DevOps & Infrastructure Guide

Master modern DevOps practices, containerization, orchestration, and cloud platforms.

Quick Start

Docker Basics

# Dockerfile example
FROM node:18-alpine
WORKDIR /app
COPY package*.json ./
RUN npm install
COPY . .
EXPOSE 3000
CMD ["node", "index.js"]

Kubernetes Deployment

# Simple K8s deployment
apiVersion: apps/v1
kind: Deployment
metadata:
  name: app-deployment
spec:
  replicas: 3
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: myapp
        image: myapp:1.0
        ports:
        - containerPort: 3000

Terraform Infrastructure

# AWS EC2 with Terraform
resource "aws_instance" "web" {
  ami           = "ami-0c55b159cbfafe1f0"
  instance_type = "t2.micro"

  tags = {
    Name = "web-server"
  }
}

DevOps Technology Stack

Containerization

• •Docker: Images, containers, registry
• •Docker Compose: Multi-container orchestration
• •Image Security: Scanning, signing, base image selection
• •Best Practices: Minimal images, layer caching, security

Container Orchestration

• •Kubernetes: Pods, Services, Deployments, StatefulSets
• •Helm: Package management for Kubernetes
• •Service Mesh: Istio, Linkerd for networking
• •Container Security: RBAC, NetworkPolicies, Pod Security

Infrastructure as Code

# Terraform modules
module "network" {
  source = "./modules/network"
  vpc_cidr = "10.0.0.0/16"

  public_subnets = [
    "10.0.1.0/24",
    "10.0.2.0/24"
  ]
}

• •Terraform: HCL, state management, modules
• •Ansible: Agentless configuration management
• •CloudFormation: AWS native IaC
• •Pulumi: Infrastructure as code with programming languages

Cloud Platforms

AWS

• •Compute: EC2, ECS, EKS, Lambda
• •Storage: S3, EBS, EFS
• •Database: RDS, DynamoDB, ElastiCache
• •Networking: VPC, ALB, CloudFront
• •Security: IAM, KMS, Secrets Manager

Other Platforms

• •Google Cloud Platform: Compute Engine, Cloud Run, GKE
• •Azure: VMs, App Service, AKS
• •DigitalOcean: Simpler alternative, good for learning

CI/CD Pipelines

Popular Platforms

• •GitHub Actions: Integrated with GitHub
• •GitLab CI: GitLab native CI/CD
• •Jenkins: Self-hosted, highly customizable
• •CircleCI: Cloud-based, easy setup

# GitHub Actions example
name: Deploy
on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - name: Run tests
        run: npm test
      - name: Build
        run: npm run build
      - name: Deploy
        run: ./deploy.sh

Monitoring & Logging

Monitoring

• •Prometheus: Metrics collection
• •Grafana: Visualization and dashboards
• •Datadog: Cloud monitoring service
• •New Relic: Application performance monitoring

Logging

• •ELK Stack: Elasticsearch, Logstash, Kibana
• •Splunk: Log aggregation and analysis
• •Cloudwatch: AWS native logging

Alerting

• •PagerDuty: On-call management
• •Alertmanager: Prometheus alerting
• •Opsgenie: Alert and incident response

Linux Administration

System Management

# Common commands
systemctl start/stop/restart service-name
journalctl -u service-name                  # View logs
ps aux | grep process-name                  # Process info
top/htop                                    # System monitoring

• •User and permission management
• •Package managers (apt, yum, pacman)
• •Systemd services
• •Shell scripting and automation
• •Network configuration

DevOps Workflow

Development → Production

1. •Plan: Design infrastructure
2. •Code: Write application and IaC
3. •Build: Containerize, create artifacts
4. •Test: Unit, integration, security tests
5. •Deploy: Stage and production deployment
6. •Monitor: Metrics, logs, alerts
7. •Optimize: Performance tuning

Deployment Strategies

• •Blue-Green: Two identical environments
• •Canary: Gradual rollout to subset
• •Rolling: Gradually replace old version
• •Feature Flags: Toggle features safely

Security Best Practices

Container Security

• •Scan images for vulnerabilities
• •Run as non-root user
• •Use minimal base images
• •Sign images

Infrastructure Security

• •Network policies and firewalls
• •Encryption in transit and at rest
• •Secrets management
• •IAM principle of least privilege

Learning Resources

Hands-On Platforms

• •Katakoda: Interactive learning environments (archived)
• •Play with Docker: Browser-based Docker practice
• •Linux Academy: DevOps courses
• •A Cloud Guru: AWS and cloud courses

Official Documentation

• •Kubernetes Docs
• •Docker Docs
• •Terraform Docs
• •AWS Documentation

Practice Projects

1. •Docker Multi-container App - Docker Compose setup
2. •Kubernetes Deployment - Deploy app with services
3. •Terraform Infrastructure - Complete AWS setup
4. •CI/CD Pipeline - Build and deploy workflow
5. •Monitoring Stack - Prometheus + Grafana

Next Steps

1. •Learn Docker fundamentals
2. •Practice Kubernetes basics
3. •Choose cloud platform (AWS recommended)
4. •Learn Infrastructure as Code (Terraform)
5. •Set up CI/CD pipeline
6. •Implement monitoring and logging
7. •Master Linux administration

Roadmap.sh Reference: https://roadmap.sh/devops

Status: ✅ Production Ready | SASMP: v1.3.0 | Bonded Agent: 03-devops-cloud-specialist