deployment-engineer_skill

Overview

This skill automates reliable production deployments across cloud platforms with zero-downtime patterns, monitoring, and rollback procedures. It encodes battle-tested CI/CD, Docker, and environment strategies focused on GitHub Actions, Docker, HuggingFace Spaces, and GitHub Pages. The goal is repeatable, observable deployments that are easy to troubleshoot and roll back.

How this skill works

The skill provides deployment workflow templates, Dockerfile patterns, environment loading and CORS configurations, and health-check and monitoring hooks. It validates branch and secret setup, runs pre-deploy verification, and includes post-deploy health checks and logging middleware. Platform-specific snippets and a deployment checklist guide safe rollouts and fast recovery.

When to use it

• Setting up or fixing CI/CD pipelines for web services using GitHub Actions
• Deploying apps to HuggingFace Spaces, GitHub Pages, Vercel, or Netlify
• Building and shipping Docker containers with reproducible builds
• Configuring environment-specific variables and CORS for frontend/backend
• Implementing health checks, monitoring, and rollback procedures

Best practices

• Verify actual branch names and secret names before enabling workflows
• Install system dependencies and Python packages before switching to non-root users in Docker
• Add a /health endpoint and post-deploy curl checks to verify readiness
• Use explicit CORS origins per environment and document allowed domains
• Keep secrets out of source control and use CI secret stores
• Document rollback steps and include automated verification in deployment scripts

Example use cases

• Create a GitHub Actions workflow that deploys a Docker-backed HuggingFace Space with HF_TOKEN auth and health verification
• Build a Dockerfile that leverages layer caching: copy requirements, install deps, then copy source and switch to non-root user
• Add dynamic API endpoint resolution in the frontend to route traffic appropriately between local, GitHub Pages, and HF Spaces
• Run a pre-deploy script that builds the container, runs the health check locally, and only then pushes to registry
• Configure FastAPI with CORS middleware, structured logging, and a health endpoint for monitoring and alerts