@hienlh/ppm 0.9.79 → 0.9.81

package/.opencode/skills/devops/references/gcloud-platform.md

@@ -0,0 +1,297 @@
+# Google Cloud Platform with gcloud CLI
+
+Comprehensive guide for gcloud CLI - command-line interface for Google Cloud Platform.
+
+## Installation
+
+### Linux
+```bash
+curl -O https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-linux-x86_64.tar.gz
+tar -xf google-cloud-cli-linux-x86_64.tar.gz
+./google-cloud-sdk/install.sh
+./google-cloud-sdk/bin/gcloud init
+```
+
+### Debian/Ubuntu
+```bash
+echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
+sudo apt-get update && sudo apt-get install google-cloud-cli
+```
+
+### macOS
+```bash
+curl -O https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-darwin-arm.tar.gz
+tar -xf google-cloud-cli-darwin-arm.tar.gz
+./google-cloud-sdk/install.sh
+```
+
+## Authentication
+
+### User Account
+```bash
+# Login with browser
+gcloud auth login
+
+# Login without browser (remote/headless)
+gcloud auth login --no-browser
+
+# List accounts
+gcloud auth list
+
+# Switch account
+gcloud config set account user@example.com
+```
+
+### Service Account
+```bash
+# Activate with key file
+gcloud auth activate-service-account SA_EMAIL --key-file=key.json
+
+# Create service account
+gcloud iam service-accounts create SA_NAME \
+  --display-name="Service Account"
+
+# Create key
+gcloud iam service-accounts keys create key.json \
+  --iam-account=SA_EMAIL
+
+# Grant role
+gcloud projects add-iam-policy-binding PROJECT_ID \
+  --member="serviceAccount:SA_EMAIL" \
+  --role="roles/compute.admin"
+```
+
+### Service Account Impersonation (Recommended)
+```bash
+# Impersonate for single command
+gcloud compute instances list \
+  --impersonate-service-account=SA_EMAIL
+
+# Set default impersonation
+gcloud config set auth/impersonate_service_account SA_EMAIL
+
+# Clear impersonation
+gcloud config unset auth/impersonate_service_account
+```
+
+Why impersonation? Short-lived credentials, no key files, centralized management.
+
+## Configuration Management
+
+### Named Configurations
+```bash
+# Create configuration
+gcloud config configurations create dev
+
+# List configurations
+gcloud config configurations list
+
+# Activate configuration
+gcloud config configurations activate dev
+
+# Set properties
+gcloud config set project my-project-dev
+gcloud config set compute/region us-central1
+gcloud config set compute/zone us-central1-a
+
+# View properties
+gcloud config list
+
+# Delete configuration
+gcloud config configurations delete dev
+```
+
+### Multi-Environment Pattern
+```bash
+# Development
+gcloud config configurations create dev
+gcloud config set project my-project-dev
+gcloud config set account dev@example.com
+
+# Staging
+gcloud config configurations create staging
+gcloud config set project my-project-staging
+gcloud config set auth/impersonate_service_account staging-sa@project.iam.gserviceaccount.com
+
+# Production
+gcloud config configurations create prod
+gcloud config set project my-project-prod
+gcloud config set auth/impersonate_service_account prod-sa@project.iam.gserviceaccount.com
+```
+
+## Project Management
+
+```bash
+# List projects
+gcloud projects list
+
+# Create project
+gcloud projects create PROJECT_ID --name="Project Name"
+
+# Set active project
+gcloud config set project PROJECT_ID
+
+# Get current project
+gcloud config get-value project
+
+# Enable API
+gcloud services enable compute.googleapis.com
+gcloud services enable container.googleapis.com
+
+# List enabled APIs
+gcloud services list
+```
+
+## Output Formats
+
+```bash
+# JSON (recommended for scripting)
+gcloud compute instances list --format=json
+
+# YAML
+gcloud compute instances list --format=yaml
+
+# CSV
+gcloud compute instances list --format="csv(name,zone,status)"
+
+# Value (single field)
