Operations
Topics
Platform
- Docker, the container runtime: images, containers, volumes, Compose, Dockerfile best practices, and the relationship to Kubernetes
- Kubernetes, the container orchestrator: architecture, workloads, networking, storage, RBAC, autoscaling, footguns
- Networking, pod network model, CNI, kube-proxy, CoreDNS, NetworkPolicy
- Security Hardening, Pod Security Standards, admission controllers, RBAC lockdown, secrets
- Troubleshooting, systematic debugging for every common failure mode
- Workloads Reference, Deployment, StatefulSet, DaemonSet, Job, CronJob, probes, resource management
- Twelve-Factor Apps, the application-platform contract, all twelve canonical factors, current extensions, and runnable TypeScript, Python, and Go reference services
- Helm, the package manager for Kubernetes: charts, values, templates, releases, OCI distribution
- Terraform, infrastructure as code: providers, resources, state, modules, multi-environment patterns
- n8n, workflow automation from the beginner mental model through local Docker, cloud VM, n8n Cloud, queue mode, and Kubernetes hosting
Delivery
- GitOps, Git as the source of truth for infrastructure, with a reconciliation agent doing the work
- ArgoCD, the reference GitOps controller for Kubernetes; Applications, sync waves, the footguns
- Gitflow, Vincent Driessen’s 2010 branching model, when it fits, and what people use instead
Security
- Tokens, Keys, Secrets, and Environment Variables, what each credential type is, how they differ, where they live, and the mistakes that expose them
Domain-specific
- MLOps, the engineering discipline around getting ML models into production and keeping them useful
How the topics compose
Terraform provisions the infrastructure (VPC, EKS, RDS). Kubernetes runs on that infrastructure. Helm packages workloads for Kubernetes. ArgoCD applies those packages in a GitOps loop, with the branching strategy (Gitflow or otherwise) determining how changes flow through environments. MLOps is the same philosophy applied to models, which end up deployed via the same stack.