Cheat sheet · Specialise
Platform engineering and SRE cheat sheet (Platform engineering)
Opens with creditsFor DevOps engineers moving into platform engineering: the reliability basics every platform must meet, observability as a service, production Kubernetes, IaC and GitOps at scale, Backstage, golden paths and cost. Use it to revise the building blocks of an internal platform and the reliability rules it has to respect.
Chapters
10 chapters · 79 concepts
1Reliability basics: SLIs, SLOs and error budgetsHow to say how reliable a service should be in numbers users would recognise, and how to turn the gap between perfect and good enough into a budget you can spend.7 concepts
- 1SLI (service level indicator)A measurement of how a service is behaving from the user's side, best written as a ratio: good events divided by valid events, such as successful requests over…
- 2SLO (service level objective)A target for an SLI over a rolling window, for example 99.9 per cent of checkout requests succeed over 30 days.
- 3SLA (service level agreement)A contract with customers that states a level of service and what happens, usually service credits, if it is missed.
- 4Availability nines and allowed downtimeEach extra nine cuts allowed failure by ten times.
- 5Error budgetThe share of events allowed to fail within the SLO window: 1 minus the SLO.
- 6Error budget policyA short written agreement, signed by engineering and product, that says what happens when the budget runs low or runs out, such as freezing non-urgent releases…
- 7Composite availabilityWhen a request needs several components in series, their availabilities multiply.
7 in this chapterOpen this chapter2Observability: metrics, logs and tracesGoing past a first dashboard: which signals to collect, how Prometheus stores them, PromQL you use every week, cardinality, the OpenTelemetry Collector and sampling.10 concepts
- 1Four golden signalsLatency, traffic, errors and saturation: the four measurements Google's SRE book says to watch first on any user-facing system.
- 2RED and USE methodsRED (rate, errors, duration) is a checklist for request-driven services.
- 3Counter, gauge and histogramA counter only goes up (requests served).
- 4PromQL basicsPrometheus's query language. rate() turns a counter into per-second change, sum by (label) aggregates across instances and histogram_quantile() reads a…
- 5Recording rulesPrometheus rules that evaluate a query on a schedule and store the result as a new, cheaper series, such as a 5 minute error ratio per service.
- 6CardinalityThe number of unique time series a metric produces: every distinct combination of label values is a separate series stored in memory.
- 7OpenTelemetry CollectorA vendor-neutral service that receives telemetry, processes it (batching, filtering, adding attributes, sampling) and exports it to one or more backends…
- 8Head and tail samplingHead sampling decides whether to keep a trace when it starts, for example keep 10 per cent.
- 9Correlating logs, metrics and tracesStamping every log line with the trace and span ID, and attaching example trace IDs (exemplars) to metrics, so you can jump from a spike on a graph to a trace…
- 10Observability as a platform serviceThe platform ships telemetry by default: a collector on every cluster, auto-instrumentation, standard labels, and a generated dashboard and SLO template for…
10 in this chapterOpen this chapter- Incident response and postmortemsAlerts that fire for the right reasons, the roles that keep an incident calm, mitigating before diagnosing, and postmortems that change something.8 conceptsOpens with credits
- Kubernetes in productionWhat changes when a cluster runs real traffic: a troubleshooting flow, failure states, disruption budgets, spreading across zones, graceful shutdown, upgrades and guard rails.9 conceptsOpens with credits
- Infrastructure as code at scaleTerraform beyond one folder: splitting state, versioned modules, plans in CI, policy as code, drift, and control planes that let teams request infrastructure themselves.7 conceptsOpens with credits
- GitOps and progressive deliveryGit as the source of truth for what runs, an agent that reconciles the cluster to it, promotion between environments, and releasing gradually with automatic checks.7 conceptsOpens with credits
- Internal developer platformsTreating the platform as a product for internal developers: golden paths, a software catalogue, templates, docs and the measures that show whether it helps.8 conceptsOpens with credits
- Capacity, performance and costThe few sums behind capacity planning, why latency jumps near full utilisation, load testing, autoscaling at each layer and keeping the cloud bill honest.8 conceptsOpens with credits
- Chaos and resilience testingProving the system copes with failure before real failure does: experiments, blast radius, game days and the patterns that stop one slow dependency taking everything down.8 conceptsOpens with credits
- On-call without burnoutRotations, escalation and alert hygiene that keep a pager sustainable, plus toil: what it is, how to measure it and how to cut it.7 conceptsOpens with credits
- 11Glossary, A to ZEvery concept in the sheet and the smaller terms it uses, in one list.127 terms
About this sheet
SLOs, observability, Kubernetes platforms.
