This curriculum spans the technical breadth of a multi-workshop program focused on integrating Red Hat technologies into enterprise DevOps practices, covering pipeline integration, cluster management, security enforcement, and hybrid operations at the scale of real-world advisory engagements.
Module 1: Integrating Red Hat Enterprise Linux into DevOps Pipelines
- Selecting appropriate RHEL base images for containerized applications based on support lifecycle, security patching frequency, and minimal footprint requirements.
- Configuring RHEL systems with consistent, automated provisioning using Ansible playbooks while maintaining compliance with organizational security baselines.
- Managing subscription and entitlement deployment across hybrid cloud and on-premises environments to avoid service disruption during CI/CD execution.
- Implementing secure boot and SELinux policies on RHEL hosts without breaking application deployment workflows or container runtimes.
- Integrating RHEL system updates into CI/CD pipelines using staged rollouts and automated rollback triggers based on health checks.
- Aligning RHEL minor version upgrades with application release cycles to minimize compatibility risks in production environments.
Module 2: Red Hat OpenShift for Application Deployment and Scaling
- Designing project and namespace strategies in OpenShift to enforce resource quotas, network policies, and access controls across teams.
- Configuring image streams and internal registry integration to manage versioned application artifacts across development, staging, and production.
- Implementing health checks and readiness probes in deployment configurations to ensure reliable rolling updates and zero-downtime deployments.
- Evaluating the trade-offs between using Helm charts and native OpenShift templates for managing complex application deployments.
- Setting up cluster autoscaling policies based on historical workload patterns while managing node provisioning costs in public cloud environments.
- Integrating OpenShift with external monitoring tools using Prometheus exporters and custom metrics for application-level autoscaling.
Module 3: Security and Compliance in Red Hat DevOps Environments
- Enforcing image vulnerability scanning in OpenShift pipelines using Red Hat Quay or third-party scanners with policy-based admission controls.
- Implementing role-based access control (RBAC) in OpenShift clusters to separate developer, operator, and auditor responsibilities.
- Configuring FIPS-compliant cryptographic modules on RHEL nodes when operating in regulated industries such as finance or healthcare.
- Managing secrets using OpenShift secrets and integration with HashiCorp Vault while minimizing exposure in logs and configuration files.
- Conducting regular security posture assessments using OpenSCAP on RHEL hosts and remediating findings through automated playbooks.
- Designing audit trails for OpenShift API access and RHEL system log aggregation to meet compliance requirements like PCI-DSS or HIPAA.
Module 4: CI/CD Pipeline Design with Red Hat OpenShift Pipelines and GitOps
- Choosing between OpenShift Pipelines (Tekton) and Jenkins for pipeline orchestration based on scalability, maintenance overhead, and team expertise.
- Structuring Git repositories to support GitOps workflows using Argo CD or OpenShift GitOps with environment-specific manifests.
- Implementing pipeline parameterization to support parallel testing across multiple RHEL and OpenShift versions.
- Securing pipeline service accounts with minimal privileges and rotating credentials using automated rotation mechanisms.
- Integrating static code analysis and dependency scanning tools into pipelines using Red Hat CodeReady Workspaces or external IDEs.
- Designing rollback procedures for failed deployments using Git-based reconciliation and immutable artifact references.
Module 5: Observability and Day-2 Operations in Red Hat Ecosystems
- Deploying and configuring Red Hat OpenShift Logging (formerly EFK stack) to centralize logs while managing storage costs and retention policies.
- Integrating application metrics with Red Hat OpenShift Monitoring and custom dashboards in Grafana for performance troubleshooting.
- Setting up alerting rules in Prometheus to detect abnormal pod behavior, node saturation, or service degradation.
- Using OpenShift debug pods and remote debugging techniques to diagnose issues in production without compromising security.
- Planning for cluster upgrades by testing control plane and worker node updates in a staging environment with production-like workloads.
- Managing etcd backups and disaster recovery procedures for OpenShift clusters to ensure cluster state restoration within RPO targets.
Module 6: Hybrid Cloud and Multi-Cluster Management with Red Hat Advanced Cluster Management
- Defining governance policies in Red Hat ACM to enforce cluster configurations, security settings, and compliance across distributed clusters.
- Implementing application placement rules to deploy workloads to specific clusters based on data residency, latency, or regulatory constraints.
- Synchronizing configuration drift detection across clusters using ACM's policy controller and initiating automated remediation.
- Managing certificate lifecycle for ingress endpoints across multiple clusters using centralized ACM policies and cert-manager integration.
- Designing network topologies for multi-cluster communication using ACM-managed service meshes or gateway-based routing.
- Scaling cluster provisioning workflows using ACM's cluster lifecycle management and infrastructure-as-code templates.
Module 7: Performance Optimization and Cost Management
- Right-sizing OpenShift worker nodes based on application memory, CPU, and I/O patterns to balance performance and infrastructure costs.
- Implementing vertical and horizontal pod autoscaling with custom metrics while avoiding thrashing under variable workloads.
- Optimizing container image layers and base images to reduce pull times and storage consumption in registry and nodes.
- Monitoring and controlling storage consumption using dynamic provisioning and reclaim policies for persistent volumes.
- Using OpenShift Topology view and resource quotas to identify and manage resource-hungry development namespaces.
- Conducting performance benchmarking of CI/CD pipelines to identify bottlenecks in build, test, and deployment stages.
Module 8: Integration with Enterprise Systems and Legacy Applications
- Designing service mesh integration using Red Hat OpenShift Service Mesh to connect modern microservices with legacy backend systems.
- Implementing API gateways to expose OpenShift-hosted services to mainframe and monolithic applications using secure protocols.
- Migrating stateful legacy applications to OpenShift by containerizing with minimal refactoring and managing persistent storage requirements.
- Integrating OpenShift with enterprise identity providers such as Active Directory or LDAP for centralized user authentication.
- Establishing secure interconnectivity between on-premises RHEL systems and cloud-based OpenShift clusters using site-to-site VPNs or SD-WAN.
- Managing coexistence of traditional RHEL VM workloads and containerized applications during phased migration to OpenShift.