+gcloud config get-value project --format="value()"
+
+# Custom table
+gcloud compute instances list \
+  --format="table(name,zone,machineType,status)"
+```
+
+## Filtering
+
+```bash
+# Server-side filtering (efficient)
+gcloud compute instances list --filter="zone:us-central1-a"
+gcloud compute instances list --filter="status=RUNNING"
+gcloud compute instances list --filter="name~^web-.*"
+
+# Multiple conditions
+gcloud compute instances list \
+  --filter="zone:us-central1 AND status=RUNNING"
+
+# Negation
+gcloud compute instances list --filter="NOT status=TERMINATED"
+```
+
+## CI/CD Integration
+
+### GitHub Actions
+```yaml
+name: Deploy to GCP
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - id: auth
+        uses: google-github-actions/auth@v1
+        with:
+          credentials_json: ${{ secrets.GCP_SA_KEY }}
+
+      - name: Set up Cloud SDK
+        uses: google-github-actions/setup-gcloud@v1
+
+      - name: Deploy
+        run: |
+          gcloud run deploy my-service \
+            --image=gcr.io/${{ secrets.GCP_PROJECT_ID }}/my-image \
+            --region=us-central1
+```
+
+### GitLab CI
+```yaml
+deploy:
+  image: google/cloud-sdk:alpine
+  script:
+    - echo $GCP_SA_KEY | base64 -d > key.json
+    - gcloud auth activate-service-account --key-file=key.json
+    - gcloud config set project $GCP_PROJECT_ID
+    - gcloud app deploy
+  only:
+    - main
+```
+
+## Best Practices
+
+### Security
+- Never commit credentials
+- Use service account impersonation
+- Grant minimal IAM permissions
+- Rotate keys regularly
+
+### Performance
+- Use server-side filtering: `--filter`
+- Limit output: `--limit=10`
+- Project only needed fields: `--format="value(name)"`
+- Batch operations with `--async`
+
+### Maintainability
+- Use named configurations for environments
+- Document commands
+- Use environment variables
+- Implement error handling and retries
+
+## Troubleshooting
+
+```bash
+# Check authentication
+gcloud auth list
+
+# Re-authenticate
+gcloud auth login
+gcloud auth application-default login
+
+# Check IAM permissions
+gcloud projects get-iam-policy PROJECT_ID \
+  --flatten="bindings[].members" \
+  --filter="bindings.members:user@example.com"
+
+# View configuration
+gcloud config list
+
+# Reset configuration
+gcloud config configurations delete default
+gcloud init
+```
+
+## Quick Reference
+
+| Task | Command |
+|------|---------|
+| Initialize | `gcloud init` |
+| Login | `gcloud auth login` |
+| Set project | `gcloud config set project PROJECT_ID` |
+| List resources | `gcloud [SERVICE] list` |
+| Create resource | `gcloud [SERVICE] create RESOURCE` |
+| Delete resource | `gcloud [SERVICE] delete RESOURCE` |
+| Get help | `gcloud [SERVICE] --help` |
+
+## Global Flags
+
+| Flag | Purpose |
+|------|---------|
+| `--project` | Override project |
+| `--format` | Output format (json, yaml, csv) |
+| `--filter` | Server-side filter |
+| `--limit` | Limit results |
+| `--quiet` | Suppress prompts |
+| `--verbosity` | Log level (debug, info, warning, error) |
+| `--async` | Don't wait for operation |
+
+## Resources
+
+- gcloud Reference: https://cloud.google.com/sdk/gcloud/reference
+- Installation: https://cloud.google.com/sdk/docs/install
+- Authentication: https://cloud.google.com/docs/authentication
+- Cheatsheet: https://cloud.google.com/sdk/docs/cheatsheet

package/.opencode/skills/devops/references/gcloud-services.md

@@ -0,0 +1,304 @@
+# Google Cloud Services
+
+## Compute Engine (VMs)
+
+```bash
+# List instances
+gcloud compute instances list
+
+# Create instance
+gcloud compute instances create my-instance \
+  --zone=us-central1-a \
+  --machine-type=e2-medium \
+  --image-family=debian-11 \
+  --image-project=debian-cloud \
+  --boot-disk-size=10GB
+
+# SSH into instance
+gcloud compute ssh my-instance --zone=us-central1-a
+
+# Copy files
