DevOps AcademyLearn the delivery system
190 lessons published

Stage 05 · Continuous Integration & Delivery

GitLab CI/CD Complete Course

Master GitLab CI/CD from pipeline fundamentals and runners through DAGs, reusable components, security scanning, cloud identity, deployments, governance, optimization, and production operations.

Browse curriculum View all chapters
GLCI
38chapters
190lessons
Intermediatestarting level
Hands-onlearning mode
Course state190 published · 0 planned

Course brief

A production-grade GitLab CI/CD curriculum for secure, scalable software delivery.

This course is organized as a progressive operational curriculum from fundamentals through advanced production practice. Lesson files are reserved with stable repository paths so content can be added later without changing URLs or navigation.

By the end

You will be able to

  • Design maintainable pipelines with jobs, rules, DAGs, reusable components, and child pipelines
  • Operate GitLab Runner securely across shell, Docker, Kubernetes, and autoscaled environments
  • Build test, package, release, environment, and deployment workflows with traceable artifacts
  • Integrate security scanning, SBOMs, OIDC, policy controls, and software-supply-chain safeguards
  • Troubleshoot, optimize, govern, and scale CI/CD across large teams and enterprise estates

Complete syllabus

38 chapters in prerequisite order.

The structure goes beyond command references and feature lists. It includes architecture, security, reliability, troubleshooting, automation, governance, performance, and realistic production workflows.

01

Chapter 1

Continuous Integration and Delivery Foundations, GitLab Pipeline Architecture, and Delivery Flow

5 lessons
01
Continuous Integration and Delivery Foundations, GitLab Pipeline Architecture, and Delivery Flow: Concepts, Architecture, and Mental Model Published lesson
Open 02
Continuous Integration and Delivery Foundations, GitLab Pipeline Architecture, and Delivery Flow: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Continuous Integration and Delivery Foundations, GitLab Pipeline Architecture, and Delivery Flow: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Continuous Integration and Delivery Foundations, GitLab Pipeline Architecture, and Delivery Flow: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Continuous Integration and Delivery Foundations, GitLab Pipeline Architecture, and Delivery Flow Published lesson
Open
02

Chapter 2

.gitlab-ci.yml Structure, Pipeline Compilation, Keywords, Defaults, and Configuration Validation

5 lessons
01
.gitlab-ci.yml Structure, Pipeline Compilation, Keywords, Defaults, and Configuration Validation: Concepts, Architecture, and Mental Model Published lesson
Open 02
.gitlab-ci.yml Structure, Pipeline Compilation, Keywords, Defaults, and Configuration Validation: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
.gitlab-ci.yml Structure, Pipeline Compilation, Keywords, Defaults, and Configuration Validation: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
.gitlab-ci.yml Structure, Pipeline Compilation, Keywords, Defaults, and Configuration Validation: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — .gitlab-ci.yml Structure, Pipeline Compilation, Keywords, Defaults, and Configuration Validation Published lesson
Open
03

Chapter 3

Jobs, Stages, Scripts, Images, Services, before_script, after_script, and Exit Behavior

5 lessons
01
Jobs, Stages, Scripts, Images, Services, before_script, after_script, and Exit Behavior: Concepts, Architecture, and Mental Model Published lesson
Open 02
Jobs, Stages, Scripts, Images, Services, before_script, after_script, and Exit Behavior: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Jobs, Stages, Scripts, Images, Services, before_script, after_script, and Exit Behavior: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Jobs, Stages, Scripts, Images, Services, before_script, after_script, and Exit Behavior: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Jobs, Stages, Scripts, Images, Services, before_script, after_script, and Exit Behavior Published lesson
Open
04

Chapter 4

GitLab Runner Architecture, Registration, Runner Managers, Job Execution, and Lifecycle

5 lessons
01
GitLab Runner Architecture, Registration, Runner Managers, Job Execution, and Lifecycle: Concepts, Architecture, and Mental Model Published lesson
Open 02
GitLab Runner Architecture, Registration, Runner Managers, Job Execution, and Lifecycle: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
GitLab Runner Architecture, Registration, Runner Managers, Job Execution, and Lifecycle: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
GitLab Runner Architecture, Registration, Runner Managers, Job Execution, and Lifecycle: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — GitLab Runner Architecture, Registration, Runner Managers, Job Execution, and Lifecycle Published lesson
Open
05

