A comprehensive OpenShift learning and deployment framework designed to take you from beginner to L3-level professional through structured training and hands-on cloud deployments. This repository combines theoretical knowledge with production-ready infrastructure-as-code for deploying OpenShift across multiple cloud providers.
🎓 7-Day OpenShift Mastery Program
- Structured daily learning plans (Day 1-7)
- Progressive complexity from basics to advanced
- Hands-on labs and real-world scenarios
- Interview preparation and certification guidance
- 340KB+ of curated training materials
☁️ Production-Ready Cloud Deployments
- Linode (complete Terraform + Ansible automation on Rocky Linux 9)
- AWS, Azure, GCP, Oracle Cloud (frameworks ready)
- GitOps with ArgoCD integration
- Complete GitLab CI/CD pipelines
- Security hardening and best practices
💰 Cost-Optimized with Rocky Linux 9
- FREE OS - no Red Hat subscription required
- 1:1 binary compatible with RHEL 9
- Learning cluster: ~$138/month on Linode
- Perfect for OpenShift practice without licensing costs
🔧 Enterprise Automation
- Infrastructure as Code (Terraform 1.5+)
- Configuration Management (Ansible 2.14+)
- GitOps workflows (ArgoCD)
- CI/CD pipelines (GitLab)
- Monitoring, logging, and backup strategies
# Clone the repository
git clone https://github.com/devopsgeek1979/terraform-basic.git
cd terraform-basic/openshift-master
# Start with Day 1
open Day-1-OpenShift-Fundamentals.md
# Follow the 7-day program sequentially# Navigate to cloud deployments
cd openshift-cloud-deployments/linode
# Configure your environment
cp terraform/terraform.tfvars.example terraform/terraform.tfvars
# Edit terraform.tfvars with your Linode API token
# Deploy infrastructure
cd terraform
terraform init
terraform plan
terraform apply
# Deploy OpenShift with Ansible
cd ../ansible
./deploy.sh --full
# Access your cluster (credentials in artifacts)
export KUBECONFIG=/opt/openshift/install/auth/kubeconfig
oc get nodes# Configure GitLab CI/CD variables
# - LINODE_API_TOKEN
# - SSH_PRIVATE_KEY
# - OPENSHIFT_PULL_SECRET
# Push to trigger pipeline
git add .
git commit -m "Deploy OpenShift cluster"
git push origin main
# Monitor pipeline in GitLab
# Manually approve 'terraform:apply' jobopenshift-master/
│
├── README.md (this file) # Main documentation
├── CONTRIBUTORS.md # Contributors and acknowledgments
│
├── 7-Day Training Program/ # Theoretical knowledge
│ ├── Day-1-OpenShift-Fundamentals.md # Architecture, components, installation
│ ├── Day-2-Networking-Storage.md # SDN, CNI, storage classes, PVs/PVCs
│ ├── Day-3-Security-RBAC.md # Security, authentication, RBAC
│ ├── Day-4-Operators-Management.md # Operators, OLM, cluster management
│ ├── Day-5-CI-CD-GitOps.md # CI/CD, Tekton, GitOps, ArgoCD
│ ├── Day-6-Monitoring-Logging.md # Prometheus, Grafana, logging
│ ├── Day-7-Troubleshooting-Advanced.md # Debugging, performance, DR
│ ├── Interview-Questions-L3.md # 100+ interview questions
│ ├── Certification-Path.md # EX280, DO280 preparation
│ └── Real-World-Scenarios.md # Production case studies
│
├── openshift-cloud-deployments/ # Production deployments
│ │
│ ├── README.md # Cloud deployment overview
│ ├── PROJECT-SUMMARY.md # Complete project documentation
│ ├── CICD-README.md # CI/CD pipeline documentation
│ │
│ ├── linode/ # Linode Cloud (Complete ✅)
│ │ ├── README.md # Linode-specific guide (22KB)
│ │ ├── terraform/ # Infrastructure as Code
│ │ │ ├── main.tf # 608 lines, complete IaC
│ │ │ ├── variables.tf # 60+ configurable variables
│ │ │ ├── outputs.tf # Cluster info, IPs, DNS
│ │ │ └── terraform.tfvars.example # 4 deployment presets
│ │ └── ansible/ # Configuration management
│ │ ├── ansible.cfg # Ansible configuration
│ │ ├── inventory/hosts.example # Inventory template
│ │ ├── group_vars/all.yml # Global variables
│ │ ├── playbooks/
│ │ │ ├── 01-prepare-nodes.yml # Bastion and node setup
│ │ │ ├── 02-generate-ignition.yml # Ignition configs
│ │ │ ├── 03-install-openshift.yml # Cluster installation
