • redirection operators
2. The shell, files and permissions3 hrs
   • chmod
   • chown
   • umask
   • symbolic and numeric permissions
3. Processes and services3 hrs
   • systemctl
   • journalctl
   • ps
   • kill signals
   • cron jobs
4. Networking fundamentals3 hrs
   • ip route
   • ss
   • netstat
   • dig
   • iptables basics
5. How deployments work3 hrs
   • release lifecycle
   • environment parity
   • artifact management
   • rollback strategies

Hands-on project: Write a hardening script that locks down unauthorized SSH access, sets restrictive file permissions on critical directories, and logs active sessions.

You can automate server administration tasks using Bash scripts and collaborate on code using advanced Git branching workflows.

1. Bash scripting for automation3 hrs
   • shebang
   • strict mode
   • exit codes
   • error handling
2. Variables, loops and functions3 hrs
   • parameter expansion
   • arrays
   • conditional blocks
   • functions
3. Git and branching workflows3 hrs
   • git rebase
   • interactive rebase
   • git cherry-pick
   • git stash
4. Pull requests and collaboration3 hrs
   • code review workflows
   • merge conflicts
   • git hooks
   • signed commits
5. Automating routine tasks3 hrs
   • log rotators
   • disk usage alerts
   • system backup scripts
   • cron automation

Hands-on project: Build a deployment automation script in Bash that pulls from a git repository, runs health checks, and archives backup logs.

You can design and execute automated continuous integration and delivery pipelines using Jenkins and GitHub Actions.

1. Continuous integration concepts6 hrs
   • feedback loops
   • build triggers
   • test gates
   • artifact generation
2. Building pipelines in Jenkins6 hrs
   • Jenkinsfile
   • declarative syntax
   • shared libraries
   • agent nodes
3. GitHub Actions workflows6 hrs
   • workflow syntax
   • matrix builds
   • secrets management
   • custom actions
4. Automated testing in CI6 hrs
   • test result parsers
   • code coverage reports
   • parallel execution
   • linting steps
5. Continuous delivery and deployment6 hrs
   • blue-green deployments
   • canary releases
   • approval gates
   • rollback triggers

Hands-on project: Create a multi-stage GitHub Actions workflow that runs automated unit tests, builds an artifact, and pushes it to a container registry upon merge.

You can containerise applications, build optimized multi-stage Docker images, and manage multi-container environments using Docker Compose.

1. Images and containers6 hrs
   • container runtime
   • image layers
   • docker run flags
   • volume mounts
2. Writing efficient Dockerfiles6 hrs
   • multi-stage builds
   • caching mechanisms
   • ENTRYPOINT vs CMD
   • non-root users
3. Docker Compose6 hrs
   • yaml configuration
   • networks
   • volumes
   • depends_on health checks
4. Registries and image management6 hrs
   • Docker Hub
   • GitHub Packages
   • image tagging
   • vulnerability scanning
5. Container best practices6 hrs
   • resource limits
   • logging drivers
   • clean-up policies
   • health checks

Hands-on project: Containerise a full-stack web application using a multi-stage Dockerfile keeping image size under 150MB, orchestrated via Docker Compose with persistent volumes.

You can deploy, scale, and manage containerized workloads on Kubernetes clusters using core primitives like Pods, Deployments, and Services.

1. Kubernetes architecture6 hrs
   • kube-apiserver
   • etcd
   • kubelet
   • control plane
   • worker nodes
2. Pods, deployments and services6 hrs
   • Pod lifecycle
   • Deployment controllers
   • ClusterIP
   • NodePort
   • LoadBalancer
3. Config, secrets and scaling6 hrs
   • ConfigMaps
   • Secrets
   • horizontal pod autoscaler
   • resource requests and limits
4. Rolling updates and health checks6 hrs
   • liveness probes
   • readiness probes
   • startup probes
   • update strategies
5. Running apps on a cluster6 hrs
   • kubectl apply
   • namespace isolation
   • manifest organization
   • dry-run validation

Hands-on project: Deploy a stateless web service to a local Kubernetes cluster with 3 replicas, zero-downtime rolling updates, and internal cluster service discovery.

You can manage cluster ingress routing, configure persistent storage, package applications with Helm, and troubleshoot failing workloads.

1. Ingress and networking3 hrs
   • Ingress controllers
   • Ingress rules
   • TLS termination
   • NetworkPolicies
2. Persistent storage3 hrs
   • PersistentVolumes
   • PersistentVolumeClaims
   • StorageClasses
   • statefulsets
3. Packaging with Helm3 hrs
   • chart structure
   • values.yaml
   • templating engine
   • helm upgrade rollback
4. Observability in Kubernetes3 hrs
   • kubectl top
   • metrics-server
   • pod log aggregation
   • cluster events
5. Troubleshooting workloads3 hrs
   • CrashLoopBackOff
   • ImagePullBackOff
   • kubectl describe
   • ephemeral debug containers

Hands-on project: Package a microservice architecture into a reusable Helm chart with configurable values, ingress routing, and persistent storage claims.

You can provision and manage cloud infrastructure declaratively using Terraform state files, modules, and workspaces.

1. Infrastructure-as-code concepts6 hrs
   • declarative vs imperative
   • idempotency
   • immutable infrastructure
   • state management
2. Terraform basics6 hrs
   • providers
   • resources
   • data sources
   • terraform init plan apply
3. Provisioning cloud resources6 hrs
   • variables
   • outputs
   • local values
   • conditional expressions
4. State, modules and workspaces6 hrs
   • remote backends
   • state locking
   • module composition
   • workspaces
5. Environments and best practices6 hrs
   • directory layouts
   • terraform import
   • taint commands
   • refactoring state

Hands-on project: Write modular Terraform configurations to provision an entire cloud network topology with VPC, subnets, security groups, and managed databases.

