menu_book Course Curriculum (CI/CD & DevOps Pipelines) expand_more

Pipeline Foundations

Pipeline stages and dependencies Fail-fast pipeline design Idempotent pipeline jobs Immutable build artifacts Pipeline as code Reproducible builds Environment promotion Trunk-based delivery workflow

Triggers, Change Detection & Concurrency

Push trigger Pull request trigger Tag-based release trigger Path-filtered execution Scheduled pipeline Manual dispatch inputs Commit SHA pinning Concurrency and superseded runs

Build, Test & Quality Gates

Dependency cache key design Matrix testing Unit-test gate Integration test service container Lint gate Coverage threshold gate Dependency vulnerability gate SBOM generation

Artifacts, Containers & Supply Chain

Semantic artifact versioning Artifact upload and download Container image build Multi-architecture container build Registry authentication Build provenance attestation Artifact signing Artifact retention policy

Secrets, Identity & Environment Controls

Secret injection OIDC cloud authentication Environment-scoped variables Preventing secret leakage in logs Secret rotation pipeline pattern Protected environment approval Configuration validation before deploy Least-privilege pipeline token

Deployment Strategies & Database Safety

Rolling deployment Blue-green deployment Canary deployment Feature-flagged release Expand-contract database migration Readiness health check gate Automated rollback Post-deploy smoke tests

Pipeline Engines & Reuse

GitLab needs graph Jenkins declarative pipeline CircleCI workflow dependencies Azure DevOps staged pipeline Tekton Task and Pipeline Argo CD sync deployment Reusable workflow interface Pipeline template versioning

Reliability, Observability & Recovery

Retry with bounded backoff Job timeout Cancellation cleanup Deployment notification Pipeline duration metrics Structured pipeline logs Deployment audit record Pipeline incident postmortem evidence

CI/CD & DevOps Pipelines / Secrets, Identity & Environment Controls

Protected environment approval

Learn Protected environment approval through a production-oriented CI/CD example, operational guidance, and a mastery check.

12 min read • Intermediate

protected-environment.yml

yaml

jobs:
  deploy_production:
    environment:
      name: production
      url: https://app.example.test
    steps:
      - run: ./ops/deploy-production.sh "$GITHUB_SHA"

What to watch

Content source & attribution

Original Syntaxis Content · Original Syntaxis Content

Lesson quizzes

Protected environment approval Mastery Check →

← PREVIOUS

Secret rotation pipeline pattern

Configuration validation before deploy

Protected environment approval

Lesson quizzes

Notice