Loading...
39 free, practical guides that take you from your first command to production-ready. Every step runs locally — each tutorial ends with the common mistakes to avoid and hands-on practice.
Prefer a structured, phase-by-phase path to certification? See the learning paths →
The OOMKilled trap — decimal vs binary memory units, the cgroup math, and how to audit for it.
Field ownership, managedFields, and resolving apply conflicts when many tools share an object.
PersistentVolumes vs Claims, binding, static vs dynamic provisioning, access modes and reclaim policy.
A curated, opinionated map of the best Kubernetes resources, organized by what you want to do.
Quick-reference command sheets for Kubernetes, Docker, AWS, Linux, TLS, Kafka, databases, and more.
Filesystem, permissions, processes and signals, the text-processing toolkit, systemd, and troubleshooting reflexes.
Write safe, reusable scripts — quoting, exit codes, loops, functions, strict mode, and shellcheck habits.
Master the three trees, branch and merge, rebase vs merge, undo anything safely, and a PR workflow that scales.
Environments, the scripting toolkit, calling cloud/K8s APIs, testing, and packaging installable CLIs.
The cloud-native language — types, errors, goroutines, an HTTP service, and tiny static container images.
Memory safety without a GC — ownership, enums/match, Result, traits, fearless concurrency, static binaries.
From your first container to lean, secure multi-stage images and multi-service Compose stacks.
Install, spin up a local cluster, deploy, expose, scale, roll out, and debug — all hands-on.
Package Kubernetes apps — install charts, template your own, manage values, and roll back safely.
Build CI/CD with events, jobs, matrices, caching, secrets, environments, and secure deploys.
Pipeline-as-code with stages, triggers, credentials, parallel matrices, agents, and shared libraries.
GitOps for Kubernetes — deploy from Git, auto-heal drift, roll back, and scale to many apps.
Extend Kubernetes — CRDs plus a controller and the reconcile loop, level-triggered and idempotent, with Kubebuilder.
Event-driven autoscaling — scale on queues, Kafka lag, PromQL, or cron, all the way to zero, with ScaledObjects/Jobs.
Chaos engineering on Kubernetes — inject pod, network, and stress faults with a hypothesis and a small blast radius.
Kubernetes policy-as-code in YAML — validate, mutate, generate, verify images, and roll out audit-then-enforce.
General-purpose policy with Rego — evaluate decisions, guard Kubernetes via Gatekeeper, and test configs with conftest.
Cloud governance as YAML — find and remediate untagged, public, idle, or unencrypted resources with filters and actions.
Security in every stage — shift left, SAST/DAST/SCA, secrets and policy-as-code, a fail-fast pipeline, and the metrics that prove it works.
Fast SAST with code patterns, not regex — run scans, write custom rules and taint mode, autofix, and gate CI on the diff.
One scanner for images, filesystems, IaC misconfig, secrets, and SBOMs — filter to fixable CVEs and gate CI on severity.
SBOM-first vulnerability scanning with Syft — scan images and SBOMs, filter fixable findings, and fail the build on Critical.
Stop secrets before they leave your laptop — pre-commit hooks, history scans, custom rules, baselines, and the leak response.
Secret scanning that verifies whether a key is live — scan Git, S3, and images, and gate CI only on confirmed-working credentials.
Scrape metrics, write PromQL, record rules, alert with Alertmanager, and harden for production.
Wire up data sources, build panels, template with variables, alert, and manage dashboards as code.
Vendor-neutral traces, metrics, and logs — instrument once, run the Collector, propagate context, and sample smartly.