service-mesh

Design, deploy, and troubleshoot production Kubernetes workloads, from resources, probes, RBAC, and NetworkPolicies to autoscaling, Helm, and common pod failures.

2 skills · 1 command · 1 agent

Write, review, and test idempotent Ansible playbooks and roles, covering inventories, variable precedence, Ansible Vault, and Molecule.

1 skill · 1 command · 1 agent

Design and provision production AWS infrastructure with CDK and CloudFormation, following the Well-Architected Framework for VPCs, IAM, ECS, RDS, and CloudFront.

1 skill · 1 command · 1 agent

Build Azure infrastructure with Bicep, AKS, Key Vault, Azure DevOps pipelines, and Azure Policy landing zone governance.

1 skill · 1 command · 1 agent

Plan backups and disaster recovery with RTO and RPO targets, 3-2-1 backups, pgBackRest, Velero, AWS Backup, and tested DR runbooks.

1 skill · 1 command · 1 agent

Manage runtime configuration and feature flags the 12-factor way with SSM Parameter Store, Consul, etcd, and config schema validation.

1 skill · 1 command · 1 agent

Configure service mesh (Istio, Linkerd) for microservices

1 skill · 1 command

蒸馏一切链接：把长视频、长 PDF、网页变成带来源定位的 Markdown，Wiki 和知识库交给宿主 AI 组装。/ Distill links into located Markdown; the host AI assembles the wiki.

1 skill · 1 MCP server · hooks

Production-grade platform engineering handbook for Claude, Codex, and Cursor. 51 slash-command workflows: Kubernetes (baseline, RBAC, workload, debug), GitHub Actions (design, security, review, debug), Azure (Workload Identity, AKS, tagging, RBAC), OpenShift (SCC, Routes, GitOps, upgrades), Secrets (ESO, Sealed Secrets, rotation, audit), Helm, Terraform, Flux CD, Argo CD, Gateway API (ingress-nginx migration), AWS, Kyverno, OPA, KEDA, Karpenter, cluster upgrades (EKS version rollback), Flagger progressive delivery, Velero backup and restore drills, FinOps (Infracost, cost tags, OpenCost), supply chain security, Kubescape posture and operator (NSA, MITRE, CIS, SOC2), Falco, chaos engineering, DORA metrics, Datadog, Dynatrace, Linkerd, AWS MCP, Renovate, Checkov, Trivy, Zizmor workflow auditing, Kingfisher secret scanning and revocation, token optimization, and multi-agent scaffolding. Every answer includes blast radius, validation steps, and rollback plan.

52 skills · 1 agent

Helm, Kustomize, Operators, Istio, NGINX Ingress, Calico/Flannel, EKS/AKS/GKE, OpenShift/ROSA, K3s, Docker/containerd, and cert-manager skills.

35 skills

Use when Envoy Gateway (the Gateway API implementation by the Envoy project) does not route traffic in Kubernetes: a Gateway that is not Programmed ("AddressNotAssigned"), an HTTPRoute that is not Accepted ("NoMatchingListenerHostname", "NotAllowedByListeners") or whose ResolvedRefs is False ("BackendNotFound", "RefNotPermitted" without a ReferenceGrant), clients getting 404, 500 or 503 "no healthy upstream" from the gateway, a GatewayClass that is not Accepted, or BackendTrafficPolicy, ClientTrafficPolicy, SecurityPolicy and EnvoyProxy resources that do not apply. Investigates with kubectl get, describe, events and logs, and proposes fixes. Reads first and asks before changing anything.

1 skill

Cloud-native & Kubernetes team — agents (kubernetes-architect, container-build-engineer, k8s-platform-operator, service-mesh-networking-engineer) for running workloads on Kubernetes well: workload design (Deployment/StatefulSet/Job, probes, requests/limits, PDBs, HPA/VPA), container build hygiene (minimal non-root images, distroless, multi-stage), platform ops (namespaces, RBAC, network policies, resource quotas, admission control, upgrades), and service-mesh networking (ingress/gateway, mTLS, traffic-splitting, observability). Cloud-agnostic. skills, a decision-tree knowledge bank (workload-type + ingress trees + a dated 2026 ecosystem map), best-practices, templates, commands, an advisory hook. Seams: managed control plane (AKS/EKS/GKE) -> azure/aws/gcp-cloud, GitOps reconcile -> devops-cicd, telemetry/SLOs -> observability-sre. Requires ravenclaude-core@>=0.7.0.

6 skills · 4 commands · 4 agents · hooks