filipemotta
- 28 skills
- 0 followers
- 1 week ago last updated
- ▌ Devops Engineer · filipemottaComprehensive DevOps engineering covering infrastructure, CI/CD, containers, cloud platforms, and SRE practices. This is a general-purpose skill that activates for broad DevOps questions, architecture decisions, tooling recommendations, and best practices across the entire DevOps lifecycle.
- ▌ Eks Upgrade Check · filipemottaEKS/Kubernetes upgrade verification and compatibility analysis. Activates when planning cluster upgrades, checking deprecated APIs, analyzing addon compatibility, or preparing upgrade runbooks. Covers Pluto, Kubent, EKS MCP Server, and CI/CD integration.
- ▌ Docker Push Ecr · filipemottaBuilds and pushes Docker images to Amazon ECR repositories. Use whenever the user asks to build and send images to ECR, push containers, upload an image to the registry or publish a Docker image to AWS, even without mentioning "docker-push-ecr" explicitly. Takes app-path and ECR-URI pairs as arguments; multiple pairs are supported in a single run.
- ▌ Terraform Deploy · filipemottaRuns the Terraform stack deploy pipeline (fmt → validate → plan → apply) in sandbox/dev environments. Use when the user asks to deploy, apply, provision or bring up Terraform infrastructure in a non-production environment, even without mentioning "terraform-deploy" explicitly. With a stack name as argument (e.g. "01-networking"), deploys only that stack; with no argument, deploys all stacks in sequence. Always skips the remote-backend stack. NEVER use against a production workspace/environment.
- ▌ Karpenter Debug · filipemottaAutomatically diagnose Karpenter issues — provisioning failures, consolidation problems, NodeClaim lifecycle issues. Collects cluster state and returns structured report with severity, evidence, and remediation steps.
- ▌ Dockerfile Generator · filipemottaGenerates optimized, production-ready Dockerfiles. Use whenever the user asks to create a Dockerfile, containerize an application, dockerize an app or build a Docker image, even without mentioning "dockerfile-generator" explicitly. Takes the application folder path as argument, detects the language automatically and generates a Dockerfile + .dockerignore with security and size best practices, then tests the result automatically.
- ▌ Karpenter Provision · filipemottaGenerate optimized Karpenter NodePool and EC2NodeClass configurations based on workload requirements. Handles Spot strategies, disruption budgets, instance diversity, and cost optimization.
- ▌ Gke Incident Triage · filipemottaAutomated GKE incident triage with read-only-first discipline. Diagnoses pod failures (OOMKilled, CrashLoopBackOff, ImagePullBackOff, scheduling failures), latency spikes, and rollout problems by chaining GKE MCP read-only tools, Cloud Logging, and Cloud Monitoring. Produces a structured root-cause + remediation plan with two options (fast rollback vs forward fix), tools needed for each, and an explicit endpoint promotion request before any mutating call. Activates during on-call investigations and incident response.
- ▌ Eks Upgrade Preflight · filipemottaFull preflight for an EKS Kubernetes version upgrade. Activates before any control plane hop. Runs pluto (declared intent), kubent (live objects) and EKS upgrade insights (observed traffic), checks the Karpenter and addon compatibility matrices, audits AMI selection mode and drift gates, and consolidates everything into a single go/no-go report.
- ▌ Eks Upgrade Rollback Drill · filipemottaGuided rollback rehearsal for EKS upgrades. Activates after an upgrade completes in a non-critical environment, or when planning production rollback strategy. Walks the five rollback layers (Git, nodes, addons, control plane, CRDs), times each one, and produces the evidence that decides between drift and blue/green for production fleets.
- ▌ Gke Multi Region Bootstrap · filipemottaProvision GKE Autopilot clusters across multiple regions in parallel using an Agent Team. Each regional subagent creates VPC, subnets, Cloud NAT, the cluster with Workload Identity and Dataplane V2, baseline namespaces, and validates first 5 minutes for zero Warning events. The orchestrator runs a reconciliation pass to detect cross-region drift before incidents. Activates when bootstrapping multi-region GKE infrastructure, expanding into new regions, or migrating from single-region to multi-region. Supports dry_run mode that produces JSON plans without applying.
