dockerWrite and review Dockerfiles, Compose files, and .dockerignore with multi-stage builds, cache-friendly layer order, non-root and hardened runtime settings, safe secret handling, and container debugging. Use when creating or changing a Dockerfile, compose.yaml, or .dockerignore, shrinking or hardenin
gitopsSet up and review GitOps delivery to Kubernetes with Argo CD or Flux, covering the OpenGitOps principles, repo layout, Application and Kustomization setup, per-environment sync policy (prune, selfHeal, sync windows, retry), health checks, and secrets with External Secrets, Sealed Secrets, or SOPS. U
helmAuthor, validate, and release Helm charts, covering chart layout, Chart.yaml, values design and schema, template helpers, dependencies, lint and template checks, diff before upgrade, atomic upgrades, OCI registries and provenance, and install or upgrade troubleshooting. Use when creating or changing
kubernetesWrite and review Kubernetes manifests (Deployments, Services, probes, resources, RBAC, NetworkPolicy, Pod Security Standards, Jobs, HPA, PDB, Kustomize) and triage failing workloads with read-only kubectl. Use when creating or changing manifests, hardening a namespace or workload, validating YAML, o
production-readinessEvidence-based ship or block review of an application before launch or after a merge, built only from local repo evidence and any deployed URL the user names. Covers the release surface, CI, migrations, rollback, webhook idempotency, env validation, health checks, observability, and end-to-end cover
rolloutPlan and verify a production rollout, from strategy choice (rolling, blue-green, canary) through preflight go/no-go, phased verification signals, rollback criteria, and post-deploy follow-up. Use when preparing a release, infrastructure change, or migration that needs a written plan, when judging wh