version: 1
id: devops-engineer
title: DevOps Engineer Path
summary: Learn platform engineering through Linux, Git, containers, Kubernetes, CI/CD, and observability — inspired by Boot.dev and adapted for local hands-on labs.
source: "Structure inspired by Boot.dev DevOps path; extended with 90DaysOfDevOps topics and FinTech platform roadmap (Proxmox, PostgreSQL, Kafka)."
phases:
  - id: foundations
    title: Phase 1 — Foundations
    summary: Terminal fluency, Git recovery, and the DevOps feedback loop.
    modules:
      - id: learn-linux
        title: Learn Linux
        summary: Command line, filesystems, permissions, and pipelines.
        source: "Boot.dev — Learn Linux"
        labs:
          - linux-shell-basics
          - linux-navigation
          - linux-pipelines
          - linux-filesystems
      - id: terminal-mastery
        title: Terminal Mastery
        summary: Persistent sessions and fast edits on bastion hosts.
        labs:
          - terminal-tmux
          - terminal-neovim
      - id: ninety-days-bridge
        title: 90Days Topic Bridges
        summary: Scenario rewrites from 90DaysOfDevOps with PlatformForge validators.
        source: "Adapted from 90DaysOfDevOps (CC BY-NC-SA 4.0)"
        labs:
          - bash-automation-basics
          - docker-tagging-basics
          - kubernetes-yaml-basics
          - networking-basics
          - monitoring-basics
          - cloud-tagging-basics
          - secrets-basics
      - id: datacenter-networking
        title: Datacenter Networking Tickets
        summary: VLAN, gateway, ACL, NAT, and traceroute drills using PatchLab-style tip codes.
        source: "Pedagogy inspired by cozyGarage/patchlab (CCNA/datacenter rack trainer)"
        labs:
          - net-vlan-access
          - net-default-gateway
          - net-firewall-acl
          - net-static-nat
          - net-traceroute-path
      - id: networking-sandbox
        title: Networking Sandbox
        summary: Free-play ticket unlocked after the first three networking labs.
        unlock:
          completedFromModule: datacenter-networking
          count: 3
        labs:
          - net-sandbox
      - id: learn-git
        title: Learn Git
        summary: History recovery, branching, remotes, and safe collaboration.
        source: "Boot.dev — Learn Git"
        labs:
          - git-recovery
          - git-branching
          - git-rebase-reset
          - git-remotes
  - id: containers
    title: Phase 2 — Containers & Networking
    summary: Debug images, compose multi-container apps, and reason about connectivity.
    modules:
      - id: learn-docker
        title: Learn Docker
        summary: Dockerfiles, debugging, and Compose networking.
        source: "Boot.dev — Learn Docker"
        labs:
          - docker-debugging
          - docker-networking
          - docker-volumes
  - id: iac
    title: Phase 2c — Infrastructure as Code
    summary: Local Terraform and Ansible planning drills for modules, state, and config management.
    modules:
      - id: learn-terraform
        title: Learn Terraform
        summary: Root modules, reusable network modules, and remote state backends.
        labs:
          - terraform-basics
          - terraform-modules
          - terraform-state-backend
      - id: learn-ansible
        title: Learn Ansible
        summary: Inventories, playbooks with handlers, and idempotency planning for platform hosts.
        labs:
          - ansible-inventory-basics
          - ansible-playbook-basics
          - ansible-handlers-idempotency
  - id: application-dev
    title: Phase 2b — Application Development
    summary: Build small HTTP services in Go and Python, plus SQL query drills.
    modules:
      - id: learn-http-go
        title: Learn HTTP Servers & Go
        summary: Health endpoints, JSON handlers, and go test.
        source: "Boot.dev — Learn HTTP Servers / Learn Go"
        labs:
          - http-health-server
          - http-json-api
          - go-testing-basics
      - id: learn-python-sql
        title: Learn Python & SQL
        summary: Python HTTP services, packaging, SQLite fundamentals, and advanced query/async drills.
        source: "Boot.dev — Learn Python / Learn SQL"
        labs:
          - python-health-server
          - python-json-api
          - python-async-service
          - python-packaging-basics
          - sql-query-basics
          - sql-joins-basics
          - sql-indexes-explain
          - sql-window-functions
  - id: kubernetes
    title: Phase 3 — Kubernetes
    summary: Deploy reliable workloads on live k3d clusters, then practice CKA-style controls, admission policy, and Gateway API.
    modules:
      - id: learn-kubernetes
        title: Learn Kubernetes
        summary: Deployments, Services, ConfigMaps, scaling, and namespaces with kubectl.
        source: "Boot.dev — Learn Kubernetes"
        labs:
          - kubernetes-deploy
          - kubernetes-service
          - kubernetes-configmap
          - kubernetes-scaling
          - kubernetes-namespaces
      - id: cka-prep
        title: CKA-Style Scenarios
        summary: NetworkPolicy, RBAC, troubleshooting, Ingress, storage, backup/restore, and etcd runbooks.