Chapter 5

Runner Executors: Shell, Docker, Docker Autoscaler, Kubernetes, SSH, and Custom Execution Models

5 lessons
01
Runner Executors: Shell, Docker, Docker Autoscaler, Kubernetes, SSH, and Custom Execution Models: Concepts, Architecture, and Mental Model Published lesson
Open 02
Runner Executors: Shell, Docker, Docker Autoscaler, Kubernetes, SSH, and Custom Execution Models: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Runner Executors: Shell, Docker, Docker Autoscaler, Kubernetes, SSH, and Custom Execution Models: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Runner Executors: Shell, Docker, Docker Autoscaler, Kubernetes, SSH, and Custom Execution Models: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Runner Executors: Shell, Docker, Docker Autoscaler, Kubernetes, SSH, and Custom Execution Models Published lesson
Open
06

Chapter 6

CI/CD Variables, Predefined Variables, File Variables, Masking, Protection, Expansion, and Precedence

5 lessons
01
CI/CD Variables, Predefined Variables, File Variables, Masking, Protection, Expansion, and Precedence: Concepts, Architecture, and Mental Model Published lesson
Open 02
CI/CD Variables, Predefined Variables, File Variables, Masking, Protection, Expansion, and Precedence: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
CI/CD Variables, Predefined Variables, File Variables, Masking, Protection, Expansion, and Precedence: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
CI/CD Variables, Predefined Variables, File Variables, Masking, Protection, Expansion, and Precedence: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — CI/CD Variables, Predefined Variables, File Variables, Masking, Protection, Expansion, and Precedence Published lesson
Open
07

Chapter 7

Secrets Management, External Secret Providers, Protected Data, Rotation, and Least-Privilege Patterns

5 lessons
01
Secrets Management, External Secret Providers, Protected Data, Rotation, and Least-Privilege Patterns: Concepts, Architecture, and Mental Model Published lesson
Open 02
Secrets Management, External Secret Providers, Protected Data, Rotation, and Least-Privilege Patterns: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Secrets Management, External Secret Providers, Protected Data, Rotation, and Least-Privilege Patterns: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Secrets Management, External Secret Providers, Protected Data, Rotation, and Least-Privilege Patterns: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Secrets Management, External Secret Providers, Protected Data, Rotation, and Least-Privilege Patterns Published lesson
Open
08

Chapter 8

workflow:rules, Job rules, if Expressions, changes, exists, Pipeline Sources, and Conditional Execution

5 lessons
01
workflow:rules, Job rules, if Expressions, changes, exists, Pipeline Sources, and Conditional Execution: Concepts, Architecture, and Mental Model Published lesson
Open 02
workflow:rules, Job rules, if Expressions, changes, exists, Pipeline Sources, and Conditional Execution: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
workflow:rules, Job rules, if Expressions, changes, exists, Pipeline Sources, and Conditional Execution: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
workflow:rules, Job rules, if Expressions, changes, exists, Pipeline Sources, and Conditional Execution: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — workflow:rules, Job rules, if Expressions, changes, exists, Pipeline Sources, and Conditional Execution Published lesson
Open
09

Chapter 9

Stages, needs DAGs, Dependency Graphs, Early Execution, and Pipeline Critical-Path Design

5 lessons
01
Stages, needs DAGs, Dependency Graphs, Early Execution, and Pipeline Critical-Path Design: Concepts, Architecture, and Mental Model Published lesson
Open 02
Stages, needs DAGs, Dependency Graphs, Early Execution, and Pipeline Critical-Path Design: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Stages, needs DAGs, Dependency Graphs, Early Execution, and Pipeline Critical-Path Design: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Stages, needs DAGs, Dependency Graphs, Early Execution, and Pipeline Critical-Path Design: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Stages, needs DAGs, Dependency Graphs, Early Execution, and Pipeline Critical-Path Design Published lesson
Open
10

Chapter 10

Artifacts, Reports, Retention, Dependencies, needs:artifacts, and Cross-Job Data Flow

