DevOps Cookbook 🛠️

        mindmap
  root((DevOps Cookbook))
    Container
      Docker
      Podman
      Registry
    Orchestration
      Kubernetes
      kubectl
      Helm
      Operator
    Infrastructure
      Minikube
      etcd
      Ingress
      Service Mesh
    Tech Stacks
      LNMP/LNPP
      ELK Stack
      Go + K8s
      Python + K8s
      Java + K8s
    CI/CD
      GitLab CI
      GitHub Actions
      Jenkins
      ArgoCD
    

A practical, recipe-driven guide to modern DevOps tools and tech stacks. Each chapter provides hands-on commands, configuration snippets, and real-world patterns you can copy-paste into your projects.

🇨🇳 中文版

How to Use This Book

• Part 1: Container fundamentals — Docker, Podman, image building, registry

• Part 2: Kubernetes core — architecture, kubectl, workloads, networking, storage

• Part 3: K8s ecosystem — Helm, Operators, Ingress, etcd, monitoring

• Part 4: Popular tech stacks — LNMP, ELK, Go/Python/Java on K8s

• Part 5: CI/CD & GitOps — pipelines, ArgoCD, best practices

Part 1: Containers

• 1. Docker Basics
  • Architecture
  • Installation
  • Core Concepts
  • Container Lifecycle
  • Essential Commands
  • Practical Examples
  • Image Layers
  • Cleanup
• 2. Dockerfile Best Practices
  • Dockerfile Instructions Reference
  • Multi-stage Build
  • Layer Caching Optimization
  • .dockerignore
  • Security Best Practices
  • Size Reduction Tips
  • HEALTHCHECK
• 3. Docker Compose Orchestration
  • Compose File Structure
  • Essential Commands
  • Environment Variables
  • Profiles
  • LNMP Stack Example
  • Microservice Example
  • Tips
• 4. Podman Container Engine
  • Podman vs Docker
  • Installation
  • Basic Commands (Docker-compatible)
  • Rootless Containers
  • Pods (K8s-like grouping)
  • Generate Kubernetes YAML
  • Systemd Integration (Quadlet)
  • Podman Compose
  • Migration from Docker to Podman
• 5. Container Registry
  • Registry Options
  • Image Tagging Strategies
  • Docker Hub
  • Self-hosted Registry (Docker)
  • Harbor Setup
  • Image Scanning
  • Image Signing (Cosign)
  • AWS ECR
  • GitHub Container Registry

Part 2: Kubernetes Core

• 6. Kubernetes Architecture
  • Control Plane Components
  • Worker Node Components
  • Core API Resources
  • Namespaces
  • Labels and Selectors
  • Annotations
  • Cluster Communication
• 7. Minikube Local Development
  • Installation
  • Cluster Management
  • Driver Options
  • Addons
  • Accessing Services
  • Using Local Docker Images
  • Resource Configuration
  • Alternatives Comparison
• 8. kubectl Command Reference
  • Configuration
  • CRUD Operations
  • Debugging
  • Resource Management
  • Cheat Sheet
  • Productivity Tips
• 9. Pods and Workloads
  • Pod Lifecycle
  • Pod Spec
  • Deployment
  • StatefulSet
  • DaemonSet
  • Job and CronJob
  • QoS Classes
  • Pod Disruption Budget
• 10. Services and Networking
  • Service Types
  • DNS in Kubernetes
  • NetworkPolicy
  • Service Discovery Patterns
  • Multi-port Service
• 11. Storage Management
  • Volume Types
  • emptyDir
  • PersistentVolume and PersistentVolumeClaim
  • Access Modes
  • StorageClass (Dynamic Provisioning)
  • NFS Storage
  • Volume Snapshots
• 12. ConfigMap and Secret
  • ConfigMap
  • Secret
  • Immutable ConfigMaps and Secrets
  • External Secrets Management

