DevOps Foundations
Understand how software moves from an idea to a reliable service, and how product, development, operations, security, and governance collaborate throughout that lifecycle.
Complete DevOps curriculum
Master the complete DevOps journey from foundations and Linux through Azure, pipelines, containers, Kubernetes, infrastructure as code, security, observability, reliability, automation, and disaster recovery.
Knowledge domain
Understand how software moves from an idea to a reliable service, and how product, development, operations, security, and governance collaborate throughout that lifecycle.
Knowledge domain
Operate the Linux hosts and runtime environments that support build agents, containers, middleware, observability components, and production applications.
Knowledge domain
Use Bash to turn reliable Linux commands into repeatable operational and pipeline automation with clear inputs, validation, logging, and failure handling.
Build maintainable Python automation that handles files, processes, JSON, YAML, REST calls, Azure SDK operations, structured logging, and exceptions in local and pipeline execution.
Automate Azure and pipeline operations with object-based PowerShell cmdlets, control flow, functions, modules, file handling, REST integration, and predictable error behavior.
Use HTTP, JSON, authentication, Azure DevOps REST resources, and Python or PowerShell clients to automate pipelines, repositories, and work items reliably.
Knowledge domain
Understand how application traffic moves from a client through name resolution, routing, security controls, proxies, load balancers, and transport sessions to a service endpoint.
Knowledge domain
Use Git as a distributed history and collaboration system, not merely a place to upload files. Understand how changes move from the working tree into commits and shared branches.
Operate GitHub as a governed engineering platform for repositories, reviews, planning, packages, releases, automation, secrets, and software-supply-chain security.
Knowledge domain
Structure Azure estates so ownership, policy, access, cost, resilience, and lifecycle rules apply consistently from the tenant down to individual resources.
Choose and operate the right Azure compute model, from virtual machines to managed application, function, container, and Kubernetes platforms.
Design private, controlled, observable connectivity between Azure workloads, users, on-premises networks, the internet, and global entry points.
Select, secure, scale, and lifecycle-manage Azure storage for objects, shared files, messages, key-value data, and virtual machine disks.
Protect Azure access and sensitive material using Microsoft Entra ID, workload identities, conditional access, Key Vault, Defender for Cloud, and Microsoft Sentinel.
Knowledge domain
Structure Azure DevOps organizations, projects, teams, permissions, connections, agents, and planning boards so delivery work remains visible, governed, and traceable.
Manage Azure Repos as a protected collaboration surface with clear branch strategy, review ownership, validation policy, merge behavior, tags, and repository permissions.
Model repeatable delivery workflows in Azure Pipelines using triggers, agents, jobs, steps, stages, variables, parameters, expressions, templates, dependencies, and outputs.
Build an evidence-producing path that takes source code through dependency restore, compilation, tests, analysis, security, containerization, artifact publication, controlled promotion, deployment, and validation.
Create governed feeds for application and universal packages with predictable versioning, upstream controls, retention, and producer-consumer permissions.
Knowledge domain
Package applications into portable container images and operate their runtime configuration, storage, connectivity, composition, optimization, security, and troubleshooting.
Operate Azure Container Registry as a private, authenticated, replicated, and scanned distribution point for versioned container images.
Knowledge domain
Understand Kubernetes control-plane reconciliation and the workload resources used to run stateless, stateful, scheduled, and node-level applications.
Control persistent data, ingress and east-west traffic, workload identity, resource allocation, health signaling, autoscaling, disruption, and pod placement in Kubernetes.
Design and operate AKS clusters with appropriate node pools, networking, registry access, Entra integration, managed identity, secret delivery, ingress, scaling, upgrades, monitoring, and security.
Package Kubernetes manifests into reusable, versioned charts whose templates and values support controlled installation, upgrade, rollback, dependency, and environment variation.
Knowledge domain
Model, plan, provision, change, import, and govern infrastructure with Terraform providers, resources, expressions, modules, state, backends, and lifecycle controls.
Deploy Azure resources through native ARM JSON and Bicep declarations with parameters, variables, functions, dependencies, modules, loops, conditions, outputs, and controlled deployment modes.
Knowledge domain
Use Ansible inventories, playbooks, modules, variables, facts, handlers, roles, templates, Vault, and dynamic inventory to configure systems consistently after infrastructure exists.
Knowledge domain
Measure source quality with SonarQube analysis, coverage, profiles, and gates so maintainability and correctness become enforceable delivery evidence.
Knowledge domain
Place complementary security tests across source, dependencies, secrets, images, infrastructure code, and running applications, then convert findings into risk-based delivery gates.
Deliver secrets, keys, and certificates to pipelines and AKS workloads through identity-based Key Vault access with rotation and auditability.
Knowledge domain
Collect, correlate, query, visualize, alert, and test Azure platform and application telemetry using Azure Monitor, Log Analytics, Application Insights, and KQL.
Collect time-series metrics from applications and infrastructure using Prometheus exporters, scraping, PromQL, recording and alert rules, and Alertmanager routing.
Turn metrics and logs from Prometheus and Azure Monitor into usable Grafana dashboards, variables, queries, panels, and alerts for engineering and operations audiences.
Collect application, operating-system, container, Kubernetes, and Azure logs into centralized platforms with parsing, correlation, querying, retention, access, and cost controls.
Knowledge domain
Choose rolling, recreate, blue-green, canary, A/B, shadow, feature-flag, and rollback patterns based on availability, capacity, data compatibility, observability, and risk.
Operate Kubernetes desired state through reviewed Git manifests and in-cluster Argo CD or Flux reconciliation with sync, health, drift detection, and recovery controls.
Knowledge domain
Define measurable reliability through SLIs, SLOs, SLAs, and error budgets, then run on-call, incident, capacity, postmortem, and toil-reduction practices around those objectives.
Diagnose failures across pipelines, deployments, HTTP responses, compute resources, storage, networks, DNS, certificates, Kubernetes, databases, and application latency without increasing impact.
Knowledge domain
Coordinate versioning, release branches, change records, approvals, freezes, notes, production deployment, smoke testing, rollback, and hotfixes as one traceable release process.
Enforce least privilege, protected branches and environments, controlled approvals, auditable service connections, secret management, policy, and compliance evidence across delivery systems.
Knowledge domain
Version, validate, package, migrate, and recover relational database schema changes using SQL scripts, DACPAC, Flyway, or Liquibase in a controlled delivery pipeline.
Knowledge domain
Scale governed delivery across repositories, applications, templates, environments, subscriptions, regions, and tenants without copying pipeline logic or centralizing every decision.
Knowledge domain
Translate business recovery objectives into protected backups, restores, Azure Backup, Site Recovery, multi-region architecture, failover, failback, and rehearsed disaster-recovery procedures.