Use GitOps-first changes for infra and deployment workflows, then validate locally and let Argo CD reconcile. Only apply directly to the cluster when explicitly instructed or in an emergency.
Workflow
Locate the source of truth
Argo CD apps and overlays: argocd/
Kubernetes manifests: kubernetes/
IaC: tofu/, ansible/
Service-specific instructions: nearest README.md
Edit manifests in Git
Prefer updating Argo CD apps/overlays instead of raw kubectl applies.
Keep environment-specific changes in overlays.
Validate locally
Argo lint: scripts/argo-lint.sh
Kubeconform: scripts/kubeconform.sh argocd
Terraform/tofu: bun run tf:plan (apply only when asked)
Ansible: bun run ansible
Rollout discipline
Note rollout/impact for changes in argocd/, kubernetes/, tofu/, ansible/.
For Helm charts with kustomize, use: mise exec helm@3 -- kustomize build --enable-helm <path>.
Cluster access (exception-only)
Use direct kubectl apply only when explicitly asked or in emergencies.
Always set namespace: kubectl ... -n <ns>.
Deploy completion guardrail
Only call a deploy "completed" after the Argo CD application is synced and healthy.
Pointers
Use references/gitops-checklist.md for quick commands and repo-specific notes.
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: proompteng-lab-gitops3description: GitOps4---56# GitOps78## Overview910Use GitOps-first changes for infra and deployment workflows, then validate locally and let Argo CD reconcile. Only apply directly to the cluster when explicitly instructed or in an emergency.1112## Workflow13141. **Locate the source of truth**15 - Argo CD apps and overlays: `argocd/`16 - Kubernetes manifests: `kubernetes/`17 - IaC: `tofu/`, `ansible/`18 - Service-specific instructions: nearest `README.md`19202. **Edit manifests in Git**21 - Prefer updating Argo CD apps/overlays instead of raw kubectl applies.22 - Keep environment-specific changes in overlays.23243. **Validate locally**25 - Argo lint: `scripts/argo-lint.sh`26 - Kubeconform: `scripts/kubeconform.sh argocd`27 - Terraform/tofu: `bun run tf:plan` (apply only when asked)28 - Ansible: `bun run ansible`29304. **Rollout discipline**3132- Note rollout/impact for changes in `argocd/`, `kubernetes/`, `tofu/`, `ansible/`.33- For Helm charts with kustomize, use: `mise exec helm@3 -- kustomize build --enable-helm <path>`.34355. **Cluster access (exception-only)**3637- Use direct `kubectl apply` only when explicitly asked or in emergencies.38- Always set namespace: `kubectl ... -n <ns>`.39406. **Deploy completion guardrail**41 - Only call a deploy "completed" after the Argo CD application is synced and healthy.4243## Pointers4445- Use `references/gitops-checklist.md` for quick commands and repo-specific notes.4647---48> Converted and distributed by [TomeVault](https://tomevault.io/claim/proompteng) — claim your Tome and manage your conversions.49<!-- tomevault:4.0:skill_md:2026-04-11 -->
Run npx skillmds@latest add tomevault-io/proompteng-lab-gitops in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
GitOps It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.
tomevault-io