│ │ │ ├── 04-post-install.yml # Post-install config
│ │ │ └── 05-deploy-gitops.yml # ArgoCD deployment
│ │ └── deploy.sh # Master deployment script
│ │
│ ├── gitops/ # GitOps with ArgoCD
│ │ ├── README.md # GitOps documentation
│ │ ├── argocd/
│ │ │ ├── applications/ # Application definitions
│ │ │ │ ├── app-of-apps.yaml # Root application
│ │ │ │ ├── infrastructure.yaml # Infrastructure apps
│ │ │ │ └── platform.yaml # Platform apps
│ │ │ └── projects/ # AppProject definitions
│ │ │ ├── infrastructure.yaml # Infrastructure project
│ │ │ ├── platform.yaml # Platform project
│ │ │ └── applications.yaml # Applications project
│ │ ├── infrastructure/ # Infrastructure components
│ │ │ ├── namespaces/ # Namespace definitions
│ │ │ ├── storage/ # Storage classes
│ │ │ ├── networking/ # Network policies
│ │ │ └── rbac/ # RBAC configurations
│ │ └── platform/ # Platform services
│ │ ├── monitoring/ # Prometheus, Grafana
│ │ ├── logging/ # Logging stack
│ │ └── security/ # Security policies
│ │
│ ├── aws/ # Amazon Web Services (Planned)
│ ├── azure/ # Microsoft Azure (Planned)
│ ├── gcp/ # Google Cloud Platform (Planned)
│ └── oracle/ # Oracle Cloud (Planned)
│
├── .gitlab-ci.yml # Complete CI/CD pipeline
└── .yamllint.yml # YAML linting configuration
Day 1: OpenShift Fundamentals
- Container and Kubernetes basics
- OpenShift architecture and components
- Installation methods (IPI, UPI, managed)
- First cluster deployment walkthrough
Day 2: Networking & Storage
- SDN and CNI (OVNKubernetes)
- Service networking and routes
- Storage classes and persistent volumes
- Volume snapshots and backup
Day 3: Security & RBAC
- Authentication and authorization
- RBAC, SCCs, Network Policies
- Secrets management
- Security scanning and compliance
Day 4: Operators & Management
- Operator Framework and OLM
- Cluster upgrades and updates
- Multi-cluster management (RHACM)
- Node management and auto-scaling
Day 5: CI/CD & GitOps
- OpenShift Pipelines (Tekton)
- GitOps with ArgoCD
- Image registry and builds
- S2I and BuildConfigs
Day 6: Monitoring & Logging
- Prometheus and Grafana
- Custom metrics and alerts
- EFK stack (Elasticsearch, Fluentd, Kibana)
- Log aggregation strategies
Day 7: Troubleshooting & Advanced Topics
- Debugging techniques and tools
- Performance tuning
- Disaster recovery
- Multi-cloud deployments
Cloud Deployment Project
- Choose cloud provider (start with Linode)
- Deploy production-ready cluster
- Implement GitOps workflows
- Configure monitoring and logging
- Practice disaster recovery
- Cost: FREE ✅
- Time Investment: 7 days (theory) + practice time
- Value: Equivalent to $2,000+ professional training
| Environment | Provider | Monthly Cost | Recommended For |
|---|---|---|---|
| Learning/Dev | Linode | $138 | Learning basics (Rocky Linux 9) |
| Standard Practice | Linode | $200-350 | Full feature testing |
| Production-Like | Linode | $552 | Job preparation |
| Enterprise | Multi-cloud | $1,000+ | Advanced scenarios |
💡 Rocky Linux 9 Benefits:
- FREE OS: No Red Hat subscription required (saves $350-800/year)
- RHEL Compatible: 1:1 binary compatibility with RHEL 9
- Lower Resources: Reduced overhead for learning and lab deployments
- Perfect for Learning: Full OpenShift compatibility
Cost Savings Tips:
- Use Rocky Linux 9 to avoid paid OS subscriptions (FREE OS)
- Use Linode for initial learning (50% cheaper than AWS)
- Enable auto-shutdown for non-production (save 60%)
- Destroy environments when not in use
- Start with smaller instances (g6-standard-2 for control plane)
- Terraform: 1.5.0+ (Infrastructure as Code)
- Ansible: 2.14+ (Configuration Management)
- OpenShift: 4.14+ (Container Platform)
- Linode: Primary learning environment (complete implementation)
- AWS: Enterprise production (planned)
- Azure: Hybrid cloud scenarios (planned)
- GCP: Kubernetes-native deployments (planned)
- Oracle Cloud: Cost-effective alternatives (planned)
- ArgoCD: GitOps continuous delivery
- GitLab CI/CD: Automated pipelines
