DevOps & Infra

tomevault-io Bundle

HarmonyOS Device Automation

tomevault-io Bundle

kubernetes-cluster-design

tomevault-io Bundle

kubernetes-security-guide

tomevault-io Bundle

Azure PaaS Availability — Live Service Scanner

tomevault-io Bundle

Watches Kubernetes event streams via the Watch API and correlates pod lifecycle events with resource metrics from Metrics Server. Detects CrashLoopBackOff patterns and OOMKilled signals for automated triage. Use when this capability is needed.

tomevault-io Bundle

Runs kubectl describe pod, kubectl logs --previous, and kubectl get events to diagnose CrashLoopBackOff and OOMKilled pods. Parses container exit codes, resource limits, and liveness probe configurations for root cause analysis.

tomevault-io Bundle

Automates diagnosis of CrashLoopBackOff pods using kubectl commands wrapped via the Kubernetes API server. Fetches recent events, container logs, and resource quota status to identify root causes such as OOMKilled, misconfigured liveness probes, or missing ConfigMaps. Generates a step-by-step remediation runbook.

tomevault-io Bundle

Runs diagnostic analysis on Kubernetes clusters using kubectl, k9s terminal UI data, and the Troubleshoot.sh support-bundle collector framework. Generates remediation steps for common pod scheduling, networking, and storage failures.

tomevault-io Bundle

Scaffolds production-ready Terraform modules using HCL templates with automated variable documentation via terraform-docs. Includes Terratest boilerplate and GitHub Actions CI workflow generation. Use when this capability is needed.

tomevault-io Bundle

Integrates Aqua Security Trivy CLI for comprehensive container image vulnerability scanning. Detects OS package CVEs, language-specific dependency vulnerabilities, and IaC misconfigurations with SARIF output format for CI/CD pipeline integration.

tomevault-io Bundle

Managing cloud infrastructure using declarative and imperative IaC tools. Use when provisioning cloud resources (Terraform/OpenTofu for multi-cloud, Pulumi for developer-centric workflows, AWS CDK for AWS-native infrastructure), designing reusable modules, implementing state management patterns, or establishing infrastructure deployment workflows. Use when this capability is needed.

tomevault-io Bundle

Provides production-ready Kubernetes manifest guidance including resource management, security, high availability, and configuration best practices. This skill should be used when working with Kubernetes YAML files, deployments, pods, services, or when users mention k8s, container orchestration, or cloud-native applications.

tomevault-io Bundle

Guide azd-based deployments, including where azure.yaml and azd hook scripts live, the current deployment flow, troubleshooting docs, and regional/model availability checks for Azure OpenAI Use when this capability is needed.

tomevault-io Bundle

Data pipeline architecture patterns for ETL/ELT design, orchestration, and data quality frameworks Use when this capability is needed.

tomevault-io Bundle

Store and rotate secrets in AWS Secrets Manager. Configure automatic rotation, access policies, and application integration. Use when managing secrets in AWS environments or requiring automatic credential rotation. Use when this capability is needed.

tomevault-io Bundle

Secure Docker images and container runtime configurations. Implement non-root users, read-only filesystems, and security contexts. Use when building secure container images or hardening container deployments. Use when this capability is needed.

tomevault-io Bundle

Deploy serverless functions on Google Cloud Functions. Configure triggers and manage deployments. Use when implementing serverless workloads on GCP. Use when this capability is needed.

tomevault-io Bundle

Inspects Docker container health using the Docker Engine API v1.45 /containers/{id}/json and /containers/{id}/stats endpoints. Diagnoses OOM kills, restart loops, and network connectivity issues with automated log analysis via /containers/{id}/logs streaming. Use when this capability is needed.

tomevault-io Bundle

K9s is a terminal-based UI for managing Kubernetes clusters, providing real-time observation of resources, log tailing, pod shell access, and cluster navigation. Written in Go with over 28,000 GitHub stars, it replaces dozens of kubectl commands with an interactive interface. Use when this capability is needed.

tomevault-io Bundle

Diagnoses CrashLoopBackOff and OOMKilled pod failures using the Kubernetes API via kubectl and the official kubernetes-client/python SDK. Correlates container logs, resource limits, and node conditions for root cause analysis. Use when this capability is needed.

tomevault-io Bundle

Automated K8s pod troubleshooting using kubectl, crictl, and the Kubernetes API. Runs diagnostic sequences for CrashLoopBackOff, ImagePullBackOff, OOMKilled, and pending pod states. Use when this capability is needed.

tomevault-io Bundle

Runs automated diagnostic sequences on Kubernetes pods using kubectl exec, kubectl logs, and the Kubernetes API /api/v1/pods endpoint. Captures OOMKilled events, CrashLoopBackOff analysis, and resource utilization via metrics-server.

tomevault-io Bundle

Detects infrastructure drift using terraform plan -detailed-exitcode and the Terraform Cloud API. Compares state files against live resources across AWS, GCP, and Azure providers. Use when this capability is needed.

tomevault-io Bundle

Searches and evaluates Terraform modules from the HashiCorp Registry API and private registries. Uses hcl2json parser to analyze module input variables, outputs, and provider requirements. Use when this capability is needed.

tomevault-io Bundle

Terraform Search & Import for Azure

tomevault-io Bundle

Terraform Patterns

tomevault-io Bundle

Convert Sony A7-series RAW (.ARW) sets into high-quality JPEGs using either an exact one-pass pipeline or a profile-driven batch workflow. Use when users request Sony RAW conversion, mixed-lighting batch adaptation, iterative mood adjustments, and metadata-safe exports with EXIF preservation. Use when this capability is needed.

tomevault-io Bundle

Fetch and extract text content from web page URLs. Use when this capability is needed.

tomevault-io Bundle

AI Infrastructure on Azure

tomevault-io Bundle

Go interface design, dependency direction, and package coupling patterns. Use when defining interfaces, choosing where to place them, designing constructors, injecting dependencies, or reviewing import graphs. Trigger on exported interfaces in provider packages, interfaces matching a single type, backwards imports (server importing client), or functions accepting entire config structs when they need one field. Supersedes generic Go interface guidance with stronger opinions on consumer-side interfaces and coupling. Use when this capability is needed.

tomevault-io Bundle

Manage container registries including ECR, ACR, GCR, and Docker Hub. Push and pull images, configure authentication, set up repository policies, and implement image lifecycle management. Use when working with container image storage and distribution. Use when this capability is needed.

tomevault-io Bundle

Implement Kubernetes security contexts, Pod Security Standards, and network policies. Secure cluster components and workloads. Use when hardening Kubernetes deployments or meeting security compliance. Use when this capability is needed.

tomevault-io Bundle

Terraform AzureRM Set Diff Analyzer

tomevault-io Bundle

Operate Browser Terminal Use as an execution bridge between local CLI and browser-hosted terminals. Use when Codex needs to run or iterate shell commands in non-local environments through a browser terminal, build cloud-side verifiable execution loops for LLM agents, debug remote runtime issues (GPU, containers, bastion-only networks), or manage daemon/extension binding, timeout, cancel, and optional token hardening. Use when this capability is needed.

tomevault-io Bundle

Interactively create a new Feature work item in Azure DevOps using configured conventions. Use when this capability is needed.

tomevault-io Bundle

Provision AWS Elastic Container Registry (ECR) repositories with GitHub OIDC integration following BETEKK standards Use when this capability is needed.