+gcloud compute scp local-file.txt my-instance:~/remote-file.txt \
+  --zone=us-central1-a
+
+# Stop instance
+gcloud compute instances stop my-instance --zone=us-central1-a
+
+# Delete instance
+gcloud compute instances delete my-instance --zone=us-central1-a
+```
+
+## Google Kubernetes Engine (GKE)
+
+```bash
+# Create cluster
+gcloud container clusters create my-cluster \
+  --zone=us-central1-a \
+  --num-nodes=3 \
+  --machine-type=e2-medium
+
+# Get credentials
+gcloud container clusters get-credentials my-cluster --zone=us-central1-a
+
+# List clusters
+gcloud container clusters list
+
+# Resize cluster
+gcloud container clusters resize my-cluster \
+  --num-nodes=5 \
+  --zone=us-central1-a
+
+# Delete cluster
+gcloud container clusters delete my-cluster --zone=us-central1-a
+```
+
+## Cloud Run (Serverless Containers)
+
+```bash
+# Deploy container
+gcloud run deploy my-service \
+  --image=gcr.io/PROJECT_ID/my-image:tag \
+  --platform=managed \
+  --region=us-central1 \
+  --allow-unauthenticated
+
+# List services
+gcloud run services list
+
+# Describe service
+gcloud run services describe my-service --region=us-central1
+
+# Delete service
+gcloud run services delete my-service --region=us-central1
+```
+
+## App Engine
+
+```bash
+# Deploy application
+gcloud app deploy app.yaml
+
+# View application
+gcloud app browse
+
+# View logs
+gcloud app logs tail
+
+# List versions
+gcloud app versions list
+
+# Delete version
+gcloud app versions delete VERSION_ID
+
+# Set traffic split
+gcloud app services set-traffic SERVICE \
+  --splits v1=0.5,v2=0.5
+```
+
+## Cloud Storage
+
+```bash
+# Create bucket
+gsutil mb gs://my-bucket-name
+
+# Upload file
+gsutil cp local-file.txt gs://my-bucket-name/
+
+# Download file
+gsutil cp gs://my-bucket-name/file.txt ./
+
+# List contents
+gsutil ls gs://my-bucket-name/
+
+# Sync directory
+gsutil rsync -r ./local-dir gs://my-bucket-name/remote-dir
+
+# Set permissions
+gsutil iam ch user:user@example.com:objectViewer gs://my-bucket-name
+
+# Delete bucket
+gsutil rm -r gs://my-bucket-name
+```
+
+## Cloud SQL
+
+```bash
+# Create instance
+gcloud sql instances create my-instance \
+  --database-version=POSTGRES_14 \
+  --tier=db-f1-micro \
+  --region=us-central1
+
+# Create database
+gcloud sql databases create my-database \
+  --instance=my-instance
+
+# Create user
+gcloud sql users create my-user \
+  --instance=my-instance \
+  --password=PASSWORD
+
+# Connect
+gcloud sql connect my-instance --user=my-user
+
+# Delete instance
+gcloud sql instances delete my-instance
+```
+
+## Cloud Functions
+
+```bash
+# Deploy function
+gcloud functions deploy my-function \
+  --runtime=python39 \
+  --trigger-http \
+  --allow-unauthenticated \
+  --entry-point=main
+
+# List functions
+gcloud functions list
+
+# Describe function
+gcloud functions describe my-function
+
+# Call function
+gcloud functions call my-function
+
+# Delete function
+gcloud functions delete my-function
+```
+
+## BigQuery
+
+```bash
+# List datasets
+bq ls
+
+# Create dataset
+bq mk my_dataset
+
+# Load data
+bq load --source_format=CSV my_dataset.my_table \
+  gs://my-bucket/data.csv \
+  schema.json
+
+# Query
+bq query --use_legacy_sql=false \
+  'SELECT * FROM `my_dataset.my_table` LIMIT 10'
+
+# Delete dataset
+bq rm -r -f my_dataset
+```
+
+## Cloud Build
+
+```bash
+# Submit build
+gcloud builds submit --tag=gcr.io/PROJECT_ID/my-image
+
+# List builds
+gcloud builds list
+
+# Describe build
+gcloud builds describe BUILD_ID
+
+# Cancel build
+gcloud builds cancel BUILD_ID
+```
+
+## Artifact Registry
+
+```bash
+# Create repository
+gcloud artifacts repositories create my-repo \
+  --repository-format=docker \
+  --location=us-central1
+
+# Configure Docker
+gcloud auth configure-docker us-central1-docker.pkg.dev
+
+# Push image
