Program

DevOps Engineer Mastery

120 days · about 4 months3 available117 plannedPhase 01 now

0/120

0% complete

Up next

Git recoveryDay 2

This phase

Phase 01 · Foundations

Complete Now Available Planned

Day 1Shell from zeroTerminal vs shell, PATH, I/O, exit codes, quoting, export. Honest scores. Write the no-AI rule.Now
Day 2Git recoveryHappy path first, then reset --hard, reflog, revert a middle commit, restore a deleted branch.Start
Day 3Merge vs rebaseReal conflict. Abort a bad rebase. When rebase is forbidden on shared main.Start
Day 4Permissions as an incidentnamei -l, uid/gid, file 640 vs directory 755. Why chmod 777 is not a fix.Planned
Day 5Processes + systemdRuns by hand, dies on boot. journalctl. start vs enable, restart vs reload.Planned
Day 6Disk, memory, CPU, iowaitFirst ten commands with why. High load with idle CPU. df vs inodes vs deleted-open.Planned
Day 7Logs as searchTime window, exit codes, rotated files. Current file clean does not mean nothing happened.Planned
Day 8Host network bind127.0.0.1 vs 0.0.0.0, ss, curl -v. Process up, not reachable.Planned
Day 9HTTP as a systemDNS → TCP → TLS → HTTP. GET vs POST. 4xx vs 5xx. HTTPS fails, HTTP works.Planned
Day 10DNS + TLSA/CNAME/TTL, cache, split horizon. SAN/SNI/expiry. Wrong name on the cert.Planned
Day 11Bash health.sh, no-AIset -euo pipefail. Disk + process + HTTP checks. CI cares about $?.Planned
Day 12Foundations mockDisk full, bad reset, app up / port dead, read a curl -v trace. Re-score Linux/Git/HTTP.Planned

The spine

Eleven phases

The whole path. This phase lists the days you can do now. Later phases open as titles - planned days are names, not empty pages.