5 lessons
01
Artifacts, Reports, Retention, Dependencies, needs:artifacts, and Cross-Job Data Flow: Concepts, Architecture, and Mental Model Published lesson
Open 02
Artifacts, Reports, Retention, Dependencies, needs:artifacts, and Cross-Job Data Flow: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Artifacts, Reports, Retention, Dependencies, needs:artifacts, and Cross-Job Data Flow: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Artifacts, Reports, Retention, Dependencies, needs:artifacts, and Cross-Job Data Flow: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Artifacts, Reports, Retention, Dependencies, needs:artifacts, and Cross-Job Data Flow Published lesson
Open
11

Chapter 11

Caches, Cache Keys, Fallback Keys, Distributed Cache, Dependency Reuse, and Cache Correctness

5 lessons
01
Caches, Cache Keys, Fallback Keys, Distributed Cache, Dependency Reuse, and Cache Correctness: Concepts, Architecture, and Mental Model Published lesson
Open 02
Caches, Cache Keys, Fallback Keys, Distributed Cache, Dependency Reuse, and Cache Correctness: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Caches, Cache Keys, Fallback Keys, Distributed Cache, Dependency Reuse, and Cache Correctness: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Caches, Cache Keys, Fallback Keys, Distributed Cache, Dependency Reuse, and Cache Correctness: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Caches, Cache Keys, Fallback Keys, Distributed Cache, Dependency Reuse, and Cache Correctness Published lesson
Open
12

Chapter 12

YAML Reuse with include, extends, Anchors, !reference, Hidden Jobs, and Template Architecture

5 lessons
01
YAML Reuse with include, extends, Anchors, !reference, Hidden Jobs, and Template Architecture: Concepts, Architecture, and Mental Model Published lesson
Open 02
YAML Reuse with include, extends, Anchors, !reference, Hidden Jobs, and Template Architecture: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
YAML Reuse with include, extends, Anchors, !reference, Hidden Jobs, and Template Architecture: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
YAML Reuse with include, extends, Anchors, !reference, Hidden Jobs, and Template Architecture: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — YAML Reuse with include, extends, Anchors, !reference, Hidden Jobs, and Template Architecture Published lesson
Open
13

Chapter 13

CI/CD Components, Component Catalog, inputs, Versioned Reuse, and Organization-Wide Pipeline Building Blocks

5 lessons
01
CI/CD Components, Component Catalog, inputs, Versioned Reuse, and Organization-Wide Pipeline Building Blocks: Concepts, Architecture, and Mental Model Published lesson
Open 02
CI/CD Components, Component Catalog, inputs, Versioned Reuse, and Organization-Wide Pipeline Building Blocks: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
CI/CD Components, Component Catalog, inputs, Versioned Reuse, and Organization-Wide Pipeline Building Blocks: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
CI/CD Components, Component Catalog, inputs, Versioned Reuse, and Organization-Wide Pipeline Building Blocks: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — CI/CD Components, Component Catalog, inputs, Versioned Reuse, and Organization-Wide Pipeline Building Blocks Published lesson
Open
14

Chapter 14

Parent-Child Pipelines, Dynamic Child Pipelines, Generated Configuration, and Monorepo Decomposition

5 lessons
01
Parent-Child Pipelines, Dynamic Child Pipelines, Generated Configuration, and Monorepo Decomposition: Concepts, Architecture, and Mental Model Published lesson
Open 02
Parent-Child Pipelines, Dynamic Child Pipelines, Generated Configuration, and Monorepo Decomposition: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Parent-Child Pipelines, Dynamic Child Pipelines, Generated Configuration, and Monorepo Decomposition: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Parent-Child Pipelines, Dynamic Child Pipelines, Generated Configuration, and Monorepo Decomposition: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Parent-Child Pipelines, Dynamic Child Pipelines, Generated Configuration, and Monorepo Decomposition Published lesson
Open
15

Chapter 15

Multi-Project Pipelines, Downstream Triggers, Cross-Project Dependencies, and Platform-Oriented Delivery