- Prometheus: Monitoring and alerting
- Grafana: Metrics visualization
- EFK Stack: Logging and analysis
- RBAC: Role-based access control
- Network Policies: Micro-segmentation
- Sealed Secrets: Encrypted secrets in Git
- Falco: Runtime security
- Trivy: Vulnerability scanning
Each day's module includes:
- Theory: Conceptual understanding
- Hands-On Labs: Step-by-step exercises
- Real-World Scenarios: Production case studies
- Quiz: Knowledge validation
- Additional Resources: Deep-dive materials
Each cloud provider includes:
- Prerequisites: Account setup and requirements
- Architecture: Network design and resource planning
- Deployment: Step-by-step instructions
- Configuration: Post-install hardening
- Troubleshooting: Common issues and solutions
- Cost Optimization: Strategies to reduce expenses
- Terraform Modules: Reusable infrastructure components
- Ansible Playbooks: Automated configuration
- GitOps Applications: Declarative deployments
- CI/CD Pipelines: End-to-end automation
This program prepares you for:
- OpenShift Administrator (L2-L3)
- Kubernetes Platform Engineer
- Cloud Infrastructure Engineer
- DevOps/SRE Engineer
- Container Platform Architect
| Certification | Level | Prerequisites | Exam Cost |
|---|---|---|---|
| EX180 | Associate | None | $400 |
| DO180 | Training | EX180 | $3,400 |
| EX280 | Specialist | EX180 | $400 |
| DO280 | Training | EX280 | $3,400 |
| EX380 | Expert | EX280 | $400 |
This Repository Covers:
- ✅ Complete EX180 exam objectives
- ✅ 90% of EX280 exam objectives
- ✅ 60% of EX380 exam objectives
- 100+ L3-level interview questions
- Architecture design scenarios
- Troubleshooting case studies
- Hands-on practical assessments
This repository implements enterprise security standards:
- ✅ Private cluster configurations
- ✅ Network segmentation and policies
- ✅ Firewall rules and security groups
- ✅ Bastion host for secure access
- ✅ Encrypted storage (at rest and in transit)
- ✅ RBAC with least-privilege access
- ✅ Security Context Constraints (SCCs)
- ✅ Pod Security Policies
- ✅ Image scanning and signing
- ✅ Secrets management (Sealed Secrets)
- ✅ FIPS 140-2 mode support
- ✅ CIS Kubernetes Benchmark
- ✅ Audit logging enabled
- ✅ Regular security scanning
- ✅ Vulnerability patching strategy
The GitLab CI/CD pipeline provides:
- ✅ Terraform format and validation
- ✅ Ansible syntax checking
- ✅ YAML linting
- ✅ Security scanning (tfsec, Checkov)
- ✅ Infrastructure provisioning (Terraform)
- ✅ OpenShift installation (Ansible)
- ✅ GitOps configuration (ArgoCD)
- ✅ Post-install validation
- ✅ Cluster health checks
- ✅ Operator status validation
- ✅ GitOps sync verification
- ✅ Application deployment tests
- ✅ Automated backups
- ✅ Disaster recovery drills
- ✅ Cost reporting
- ✅ Cleanup and destroy
We welcome contributions! See CONTRIBUTORS.md for details.
- 📝 Improve documentation
- 🐛 Report bugs or issues
- ✨ Add new cloud provider implementations
- 🔧 Enhance automation scripts
- 📚 Share real-world scenarios
- 🎓 Add training materials
- Fork the repository
- Create a feature branch
- Make your changes
- Test thoroughly
- Submit a pull request
- Total Content: 540KB+ (340KB training + 200KB deployments)
- Lines of Code: 3,300+ (Terraform, Ansible, YAML)
- Documentation: 15+ comprehensive guides
- Automation Scripts: 20+ playbooks and modules
- Cloud Providers: 6 (1 complete, 5 planned)
- Deployment Presets: 4 (Dev to Enterprise)
- Issues: Report bugs or request features via GitHub Issues
- Documentation: Check README files in each directory
- Community: Join OpenShift Commons
- Official Docs: https://docs.openshift.com
This project is licensed under the MIT License - see the LICENSE file for details.
If this repository helped you learn OpenShift or land a job, please consider giving it a star! ⭐
- Repository Owner: devopsgeek1979
- Project: terraform-basic
- Branch: main
From Beginner to OpenShift L3 Professional - Your Complete Journey Starts Here! 🚀
Made with ❤️ by the OpenShift community