DevOps Engineer (Automation)

## Ôn Thi & Chuẩn Bị – DevOps Engineer (Automation) tại VPBank

---

### 1. KIẾN THỨC NỀN TẢNG CẦN ÔN

#### 📚 Giai đoạn 1: Nền tảng (Week 1)

Linux Fundamentals
```
□ Linux Administration
- User/group management
- Process management (systemd, systemctl)
- Disk partitioning, LVM
- Package management (apt, yum, dnf)
- Systemd services, cron jobs
- Logs management (/var/log)

□ Networking Basics
- TCP/IP model, OSI layers
- Subnetting, CIDR notation
- DNS, DHCP, NAT, PAT
- Routing table, static routes
- Firewalls (iptables, nftables)
```

Python for Automation
```
□ Python Core
- Data structures (list, dict, set, tuple)
- File I/O, JSON/YAML parsing
- Regex
- Exception handling

□ Python Libraries for DevOps
- paramiko (SSH automation)
- requests (API calls)
- pyyaml (YAML manipulation)
- jinja2 (template rendering)
- concurrent.futures (threading/multiprocessing)
- boto3 (AWS SDK)

□ Practice: Viết script tự động:
- Backup database
- Health check service
- Log aggregation
- User provisioning
```

Git & Version Control
```
□ Git Intermediate
- Branching strategies (GitFlow, trunk-based)
- Merge vs Rebase
- Git hooks
- Git stash
- Working with remotes

□ GitOps concept
- Git as single source of truth
- ArgoCD / Flux
- Pull-based vs push-based deployment
```

---

#### 📚 Giai đoạn 2: IaC & Automation (Week 2)

Terraform (Infrastructure as Code)
```
□ Terraform Basics to Advanced
- Providers, resources, data sources
- Variables, outputs, locals
- State management (local vs remote)
- Modules, workspaces
- Import existing resources

□ Terraform Best Practices
- Backend configuration (S3 + DynamoDB)
- State locking
- tfsec, Checkov for security scanning
- Terraform testing (Terratest)

□ Practice Projects:
- VPC with public/private subnets (AWS)
- EKS cluster provisioning
- RDS with multi-AZ
- Complete 3-tier web architecture
```

Ansible (Configuration Management)
```
□ Ansible Fundamentals
- Inventory (static, dynamic)
- Playbooks, roles, tasks, handlers
- Variables, facts, conditionals, loops
- Templates (Jinja2)
- Vault for secrets

□ Ansible Advanced
- Dynamic inventory
- Galaxy roles
- Async tasks, polling
- Strategists (linear vs free)
- Custom modules

□ Practice Projects:
- LAMP/LEMP stack deployment
- Kubernetes node provisioning
- Security hardening playbook
- Application deployment automation
```

---

#### 📚 Giai đoạn 3: DevOps Tools (Week 3)

Docker & Container Fundamentals
```
□ Docker
- Images, containers, registries
- Dockerfile best practices
- Multi-stage builds
- Docker Compose
- Networking, volumes
- Security (non-root user, read-only rootfs)
```

Kubernetes (K8s) – Cực kỳ quan trọng
```
□ Kubernetes Core Concepts
- Pods, ReplicaSets, Deployments
- Services (ClusterIP, NodePort, LoadBalancer)
- Ingress controllers
- ConfigMaps, Secrets
- PersistentVolumes, PersistentVolumeClaims
- Namespaces, RBAC
- Network Policies

□ Kubernetes Operations
- kubectl commands
- Helm package manager
- HPA (Horizontal Pod Autoscaler)
- Resource limits, requests
- Taints, tolerations, node affinity
- Pod disruption budgets

□ Kubernetes Security & Networking
- Pod security standards
- Network policies
- Service mesh (Istio - optional)
- CNI plugins (Calico, Cilium)
```

CI/CD with Jenkins
```
□ Jenkins
- Jenkinsfile (Declarative vs Scripted)
- Pipeline syntax
- Agents, stages, steps
- Credentials management
- Jenkins shared libraries
- Integration với:
├── GitHub/GitLab
├── Docker registry
├── Kubernetes
├── SonarQube
└── Artifact repository (Nexus)
```

---

#### 📚 Giai đoạn 4: Monitoring & Observability (Week 4)

Prometheus & Grafana
```
□ Prometheus
- Metrics collection
- PromQL queries
- Alerting rules
- Pushgateway, exporters
- Service discovery

□ Grafana
- Dashboard creation
- Data sources (Prometheus, Loki, etc.)
- Alert visualization
- Panel types và best practices
```

HashiCorp Vault
```
□ Vault Fundamentals
- Secret engines (KV, AWS, PKI, etc.)
- Authentication methods (Kubernetes, AppRole)
- Policies
- Dynamic secrets
- Transit secrets (encryption as a service)
```

Nexus Repository
```
□ Nexus
- Repository formats (npm, Docker, Maven, PyPI)
- Blob stores
- Cleanup policies
- Integration với CI/CD
```