5 lessons
01
Multi-Project Pipelines, Downstream Triggers, Cross-Project Dependencies, and Platform-Oriented Delivery: Concepts, Architecture, and Mental Model Published lesson
Open 02
Multi-Project Pipelines, Downstream Triggers, Cross-Project Dependencies, and Platform-Oriented Delivery: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Multi-Project Pipelines, Downstream Triggers, Cross-Project Dependencies, and Platform-Oriented Delivery: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Multi-Project Pipelines, Downstream Triggers, Cross-Project Dependencies, and Platform-Oriented Delivery: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Multi-Project Pipelines, Downstream Triggers, Cross-Project Dependencies, and Platform-Oriented Delivery Published lesson
Open
16

Chapter 16

Merge Request Pipelines, Merged Results Pipelines, Merge Trains, and Pre-Merge Validation

5 lessons
01
Merge Request Pipelines, Merged Results Pipelines, Merge Trains, and Pre-Merge Validation: Concepts, Architecture, and Mental Model Published lesson
Open 02
Merge Request Pipelines, Merged Results Pipelines, Merge Trains, and Pre-Merge Validation: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Merge Request Pipelines, Merged Results Pipelines, Merge Trains, and Pre-Merge Validation: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Merge Request Pipelines, Merged Results Pipelines, Merge Trains, and Pre-Merge Validation: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Merge Request Pipelines, Merged Results Pipelines, Merge Trains, and Pre-Merge Validation Published lesson
Open
17

Chapter 17

Parallel Jobs, parallel:matrix, Test Sharding, Fan-Out/Fan-In, and High-Throughput Pipeline Design

5 lessons
01
Parallel Jobs, parallel:matrix, Test Sharding, Fan-Out/Fan-In, and High-Throughput Pipeline Design: Concepts, Architecture, and Mental Model Published lesson
Open 02
Parallel Jobs, parallel:matrix, Test Sharding, Fan-Out/Fan-In, and High-Throughput Pipeline Design: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Parallel Jobs, parallel:matrix, Test Sharding, Fan-Out/Fan-In, and High-Throughput Pipeline Design: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Parallel Jobs, parallel:matrix, Test Sharding, Fan-Out/Fan-In, and High-Throughput Pipeline Design: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Parallel Jobs, parallel:matrix, Test Sharding, Fan-Out/Fan-In, and High-Throughput Pipeline Design Published lesson
Open
18

Chapter 18

Concurrency, resource_group, interruptible Jobs, Retry Policies, Timeouts, and Duplicate-Pipeline Control

5 lessons
01
Concurrency, resource_group, interruptible Jobs, Retry Policies, Timeouts, and Duplicate-Pipeline Control: Concepts, Architecture, and Mental Model Published lesson
Open 02
Concurrency, resource_group, interruptible Jobs, Retry Policies, Timeouts, and Duplicate-Pipeline Control: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Concurrency, resource_group, interruptible Jobs, Retry Policies, Timeouts, and Duplicate-Pipeline Control: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Concurrency, resource_group, interruptible Jobs, Retry Policies, Timeouts, and Duplicate-Pipeline Control: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Concurrency, resource_group, interruptible Jobs, Retry Policies, Timeouts, and Duplicate-Pipeline Control Published lesson
Open
19

Chapter 19

Environments, Deployments, Environment Tiers, URLs, Deployment History, and Operational Traceability

5 lessons
01
Environments, Deployments, Environment Tiers, URLs, Deployment History, and Operational Traceability: Concepts, Architecture, and Mental Model Published lesson
Open 02
Environments, Deployments, Environment Tiers, URLs, Deployment History, and Operational Traceability: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Environments, Deployments, Environment Tiers, URLs, Deployment History, and Operational Traceability: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Environments, Deployments, Environment Tiers, URLs, Deployment History, and Operational Traceability: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Environments, Deployments, Environment Tiers, URLs, Deployment History, and Operational Traceability Published lesson
Open
20

Chapter 20

Review Apps, Dynamic Environments, Ephemeral Test Stacks, Route Maps, and Environment Cleanup

