Gitops Iot Infrastructure
Skill Profile
(Select at least one profile to enable specific modules)
Overview
GitOps for IoT Infrastructure enables declarative infrastructure management where desired state is defined in Git and automatically synchronized to actual infrastructure. This approach provides version control, auditability, and automated deployment for distributed IoT systems spanning edge devices, edge servers, and cloud resources.
Why This Matters
- Declarative Management: Define infrastructure as code
- Version Control: Track all infrastructure changes
- Automated Deployment: Continuous delivery of infrastructure changes
- Audit Trail: Complete history of all changes
- Consistency: Ensure infrastructure matches Git state
Core Concepts & Rules
1. Core Principles
- Follow established patterns and conventions
- Maintain consistency across codebase
- Document decisions and trade-offs
2. Implementation Guidelines
- Start with the simplest viable solution
- Iterate based on feedback and requirements
- Test thoroughly before deployment
Inputs / Outputs / Contracts
- Inputs:
- Git repository URL and credentials
- Environment configurations
- Sync policies and automation settings
- Entry Conditions:
- Git repository initialized
- Kubernetes cluster available
- ArgoCD operator installed
- Outputs:
- Synchronized infrastructure
- Sync status reports
- Drift detection alerts
- Deployment history
- Artifacts Required (Deliverables):
- GitOps operator configuration
- Application manifests
- Sync policies
- Monitoring dashboards
- Acceptance Evidence:
- Infrastructure matches Git state
- Automated sync working
- Drift detection active
- Rollback functional
- Success Criteria:
- Sync success rate > 95%
- Configuration drift 0%
- Sync time < 5 minutes
- Rollback time < 2 minutes
Skill Composition
Quick Start / Implementation Example
- Review requirements and constraints
- Set up development environment
- Implement core functionality following patterns
- Write tests for critical paths
- Run tests and fix issues
- Document any deviations or decisions
# Example implementation following best practices
def example_function():
# Your implementation here
pass
Assumptions / Constraints / Non-goals
- Assumptions:
- Development environment is properly configured
- Required dependencies are available
- Team has basic understanding of domain
- Constraints:
- Must follow existing codebase conventions
- Time and resource limitations
- Compatibility requirements
- Non-goals:
- This skill does not cover edge cases outside scope
- Not a replacement for formal training
Compatibility & Prerequisites
- Supported Versions:
- Python 3.8+
- Node.js 16+
- Modern browsers (Chrome, Firefox, Safari, Edge)
- Required AI Tools:
- Code editor (VS Code recommended)
- Testing framework appropriate for language
- Version control (Git)
- Dependencies:
- Language-specific package manager
- Build tools
- Testing libraries
- Environment Setup:
.env.example keys: API_KEY, DATABASE_URL (no values)
Test Scenario Matrix (QA Strategy)
| Type |
Focus Area |
Required Scenarios / Mocks |
| Unit |
Core Logic |
Must cover primary logic and at least 3 edge/error cases. Target minimum 80% coverage |
| Integration |
DB / API |
All external API calls or database connections must be mocked during unit tests |
| E2E |
User Journey |
Critical user flows to test |
| Performance |
Latency / Load |
Benchmark requirements |
| Security |
Vuln / Auth |
SAST/DAST or dependency audit |
| Frontend |
UX / A11y |
Accessibility checklist (WCAG), Performance Budget (Lighthouse score) |
Technical Guardrails & Security Threat Model
1. Security & Privacy (Threat Model)
- Top Threats: Injection attacks, authentication bypass, data exposure
2. Performance & Resources
3. Architecture & Scalability
4. Observability & Reliability
Agent Directives & Error Recovery
(ข้อกำหนดสำหรับ AI Agent ในการคิดและแก้ปัญหาเมื่อเกิดข้อผิดพลาด)
- Thinking Process: Analyze root cause before fixing. Do not brute-force.
- Fallback Strategy: Stop after 3 failed test attempts. Output root cause and ask for human intervention/clarification.
- Self-Review: Check against Guardrails & Anti-patterns before finalizing.
- Output Constraints: Output ONLY the modified code block. Do not explain unless asked.