---

#### 📚 Giai đoạn 5: Network & Security (ôn tập nhanh)

Network Knowledge cho DevOps Banking
```
□ Routing Protocols
- BGP (Border Gateway Protocol) - rất quan trọng
- OSPF (Open Shortest Path First)
- Static routing

□ Switching & VLANs
- VLAN tagging (802.1Q)
- Trunk ports, access ports
- STP (Spanning Tree Protocol)
- VRF (Virtual Routing and Forwarding)

□ Load Balancing
- L4 vs L7 load balancing
- Health checks
- VIP (Virtual IP)
- Global Server Load Balancing

□ Security Devices
- Firewall (Fortinet, Palo Alto)
- IDS/IPS concepts
- WAF basics

□ Practice:
- Đọc configuration của Cisco/Juniper
- Hiểu syslog, SNMP monitoring
- Backup/restore configuration
```

---

### 2. TÀI LIỆU THAM KHẢO

#### Sách (Books):
| Sách | Mức độ | Ghi chú |
|---|---|---|
| "Terraform: Up & Running" – Yevgeniy Brikman | ⭐⭐⭐⭐⭐ | Sách hay nhất về Terraform |
| "Kubernetes in Action" – Marko Luksa | ⭐⭐⭐⭐⭐ | Đầy đủ kiến thức K8s |
| "Ansible for DevOps" – Jeff Geerling | ⭐⭐⭐⭐ | Thực hành Ansible |
| "The Phoenix Project" – Gene Kim | ⭐⭐⭐⭐ | Hiểu DevOps culture |
| "Effective DevOps" – Jennifer Davis | ⭐⭐⭐ | Culture & collaboration |
| "Python for DevOps" – Noah Gift | ⭐⭐⭐⭐ | Python automation |

#### Documentation chính thức (Free):
```
Terraform: https://developer.hashicorp.com/terraform/docs
Ansible: https://docs.ansible.com/
Kubernetes: https://kubernetes.io/docs/
Jenkins: https://www.jenkins.io/doc/
Prometheus: https://prometheus.io/docs/
Grafana: https://grafana.com/docs/
Vault: https://developer.hashicorp.com/vault/docs
Python: https://docs.python.org/3/
Docker: https://docs.docker.com/
```

#### Courses Online:
```
Free:
- Kubernetes the Hard Way (Kelsey Hightower)
- Katacoda (interactive labs)
- Kubernetes by CNCF (edX free)

Paid (chất lượng cao):
- Udemy: "Terraform on AWS" / "Ansible Advanced"
- Linux Academy / A Cloud Guru
- Pluralsight DevOps learning path
- KodeKloud (hands-on labs)
```

#### YouTube Channels:
```
- NetworkChuck (fun, beginner-friendly)
- Fireship (fast-paced tech overview)
- TechWorld with Nana (DevOps, Docker, K8s)
-antonbabenko (Terraform expert)
- Just me and Opensource
```

---

### 3. LỘ TRÌNH CHUYÊN SÂU 2 TUẦN (MINTIME PREP)

Nếu bạn có 2 tuần full-time để ôn:

```
TUẦN 1:
├── Day 1-2: Linux + Python refresh
│ └── Tạo mini project: script backup tự động
├── Day 3-4: Terraform + Ansible
│ └── Practice: deploy 3-tier app infrastructure
├── Day 5: Docker + Container basics
│ └── Practice: viết Dockerfile, docker-compose
└── Day 6-7: Kubernetes deep-dive
└── Practice: deploy app lên local K8s cluster (minikube/kind)

TUẦN 2:
├── Day 8-9: CI/CD (Jenkins + GitOps)
│ └── Practice: viết Jenkinsfile hoàn chỉnh
├── Day 10-11: Monitoring (Prometheus + Grafana)
│ └── Practice: setup monitoring stack
├── Day 12: Network basics review + Vault
│ └── Review BGP/OSPF concepts
└── Day 13-14: Mock interviews + Review projects
└── Ôn lại tất cả case studies từ kinh nghiệm
```

Nếu bạn chỉ có 1 tuần tối thiểu:
```
Day 1: Python + Terraform (50% thời gian cho phần này)
Day 2: Ansible + Jenkins
Day 3: Kubernetes core concepts
Day 4: Monitoring (Prometheus/Grafana) + Vault basics
Day 5: Network review + Mock interviews
Day 6-7: Review weak areas + GitHub portfolio prep
```

---

### 4. THỰC HÀNH – DỰ ÁN DEMO NÊN CÓ TRÊN GITHUB

Đây là những project nên có trên GitHub profile để thể hiện năng lực:

```
1. terraform-iac-bank-infra/
- VPC, subnets, EC2, RDS, EKS
- Có security groups, IAM roles
- Module reuse

2. ansible-playbooks-collection/
- Web server setup
- Database configuration
- Security hardening
- Sử dụng Ansible Vault cho secrets

3. k8s-microservices-deployment/
- Multi-environment (dev/staging/prod)
- Helm charts
- Ingress configuration
- HPA setup

4. python-automation-scripts/
- Log analyzer
- Health check automation
- API integration scripts

5. cicd-pipeline-complete/
- Jenkinsfile với multiple stages
- Integration với SonarQube, Nexus, K8s
- Blue-green deployment

6. monitoring-stack/
- Prometheus + Grafana setup
- Custom dashboards
- Alerting rules
```