You can automate server configuration, software provisioning, and patch management at scale using idempotent Ansible playbooks and roles.

1. Configuration management concepts3 hrs
   • push vs pull models
   • inventory files
   • ansible.cfg settings
   • ad-hoc commands
2. Playbooks and roles3 hrs
   • YAML playbooks
   • tasks
   • handlers
   • role directory structure
3. Managing servers at scale3 hrs
   • variables and facts
   • jinja2 templating
   • loops
   • conditionals
4. Idempotency3 hrs
   • changed_when
   • failed_when
   • state validation
   • stat module checks
5. Secrets and vaults3 hrs
   • ansible-vault encrypt
   • vault passwords
   • secure variables
   • credential handling

Hands-on project: Write an Ansible playbook containing custom roles to provision web servers, configure Nginx reverse proxies, and deploy application runtimes across remote nodes.

You can architect, secure, and deploy cloud infrastructure and applications using core AWS compute, networking, and storage services.

1. Core AWS services6 hrs
   • regions and availability zones
   • AWS CLI
   • console navigation
   • resource tagging
2. Compute, storage and networking6 hrs
   • EC2 instance types
   • VPC routing
   • internet gateways
   • S3 buckets and policies
3. IAM and security6 hrs
   • IAM users and roles
   • security groups
   • Network ACLs
   • least privilege access
4. Deploying workloads6 hrs
   • Elastic Load Balancing
   • Auto Scaling groups
   • Route 53 DNS records
   • CloudFront CDN
5. Cost awareness6 hrs
   • AWS Budgets
   • cost explorer
   • reserved instances
   • spot instances

Hands-on project: Design and deploy a secure three-tier web application on AWS featuring public/private subnets, Auto Scaling EC2 instances, and managed database storage.

You can collect time-series metrics, aggregate logs, and build operational dashboards and alerts using Prometheus and Grafana.

1. Metrics, logs and traces3 hrs
   • three pillars of observability
   • counters
   • gauges
   • histograms
   • structured logging
2. Prometheus and Grafana3 hrs
   • PromQL queries
   • scraping targets
   • alertmanager configuration
   • Grafana panels
3. Dashboards and alerting3 hrs
   • SLIs and SLOs
   • error budgets
   • alert routing
   • webhook notifications
4. Incident response basics3 hrs
   • on-call rotation
   • triage runbooks
   • post-mortem analysis
   • mean time to recovery
5. Reliability and SRE ideas3 hrs
   • toil reduction
   • chaos engineering
   • capacity planning
   • reliability testing

Hands-on project: Configure a Prometheus monitoring stack to scrape application metrics, build a custom Grafana dashboard, and set up alert rules for high CPU usage.

You can integrate security scanning, vulnerability assessments, and policy checks into CI/CD pipelines and container registries.

1. Securing pipelines3 hrs
   • pipeline credential hygiene
   • signed artifacts
   • branch protection rules
   • audit logging
2. Secrets management3 hrs
   • HashiCorp Vault basics
   • dynamic secrets
   • external secrets operator
   • env var encryption
3. Image and dependency scanning3 hrs
   • Trivy scanner
   • Snyk integration
   • SBOM generation
   • CVE triage
4. Least privilege and policies3 hrs
   • RBAC enforcement
   • OPA Gatekeeper
   • pod security standards
   • compliance checks
5. Compliance basics3 hrs
   • CIS benchmarks
   • infrastructure auditing
   • security posture management
   • hardening guides

Hands-on project: Implement automated SAST and container vulnerability scanning within a pipeline to block builds containing critical CVEs before deployment.

You can carry a pager for a service and run the incident when it fires.

1. SLOs and error budgets90 min
   • SLI selection
   • Burn-rate alerting
   • Release freeze policy
2. Alerts worth waking for90 min
   • Symptom-based paging
   • Runbook per alert
   • Cutting alert noise
3. Running the incident90 min
   • Commander and scribe roles
   • Mitigate first
   • Status comms
4. Postmortems that change things90 min
   • Blameless write-up
   • Contributing factors
   • Action ownership

Hands-on project: Define SLOs and an error budget for the capstone service, write alert rules that page only on symptoms, run a tabletop incident with a declared commander, and produce a blameless postmortem with tracked actions.

You can architect, build, and deploy an end-to-end automated delivery pipeline encompassing infrastructure provisioning, container orchestration, and observability.

1. End-to-end delivery pipeline capstone6 hrs
   • architecture integration
   • gitops implementation
   • automated rollback verification
   • end-to-end testing
2. Portfolio and documentation6 hrs
   • architecture diagrams
   • README documentation
   • repository cleanup
   • showcasing DevOps projects
3. DevOps mock interviews6 hrs
   • troubleshooting scenarios
   • system architecture Q&A
   • behavioral interview prep
   • live debugging tasks
4. Resume and LinkedIn optimisation6 hrs
   • keyword optimization
   • impact-driven bullet points
   • profile positioning
   • recruiter networking
5. Certification and next steps6 hrs
   • exam preparation strategies
   • CKA/Terraform Associate overview
   • continuous learning paths
   • career growth roadmap

Hands-on project: Deliver a production-grade automated platform: provision infrastructure via Terraform, build and test apps in CI/CD, deploy to Kubernetes via Helm, and monitor via Prometheus.