DevOps and cloud
Shipping software: Docker images, CI/CD, deployment strategies, infrastructure as code and Kubernetes, cloud networking, IAM and serverless.
7 lessons
Build and ship
- 1Docker images, layers and multi-stage buildsAn image is cached layers built in order: the first changed step rebuilds everything after it, and only the final stage ships.
- 2CI/CD pipelines, build once and promote everywhereBuild each commit once, check and promote that exact digest, and add each environment's config only when it starts.
- 3Deployment strategies and rollbackRolling swaps pods in bounded batches, blue-green flips all traffic, a canary is judged against its control; rollback restores code, not data.
Platform mental models
- 4Desired state: infrastructure as code and KubernetesDeclare what should exist; the tool diffs it against what exists and acts. Readiness routes traffic; liveness restarts.
- 5Cloud networking basicsRoutes decide where a packet can go; security groups and network ACLs decide whether it may, and only the security group remembers.
- 6IAM and least privilegeRefused unless allowed, Deny beats Allow, and every identity gets the least it needs for the shortest time.