How do I install the Managing Infra skill?

Run npx skillmds@latest add tomevault-io/managing-infra in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Managing Infra safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Managing Infra?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Managing Infra free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Managing Infra?

tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Managing Infra by tomevault-io — Agent Skill

Name: Managing Infra
Author: tomevault-io

Managing Infra

Infrastructure patterns for Kubernetes, Terraform, Helm, Kustomize, and GitHub Actions. Use when making K8s architectural decisions, choosing between Helm vs Kustomize, structuring Terraform modules, writing CI/CD workflows, or applying security best practices. Use when this capability is needed.

tomevault-io 9c7381f 2 files · 3.0 KB Updated Sep 17, 2026

File contents

Infrastructure Patterns

When to Use What

Tool	Use For
Raw K8s YAML	Simple deployments, one-off resources
Kustomize	Environment variations, overlays without templating
Helm	Complex apps, third-party charts, heavy templating
Terraform	Cloud resources, infrastructure lifecycle
GitHub Actions	CI/CD, automated testing, releases
Makefile	Build automation, self-documenting targets
Dockerfile	Container builds, multi-stage, multi-arch

Quick Decisions

Kustomize when: Simple env differences, readable manifests, patching YAML Helm when: Complex templating, third-party charts, release management

K8s Security Defaults

Every workload: non-root user, read-only filesystem, no privilege escalation, dropped capabilities, network policies.

GitHub Actions Patterns

CI workflow: Lint, test, compile on PRs (run on both x86 + ARM)
Release workflow: Multi-arch Docker build on tags (native ARM runners)
Pin actions by SHA, least-privilege permissions

References

KUBERNETES.md - K8s resource patterns
TERRAFORM.md - Terraform module patterns
GITHUB-ACTIONS.md - CI/CD workflow patterns
MAKEFILE.md - Build automation patterns
DOCKERFILE.md - Container build patterns
templates/ - Ready-to-use templates

Commands

kubectl apply -k ./              # Apply kustomize
helm upgrade --install NAME .    # Install/upgrade chart
terraform plan && terraform apply

Converted and distributed by TomeVault — claim your Tome and manage your conversions.

---name: managing-infradescription: Infrastructure patterns for Kubernetes, Terraform, Helm, Kustomize, and GitHub Actions. Use when making K8s architectural decisions, choosing between Helm vs Kustomize, structuring Terraform modules, writing CI/CD workflows, or applying security best practices. Use when this capability is needed.---# Infrastructure Patterns## When to Use What| Tool | Use For || ------------------ | --------------------------------------------------- || **Raw K8s YAML** | Simple deployments, one-off resources || **Kustomize** | Environment variations, overlays without templating || **Helm** | Complex apps, third-party charts, heavy templating || **Terraform** | Cloud resources, infrastructure lifecycle || **GitHub Actions** | CI/CD, automated testing, releases || **Makefile** | Build automation, self-documenting targets || **Dockerfile** | Container builds, multi-stage, multi-arch |## Quick Decisions**Kustomize** when: Simple env differences, readable manifests, patching YAML**Helm** when: Complex templating, third-party charts, release management## K8s Security DefaultsEvery workload: non-root user, read-only filesystem, no privilege escalation, dropped capabilities, network policies.## GitHub Actions Patterns- **CI workflow**: Lint, test, compile on PRs (run on both x86 + ARM)- **Release workflow**: Multi-arch Docker build on tags (native ARM runners)- Pin actions by SHA, least-privilege permissions## References- [KUBERNETES.md](KUBERNETES.md) - K8s resource patterns- [TERRAFORM.md](TERRAFORM.md) - Terraform module patterns- [GITHUB-ACTIONS.md](GITHUB-ACTIONS.md) - CI/CD workflow patterns- [MAKEFILE.md](MAKEFILE.md) - Build automation patterns- [DOCKERFILE.md](DOCKERFILE.md) - Container build patterns- [templates/](templates/) - Ready-to-use templates## Commands```bashkubectl apply -k ./ # Apply kustomizehelm upgrade --install NAME . # Install/upgrade chartterraform plan && terraform apply```---> Converted and distributed by [TomeVault](https://tomevault.io/claim/julianobarbosa) — claim your Tome and manage your conversions.

Frequently asked questions