Part 3: K8s Ecosystem

• 13. Helm Package Manager
  • Helm 3 Architecture
  • Essential Commands
  • Chart Structure
  • Hooks
  • Create a New Chart
• 14. Ingress Controller
  • Ingress Controllers
  • Basic Ingress
  • TLS with cert-manager
  • Multi-service Routing
  • Useful Annotations
  • Canary Deployment with Ingress
• 15. Kubernetes Operators
  • Operator Pattern
  • Custom Resource Definition (CRD)
  • Custom Resource
  • Operator SDK
  • Popular Operators
  • Operator Lifecycle Manager (OLM)
• 16. etcd Distributed Storage
  • Overview
  • etcdctl Commands
  • Backup and Restore
  • etcd Cluster Setup (Docker Compose)
  • Performance Tuning
• 17. Monitoring Stack
  • Prometheus Architecture
  • Install with Helm (kube-prometheus-stack)
  • Metrics Types
  • PromQL Basics
  • ServiceMonitor
  • Alerting Rules
  • Access Dashboards
  • Useful Grafana Dashboard IDs
• 18. Log Collection
  • Logging Architecture Patterns
  • Fluent Bit (Lightweight)
  • Loki + Promtail (Grafana Stack)
  • EFK Stack on K8s
  • Structured Logging Best Practices
• 19. Service Mesh
  • What is a Service Mesh?
  • Istio vs Linkerd
  • Istio Installation
  • Traffic Management
  • mTLS
  • Observability
  • Fault Injection (Testing)
  • Linkerd (Lightweight Alternative)

Part 4: Tech Stacks

• 20. LNMP Stack
  • Architecture Overview
  • Nginx Configuration
  • MySQL Setup
  • Full LNMP Docker Compose
  • K8s Deployment
  • Performance Tuning
• 21. LNPP + pgvector Vector Search Stack
  • Overview
  • PostgreSQL + pgvector Setup
  • Vector Search Queries
  • Index Comparison
  • FastAPI + pgvector Application
  • K8s Deployment
  • Performance Tips
• 22. ELK/ELKK Stack
  • Architecture
  • Docker Compose (Full ELK Stack)
  • Logstash Pipeline
  • Filebeat Configuration
  • ELKK Pattern (with Kafka)
  • Elasticsearch Operations
  • K8s Deployment (ECK Operator)
• 23. Go Applications on K8s
  • Go Application Template
  • Dockerfile (Multi-stage)
  • Kubernetes Manifests
  • Helm Chart
  • Why Go is Great for K8s
• 24. Python Applications on K8s
  • FastAPI Application
  • Dockerfile (Multi-stage)
  • Kubernetes Manifests
  • Docker Compose (Local Dev)
  • Tips
• 25. Java Applications on K8s
  • Spring Boot Application
  • Containerization Options
  • JVM Tuning for Containers
  • Kubernetes Manifests
  • Java vs Go vs Python on K8s

Part 5: CI/CD & GitOps

• 26. CI/CD Pipelines
  • Pipeline Concepts
  • GitHub Actions
  • GitLab CI
  • Jenkinsfile
  • Kaniko: Building Images Without Docker
  • Artifact Management
  • CI/CD Best Practices
• 27. ArgoCD and GitOps
  • GitOps Principles
  • ArgoCD Architecture
  • Installation
  • GitOps Repository Structure
  • Application CRD
  • App-of-Apps Pattern
  • ApplicationSet (Multi-Cluster / Multi-Environment)
  • AppProject RBAC
  • SSO Configuration
  • Notifications
  • ArgoCD CLI Commands
  • CI Pipeline Integration
• 28. Security Best Practices
  • Container Security
  • Pod Security Standards
  • RBAC (Role-Based Access Control)
  • Pod Authentication & Authorization (AuthN / AuthZ)
  • NetworkPolicy
  • OPA Gatekeeper
  • Image Scanning with Trivy
  • Secrets Management
  • Supply Chain Security
  • Security Checklist
• 29. Troubleshooting Guide
  • General Debugging Workflow
  • Pod Stuck in Pending
  • CrashLoopBackOff
  • ImagePullBackOff
  • OOMKilled
  • Node NotReady
  • Service Not Reachable
  • DNS Issues
  • Ingress 502 / 504 Errors
  • PVC Pending
  • etcd Performance Issues
  • Advanced Debugging Tools
  • Quick Reference Table
• 30. Production Checklist
  • Resource Management
  • Reliability
  • Security
  • Observability
  • Networking
  • Backup & Disaster Recovery
  • CI/CD
  • Pre-Deployment Verification Script
  • Post-Deployment Verification
  • Summary: The Golden Rules