+docker tag my-image us-central1-docker.pkg.dev/PROJECT_ID/my-repo/my-image
+docker push us-central1-docker.pkg.dev/PROJECT_ID/my-repo/my-image
+
+# List repositories
+gcloud artifacts repositories list
+```
+
+## Networking
+
+```bash
+# Create VPC network
+gcloud compute networks create my-network \
+  --subnet-mode=auto
+
+# Create firewall rule
+gcloud compute firewall-rules create allow-http \
+  --network=my-network \
+  --allow=tcp:80
+
+# List networks
+gcloud compute networks list
+
+# List firewall rules
+gcloud compute firewall-rules list
+```
+
+## IAM
+
+```bash
+# List IAM policy
+gcloud projects get-iam-policy PROJECT_ID
+
+# Add IAM binding
+gcloud projects add-iam-policy-binding PROJECT_ID \
+  --member="user:user@example.com" \
+  --role="roles/viewer"
+
+# Remove IAM binding
+gcloud projects remove-iam-policy-binding PROJECT_ID \
+  --member="user:user@example.com" \
+  --role="roles/viewer"
+
+# List service accounts
+gcloud iam service-accounts list
+```
+
+## Monitoring & Logging
+
+```bash
+# View logs
+gcloud logging read "resource.type=gce_instance" \
+  --limit=10 \
+  --format=json
+
+# Create log sink
+gcloud logging sinks create my-sink \
+  storage.googleapis.com/my-bucket \
+  --log-filter="resource.type=gce_instance"
+
+# List metrics
+gcloud monitoring metrics-descriptors list
+```
+
+## Quick Reference
+
+| Service | Command Prefix |
+|---------|----------------|
+| Compute Engine | `gcloud compute` |
+| GKE | `gcloud container` |
+| Cloud Run | `gcloud run` |
+| App Engine | `gcloud app` |
+| Cloud Storage | `gsutil` |
+| BigQuery | `bq` |
+| Cloud SQL | `gcloud sql` |
+| Cloud Functions | `gcloud functions` |
+| IAM | `gcloud iam` |
+
+## Resources
+
+- Compute Engine: https://cloud.google.com/compute/docs
+- GKE: https://cloud.google.com/kubernetes-engine/docs
+- Cloud Run: https://cloud.google.com/run/docs
+- App Engine: https://cloud.google.com/appengine/docs
+- Cloud Storage: https://cloud.google.com/storage/docs

package/.opencode/skills/devops/references/kubernetes-basics.md

@@ -0,0 +1,99 @@
+# Kubernetes Core Concepts
+
+## Cluster Architecture
+
+```
+CONTROL PLANE                    WORKER NODES
+├── API Server (kubectl)         ├── Kubelet (node agent)
+├── Scheduler (pod placement)    ├── Kube-proxy (networking)
+├── Controller Manager           └── Container Runtime
+└── etcd (cluster state)
+```
+
+## Pod
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: myapp-pod
+spec:
+  containers:
+  - name: myapp
+    image: myapp:1.0
+    ports:
+    - containerPort: 8080
+    resources:
+      requests: { memory: "256Mi", cpu: "250m" }
+      limits: { memory: "512Mi", cpu: "500m" }
+```
+
+## Deployment
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: myapp
+spec:
+  replicas: 3
+  strategy:
+    type: RollingUpdate
+    rollingUpdate: { maxSurge: 1, maxUnavailable: 0 }
+  selector:
+    matchLabels: { app: myapp }
+  template:
+    metadata:
+      labels: { app: myapp }
+    spec:
+      containers:
+      - name: myapp
+        image: myapp:1.0
+```
+
+## Service
+```yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: myapp-service
+spec:
+  type: ClusterIP  # ClusterIP, NodePort, LoadBalancer
+  selector: { app: myapp }
+  ports:
+  - port: 8080
+    targetPort: 8080
+```
+
+## ConfigMap & Secret
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: app-config
+data:
+  DATABASE_HOST: "postgres.svc.cluster.local"
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+stringData:
+  password: secretpassword
+```
+
+## Workload Types
+
+| Type | Use Case |
+|------|----------|
+| Deployment | Stateless apps |
+| StatefulSet | Databases |
+| DaemonSet | One per node |
+| Job | Batch tasks |
+| CronJob | Scheduled |
+
+## Labels
+```yaml
+labels:
+  app: myapp
+  version: v1.0.0
+  tier: frontend
+  environment: prod
+```