Edocti Training
Advanced DevOps & SRE: Cloud-Native Architectures
Scheduled sessions
No sessions are available at the moment.
Skills You Will Learn
Advanced IaC State Management
GitOps with ArgoCD
Software Supply Chain Security
Kubernetes Governance (OPA)
Progressive Delivery (Canary/Blue-Green)
KEDA Autoscaling
SRE Fundamentals (SLIs/SLOs)
Cloud-Native Observability
Curriculum
Advanced Infrastructure as Code (IaC)
- Managing state at scale: Terraform State Management, Workspaces, and concurrency locks
- Creating and publishing modules (Terraform Modules / Bicep Registries) for enterprise-wide infrastructure standardization
- Lab: Refactoring monolithic IaC code into reusable, version-controlled modules
The GitOps Paradigm
- Push-based vs. Pull-based deployments: understanding the architectural shift
- Introduction to ArgoCD (or Flux): automatically synchronizing cluster state directly from Git repositories
- Lab: Implementing a GitOps architecture with ArgoCD for a multi-environment application deployment
Advanced DevSecOps & Supply Chain Security
- Generating and validating an SBOM (Software Bill of Materials)
- Signing Docker images (Sigstore/Cosign) to prevent the injection of malicious code into production
- Lab: Setting up a secure image pipeline that blocks unsigned containers from being deployed
Kubernetes Governance & Security (AKS/EKS)
- Beyond basic containers: Network Policies for implementing Zero Trust inside the cluster
- Policy-as-Code: Enforcing cluster-wide rules using OPA Gatekeeper or Kyverno (e.g., denying root-privileged containers)
- Lab: Writing and applying custom OPA policies to audit and block non-compliant Kubernetes manifests
Advanced Release Strategies (Progressive Delivery)
- Moving past Rolling Updates: Blue/Green Deployments and Canary Releases
- Integrating automated metrics analysis to determine release health
- Lab: Automating a Canary release, initially routing only 10% of live traffic to the new version and monitoring error rates
Advanced Kubernetes Autoscaling
- Overcoming standard CPU/Memory limits with Kubernetes Event-driven Autoscaling (KEDA)
- Lab: Scaling workloads based on external events (e.g., scaling pods based on the length of an Azure Service Bus/RabbitMQ message queue)
Site Reliability Engineering (SRE) Fundamentals
- Defining and measuring SLIs (Service Level Indicators) and SLOs (Service Level Objectives)
- Managing "Error Budgets": calculating when to halt new feature releases to stabilize the system
- Workshop: Defining realistic SLOs and Error Budgets for a sample e-commerce architecture
Cloud-Native Observability
- Transitioning from traditional monitoring to observability with the Prometheus & Grafana stack
- Distributed Tracing (OpenTelemetry): tracking a single request across dozens of microservices to pinpoint latency sources
- Lab: Instrumenting a microservice application with OpenTelemetry and visualizing traces to debug a performance bottleneck
Chaos Engineering & Game Days
- Introduction to Chaos Engineering: injecting controlled faults to test system resilience before production outages occur
- Conducting "Game Days": preparing the engineering team for real-world disaster recovery scenarios
- Lab: Simulating pod terminations and network latency to observe system self-healing capabilities
Optional modules
Optional — Advanced Cloud FinOps for Kubernetes
- Understanding Kubernetes cost allocation using tools like Kubecost or OpenCost
- Right-sizing workloads and optimizing node pools for maximum cost efficiency
Course Day Structure
- Part 1: 09:00–10:30
- Break: 10:30–10:45
- Part 2: 10:45–12:45
- Lunch break: 12:15–13:15
- Part 3: 13:15–15:15
- Break: 15:15–15:30
- Part 4: 15:30–17:30