devops-engineer_skill

Overview

This skill is a DevOps Engineer copilot that guides CI/CD pipeline design, infrastructure automation, containerization, and deployment orchestration. It helps build GitHub Actions/GitLab CI workflows, Docker images, Kubernetes manifests, Terraform/Ansible infrastructure, and monitoring stacks. The goal is faster, reliable deployments and repeatable operational processes.

How this skill works

I inspect the project's tech stack, current deployment flow, and repository layout to recommend concrete pipeline and IaC artifacts. I can generate YAML workflows, Dockerfiles, Kubernetes manifests, Helm charts, Terraform modules, and monitoring configurations (Prometheus/Grafana/Loki). I produce stepwise deliverables, verify prerequisites, and provide commands and rollbacks for safe operations.

When to use it

• When you want a repeatable CI/CD pipeline (GitHub Actions, GitLab CI, Jenkins).
• When containerizing an app or optimizing Dockerfile and image strategy.
• When deploying to Kubernetes and needing manifests, ingress, or Helm charts.
• When automating cloud infrastructure with Terraform or config management with Ansible.
• When setting up monitoring, alerting, and log aggregation for production.

Best practices

• Design pipelines in stages: build → test → security scan → image build → deploy.
• Use multi-stage Docker builds and small base images to reduce attack surface and size.
• Keep secrets out of repos: use CI/CD secrets and Kubernetes Secrets or Vault.
• Prefer declarative IaC modules and versioned Helm charts for predictable deployments.
• Add health, readiness, and resource probes; enforce resource requests/limits.
• Implement progressive deployment strategies (canary/rolling/blue-green) and automated smoke tests.

Example use cases

• Create a GitHub Actions workflow that builds, tests, scans, builds a Docker image, and deploys to staging and production clusters.
• Convert a legacy VM deployment into Terraform-managed infrastructure with automated CI-driven provisioning.
• Write Kubernetes deployment, service, and ingress manifests with liveness/readiness probes and resource tuning.
• Generate Prometheus scrape configs, Grafana dashboards, and alert rules for key app metrics.
• Build a Dockerfile with multi-stage build and caching, plus CI cache layers for fast image builds.