Phase 01Foundations
Days 1–120/12you are here
Phase 02Azure networking + identity
Days 13–180/6
1. Day 13CIDR as AKS mathNodes vs pods vs services. Overlay vs Azure CNI order-of-magnitude.Planned
2. Day 14VNet, subnet, NSGEffective routes. Prove a deny. NSG drop vs app bug.Planned
3. Day 15Private Endpoint vs service endpointPacket path to Storage and Key Vault. Cost and complexity trade-off.Planned
4. Day 16Private DNS + VNet linksLinked vs unlinked answers. PE NIC exists, public DNS still used.Planned
5. Day 17Identity as a systemUser vs app vs workload. Secret vs federated credential. Azure RBAC vs data-plane.Planned
6. Day 18Azure net + identity weekendOral: works in VNet, fails on the internet. One-pager of NSG + DNS + PE.Planned
Phase 03Write CI
Days 19–260/8
1. Day 19First Azure DevOps pipeline, no-AITrigger, pool, checkout, script, publish artifact. Read the indent error yourself.Planned
2. Day 20Rewrite from memoryParameters vs variables. Compile-time vs runtime.Planned
3. Day 21Build once, deploy from artifactBuild stage publishes; deploy stage downloads. Prod must not rebuild.Planned
4. Day 22Pipeline templatestemplates/build.yml plus a caller. How you version templates for many apps.Planned
5. Day 23Environments and secretsApprovals, service connections, Key Vault variable group. Secret in logs - prevention + rotation.Planned
6. Day 24Rollout strategyRolling vs blue-green vs canary. Two rollback paths. Prod failed at 40%.Planned
7. Day 25GitHub Actions + OIDCFederated credential. Login to Azure without AZURE_CLIENT_SECRET.Planned
8. Day 26Jenkins survival + honest ownershipController/agent/Jenkinsfile in 90 minutes, then stop. Annotate a sanitized work pipeline.Planned
Phase 04First Terraform
Days 27–280/2
1. Day 27First Terraform, no-AIProvider azurerm, resource group, storage, variables, outputs. Resource vs data source.Planned
2. Day 28State lock on paperSame stack from memory. Backend azurerm block. Why two pipelines on one state fail.Planned
Phase 05Containers + app
Days 29–360/8
1. Day 29FastAPI health endpoints/, /health, /ready. Bind 0.0.0.0. Version from env.Planned
2. Day 30First DockerfileBuild. Run. Hit health.Planned
3. Day 31Multi-stage + non-rootPermission denied after USER - fix. Layers, cache, CMD vs ENTRYPOINT.Planned
4. Day 32Container internalsNamespace, cgroup, union filesystem, PID 1. Prove with docker top / inspect.Planned
5. Day 33Compose + PostgresVolume + healthcheck. App starts before DB - fix readiness.Planned
6. Day 34Forced container failuresBad ENTRYPOINT, missing env, unpublished port. logs / inspect / exec.Planned
7. Day 35TrivyFail vs warn vs ticket. Registry 401 notes.Planned
8. Day 36Stranger-can-run weekendREADME a stranger can run. Parse Trivy JSON, exit 1 on CRITICAL.Planned
Phase 06Kubernetes
Days 37–620/26
1. Day 37Control plane vs nodeapiserver, etcd, scheduler, controller-manager, kubelet, runtime. What kubectl apply does.Planned
2. Day 38Pod YAML, no-AIImagePullBackOff on purpose.Planned
3. Day 39Deployment + rolloutrollout and undo.Planned
4. Day 40Service selector mismatchEmpty Endpoints. Fix. First apply gate.Planned
5. Day 41ClusterIP / NodePort / LBWhy ClusterIP is the default.Planned
6. Day 42ConfigMap + SecretWhy a Kubernetes Secret is not Key Vault. Rollout after a CM change.Planned
7. Day 43Namespaces + quotaPending because of quota, not nodes.Planned
8. Day 44ProbesRunning but not Ready.Planned
9. Day 45Requests, limits, OOMKilledWhat the kubelet actually does with numbers you set.Planned
10. Day 46HPAStuck because metrics-server is missing - that is the lesson.Planned
11. Day 47Ingress 404 vs 502Trace the path before you change YAML.Planned
12. Day 48PV / PVC / StorageClassAzure Disk vs Files as a table. PVC Pending.Planned
13. Day 49RBACcan-i. Forbidden on deploy.Planned
14. Day 50NetworkPolicyDefault-deny plus allow from ingress.Planned
15. Day 51PDB + drainDrain stuck. Why disruption budgets exist.Planned
16. Day 52Taints, tolerations, affinityPending unschedulable.Planned
17. Day 53Job / CronJobWhen the thing is not a Deployment.Planned
18. Day 54Cluster DNSCoreDNS path. Break a Service name.Planned
19. Day 55CrashLoopBackOff cataloguelogs --previous. Rank hypotheses.Planned
20. Day 56ImagePullBackOff catalogueName, tag, registry, auth.Planned
21. Day 57Pending catalogueCPU, taint, PVC, quota.Planned
22. Day 58Ingress 502, scale-to-zeroIngress → Service → Endpoints → Pod.Planned
23. Day 59Local capstone deployDeploy, Service, Ingress, ConfigMap, probes.Planned
24. Day 60Kubernetes interview gate60-minute broken namespace. Re-score Kubernetes.Planned
25. Day 61QoS classesEviction vs OOM.Planned
26. Day 62Topology / AZ intentAll replicas on one node as the failure mode.Planned
