CI/CD

Configure event triggers, job hierarchies, branch filters, permissions, and concurrency. Covers editor and quiz steps across all major sections.

Configure runner environments, install system dependencies, understand workspace isolation, and assess self-hosted runner risks.

Build a composite action from scratch, parameterize it with inputs, and consolidate reusability concepts in a knowledge check.

Scope secrets with environments, configure OIDC for keyless cloud auth, and assess security tradeoffs in deployment pipelines.

Map controllers vs agents, SSH vs inbound vs Docker agents, label routing, JVM tuning, and the failure modes that hit a self-hosted Jenkins.

Author and harden declarative Jenkins pipelines: stages, post conditions, parameters, and credential bindings.

Bind credentials safely with withCredentials, understand masking failure modes, navigate the Groovy sandbox, untrusted PRs, and OIDC-federated AWS access.

Reason about reproducible plugin sets, author jenkins.yaml CasC, diagnose dependency risk, and design an upgrade cadence that survives.

Extract reusable Jenkinsfile logic into a versioned shared library with vars/, src/, and resources/, then load it safely from a Jenkinsfile.

Promote one tested image digest through staging and production with release gates, environment approvals, and production concurrency.

Automate an ECS rolling rollout, recognize rollout failure modes, and keep the previous task definition ready for rollback.

Prepare a replacement task set, test green through the test listener, switch traffic, and recognize blue-green rollback risks.

Choose a safe canary slice, compare canary and stable signals, gate promotion, and roll back when the new task set is worse.

Choose the smallest safe recovery move, disable isolated behavior with flags, and record the release decision while facts are fresh.

Write a practical release runbook, automate repeatable deployment steps, define stop rules, and record post-release verification.