Course 1 — Cloud & DevOps Engineer (60-Class Career Track)
Goal: Take students from Linux and networking fundamentals through AWS Cloud architecture, Docker containerization, CI/CD pipelines, Kubernetes orchestration, and cloud infrastructure management. Saturday Learn (2h) + Sunday Build (2h) in our Bagnan computer lab.
Core Engineering Competencies
Detailed Class-by-Class Syllabus
IT infrastructure, internet architecture, Linux OS, terminal commands, permissions, systemd services, Bash scripting, networking, IP, DNS, Nginx, and Git.
Evolution of infrastructure (Bare Metal → Virtualization → Cloud), IaaS, PaaS, SaaS models.
Client-server model, web browsers, DNS lookup sequence, HTTP request-response cycle.
Open source philosophy, Linux distributions (Ubuntu/Debian vs RHEL/CentOS), shell interface.
Filesystem hierarchy (/etc, /var, /home, /opt), ls, cd, mkdir, rm, cp, mv, cat, grep, find, tar.
User management, /etc/passwd, /etc/shadow, chmod (symbolic/octal), chown, sudo privilege escalation.
Process management (ps, top, htop, kill), systemd, systemctl start/stop/status/enable services.
SSH key-pair authentication, ssh-keygen, scp, writing Bash scripts, variables, conditionals, loops.
OSI 7-layer model vs TCP/IP 4-layer model, routers, switches, packets, frames, MAC addresses.
IPv4 addressing, subnet masks, CIDR notation (/24, /16), standard ports (80, 443, 22), DNS records.
Installing and configuring Nginx web server, virtual hosts (server blocks), static file serving, reverse proxy.
Git initialization, staging, commits, branch management, merge conflicts, pull requests on GitHub.
Deploying a live web application on Ubuntu Linux server with Nginx and Git automation.
Project: Linux Web Server & Reverse Proxy Deployment
Developer → Git Push → GitHub → Ubuntu Server → Nginx Configuration → Reverse Proxy → Live Production Website.
AWS fundamentals, IAM, EC2, EBS, S3, custom VPCs, subnets, route tables, IGW, NAT, Security Groups, ALB, Auto Scaling, RDS, Route 53, and CloudWatch.
AWS Global Infrastructure (Regions, Availability Zones, Edge Locations), AWS Console & AWS CLI setup.
Users, User Groups, Roles, Policies (JSON format), Principle of Least Privilege, MFA.
Instance types, provisioning Linux EC2 instances, key pairs, user data bootstrap scripts, instance lifecycle.
Writing User Data shell scripts to install web servers and applications on instance launch.
Elastic Block Store (EBS) volume types, snapshots, Amazon Machine Images (AMIs), creating custom AMIs.
Object storage, buckets, storage classes, versioning, bucket policies, static website hosting on S3.
Creating custom VPC, public vs private subnets, IP CIDR block planning, VPC architecture best practices.
Configuring public and private route tables, associating subnets, default routes to Internet Gateway.
Attaching Internet Gateway (IGW) for public egress, NAT Gateway configuration for private subnets.
Stateful Security Groups (instance-level firewall) vs Stateless Network Access Control Lists (subnet firewall).
Application Load Balancer (ALB), Target Groups, health checks, path-based and host-based routing rules.
Launch Templates, Auto Scaling Policies (Dynamic, Target Tracking), High Availability across Multi-AZs.
Provisioning Amazon RDS (PostgreSQL/MySQL), Multi-AZ deployments, read replicas, database subnet groups.
Amazon Route 53 hosted zones, DNS record types (A, CNAME, Alias), simple and weighted routing policies.
Monitoring EC2, RDS, and ALB compute metrics, CPU utilization, network I/O, dashboard creation.
CloudWatch Logs agent, log groups, metric filters, setting up SNS email alerting on high CPU/errors.
Reliability, Performance Efficiency, Cost Optimization, Operational Excellence, Security pillars.
Deploying a resilient, highly available multi-tier web application on AWS (Route 53 → ALB → EC2 ASG → RDS + S3 + CloudWatch).
Project: Resilient Multi-Tier Cloud Application on AWS
Route 53 DNS → Application Load Balancer → Auto-Scaling EC2 Web Fleet in Custom VPC → Multi-AZ RDS Database → S3 Asset Storage + CloudWatch Alarms.