Definition of Done (DoD) Checklist
Anti-patterns / Pitfalls
- ⛔ Don't: Log PII, catch-all exception, N+1 queries
- ⚠️ Watch out for: Common symptoms and quick fixes
- 💡 Instead: Use proper error handling, pagination, and logging
Reference Links & Examples
- Internal documentation and examples
- Official documentation and best practices
- Community resources and discussions
Versioning & Changelog
- Version: 1.0.0
- Changelog:
- 2026-02-22: Initial version with complete template structure
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: gitops-iot-infrastructure3description: GitOps for IoT Infrastructure enables declarative infrastructure management Use when this capability is needed.4---56# Gitops Iot Infrastructure78## Skill Profile9*(Select at least one profile to enable specific modules)*10- [ ] **DevOps**11- [x] **Backend**12- [ ] **Frontend**13- [ ] **AI-RAG**14- [ ] **Security Critical**1516## Overview17GitOps for IoT Infrastructure enables declarative infrastructure management where desired state is defined in Git and automatically synchronized to actual infrastructure. This approach provides version control, auditability, and automated deployment for distributed IoT systems spanning edge devices, edge servers, and cloud resources.1819## Why This Matters20- **Declarative Management**: Define infrastructure as code21- **Version Control**: Track all infrastructure changes22- **Automated Deployment**: Continuous delivery of infrastructure changes23- **Audit Trail**: Complete history of all changes24- **Consistency**: Ensure infrastructure matches Git state2526---2728## Core Concepts & Rules2930### 1. Core Principles31- Follow established patterns and conventions32- Maintain consistency across codebase33- Document decisions and trade-offs3435### 2. Implementation Guidelines36- Start with the simplest viable solution37- Iterate based on feedback and requirements38- Test thoroughly before deployment394041## Inputs / Outputs / Contracts42* **Inputs**:43 - Git repository URL and credentials44 - Environment configurations45 - Sync policies and automation settings46* **Entry Conditions**:47 - Git repository initialized48 - Kubernetes cluster available49 - ArgoCD operator installed50* **Outputs**:51 - Synchronized infrastructure52 - Sync status reports53 - Drift detection alerts54 - Deployment history55* **Artifacts Required (Deliverables)**:56 - GitOps operator configuration57 - Application manifests58 - Sync policies59 - Monitoring dashboards60* **Acceptance Evidence**:61 - Infrastructure matches Git state62 - Automated sync working63 - Drift detection active64 - Rollback functional65* **Success Criteria**:66 - Sync success rate > 95%67 - Configuration drift 0%68 - Sync time < 5 minutes69 - Rollback time < 2 minutes7071## Skill Composition72* **Depends on**: [Advanced IaC for IoT](../76-iot-infrastructure/advanced-iac-iot/SKILL.md)73* **Compatible with**: [Chaos Engineering for IoT](../76-iot-infrastructure/chaos-engineering-iot/SKILL.md), [Disaster Recovery for IoT](../76-iot-infrastructure/disaster-recovery-iot/SKILL.md)74* **Conflicts with**: Manual infrastructure management75* **Related Skills**: [Multi-Cloud IoT Strategy](../76-iot-infrastructure/multi-cloud-iot/SKILL.md), [Differential OTA Updates](../73-iot-fleet-management/differential-ota-updates/SKILL.md)7677---7879## Quick Start / Implementation Example80811. Review requirements and constraints822. Set up development environment833. Implement core functionality following patterns844. Write tests for critical paths855. Run tests and fix issues866. Document any deviations or decisions8788```python89# Example implementation following best practices90def example_function():91 # Your implementation here92 pass93```949596## Assumptions / Constraints / Non-goals9798* **Assumptions**:99 - Development environment is properly configured100 - Required dependencies are available101 - Team has basic understanding of domain102* **Constraints**:103 - Must follow existing codebase conventions104 - Time and resource limitations105 - Compatibility requirements106* **Non-goals**:107 - This skill does not cover edge cases outside scope108 - Not a replacement for formal training109110111## Compatibility & Prerequisites112113* **Supported Versions**:114 - Python 3.8+115 - Node.js 16+116 - Modern browsers (Chrome, Firefox, Safari, Edge)117* **Required AI Tools**:118 - Code editor (VS Code recommended)119 - Testing framework appropriate for language120 - Version control (Git)121* **Dependencies**:122 - Language-specific package manager123 - Build tools124 - Testing libraries125* **Environment Setup**:126 - `.env.example` keys: `API_KEY`, `DATABASE_URL` (no values)127128129## Test Scenario Matrix (QA Strategy)130131| Type | Focus Area | Required Scenarios / Mocks |132| :--- | :--- | :--- |133| **Unit** | Core Logic | Must cover primary logic and at least 3 edge/error cases. Target minimum 80% coverage |134| **Integration** | DB / API | All external API calls or database connections must be mocked during unit tests |135| **E2E** | User Journey | Critical user flows to test |136| **Performance** | Latency / Load | Benchmark requirements |137| **Security** | Vuln / Auth | SAST/DAST or dependency audit |138| **Frontend** | UX / A11y | Accessibility checklist (WCAG), Performance Budget (Lighthouse score) |139140141## Technical Guardrails & Security Threat Model142143### 1. Security & Privacy (Threat Model)144* **Top Threats**: Injection attacks, authentication bypass, data exposure145- [ ] **Data Handling**: Sanitize all user inputs to prevent Injection attacks. Never log raw PII146- [ ] **Secrets Management**: No hardcoded API keys. Use Env Vars/Secrets Manager147- [ ] **Authorization**: Validate user permissions before state changes148149### 2. Performance & Resources150- [ ] **Execution Efficiency**: Consider time complexity for algorithms151- [ ] **Memory Management**: Use streams/pagination for large data152- [ ] **Resource Cleanup**: Close DB connections/file handlers in finally blocks153154### 3. Architecture & Scalability155- [ ] **Design Pattern**: Follow SOLID principles, use Dependency Injection156- [ ] **Modularity**: Decouple logic from UI/Frameworks157158### 4. Observability & Reliability159- [ ] **Logging Standards**: Structured JSON, include trace IDs `request_id`160- [ ] **Metrics**: Track `error_rate`, `latency`, `queue_depth`161- [ ] **Error Handling**: Standardized error codes, no bare except162- [ ] **Observability Artifacts**:163 - **Log Fields**: timestamp, level, message, request_id164 - **Metrics**: request_count, error_count, response_time165 - **Dashboards/Alerts**: High Error Rate > 5%166167168## Agent Directives & Error Recovery169*(ข้อกำหนดสำหรับ AI Agent ในการคิดและแก้ปัญหาเมื่อเกิดข้อผิดพลาด)*170171- **Thinking Process**: Analyze root cause before fixing. Do not brute-force.172- **Fallback Strategy**: Stop after 3 failed test attempts. Output root cause and ask for human intervention/clarification.173- **Self-Review**: Check against Guardrails & Anti-patterns before finalizing.174- **Output Constraints**: Output ONLY the modified code block. Do not explain unless asked.175176177## Definition of Done (DoD) Checklist178179- [ ] Tests passed + coverage met180- [ ] Lint/Typecheck passed181- [ ] Logging/Metrics/Trace implemented182- [ ] Security checks passed183- [ ] Documentation/Changelog updated184- [ ] Accessibility/Performance requirements met (if frontend)185186187## Anti-patterns / Pitfalls188189* ⛔ **Don't**: Log PII, catch-all exception, N+1 queries190* ⚠️ **Watch out for**: Common symptoms and quick fixes191* 💡 **Instead**: Use proper error handling, pagination, and logging192193194## Reference Links & Examples195196* Internal documentation and examples197* Official documentation and best practices198* Community resources and discussions199200201## Versioning & Changelog202203* **Version**: 1.0.0204* **Changelog**:205 - 2026-02-22: Initial version with complete template structure206207---208> Converted and distributed by [TomeVault](https://tomevault.io/claim/amnadtaowsoam) — claim your Tome and manage your conversions.209<!-- tomevault:4.0:skill_md:2026-04-13 -->