5 lessons
01
Review Apps, Dynamic Environments, Ephemeral Test Stacks, Route Maps, and Environment Cleanup: Concepts, Architecture, and Mental Model Published lesson
Open 02
Review Apps, Dynamic Environments, Ephemeral Test Stacks, Route Maps, and Environment Cleanup: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Review Apps, Dynamic Environments, Ephemeral Test Stacks, Route Maps, and Environment Cleanup: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Review Apps, Dynamic Environments, Ephemeral Test Stacks, Route Maps, and Environment Cleanup: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Review Apps, Dynamic Environments, Ephemeral Test Stacks, Route Maps, and Environment Cleanup Published lesson
Open
21

Chapter 21

Protected Environments, Deployment Approvals, Freeze Windows, Manual Gates, and Separation of Duties

5 lessons
01
Protected Environments, Deployment Approvals, Freeze Windows, Manual Gates, and Separation of Duties: Concepts, Architecture, and Mental Model Published lesson
Open 02
Protected Environments, Deployment Approvals, Freeze Windows, Manual Gates, and Separation of Duties: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Protected Environments, Deployment Approvals, Freeze Windows, Manual Gates, and Separation of Duties: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Protected Environments, Deployment Approvals, Freeze Windows, Manual Gates, and Separation of Duties: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Protected Environments, Deployment Approvals, Freeze Windows, Manual Gates, and Separation of Duties Published lesson
Open
22

Chapter 22

Tags, Releases, Release CLI, Changelogs, Evidence, Asset Links, and Release-Orchestration Pipelines

5 lessons
01
Tags, Releases, Release CLI, Changelogs, Evidence, Asset Links, and Release-Orchestration Pipelines: Concepts, Architecture, and Mental Model Published lesson
Open 02
Tags, Releases, Release CLI, Changelogs, Evidence, Asset Links, and Release-Orchestration Pipelines: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Tags, Releases, Release CLI, Changelogs, Evidence, Asset Links, and Release-Orchestration Pipelines: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Tags, Releases, Release CLI, Changelogs, Evidence, Asset Links, and Release-Orchestration Pipelines: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Tags, Releases, Release CLI, Changelogs, Evidence, Asset Links, and Release-Orchestration Pipelines Published lesson
Open
23

Chapter 23

Container Registry, Package Registry, Generic Packages, Dependency Proxy, and Artifact Promotion

5 lessons
01
Container Registry, Package Registry, Generic Packages, Dependency Proxy, and Artifact Promotion: Concepts, Architecture, and Mental Model Published lesson
Open 02
Container Registry, Package Registry, Generic Packages, Dependency Proxy, and Artifact Promotion: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Container Registry, Package Registry, Generic Packages, Dependency Proxy, and Artifact Promotion: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Container Registry, Package Registry, Generic Packages, Dependency Proxy, and Artifact Promotion: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Container Registry, Package Registry, Generic Packages, Dependency Proxy, and Artifact Promotion Published lesson
Open
24

Chapter 24

Test Reports, Coverage, JUnit, Code Quality, Browser Performance, Accessibility, and Pipeline Feedback

5 lessons
01
Test Reports, Coverage, JUnit, Code Quality, Browser Performance, Accessibility, and Pipeline Feedback: Concepts, Architecture, and Mental Model Published lesson
Open 02
Test Reports, Coverage, JUnit, Code Quality, Browser Performance, Accessibility, and Pipeline Feedback: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Test Reports, Coverage, JUnit, Code Quality, Browser Performance, Accessibility, and Pipeline Feedback: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Test Reports, Coverage, JUnit, Code Quality, Browser Performance, Accessibility, and Pipeline Feedback: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Test Reports, Coverage, JUnit, Code Quality, Browser Performance, Accessibility, and Pipeline Feedback Published lesson
Open
25

Chapter 25

SAST, Dependency Scanning, Secret Detection, Container Scanning, DAST, IaC Scanning, and Security Gates

5 lessons
01
SAST, Dependency Scanning, Secret Detection, Container Scanning, DAST, IaC Scanning, and Security Gates: Concepts, Architecture, and Mental Model Published lesson
Open 02
SAST, Dependency Scanning, Secret Detection, Container Scanning, DAST, IaC Scanning, and Security Gates: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
SAST, Dependency Scanning, Secret Detection, Container Scanning, DAST, IaC Scanning, and Security Gates: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
SAST, Dependency Scanning, Secret Detection, Container Scanning, DAST, IaC Scanning, and Security Gates: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — SAST, Dependency Scanning, Secret Detection, Container Scanning, DAST, IaC Scanning, and Security Gates Published lesson
Open
26