Phase 07AKS
Days 63–760/14
1. Day 63AKS inventoryVersion, plugin, identity, node pools. What you do not manage.Planned
2. Day 64System vs user poolTaints. Why they are separate.Planned
3. Day 65CNI vs overlayOutbound type, service CIDR.Planned
4. Day 66ACR pull via kubelet identityNo admin password. ImagePullBackOff from ACR.Planned
5. Day 67Ingress on AKSExternal IP / NSG / DNS. AGIC vs nginx as a table.Planned
6. Day 68Workload identityFederated credential + SA annotation. Seven-step Key Vault trace on paper.Planned
7. Day 69Finish the Key Vault pathOr write the exact blocker. Private Endpoint + DNS if KV is private.Planned
8. Day 70Private cluster accessHow CI reaches the API server. Do not lock yourself out.Planned
9. Day 71AKS upgrade runbookControl plane then nodes, surge, PDB, N-1.Planned
10. Day 72HPA + cluster autoscalerPending pods, CA does not add nodes (quota/SKU/zone).Planned
11. Day 73Container InsightsWhere container logs actually live.Planned
12. Day 74KQLImagePull or OOM in the right table. Five saved queries.Planned
13. Day 75Who can get-credentialsLocal accounts vs Azure RBAC.Planned
14. Day 76AKS oral + costACR + KV + ingress + upgrade. Cost of leaving the cluster on.Planned
Phase 08Terraform + Helm
Days 77–880/12
1. Day 77Rewrite Day 27 from memoryAdd tags + outputs. No-AI.Planned
2. Day 78Remote state + lockSeparate state key per env. Why workspaces are not prod isolation.Planned
3. Day 79First real module interfaceRequired variables listed. Network or RG.Planned
4. Day 80Import + prevent_destroyImport a hand-made RG. lifecycle.prevent_destroy on something safe.Planned
5. Day 81DriftChange a tag in portal, plan, adopt or revert. Two pipelines, one state.Planned
6. Day 82Checkov + secrets in stateNo tfvars secrets in git.Planned
7. Day 83Capstone modules INetwork, AKS, ACR. Plan has no surprise destroys.Planned
8. Day 84Capstone modules IIKey Vault + identities.Planned
9. Day 85Capstone modules IIIMonitor. Destroy path written.Planned
10. Day 86Helm chart, no-AIvalues-dev and values-prod: image tag, replicas, env.Planned
11. Day 87helm upgrade + rollbackhistory. Render the wrong tag on purpose.Planned
12. Day 88Capstone path livecode → CI → ACR → TF AKS → Helm. Honest red boxes on PATH.md.Planned
Phase 09Operate
Days 89–960/8
1. Day 89Pipeline gatesSecret scan + Trivy + Checkov. Fail on CRITICAL plus an exception process.Planned
2. Day 90Identity rehearsalFrom memory. Compare to Day 68.Planned
3. Day 91Layered controlsNSG vs NetworkPolicy vs PE. We opened the NSG and pods still cannot talk.Planned
4. Day 92Three alerts with ownersCrashloop, 5xx, node pressure. Kill a noisy deploy alert.Planned
5. Day 93Timeouts, retries, idempotencyOn the app and the pipeline. One paragraph each.Planned
6. Day 94SLI/SLO for this APIAvailability, latency, error rate. Invalid if you cannot measure.Planned
7. Day 95Break a prod-like deployBad tag. Detect with alert or KQL.Planned
8. Day 96INC-001Mitigate with Helm rollback. Write the incident. Re-score.Planned
Phase 10Design + resume
Days 97–1080/12
1. Day 97CI for many servicesGolden template + exceptions. No new products.Planned
2. Day 98AKS for more than one teamNamespace vs cluster, quotas, identity.Planned
3. Day 99Private AKS + CIHow CI reaches the API server.Planned
4. Day 100Secrets architectureNo long-lived secret in Git or pod YAML.Planned
5. Day 101Env + artifact promotionTF state on one picture.Planned
6. Day 102HA + rollbackPDB, HPA, zones, Helm undo, stop the pipeline.Planned
7. Day 103What you measure whereIngress vs pod vs pipeline.Planned
8. Day 104Resume v1 freezeOnly claims with evidence.Planned
9. Day 105Capstone story, 60 secondsWhat you built, what broke, what you would change.Planned
10. Day 106Capstone story, 10 minutesArchitecture, failure, security, cost, rollback.Planned
11. Day 107LinkedIn About from evidenceNo unverifiable lines.Planned
12. Day 108Tag capstone-v1No new tools. Freeze the system you can defend.Planned
Phase 11War room
Days 109–1200/12
1. Day 109Resume vs live JDsRemove unverifiable lines.Planned
2. Day 110Git + Linux mock45 minutes. No notes first.Planned
3. Day 111ADO + GHA blank-file45 minutes.Planned
4. Day 112Dockerfile from memoryMulti-stage, non-root.Planned
5. Day 113Kubernetes mock90 minutes. Hardest block.Planned
6. Day 114AKS + networking + KV traceSeven steps out loud.Planned
7. Day 115Terraform blank-file + stateLock, drift, two pipelines.Planned
8. Day 116Incident + KQLUsing INC-001.Planned
9. Day 117Design mockDay 97 or 99.Planned
10. Day 118Full 90-minute loopUnfamiliar symptoms.Planned
11. Day 119Close top 3 weaknessesOnly those three. No new topics.Planned
12. Day 120Re-score the matrixHonest gaps. Evidence only.Planned