DevOps lifecycle, Docker architecture, Dockerfile, networks, volumes, Docker Compose, GitHub Actions, automated CI/CD pipelines, and Jenkins.
DevOps culture, CAMS principles (Culture, Automation, Measurement, Sharing), eliminating dev-ops silos.
Continuous Integration, Continuous Delivery, Continuous Deployment, pipeline stages, automated feedback loops.
Virtual Machines vs Containers, Docker Engine architecture, Docker daemon, container isolation mechanisms (cgroups, namespaces).
Docker Hub, searching images, docker run, exec, stop, ps, rm, inspect commands, container lifecycle.
Writing Dockerfiles, FROM, RUN, COPY, WORKDIR, EXPOSE, CMD vs ENTRYPOINT, multi-stage builds for small images.
Bridge, host, none networks, user-defined bridge networks, persistent data storage with named Docker volumes.
Multi-container orchestration, docker-compose.yml syntax, services, networks, volumes, environment variables.
Building a multi-container web application (Frontend + Backend API + PostgreSQL Database) with Docker Compose.
GitHub Actions workflow architecture, triggers (push, pull_request), runners, jobs, steps, secrets.
Building an automated CI pipeline with GitHub Actions: code linting, automated testing, artifact generation.
Automating Docker build, tag, and push to container registries (Docker Hub / AWS ECR) via GitHub Actions CI.
Automated SSH deployment from GitHub Actions to EC2 Linux server upon push to main branch.
Setting up Jenkins master-agent architecture, installing plugins, creating Freestyle and Pipeline jobs.
Writing declarative Jenkinsfile, multi-stage automated build, test, and container deployment pipeline.
Developer → Git Push → GitHub Actions CI Trigger → Automated Testing → Docker Image Build → Push to ECR → Deploy to Server.
Project: Automated Docker Build & CI/CD Pipeline
Developer → Git Push → GitHub Actions CI Trigger → Automated Testing → Docker Multi-Stage Image Build → Push to Container Registry (ECR) → Deploy to Server.
Kubernetes architecture, Pods, Deployments, Services, ConfigMaps, Secrets, Ingress, Persistent Volumes, Helm, AWS EKS, Prometheus, Grafana, and Capstone.
Why Kubernetes? Managing container lifecycles, service discovery, self-healing, rolling updates.
Control plane components (API Server, etcd, Scheduler, Controller Manager) vs Worker Node components (Kubelet, Kube-proxy, Container Runtime).
Kubectl CLI commands, writing Pod YAML manifests, multi-container pods, pod lifecycle and health probes (liveness, readiness).
Declarative deployments, scaling replicas, rolling updates with zero downtime, rollback to previous revisions.
Service abstraction, ClusterIP (internal), NodePort (external node access), LoadBalancer (cloud provider load balancer).
Decoupling configuration from container images, base64-encoded Secrets, injecting configs via environment variables and volume mounts.
HTTP/HTTPS path-based and domain-based routing, setting up Nginx Ingress Controller, TLS certificate termination.
StorageClasses, PersistentVolumes (PV), PersistentVolumeClaims (PVC), attaching AWS EBS storage to stateful pods.
Helm chart structure, templates, values.yaml, installing charts, managing releases, creating custom Helm charts.
Introduction to Amazon Elastic Kubernetes Service (EKS), eksctl CLI, provisioning managed node groups.
Deploying a production microservices application to AWS EKS cluster with LoadBalancer Service.
Prometheus architecture, pull-based metrics collection, scraping Kubernetes cluster metrics and node exporters.
Connecting Grafana to Prometheus, importing Kubernetes cluster monitoring dashboards, configuring alerting rules.
Container vulnerability scanning (Trivy), Kubernetes RBAC, least privilege service accounts, secure secret management.
End-to-End Enterprise Deployment: GitHub → GitHub Actions CI → Docker Image Push (ECR) → Helm Deploy to AWS EKS → Route 53 DNS + Prometheus/Grafana Monitoring.
Course 1 Capstone: Enterprise Cloud & Kubernetes Platform on AWS
GitHub → GitHub Actions CI → Docker Build → AWS ECR → Helm Chart Deployment to AWS EKS Cluster → Application Load Balancer → Prometheus & Grafana Live Monitoring.