Concepts in DevOps & Cloud, page 30
Private Container Registry: Own Your Image Pipeline
A private container registry is your own personal Docker Hub, giving you full control over image storage and access. It's crucial for secure, in-house CI/CD pipelines.
Cloud Governance: Rules for Your Cloud Kingdom
Cloud governance is like city planning for your cloud, setting automated rules to prevent chaos. It's used to control costs by blocking expensive VMs and enforce security with required settings.
Argo CD: Git as the Source of Truth for Kubernetes
Argo CD makes your Git repo the single source of truth for your Kubernetes cluster's state. It constantly monitors your cluster and compares it to your desired state in Git, flagging any differences.
Kubernetes' Declarative Model: Desired vs. Actual State
The declarative model is like telling Kubernetes your destination, not giving it turn-by-turn directions. You define the desired state in a file, and Kubernetes works to make it a reality. This enables self-healing and GitOps.
Automate Storage Costs with Lifecycle Policies
Object storage lifecycle policies are automated rules that move or delete data as it ages to save money. They're ideal for logs or backups, transitioning them to cheaper "cold" storage over time.
Developer Portals: A Self-Service Hub for APIs
A developer portal is a self-service hub for APIs, bundling docs and access controls so developers can discover and use APIs without platform team help. They're used externally for third-party developers or internally for infrastructure automation.
kube-apiserver: The Front Door to Your Kubernetes Cluster
The kube-apiserver is the front door to your Kubernetes control plane. All requests to query or modify the cluster's state must pass through it, from kubectl commands to automated controller actions. The footgun is bypassing it to modify etcd directly.
Cloud Monitoring: Metrics, Time Series, and Resources
Cloud monitoring metrics are numerical measurements of a resource over time. They are used to build dashboards, trigger alerts when a threshold is crossed, and analyze performance for services like VMs or databases.
Software Scaffolding: Building Projects from Templates
Scaffolding is like a prefabricated house foundation; it automates creating a standardized project structure from a template. Use it to bootstrap new services with consistent CI/CD, security, and observability from day one.
Cloud Alerting: Your System's Automated Smoke Detector
Cloud alerting is your system's smoke detector, watching key metrics and screaming when something's wrong before it becomes a fire. It's used to flag high CPU, failing health checks, or security anomalies.
Linting: Your Automated Code Style Guide
A linter is an automated style guide for your code, catching stylistic errors like inconsistent indentation or naming. It runs in your editor or CI pipeline to enforce team conventions, keeping style debates out of code reviews.
Kubernetes Gateway API: The Successor to Ingress
The Gateway API replaces Kubernetes Ingress with a role-oriented model, separating infrastructure from application routing. Use it when different teams need to manage their own traffic rules.
Data Swamp: When a Data Lake Becomes Unusable
A data swamp is a data lake turned digital landfill, so disorganized that finding useful information is nearly impossible. This happens when data is dumped without metadata or quality checks, making it a costly, insecure liability instead of a valuable asset.
Artifact Signing: Proving Your Code is Your Code
Artifact signing is a notary's seal for software, proving who built it and that it hasn't been tampered with. It's used in CI/CD to sign container images and binaries before publishing.
Kubernetes Secrets: Encrypting Data at Rest
By default, Kubernetes Secrets are only base64-encoded, not encrypted. Encryption at rest makes the API server encrypt Secret data before saving to etcd, protecting against compromised backups.
ML Model Registry: A Version Control System for Models
A model registry is like Git for machine learning models: a central hub to version, store, and manage them. It's crucial for MLOps, letting teams track which version is in production, compare performance, and roll back. The footgun is using it as just storage.
Secret Sprawl: When Credentials Multiply Unchecked
Secret sprawl is when credentials like API keys multiply without control, getting lost in code, config files, and CI/CD pipelines. It's common in automated cloud systems where non-human identities proliferate.
CSI Volume Cloning: `cp` for Kubernetes Volumes
Think of volume cloning as cp for your Kubernetes data. It creates a new, independent volume pre-populated with data from an existing one, offloading the copy operation to your storage provider.
Cloud Operating Model: Your Org's Playbook for the Cloud
A Cloud Operating Model is your org's playbook for balancing new cloud capabilities with existing systems. It's used to manage the transition to the cloud with minimal disruption. The footgun is assuming your old processes will work unmodified.
.jpeg&w=1600&q=75)
Compliance as Code: Automate Your Audits
Compliance as Code prevents last-minute audit scrambles by treating security rules as software. It automates checks in your CI/CD pipeline, turning manual spreadsheet work into a continuous, code-driven process.
We are hiring for this. Every open role lists the topics its interview covers, so you can prepare for the real thing rather than guessing.
See open roles