Phase 01 · Foundations

Complete Now Available Planned

Day 1Shell from zeroTerminal vs shell, PATH, I/O, exit codes, quoting, export. Honest scores. Write the no-AI rule.Now

Day 2Git recoveryHappy path first, then reset --hard, reflog, revert a middle commit, restore a deleted branch.Start

Day 3Merge vs rebaseReal conflict. Abort a bad rebase. When rebase is forbidden on shared main.Start

Day 4Permissions as an incidentnamei -l, uid/gid, file 640 vs directory 755. Why chmod 777 is not a fix.Planned

Day 5Processes + systemdRuns by hand, dies on boot. journalctl. start vs enable, restart vs reload.Planned

Day 6Disk, memory, CPU, iowaitFirst ten commands with why. High load with idle CPU. df vs inodes vs deleted-open.Planned

Day 7Logs as searchTime window, exit codes, rotated files. Current file clean does not mean nothing happened.Planned

Day 8Host network bind127.0.0.1 vs 0.0.0.0, ss, curl -v. Process up, not reachable.Planned

Day 9HTTP as a systemDNS → TCP → TLS → HTTP. GET vs POST. 4xx vs 5xx. HTTPS fails, HTTP works.Planned

Day 10DNS + TLSA/CNAME/TTL, cache, split horizon. SAN/SNI/expiry. Wrong name on the cert.Planned

Day 11Bash health.sh, no-AIset -euo pipefail. Disk + process + HTTP checks. CI cares about $?.Planned

Day 12Foundations mockDisk full, bad reset, app up / port dead, read a curl -v trace. Re-score Linux/Git/HTTP.Planned

Eleven phases

The whole path. This phase lists the days you can do now. Later phases open as titles - planned days are names, not empty pages.