Chapter 26

SBOM Generation, Dependency Lists, Vulnerability Reports, Policy Evaluation, and Supply-Chain Evidence

5 lessons
01
SBOM Generation, Dependency Lists, Vulnerability Reports, Policy Evaluation, and Supply-Chain Evidence: Concepts, Architecture, and Mental Model Published lesson
Open 02
SBOM Generation, Dependency Lists, Vulnerability Reports, Policy Evaluation, and Supply-Chain Evidence: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
SBOM Generation, Dependency Lists, Vulnerability Reports, Policy Evaluation, and Supply-Chain Evidence: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
SBOM Generation, Dependency Lists, Vulnerability Reports, Policy Evaluation, and Supply-Chain Evidence: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — SBOM Generation, Dependency Lists, Vulnerability Reports, Policy Evaluation, and Supply-Chain Evidence Published lesson
Open
27

Chapter 27

ID Tokens, OIDC Workload Identity, Cloud Federation, Vault Authentication, and Secretless Deployments

5 lessons
01
ID Tokens, OIDC Workload Identity, Cloud Federation, Vault Authentication, and Secretless Deployments: Concepts, Architecture, and Mental Model Published lesson
Open 02
ID Tokens, OIDC Workload Identity, Cloud Federation, Vault Authentication, and Secretless Deployments: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
ID Tokens, OIDC Workload Identity, Cloud Federation, Vault Authentication, and Secretless Deployments: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
ID Tokens, OIDC Workload Identity, Cloud Federation, Vault Authentication, and Secretless Deployments: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — ID Tokens, OIDC Workload Identity, Cloud Federation, Vault Authentication, and Secretless Deployments Published lesson
Open
28

Chapter 28

Kubernetes Agent, Cluster Access, GitOps-Oriented Delivery, Kubernetes Deployments, and Environment Integration

5 lessons
01
Kubernetes Agent, Cluster Access, GitOps-Oriented Delivery, Kubernetes Deployments, and Environment Integration: Concepts, Architecture, and Mental Model Published lesson
Open 02
Kubernetes Agent, Cluster Access, GitOps-Oriented Delivery, Kubernetes Deployments, and Environment Integration: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Kubernetes Agent, Cluster Access, GitOps-Oriented Delivery, Kubernetes Deployments, and Environment Integration: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Kubernetes Agent, Cluster Access, GitOps-Oriented Delivery, Kubernetes Deployments, and Environment Integration: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Kubernetes Agent, Cluster Access, GitOps-Oriented Delivery, Kubernetes Deployments, and Environment Integration Published lesson
Open
29

Chapter 29

Infrastructure-as-Code Pipelines, Terraform/OpenTofu Workflows, Plan Reviews, State Safety, and Drift Controls

5 lessons
01
Infrastructure-as-Code Pipelines, Terraform/OpenTofu Workflows, Plan Reviews, State Safety, and Drift Controls: Concepts, Architecture, and Mental Model Published lesson
Open 02
Infrastructure-as-Code Pipelines, Terraform/OpenTofu Workflows, Plan Reviews, State Safety, and Drift Controls: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Infrastructure-as-Code Pipelines, Terraform/OpenTofu Workflows, Plan Reviews, State Safety, and Drift Controls: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Infrastructure-as-Code Pipelines, Terraform/OpenTofu Workflows, Plan Reviews, State Safety, and Drift Controls: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Infrastructure-as-Code Pipelines, Terraform/OpenTofu Workflows, Plan Reviews, State Safety, and Drift Controls Published lesson
Open
30

Chapter 30

Runner Fleets, Autoscaling, Docker Machine Migration, Kubernetes Runners, Ephemeral Workers, and Capacity Planning