Related on Sefism
Picked from the other libraries by shared topics.
Roadmaps
See allBest practices
See all- Kubernetes Best PracticesRun workloads on Kubernetes that schedule well, survive restarts and node drains, and stay locked down: resources, probes, PDBs, Pod Security and RBAC.
- Terraform Best PracticesWrite Terraform that teams can review and change safely: file layout, version pinning, remote state with locking, secrets, modules, refactoring and tests.
- CI/CD Best PracticesBuild pipelines that are fast, trustworthy and safe to deploy from: trunk-based flow, fast tests, locked-down workflows, signed artifacts, canaries and DORA metrics.
Checklists
See all- Incident Response ChecklistPrepare for and handle production incidents: on-call, severity levels, declaring, roles, mitigation, security containment, status updates and blameless postmortems.
- Production Readiness ChecklistCheck a service before it takes real traffic: ownership, SLOs, capacity, timeouts and retries, alerts, rollout and rollback, backups, security and on-call.
- Kubernetes Production ChecklistVerify a workload and its cluster before real traffic: requests and limits, probes, PDBs, spread, Pod Security, RBAC, network policies, secrets, images, autoscaling, upgrades and backups.
Project structures
See all- Terraform project structureAn infrastructure repository for a small app on AWS: reusable modules, one folder per environment with its own remote state, pinned providers, tests and security scans, with plan on every pull request and apply from CI. For students who have finished the Terraform tutorials and want to know how a real team lays out the files. The same layout works unchanged with OpenTofu.
- Kubernetes with Helm project structureA Helm chart repository for one app: the chart that
helm creategives you, grown into a tested, versioned package with per-environment values, unit tests, install tests in a kind cluster and releases to an OCI registry. For students who can write a Deployment by hand and want to know how a team organises charts. It is about the repo layout and what each file does, not about cluster design. - Spring Boot project structureA REST API in Java with Spring Boot 4, PostgreSQL, Flyway and Testcontainers, organised by feature the way the Spring docs suggest. It grows from the Initializr scaffold to a service with JWT security, problem-detail errors, MapStruct DTOs, slice and integration tests, CI, containers and observability, and finally Modulith boundaries, contract and load tests. For students who know some Java and want to see how a real service is organised.
Career questions
See all- Do I need Docker and Kubernetes as a junior developer?Docker, yes: learn the basics, because nearly every team uses containers and you will be expected to run the project locally and read a Dockerfile. Kubernetes, mostly no: understand what it does and a few core terms, but deep Kubernetes can wait until your job or a DevOps direction needs it.
- What is platform engineering, and how is it different from DevOps?DevOps is a culture and set of practices: developers and operations sharing responsibility for shipping and running software. Platform engineering is one way to put that into practice at scale: a team builds an internal platform, a paved road of tools and templates, so product teams can ship without becoming infrastructure experts.
- Can I become an SRE or platform engineer straight after graduating?Sometimes, but it is rare, because these roles expect you to have run production systems. The more reliable path is a first job in backend, DevOps or cloud support, where you learn production, then a move into SRE or platform work within a couple of years.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
- 1:1 Mentorship
- Fresh Graduate Mentorship
- Career Guidance
Brand deals, promos and partnerships: tauseeffayyaz@gmail.com