Phase 01Foundations
Days 1–120/12you are here
Phase 02Azure networking + identity
Days 13–180/6
1. Day 13CIDR as AKS mathNodes vs pods vs services. Overlay vs Azure CNI order-of-magnitude.Planned
2. Day 14VNet, subnet, NSGEffective routes. Prove a deny. NSG drop vs app bug.Planned
3. Day 15Private Endpoint vs service endpointPacket path to Storage and Key Vault. Cost and complexity trade-off.Planned
4. Day 16Private DNS + VNet linksLinked vs unlinked answers. PE NIC exists, public DNS still used.Planned
5. Day 17Identity as a systemUser vs app vs workload. Secret vs federated credential. Azure RBAC vs data-plane.Planned
6. Day 18Azure net + identity weekendOral: works in VNet, fails on the internet. One-pager of NSG + DNS + PE.Planned
Phase 03Write CI
Days 19–260/8
1. Day 19First Azure DevOps pipeline, no-AITrigger, pool, checkout, script, publish artifact. Read the indent error yourself.Planned
2. Day 20Rewrite from memoryParameters vs variables. Compile-time vs runtime.Planned
3. Day 21Build once, deploy from artifactBuild stage publishes; deploy stage downloads. Prod must not rebuild.Planned
4. Day 22Pipeline templatestemplates/build.yml plus a caller. How you version templates for many apps.Planned
5. Day 23Environments and secretsApprovals, service connections, Key Vault variable group. Secret in logs - prevention + rotation.Planned
6. Day 24Rollout strategyRolling vs blue-green vs canary. Two rollback paths. Prod failed at 40%.Planned
7. Day 25GitHub Actions + OIDCFederated credential. Login to Azure without AZURE_CLIENT_SECRET.Planned
8. Day 26Jenkins survival + honest ownershipController/agent/Jenkinsfile in 90 minutes, then stop. Annotate a sanitized work pipeline.Planned
Phase 04First Terraform
Days 27–280/2
1. Day 27First Terraform, no-AIProvider azurerm, resource group, storage, variables, outputs. Resource vs data source.Planned
2. Day 28State lock on paperSame stack from memory. Backend azurerm block. Why two pipelines on one state fail.Planned
Phase 05Containers + app
Days 29–360/8
1. Day 29FastAPI health endpoints/, /health, /ready. Bind 0.0.0.0. Version from env.Planned
2. Day 30First DockerfileBuild. Run. Hit health.Planned
3. Day 31Multi-stage + non-rootPermission denied after USER - fix. Layers, cache, CMD vs ENTRYPOINT.Planned
4. Day 32Container internalsNamespace, cgroup, union filesystem, PID 1. Prove with docker top / inspect.Planned
5. Day 33Compose + PostgresVolume + healthcheck. App starts before DB - fix readiness.Planned
6. Day 34Forced container failuresBad ENTRYPOINT, missing env, unpublished port. logs / inspect / exec.Planned
7. Day 35TrivyFail vs warn vs ticket. Registry 401 notes.Planned
8. Day 36Stranger-can-run weekendREADME a stranger can run. Parse Trivy JSON, exit 1 on CRITICAL.Planned
Phase 06Kubernetes
Days 37–620/26
1. Day 37Control plane vs nodeapiserver, etcd, scheduler, controller-manager, kubelet, runtime. What kubectl apply does.Planned
2. Day 38Pod YAML, no-AIImagePullBackOff on purpose.Planned
3. Day 39Deployment + rolloutrollout and undo.Planned
4. Day 40Service selector mismatchEmpty Endpoints. Fix. First apply gate.Planned
5. Day 41ClusterIP / NodePort / LBWhy ClusterIP is the default.Planned
6. Day 42ConfigMap + SecretWhy a Kubernetes Secret is not Key Vault. Rollout after a CM change.Planned
7. Day 43Namespaces + quotaPending because of quota, not nodes.Planned
8. Day 44ProbesRunning but not Ready.Planned
9. Day 45Requests, limits, OOMKilledWhat the kubelet actually does with numbers you set.Planned
10. Day 46HPAStuck because metrics-server is missing - that is the lesson.Planned
11. Day 47Ingress 404 vs 502Trace the path before you change YAML.Planned
12. Day 48PV / PVC / StorageClassAzure Disk vs Files as a table. PVC Pending.Planned
13. Day 49RBACcan-i. Forbidden on deploy.Planned
14. Day 50NetworkPolicyDefault-deny plus allow from ingress.Planned
15. Day 51PDB + drainDrain stuck. Why disruption budgets exist.Planned
16. Day 52Taints, tolerations, affinityPending unschedulable.Planned
17. Day 53Job / CronJobWhen the thing is not a Deployment.Planned
18. Day 54Cluster DNSCoreDNS path. Break a Service name.Planned
19. Day 55CrashLoopBackOff cataloguelogs --previous. Rank hypotheses.Planned
20. Day 56ImagePullBackOff catalogueName, tag, registry, auth.Planned
21. Day 57Pending catalogueCPU, taint, PVC, quota.Planned
22. Day 58Ingress 502, scale-to-zeroIngress → Service → Endpoints → Pod.Planned
23. Day 59Local capstone deployDeploy, Service, Ingress, ConfigMap, probes.Planned
24. Day 60Kubernetes interview gate60-minute broken namespace. Re-score Kubernetes.Planned
25. Day 61QoS classesEviction vs OOM.Planned
26. Day 62Topology / AZ intentAll replicas on one node as the failure mode.Planned