5 lessons
01
Runner Fleets, Autoscaling, Docker Machine Migration, Kubernetes Runners, Ephemeral Workers, and Capacity Planning: Concepts, Architecture, and Mental Model Published lesson
Open 02
Runner Fleets, Autoscaling, Docker Machine Migration, Kubernetes Runners, Ephemeral Workers, and Capacity Planning: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Runner Fleets, Autoscaling, Docker Machine Migration, Kubernetes Runners, Ephemeral Workers, and Capacity Planning: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Runner Fleets, Autoscaling, Docker Machine Migration, Kubernetes Runners, Ephemeral Workers, and Capacity Planning: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Runner Fleets, Autoscaling, Docker Machine Migration, Kubernetes Runners, Ephemeral Workers, and Capacity Planning Published lesson
Open
31

Chapter 31

Runner Security, Isolation Boundaries, Privileged Containers, Fork Pipelines, Untrusted Code, and Threat Modeling

5 lessons
01
Runner Security, Isolation Boundaries, Privileged Containers, Fork Pipelines, Untrusted Code, and Threat Modeling: Concepts, Architecture, and Mental Model Published lesson
Open 02
Runner Security, Isolation Boundaries, Privileged Containers, Fork Pipelines, Untrusted Code, and Threat Modeling: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Runner Security, Isolation Boundaries, Privileged Containers, Fork Pipelines, Untrusted Code, and Threat Modeling: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Runner Security, Isolation Boundaries, Privileged Containers, Fork Pipelines, Untrusted Code, and Threat Modeling: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Runner Security, Isolation Boundaries, Privileged Containers, Fork Pipelines, Untrusted Code, and Threat Modeling Published lesson
Open
32

Chapter 32

Pipeline Supply-Chain Security, Dependency Pinning, Image Digests, Signing, Provenance, and Trusted Builders

5 lessons
01
Pipeline Supply-Chain Security, Dependency Pinning, Image Digests, Signing, Provenance, and Trusted Builders: Concepts, Architecture, and Mental Model Published lesson
Open 02
Pipeline Supply-Chain Security, Dependency Pinning, Image Digests, Signing, Provenance, and Trusted Builders: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Pipeline Supply-Chain Security, Dependency Pinning, Image Digests, Signing, Provenance, and Trusted Builders: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Pipeline Supply-Chain Security, Dependency Pinning, Image Digests, Signing, Provenance, and Trusted Builders: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Pipeline Supply-Chain Security, Dependency Pinning, Image Digests, Signing, Provenance, and Trusted Builders Published lesson
Open
33

Chapter 33

Pipeline Schedules, Trigger Tokens, Pipeline API, Webhooks, ChatOps, and Event-Driven Automation

5 lessons
01
Pipeline Schedules, Trigger Tokens, Pipeline API, Webhooks, ChatOps, and Event-Driven Automation: Concepts, Architecture, and Mental Model Published lesson
Open 02
Pipeline Schedules, Trigger Tokens, Pipeline API, Webhooks, ChatOps, and Event-Driven Automation: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Pipeline Schedules, Trigger Tokens, Pipeline API, Webhooks, ChatOps, and Event-Driven Automation: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Pipeline Schedules, Trigger Tokens, Pipeline API, Webhooks, ChatOps, and Event-Driven Automation: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Pipeline Schedules, Trigger Tokens, Pipeline API, Webhooks, ChatOps, and Event-Driven Automation Published lesson
Open
34

Chapter 34

CI/CD Analytics, Job Logs, Runner Metrics, Queue Time, Failure Taxonomy, and Observability

5 lessons
01
CI/CD Analytics, Job Logs, Runner Metrics, Queue Time, Failure Taxonomy, and Observability: Concepts, Architecture, and Mental Model Published lesson
Open 02
CI/CD Analytics, Job Logs, Runner Metrics, Queue Time, Failure Taxonomy, and Observability: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
CI/CD Analytics, Job Logs, Runner Metrics, Queue Time, Failure Taxonomy, and Observability: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
CI/CD Analytics, Job Logs, Runner Metrics, Queue Time, Failure Taxonomy, and Observability: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — CI/CD Analytics, Job Logs, Runner Metrics, Queue Time, Failure Taxonomy, and Observability Published lesson
Open
35

