73 Production Engineering Guides · 10 Client-Side DevOps Tools

Practical Cloud Infrastructure & DevOps Runbooks

Hands-on tutorials, incident troubleshooting guides, and privacy-first browser utilities for engineers operating Kubernetes, Terraform, Docker, Jenkins, Azure, CI/CD pipelines, observability stacks, and Linux systems in production.

Featured Tutorials

In-Depth Production Engineering Guides

Every guide is built around runnable commands, complete YAML/HCL manifests, and real-world failure modes.

View full reading order (Junior → Senior) →
CI/CD
Intermediate20 minutes
GitOps Explained: Principles and a Complete Argo CD Tutorial
End-to-end guide to declarative GitOps on Kubernetes with Argo CD — Application manifests, sync waves, automated self-healing, App-of-Apps, ApplicationSets, and production rollbacks.
Read full guide
Fundamentals
Beginner18 minutes
Ansible for Beginners: Automate Server Configuration
Agentless server configuration over SSH: inventories, ad-hoc commands, idempotent YAML playbooks, handlers, Jinja2 templates, variable precedence, and reusable roles.
Read full guide
Kubernetes
Advanced14 minutes
Kubernetes RBAC Explained: Roles, Bindings, and Least Privilege
Design least-privilege access control in Kubernetes using Roles, ClusterRoles, RoleBindings, ServiceAccounts, and kubectl auth can-i auditing.
Read full guide
Terraform
Intermediate14 minutes
Terraform State Explained: Backends, Locking, and Surgery
How Terraform tracks real-world infrastructure in state files — S3 and Azure remote backends, DynamoDB/Blob locking, secrets in state, and safe refactoring with state mv and moved blocks.
Read full guide
Docker
Beginner14 minutes
Dockerfile Best Practices: Building Small, Secure Images
Cut container image sizes by 80% and harden runtime security with multi-stage builds, pinned digests, layer cache ordering, non-root users, and .dockerignore discipline.
Read full guide
Observability
Intermediate14 minutes
Production Monitoring with Prometheus and Grafana
Deploy the Prometheus and Grafana monitoring stack, understand Counter, Gauge, and Histogram metric types, write PromQL queries for RED/USE signals, and build actionable dashboards.
Read full guide
DevSecOps
Intermediate14 minutes
DevSecOps: Shifting Security Left in Your Pipeline
Integrate pre-commit secret detection, SAST, SCA dependency checks, Trivy container image scanning, and IaC policy gates into CI/CD without slowing developer velocity.
Read full guide
Kubernetes
Intermediate14 minutes
Kubernetes Probes Done Right: Liveness, Readiness, and Startup
Prevent cascading restart loops and dropped requests during rolling deployments by configuring Kubernetes startup, readiness, and liveness probes with the right thresholds.
Read full guide
Azure
Intermediate16 minutes
Azure AKS Networking: VNET Integration and CNI
Choose and configure the right Azure Kubernetes Service networking model — kubenet vs Azure CNI vs Azure CNI Overlay, subnet sizing, network policies, and private clusters.
Read full guide
Incident Response

Production Troubleshooting Runbooks

Step-by-step diagnostic workflows for the errors engineers actually get paged for — from Kubernetes pod backoff loops to locked Terraform state backends.

KubernetesRunbook
Fix Kubernetes CrashLoopBackOff: 10 Common Solutions
Symptom: Pod repeatedly starts, crashes, and enters exponential backoffCovers: kubectl logs --previous, kubectl describe pod, exit codes 1 / 137 / 139
Open troubleshooting steps
KubernetesRunbook
ImagePullBackOff: How to Fix It Step by Step
Symptom: Kubelet fails to pull container image from registryCovers: imagePullSecrets, registry auth, tag typos, CPU architecture mismatch, Docker Hub rate limits
Open troubleshooting steps
KubernetesRunbook
Kubernetes Pod Not Ready: Debugging Guide
Symptom: Pod is Running (0/1 READY) and excluded from Service endpointsCovers: Readiness probe failures, kubectl get endpoints, network policies, init containers
Open troubleshooting steps
TerraformRunbook
Terraform 'Error Acquiring the State Lock': Causes and Fixes
Symptom: terraform plan/apply blocked by stale DynamoDB or Azure Blob lease lockCovers: Verify active CI runs, inspect Lock Info ID, safe terraform force-unlock procedure
Open troubleshooting steps
DockerRunbook
Docker Build Errors: Common Issues and Fixes
Symptom: COPY failed, permission denied, stale apt cache, or multi-platform build failureCovers: BuildKit cache mounts, .dockerignore context exclusions, UID/GID ownership
Open troubleshooting steps
AzureRunbook
Azure AKS Troubleshooting: Common Issues and Solutions
Symptom: AKS nodes NotReady, PVC attachment failures, or SNAT port exhaustionCovers: az aks get-credentials, kubelet logs, Azure CNI IP exhaustion, CSI disk mounts
Open troubleshooting steps
Level 1 · Foundations
Junior DevOps Track
Master the Linux command line, Git history recovery, defensive Bash scripting, multi-stage Dockerfiles, Docker Compose, and your first Kubernetes Deployment and Terraform plan.
Level 2 · Production Operations
Platform Engineer Track
Operate production workloads end-to-end: Kubernetes probes, ConfigMaps/Secrets, PV/PVC storage, Ingress TLS, Helm charts, GitHub Actions/Jenkins pipelines, and Prometheus/Loki monitoring.
Level 3 · Architecture & SRE
Senior & Staff Track
Design multi-team platforms: Terraform remote state surgery, least-privilege Kubernetes RBAC, shift-left DevSecOps, HashiCorp Vault dynamic secrets, Argo CD GitOps, and SLO error budgets.
Built by Practitioners, Tested Against Real Tooling

CloudOpsGuide is an independent engineering publication. Every guide is written around real commands, complete configurations, and production failure modes—never generic filler. Read about our editorial standards or contact our team with questions and topic requests.