Phase 07AKS
Days 63–760/14
1. Day 63AKS inventoryVersion, plugin, identity, node pools. What you do not manage.Planned
2. Day 64System vs user poolTaints. Why they are separate.Planned
3. Day 65CNI vs overlayOutbound type, service CIDR.Planned
4. Day 66ACR pull via kubelet identityNo admin password. ImagePullBackOff from ACR.Planned
5. Day 67Ingress on AKSExternal IP / NSG / DNS. AGIC vs nginx as a table.Planned
6. Day 68Workload identityFederated credential + SA annotation. Seven-step Key Vault trace on paper.Planned
7. Day 69Finish the Key Vault pathOr write the exact blocker. Private Endpoint + DNS if KV is private.Planned
8. Day 70Private cluster accessHow CI reaches the API server. Do not lock yourself out.Planned
9. Day 71AKS upgrade runbookControl plane then nodes, surge, PDB, N-1.Planned
10. Day 72HPA + cluster autoscalerPending pods, CA does not add nodes (quota/SKU/zone).Planned
11. Day 73Container InsightsWhere container logs actually live.Planned
12. Day 74KQLImagePull or OOM in the right table. Five saved queries.Planned
13. Day 75Who can get-credentialsLocal accounts vs Azure RBAC.Planned
14. Day 76AKS oral + costACR + KV + ingress + upgrade. Cost of leaving the cluster on.Planned
Phase 08Terraform + Helm
Days 77–880/12
1. Day 77Rewrite Day 27 from memoryAdd tags + outputs. No-AI.Planned
2. Day 78Remote state + lockSeparate state key per env. Why workspaces are not prod isolation.Planned
3. Day 79First real module interfaceRequired variables listed. Network or RG.Planned
4. Day 80Import + prevent_destroyImport a hand-made RG. lifecycle.prevent_destroy on something safe.Planned
5. Day 81DriftChange a tag in portal, plan, adopt or revert. Two pipelines, one state.Planned
6. Day 82Checkov + secrets in stateNo tfvars secrets in git.Planned
7. Day 83Capstone modules INetwork, AKS, ACR. Plan has no surprise destroys.Planned
8. Day 84Capstone modules IIKey Vault + identities.Planned
9. Day 85Capstone modules IIIMonitor. Destroy path written.Planned
10. Day 86Helm chart, no-AIvalues-dev and values-prod: image tag, replicas, env.Planned
11. Day 87helm upgrade + rollbackhistory. Render the wrong tag on purpose.Planned
12. Day 88Capstone path livecode → CI → ACR → TF AKS → Helm. Honest red boxes on PATH.md.Planned
Phase 09Operate
Days 89–960/8
1. Day 89Pipeline gatesSecret scan + Trivy + Checkov. Fail on CRITICAL plus an exception process.Planned
2. Day 90Identity rehearsalFrom memory. Compare to Day 68.Planned
3. Day 91Layered controlsNSG vs NetworkPolicy vs PE. We opened the NSG and pods still cannot talk.Planned
4. Day 92Three alerts with ownersCrashloop, 5xx, node pressure. Kill a noisy deploy alert.Planned
5. Day 93Timeouts, retries, idempotencyOn the app and the pipeline. One paragraph each.Planned
6. Day 94SLI/SLO for this APIAvailability, latency, error rate. Invalid if you cannot measure.Planned
7. Day 95Break a prod-like deployBad tag. Detect with alert or KQL.Planned
8. Day 96INC-001Mitigate with Helm rollback. Write the incident. Re-score.Planned
Phase 10Design + resume
Days 97–1080/12
1. Day 97CI for many servicesGolden template + exceptions. No new products.Planned
2. Day 98AKS for more than one teamNamespace vs cluster, quotas, identity.Planned
3. Day 99Private AKS + CIHow CI reaches the API server.Planned
4. Day 100Secrets architectureNo long-lived secret in Git or pod YAML.Planned
5. Day 101Env + artifact promotionTF state on one picture.Planned
6. Day 102HA + rollbackPDB, HPA, zones, Helm undo, stop the pipeline.Planned
7. Day 103What you measure whereIngress vs pod vs pipeline.Planned
8. Day 104Resume v1 freezeOnly claims with evidence.Planned
9. Day 105Capstone story, 60 secondsWhat you built, what broke, what you would change.Planned
10. Day 106Capstone story, 10 minutesArchitecture, failure, security, cost, rollback.Planned
11. Day 107LinkedIn About from evidenceNo unverifiable lines.Planned
12. Day 108Tag capstone-v1No new tools. Freeze the system you can defend.Planned
Phase 11War room
Days 109–1200/12
1. Day 109Resume vs live JDsRemove unverifiable lines.Planned
2. Day 110Git + Linux mock45 minutes. No notes first.Planned
3. Day 111ADO + GHA blank-file45 minutes.Planned
4. Day 112Dockerfile from memoryMulti-stage, non-root.Planned
5. Day 113Kubernetes mock90 minutes. Hardest block.Planned
6. Day 114AKS + networking + KV traceSeven steps out loud.Planned
7. Day 115Terraform blank-file + stateLock, drift, two pipelines.Planned
8. Day 116Incident + KQLUsing INC-001.Planned
9. Day 117Design mockDay 97 or 99.Planned
10. Day 118Full 90-minute loopUnfamiliar symptoms.Planned
11. Day 119Close top 3 weaknessesOnly those three. No new topics.Planned
12. Day 120Re-score the matrixHonest gaps. Evidence only.Planned