CI/CD, GitOps, DevSecOps & Observability
GitOps with Argo CD, DevSecOps supply-chain security, cloud security compliance, and full-stack observability
100% Free · All lessons unlocked
Course Content
Foundations
Core concepts and groundwork
GitOps principles — declarative, versioned, automatic, observable
Reading
ArgoCD — App of Apps, ApplicationSets, sync policies and hooks
Reading
Argo Rollouts — canary, blue/green and analysis templates
Reading
Helm — charts, values, hooks, tests and chart-testing with ct
Reading
Flux CD — GitRepository, Kustomization and HelmRelease CRDs
Reading
Practice — package a FastAPI app as a Helm chart with 3 environments
Exercise
Core Skills
Essential techniques and patterns
Lab — set up ArgoCD on EKS and deploy app via GitOps repo
Exercise
Shift-left security — SAST with Semgrep and CodeQL in Actions
Reading
DAST — OWASP ZAP full-scan action in CI pipeline
Reading
SCA — Dependabot, Snyk and OWASP Dependency-Check
Reading
Supply chain — Cosign signing, Rekor transparency log and SLSA
Reading
Kyverno — admission control policies for image signing and PSS
Reading
Applied Practice
Hands-on, real-world scenarios
Practice — full DevSecOps pipeline: SAST, SCA, sign and Kyverno
Exercise
Lab — block unsigned images from deploying to EKS via Kyverno
Exercise
AWS IAM advanced — SCPs, permission boundaries and Access Analyzer
Reading
KMS — CMK types, envelope encryption, key rotation and grants
Reading
Security Hub, GuardDuty, Inspector and Macie — service roles
Reading
CloudTrail, Config rules and SSM Automation remediation
Reading
Advanced Topics
Deeper, more complex material
CIS Benchmark Level 1 and 2 controls for AWS accounts
Reading
Practice — audit AWS account with Security Hub and fix findings
Exercise
Lab — Config rule that auto-remediates public S3 buckets
Exercise
OpenTelemetry — SDK instrumentation, OTLP protocol and collector
Reading
Prometheus — scrape config, exporters, PromQL and alerting rules
Reading
Production & Scale
Building for the real world
Grafana — dashboards, variables, annotations and alert channels
Reading
AWS CloudWatch — Logs Insights, CW Agent and Container Insights
Reading
Distributed tracing — Jaeger, AWS X-Ray and trace propagation
Reading
Practice — write PromQL rules for P99 latency and error-rate
Exercise
Lab — Prometheus and Grafana stack on EKS with app dashboard
Exercise
Mastery & Capstone
Projects and final review
Project brief — secure, observable GitOps platform on EKS
Reading
GitHub Actions pipeline — SAST, SCA, image scan, sign and push
Exercise
ArgoCD canary rollout with auto-rollback on error-rate alert
Exercise
Prometheus alerts and Alertmanager routes with Grafana dashboard
Exercise
Capstone — submit pipeline YAML, ArgoCD repo and live dashboard
Project
100% Free · All lessons unlocked
Topic Overview
What you'll learn
- Core concepts and fundamentals of CI/CD, GitOps, DevSecOps & Observability
- Industry best practices and design patterns
- Hands-on exercises with real-world scenarios
- Performance optimization and advanced techniques
- Building production-ready applications