The "Progressive Backbone" System Blueprint
Instead of building 10 throwaway hello-world demos, you evolve a single service—PulseBoard (an API & URL Reliability Tracker)—from a Week-6 Bash script into a full Kubernetes GitOps & SRE observability platform.
Keyless DevSecOps & GitOps Flow (Phases 6–7)
Every third-party GitHub Action is pinned to a full 40-character commit SHA. Merging to main pushes an immutable image to GHCR and opens a GitOps PR synced by Argo CD.
Observability & SLO Burn-Rate Stack (Phase 8)
Grafana Alloy (replacing EOL Promtail) collects structured JSON logs & OTel traces into Loki and Tempo, while Prometheus evaluates multi-window 99.5% SLO burn rates.
Flagship Capstone Repository Layout (Week 35)
Consolidate your 9-month build into this exact recruiter-ready repository structure.
Weekly 12-Hour College Study Template
- Mon & Wed (2 hrs each — 4 hrs): Read/watch the week's core concepts, take concise Markdown notes in
devops-sre-journey, and type every command locally. - Friday (2 hrs): Deliberate practice — 1 Python problem (Arrays/Strings/HashMaps) + 1 broken Linux server scenario on SadServers or Killercoda.
- Sat or Sun (6 hrs — Deep Build Block): Build the weekly lab or Milestone Project increment, write
pytesttests, open clean PRs, and runterraform destroy. - Exam Week Rule: Drop to 1 hr/week (a single SadServers lab or Python script) to keep your habit alive, then recover in Buffer Weeks A, B, or C.
If You Fall Behind: What to Cut vs. Never Cut
Cut First (Optional Stretch Items):
The 2-hour k3s cloud bonus, ECS on Fargate, distributed tracing (Tempo), blackbox exporter, SBOM/cosign signing, Jenkinsfile port, hands-on canary/blue-green (keep concepts), config-lint.py, and one of k6/Locust.
Never Cut (Non-Negotiable Core):
Linux + TCP/IP/DNS fundamentals, Python basics + pytest, multi-stage non-root Docker, Terraform with locked remote state, SHA-pinned GitHub Actions security gates, Kubernetes core + 8 troubleshooting drills, Prometheus/Grafana SLOs, and at least 1 written Blameless Postmortem.
Critical Update: How AWS Free Tier Works (Post-July 2025)
New AWS accounts no longer use the legacy "12 months of 750 EC2 hours" model. At sign-up, choose the Free plan (never the Paid plan): you receive $100 in credits at sign-up plus up to $100 more for 5 onboarding tasks (Budgets, EC2, RDS, Lambda, Bedrock). You cannot be billed on the Free plan, and it closes after 6 months or when credits run out—so create your account in Week 16, not Week 1!
Interactive Week-16 Zero-Bill Setup & Teardown Checklist
Check off every guardrail on Day 1 of Phase 4 before launching your first cloud resource.
High-Burn Cloud Resources That Drain Credits Fastest
| AWS Resource | Approx. Burn Rate (us-east-1) | Safe $0 Student Rule |
|---|
Multi-Cloud Mental Mapping (AWS ↔ Google Cloud ↔ Azure)
Master AWS deeply first, then use this 1-to-1 translation table to interview confidently for GCP or Azure roles.
| Capability | AWS (Primary) | Google Cloud (GCP) | Microsoft Azure |
|---|
Laptop RAM Guide & WSL2 Tuning
- 8 GB RAM Laptop: Runs Phases 0–6 smoothly. In Phases 7–8, use a 1-node
kindcluster, skip Tempo tracing, or spin up a free 4-core GitHub Codespace. - 16 GB RAM (Recommended): Runs the full 3-node
kindcluster + Argo CD + Prometheus/Grafana/Loki stack locally. - Windows WSL2 Tip: Create
%UserProfile%\.wslconfigwith[wsl2]andmemory=10GBon a 16 GB laptop so Linux has enough headroom. - Apple Silicon Macs: Build
linux/amd64viadocker buildxwhen deploying to x86t3.*instances, or use ARM Gravitont4g.*instances natively.
Student Cloud Perks & Card Fallbacks
- GitHub Student Developer Pack: 180 core-hours/month of GitHub Codespaces + developer tools (apply in Week 1 with college ID).
- Azure for Students ($100, No Credit Card): Renewable yearly with an academic email—ideal backup if your debit card fails AWS verification.
- AWS Sign-Up in India: Requires a Visa/Mastercard/RuPay card with online + international transactions enabled (or UPI AutoPay) for the refundable ₹2 verification hold.
Fresher Placement Playbook & Interactive Interview Drills
Attempt each classic Cloud / DevOps / SRE interview prompt out loud first, then click Reveal SRE Model Answer to check your depth.
1-Page ATS Resume Formula & Entry Titles
Bullet Formula: Action Verb + What You Built + Tools + Measured Outcome.
"Built a keyless GitOps delivery pipeline (GitHub Actions OIDC, Trivy, GHCR, Argo CD) with full commit-SHA action pinning, cutting container size to 175 MB and enabling sub-2-minute rollbacks."
Titles to Target (Start Internships in Phase 4–5!): Cloud Support Associate/Engineer · Junior DevOps Engineer · Associate Cloud Engineer · Linux/Systems Administrator · NOC Engineer · Associate SRE · DevOps Intern.
The Honest Truth About Certifications
- Projects Beat Certificates: A cert without GitHub code and Linux/Python fluency will not pass Round 1 or Round 2.
- On a $0 Budget: Skip paid exams completely—3 pinned GitHub repos + a 2-minute demo video on your Capstone README carry more weight. Watch AWS Educate / Emerging Talent Community for free student voucher campaigns.
- If Sponsored Later (After Phase 7): Prioritize AWS Solutions Architect – Associate (SAA-C03), AWS CloudOps Engineer – Associate (SOA-C03), or the hands-on CKA.
Curated 100% Free Learning & Lab Library (20 Verified Links)
Every single week of this curriculum can be completed using these free resources.
| Phase | Category | Resource | How to Use It |
|---|