- ▌ Tf Cross Stack · filipemottaWire a downstream Terraform stack to consume outputs from an upstream stack via terraform_remote_state. Use when adding a new stack that depends on resources from a lower-numbered stack, or when refactoring a monolithic stack into separate stacks.
- ▌ Tf Naming Review · filipemottaEnforce Terraform resource label and tag naming conventions. Use when reviewing or writing resource blocks, when the user asks to "rename this resource" or "add tags", or when auditing a stack for naming consistency.
- ▌ Tf Outputs Review · filipemottaReview or write outputs.tf for a Terraform stack. Use when adding outputs, when refactoring outputs that downstream stacks consume, or when scaffolding a new stack's outputs.tf. Enforces splat for lists, stable names, and documentation in the stack README.
- ▌ Tf Scaffold Stack · filipemottaScaffold a new numbered Terraform stack following the project's architectural conventions. Use when the user asks to "create a new stack", "scaffold module X", or "add a stack for Y". Produces the directory, provider/backend/variables/outputs/README skeleton, and validates the initial state.
- ▌ Tf Variables Review · filipemottaReview or refactor Terraform input variables to follow the nested-object convention with sensible defaults. Use when the user asks to add, refactor, or review variables in a module, or when scaffolding a new stack's variables.tf.
- ▌ Cicd Engineer · filipemottaCI/CD pipeline design, optimization, and security. Activates when creating or debugging GitHub Actions, GitLab CI, Jenkins pipelines, or discussing build/test/deploy workflows. Covers pipeline security, artifact management, and deployment strategies.
- ▌ Finops Analyst · filipemottaCloud cost optimization and FinOps practices. Activates when analyzing cloud bills, optimizing resource costs, implementing tagging strategies, rightsizing workloads, or discussing Reserved Instances, Savings Plans, and Spot instances.
- ▌ Devsecops Engineer · filipemotta bundleDevSecOps, security scanning, and vulnerability management. Activates when reviewing security configurations, analyzing vulnerabilities, implementing secrets management, hardening infrastructure, or discussing compliance (SOC2, PCI-DSS, HIPAA).
- ▌ K8S Debug · filipemottaAutomatically diagnose Kubernetes cluster and application issues. Collects node status, unhealthy pods, events, and resource usage, then returns a structured report with severity, evidence, and remediation steps.
- ▌ Terraform Reviewer · filipemottaTerraform infrastructure code review, validation, and best practices. Activates when reviewing .tf files, analyzing terraform plan output, discussing IaC patterns, or troubleshooting Terraform errors. Covers modules, state management, security, and cost optimization.
- ▌ K8S Review · filipemottaReview Kubernetes manifests for security, reliability and best practices before deployment. Scores manifests across three dimensions and returns prioritized findings with specific YAML fixes.
- ▌ K8S Troubleshooter · filipemottaKubernetes troubleshooting, diagnostics, and incident response. Activates when debugging pod failures, analyzing cluster issues, reviewing K8s manifests, or responding to production incidents. Covers deployments, services, networking, and resource management.
- ▌ Spec Create · filipemottaStart a new Spec-Driven feature — orchestrates requirements → design → tasks with human approval gates between phases
- ▌ Spec Status · filipemottaShow progress of in-flight specs — phase, completed tasks, remaining work, last activity
- ▌ Spec Execute · filipemottaImplement the next unchecked task from an approved tasks.md, one task at a time, with validation
- ▌ Observability Engineer · filipemottaObservability, monitoring, and incident response. Activates when setting up Prometheus, Grafana, alerting rules, analyzing metrics/logs, debugging performance issues, or reducing MTTR. Covers SLOs, SLIs, distributed tracing, and on-call workflows.
- ▌ Spec Validate · filipemottaValidate that an approved spec is internally consistent and that current code/infra matches it (drift detection)