Le Trong Khanh

CI/CD Pipeline for Microservice Deployment

Built a complete CI/CD pipeline to automate building, testing, scanning, and deploying a containerized application to a Kubernetes cluster. The pipeline integrates code quality checks, security scanning, Docker image building, and GitOps-based deployment via Argo CD.

Challenge

Manual deployments are slow, error-prone, and hard to track. Needed a repeatable, automated workflow from commit to deployment.

Build

GitHub Actions pipeline with multi-stage Docker builds, Trivy scanning, SonarQube analysis, and Argo CD for GitOps-based K8s deployment.

Learn

Learned pipeline design, container security basics, GitOps workflow patterns, and debugging failed CI stages systematically.

Pipeline Flow

Checkout → Quality Check → Security Scan → Docker Build → Image Scan → Deploy → Argo CD Sync → API Test → Monitor

Pipeline Runs

Automated

Deploy Target

K3s Lab

GitOps

Argo CD

Scanning

Trivy

Kubernetes Cluster Setup & Management

Provisioned and managed a K3s Kubernetes cluster for deploying containerized workloads. Configured namespaces, deployments, services, ingress routing, and resource limits. Practiced troubleshooting pod failures and networking issues.

K3s kubectl Helm YAML manifests Ingress

AWS Infrastructure with Terraform

Defined AWS infrastructure as code using Terraform. Provisioned VPCs, subnets, security groups, EC2 instances, and S3 buckets. Practiced state management, module organization, and plan/apply workflows in a learning environment.

Terraform AWS VPC EC2 S3 IAM

Monitoring Stack with Prometheus & Grafana

Deployed a monitoring stack to collect metrics from containers and Kubernetes workloads. Set up Prometheus for scraping, Grafana for dashboards, and practiced writing alerting rules for resource usage thresholds.

Prometheus Grafana AlertManager Node Exporter

Linux Server Configuration & Hardening

Practiced Linux server administration including user management, SSH hardening, firewall configuration, log analysis, and Bash scripting for automation. Focused on security best practices and system troubleshooting.

Linux Bash SSH iptables systemd

AWS EC2 S3 IAM VPC RDS (basics) CloudWatch (basics)

Linux (Ubuntu/CentOS) Docker Docker Compose Kubernetes (K3s) Helm kubectl Bash Scripting

GitHub Actions Argo CD Terraform Ansible (basics) Git & GitOps

Prometheus Grafana SonarQube Trivy AlertManager

Python YAML JSON VS Code Terminal / SSH Technical Documentation

Phase 1 — Foundation

Linux & Networking Fundamentals

Built a strong foundation in Linux administration, command-line tools, file systems, process management, and basic networking concepts including DNS, TCP/IP, and firewall rules.

Linux CLI File Systems Networking SSH Bash

Phase 2 — Containerization

Docker & Container Fundamentals

Learned containerization concepts, Dockerfile best practices, multi-stage builds, Docker Compose for multi-container applications, image optimization, and container networking.

Docker Dockerfiles Compose Multi-stage Builds

Phase 3 — Current Focus

Kubernetes, CI/CD & GitOps

Currently building hands-on experience with Kubernetes cluster management, CI/CD pipeline design with GitHub Actions, GitOps workflows using Argo CD, and container security scanning with Trivy.

Kubernetes GitHub Actions Argo CD Trivy Helm

Phase 4 — Next Up

Cloud Infrastructure & IaC

Deepening AWS knowledge and Terraform skills. Planning to practice infrastructure provisioning, state management, module patterns, and multi-environment workflows.

AWS Terraform CloudFormation IaC Patterns

Phase 5 — Future Goal

Observability & Production Practices

Goal to build deeper skills in full-stack observability, log aggregation, distributed tracing, incident response workflows, and production reliability practices.

Prometheus Grafana ELK Stack SRE Practices

Background

I'm a self-taught aspiring Cloud/DevOps engineer based in Vietnam. I'm building my skills through structured self-study and hands-on lab projects, focusing on the tools and practices used in real cloud infrastructure teams.

I don't have professional experience yet — my goal is to earn an internship or junior position where I can learn from experienced engineers and contribute to real infrastructure challenges.

I believe in learning by building. Every project in this portfolio represents something I've set up, configured, broken, debugged, and learned from in my own lab environment.

What I Value

Honesty over hype. I'd rather be clear about what I know and what I'm still learning than overstate my abilities.

Fundamentals first. I focus on understanding concepts deeply — why something works, not just how to copy commands.

Documentation matters. I practice writing clear READMEs, architecture notes, and troubleshooting logs for my own projects.

Continuous improvement. Every week I aim to learn something new, build something small, and improve my understanding of cloud infrastructure.

Contact Information

le.trongkhanhqlv@gmail.com github.com/iam-trongkhanh linkedin.com/in/trongkhanh-cloud 0867 972 429

Ready to Learn & Contribute

I'm actively looking for internship or junior DevOps/Cloud positions where I can grow alongside experienced engineers.

Send Email

Lab Projects & Case Studies