My DevSecOps notes.

My path to DevSecOps: from IT Manager to Cloud / DevSecOps Engineer

1. 1See the whole path in one page
2. 2Build the home lab and free accounts
3. 3Phase 1 (months 1–2): Linux and RHCSA
4. 4Phase 2 (months 2–4): Microsoft Azure and AZ-104
5. 5Phase 3 (months 4–5): Terraform, Git and CI/CD
6. 6Phase 4 (months 5–8): Kubernetes and CKA
7. 7Phase 5 (months 9–12): Kubernetes security, GitOps and CKS
8. 8Year 2: MLOps and AI infrastructure
9. 9Build a portfolio that shows real work
10. 10Keep the plan going every week

Most service usage: 65 DevSecOps services

1. 1See all 65 services on one map
2. 2Serve web traffic safely (web, proxy and TLS)
3. 3Build and run containers and Kubernetes
4. 4Ship changes with Git, CI/CD and GitOps
5. 5Build infrastructure from code (IaC and cloud CLIs)
6. 6Keep secrets safe (secrets, crypto and identity)
7. 7See what happens (metrics, logs, traces and alerts)
8. 8Scan code, images and the supply chain
9. 9Harden and watch hosts and clusters
10. 10Run databases, caches and queues
11. 11Run the network services (DNS, VPN, mail, failover)
12. 12Put the services together in one platform

Most service usage: 62 DevOps tools

1. 1See all 62 DevOps tools on one map
2. 2Build code with make, npm, pip, Maven and Go
3. 3Automate the boring work in the shell
4. 4Build and move container images
5. 5Run apps on Kubernetes
6. 6Ship changes with Git, CI/CD and GitOps
7. 7Build infrastructure from code
8. 8Work with the three big clouds
9. 9Route traffic with proxies and a service mesh
10. 10Monitor, log and load test
11. 11Do the daily work on Linux servers
12. 12Put the tools together in one DevOps stack

Red Hat RHCSA 10 Cert Guide (EX200)

1. 1Install Red Hat Enterprise Linux
2. 2Work in the shell
3. 3Manage files and folders
4. 4Read, search and change text files
5. 5Log in locally and remotely
6. 6Manage users, groups and admin rights
7. 7Control who can read, change and run files
8. 8Set up the network
9. 9Install, update and remove software
10. 10Find, control and stop processes
11. 11Start, stop and configure services with systemd
12. 12Run tasks on a schedule
13. 13Read, keep and manage system logs
14. 14Create partitions, file systems and swap, and mount them
15. 15Build and resize logical volumes (LVM)
16. 16Look at the kernel, drivers and modules
17. 17Control what the system boots into
18. 18Fix a system that does not boot
19. 19Automate tasks with Bash scripts
20. 20Secure and tune the SSH server
21. 21Run a web server with Apache
22. 22Protect services with SELinux
23. 23Open and close ports with firewalld
24. 24Share folders with NFS and mount them automatically
25. 25Keep the system time right
26. 26Prepare for the exam day
27. 27Test yourself before the exam

Red Hat System Administration I (RH124)

1. 1Get to know Red Hat Enterprise Linux
2. 2Log in and run commands in the shell
3. 3Find help in the local documentation
4. 4Register a system for Red Hat support
5. 5Get AI help with RHEL Lightspeed
6. 6Find your way in the file system
7. 7Manage files from the command line
8. 8Create, read and edit text files
9. 9Redirect input and output in the shell
10. 10Manage local users and groups
11. 11Control access to files
12. 12Install and update software with RPM and DNF
13. 13Install desktop apps with Flatpak
14. 14Use USB disks, ISO files and other removable media
15. 15Monitor and control processes
16. 16Control services and daemons with systemd
17. 17Understand and check the network
18. 18Set up the network with NetworkManager
19. 19Set up and secure SSH
20. 20Review everything you learned

Red Hat System Administration II (RH134)

1. 1Write shell scripts and work faster on the command line
2. 2Find text with regular expressions
3. 3Run your own jobs later or on a schedule
4. 4Schedule system jobs and clean temporary files
5. 5Read, keep and use system logs
6. 6Protect the system with SELinux
7. 7Pack and compress files with tar
8. 8Copy files safely between systems
9. 9Tune the system and set process priorities
10. 10Create partitions, file systems and swap
11. 11Manage storage with LVM
12. 12Control the boot and fix boot problems
13. 13Get root access back
14. 14Protect network services with firewalld and SELinux
15. 15Mount network storage with NFS and autofs
16. 16Install RHEL by hand and with Kickstart
17. 17Run containers with Podman
18. 18Build, install and update image-mode systems
19. 19Review everything you learned

Microsoft Azure Administrator (AZ-104)