Chapter 35

Pipeline Performance, Cost Control, Caching Strategy, Queue Reduction, Selective Execution, and Optimization

5 lessons
01
Pipeline Performance, Cost Control, Caching Strategy, Queue Reduction, Selective Execution, and Optimization: Concepts, Architecture, and Mental Model Published lesson
Open 02
Pipeline Performance, Cost Control, Caching Strategy, Queue Reduction, Selective Execution, and Optimization: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Pipeline Performance, Cost Control, Caching Strategy, Queue Reduction, Selective Execution, and Optimization: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Pipeline Performance, Cost Control, Caching Strategy, Queue Reduction, Selective Execution, and Optimization: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Pipeline Performance, Cost Control, Caching Strategy, Queue Reduction, Selective Execution, and Optimization Published lesson
Open
36

Chapter 36

Compliance Pipelines, Pipeline Execution Policies, Governance, Audit Evidence, and Enterprise Controls

5 lessons
01
Compliance Pipelines, Pipeline Execution Policies, Governance, Audit Evidence, and Enterprise Controls: Concepts, Architecture, and Mental Model Published lesson
Open 02
Compliance Pipelines, Pipeline Execution Policies, Governance, Audit Evidence, and Enterprise Controls: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Compliance Pipelines, Pipeline Execution Policies, Governance, Audit Evidence, and Enterprise Controls: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Compliance Pipelines, Pipeline Execution Policies, Governance, Audit Evidence, and Enterprise Controls: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Compliance Pipelines, Pipeline Execution Policies, Governance, Audit Evidence, and Enterprise Controls Published lesson
Open
37

Chapter 37

Pipeline Troubleshooting, YAML Debugging, Runner Failures, Network Issues, Flaky Jobs, and Recovery Playbooks

5 lessons
01
Pipeline Troubleshooting, YAML Debugging, Runner Failures, Network Issues, Flaky Jobs, and Recovery Playbooks: Concepts, Architecture, and Mental Model Published lesson
Open 02
Pipeline Troubleshooting, YAML Debugging, Runner Failures, Network Issues, Flaky Jobs, and Recovery Playbooks: Guided Hands-On Workflow and Core Operations Published lesson
Open 03
Pipeline Troubleshooting, YAML Debugging, Runner Failures, Network Issues, Flaky Jobs, and Recovery Playbooks: Configuration, Design Choices, and Tradeoffs Published lesson
Open 04
Pipeline Troubleshooting, YAML Debugging, Runner Failures, Network Issues, Flaky Jobs, and Recovery Playbooks: Diagnostics, Failure Modes, Security, and Performance Published lesson
Open 05
Checkpoint Lab — Pipeline Troubleshooting, YAML Debugging, Runner Failures, Network Issues, Flaky Jobs, and Recovery Playbooks Published lesson
Open
38

Chapter 38

Production Capstone: Build, Secure, Scale, Observe, and Govern a Complete GitLab Delivery Platform

5 lessons
01
Production Capstone: Build, Secure, Scale, Observe, and Govern a Complete GitLab Delivery Platform: Requirements, Constraints, and Target Architecture Published lesson
Open 02
Production Capstone: Build, Secure, Scale, Observe, and Govern a Complete GitLab Delivery Platform: Implementation and Automation Build-Out Published lesson
Open 03
Production Capstone: Build, Secure, Scale, Observe, and Govern a Complete GitLab Delivery Platform: Security, Governance, and Reliability Validation Published lesson
Open 04
Production Capstone: Build, Secure, Scale, Observe, and Govern a Complete GitLab Delivery Platform: Failure Injection, Troubleshooting, and Recovery Drill Published lesson
Open 05
Production Capstone: Build, Secure, Scale, Observe, and Govern a Complete GitLab Delivery Platform: Final Operational Review and Handoff Published lesson
Open

Keep the academy open

Support free, practical DevOps education.

Every lesson is designed to remain readable in a browser, downloadable from GitHub, and usable without a paid learning platform. Contributions help expand and maintain the curriculum.

Ethereum / ERC-20
0x716c4Ab160C4B66F31a28AE2448BfF68fc3a2ef0Send only Ethereum/ERC-20 compatible assets to this address.