        labs:
          - kubernetes-networkpolicy
          - kubernetes-rbac
          - kubernetes-troubleshooting
          - kubernetes-ingress
          - kubernetes-storage
          - kubernetes-backup-restore
          - kubernetes-etcd-snapshot
      - id: learn-policy
        title: Policy as Code
        summary: Kyverno validate/mutate baselines and OPA/Gatekeeper constraints for labels, digests, and cost centers.
        labs:
          - policy-kyverno-basics
          - policy-kyverno-mutate
          - policy-opa-constraints
      - id: learn-gateway
        title: Gateway API
        summary: Gateway/HTTPRoute objects, canary splits, and a live Envoy Gateway data plane.
        labs:
          - gateway-api-http-route
          - gateway-canary-split
          - gateway-api-dataplane
  - id: delivery
    title: Phase 4 — Delivery & Reliability
    summary: CI/CD pipelines, GitOps, Helm, secrets ops, observability, SLOs, and incident response.
    modules:
      - id: learn-cicd
        title: Learn CI/CD
        summary: Fix broken pipelines, add security gates, and ship safely.
        source: "Boot.dev — Learn CI/CD"
        labs:
          - cicd-pipeline-fix
          - cicd-security-scan
      - id: learn-gitops
        title: Learn GitOps
        summary: Declarative desired state, drift reconcile loops, Kustomize overlays, fleet planning, sync waves, and multi-cluster apply.
        labs:
          - gitops-manifest-sync
          - gitops-kustomize-overlay
          - gitops-fleet-multi-cluster
          - gitops-sync-waves-plan
          - gitops-fleet-apply
      - id: learn-helm
        title: Learn Helm
        summary: Chart skeletons, values overrides, and digest-friendly env promotion.
        labs:
          - helm-chart-basics
          - helm-values-overrides
      - id: learn-secrets-ops
        title: Secrets Operations
        summary: External Secrets Operator planning and credential rotation runbooks.
        labs:
          - secrets-external-operator
          - secrets-rotation-runbook
      - id: learn-observability
        title: Logging & Observability
        summary: Structured logs, metrics, alerts, tracing, SLI rules, OTel collector planning and live runtime, and correlation runbooks.
        source: "Boot.dev — Learn Logging and Observability"
        labs:
          - observability-structured-logs
          - observability-metrics-alerts
          - observability-tracing-plan
          - observability-sli-recording-rules
          - observability-otel-collector-plan
          - observability-correlation-plan
          - observability-otel-runtime
      - id: learn-sre
        title: Reliability & On-Call
        summary: SLOs, error budgets, burn-rate alerts, chaos experiments, game days, and shift handoffs.
        labs:
          - slo-definition-basics
          - error-budget-policy
          - burn-rate-alerts
          - chaos-experiment-basics
          - gameday-budget-freeze
          - oncall-handoff-basics
      - id: capstone
        title: Capstone Projects
        summary: Multi-skill incidents spanning reliability, compliance, and platform design.
        labs:
          - incident-capstone
          - payments-reliability-capstone
          - compliance-release-capstone
          - platform-landing-zone-capstone
          - gitops-delivery-capstone
          - reliability-gameday-capstone
          - platform-product-capstone
      - id: leadership
        title: Leadership Capstones
        summary: Capture decisions and run blameless learning reviews.
        labs:
          - leadership-adr
          - leadership-postmortem
      - id: portfolio-project
        title: Portfolio Project
        summary: Stitch HTTP, Docker, and Kubernetes into a public demo path.
        labs:
          - portfolio-payments-api
          - portfolio-containerize
          - portfolio-ship-k8s
          - portfolio-showcase
  - id: platform-engineering
    title: Phase 5 — Platform Engineering
    summary: Platform product skills, data, compliance, bare-metal, and local AWS mental models from the FinTech architect roadmap.
    modules:
      - id: learn-platform-product
        title: Platform Product Skills
        summary: IDP golden paths, FinOps guardrails, and multi-env promotion ADRs.
        labs:
          - idp-golden-path-basics
          - finops-cost-guardrails
          - multi-env-promotion-adr
      - id: data-platform
        title: Data & Streaming
        labs:
          - postgresql-pitr
          - kafka-debezium-cdc
          - redis-ha-failover-plan
      - id: compliance
        title: Compliance & Security
        labs:
          - compliance-masking
          - dora-evidence
          - pci-dss-basics
          - soc2-change-evidence
      - id: bare-metal
        title: Bare Metal & Virtualization
        labs:
          - proxmox-planning
          - debian-platform-baseline
          - rack-capacity-planning
      - id: aws-local
        title: AWS Local Simulations
        summary: IAM, S3, and VPC design drills without a cloud account.
        labs:
          - aws-iam-basics
          - aws-s3-basics
          - aws-vpc-basics