1. 1Find your way in Azure and its tools
2. 2Manage users and groups in Microsoft Entra ID
3. 3Control access, policies, locks, tags and costs
4. 4Create and secure storage accounts
5. 5Work with blobs, file shares and data tools
6. 6Deploy resources from ARM templates and Bicep
7. 7Create and run virtual machines
8. 8Run containers and web apps
9. 9Build virtual networks, peering, routes and DNS
10. 10Secure network access to Azure resources
11. 11Balance load and fix connection problems
12. 12Watch resources with Azure Monitor
13. 13Back up and recover with Azure Backup and Site Recovery
14. 14Review AZ-104 and get ready for the exam

HashiCorp Terraform Associate (004)

1. 1Understand Infrastructure as Code and Terraform
2. 2Install and use providers, and understand state
3. 3Use the core workflow from init to destroy
4. 4Write resources, data sources, variables and outputs
5. 5Use complex types, expressions and functions
6. 6Control order, lifecycle and custom conditions
7. 7Handle sensitive data and secrets
8. 8Reuse code with modules
9. 9Manage state, backends, locking and drift
10. 10Import, refactor and debug existing infrastructure
11. 11Run Terraform in HCP Terraform
12. 12Build a staging environment on Azure with Terraform
13. 13Review Terraform and get ready for the exam

Git and GitHub for admins

1. 1Track changes with your first repository
2. 2Undo changes safely
3. 3Work in branches and merge them
4. 4Share work with remote repositories
5. 5Keep a clean history with rebase
6. 6Work with GitHub pull requests
7. 7Use stash, tags, bisect, blame and worktrees
8. 8Secure your Git work

CI/CD with GitHub Actions

1. 1Write your first workflow
2. 2Start workflows at the right time
3. 3Use and write actions
4. 4Use variables, contexts, artifacts and caches
5. 5Run matrices and reuse workflows
6. 6Build a CI pipeline that tests and scans
7. 7Protect deployments with secrets and environments
8. 8Deploy to Azure with OIDC and no stored passwords
9. 9Secure your pipelines

Containers with Docker and Podman

1. 1Understand containers, images and registries
2. 2Run and manage containers
3. 3Pull, tag, push and clean up images
4. 4Write a Dockerfile
5. 5Build small images with multi-stage builds
6. 6Keep data with volumes and bind mounts
7. 7Connect containers with networks
8. 8Run multi-container apps with Compose
9. 9Secure images and containers

Certified Kubernetes Administrator (CKA)

1. 1Understand the Kubernetes architecture
2. 2Build a cluster with kubeadm
3. 3Upgrade the cluster and back up etcd
4. 4Control access with RBAC and service accounts
5. 5Install components with Helm and Kustomize
6. 6Run apps with Deployments, ConfigMaps and Secrets
7. 7Control where pods run and how much they use
8. 8Reach pods with Services and DNS
9. 9Route HTTP traffic with Ingress and the Gateway API
10. 10Limit pod traffic with NetworkPolicies
11. 11Give pods persistent storage
12. 12Troubleshoot pods, nodes, the control plane and the network
13. 13Work fast in the CKA exam

Certified Kubernetes Security Specialist (CKS)

1. 1Set up a cluster securely
2. 2Harden access to the cluster
3. 3Harden the nodes with AppArmor and seccomp
4. 4Enforce Pod Security Standards
5. 5Write policies as code with OPA Gatekeeper
6. 6Protect Kubernetes secrets
7. 7Isolate workloads with sandboxes and mTLS
8. 8Secure the supply chain of images
9. 9Detect threats with audit logs and Falco
10. 10Get ready for the CKS exam

GitOps with Argo CD and Flux

1. 1Understand GitOps
2. 2Design the repositories and environments
3. 3Install and log in to Argo CD
4. 4Deploy apps with Argo CD
5. 5Deploy apps with Flux
6. 6Handle secrets in GitOps
7. 7Promote releases safely between environments

Python for admin automation

1. 1Write your first Python scripts
2. 2Work with lists, dictionaries and strings
3. 3Read, write and organise files and folders
4. 4Find and extract text with regular expressions
5. 5Read and write CSV, JSON and YAML
6. 6Run commands and read the system
7. 7Talk to web APIs
8. 8Handle errors and write logs
9. 9Build command-line tools and schedule them
10. 10Build a daily server report

MLOps and AI infrastructure (year 2)

1. 1Learn the machine-learning words an engineer needs
2. 2Follow the ML lifecycle
3. 3Track experiments and models with MLflow
4. 4Automate training with pipelines
5. 5Serve models as APIs
6. 6Monitor models in production
7. 7Run AI workloads on Kubernetes

The Linux Command Line

Summary coming soon.

More study pages