arn-infra-pipeline

To generate SOC 2-aligned infrastructure pipelines, this Skill reads Arness config and produces non-destructive pipeline files for PR validation, staging deployment, production promotion, and scheduled cleanup with per-environment IAM roles.

Yes, the infrastructure pipeline generator detects existing CI configurations and supports GitHub Actions, GitLab CI, and Bitbucket Pipelines, extending them rather than overwriting your current CI/CD setups.

You can add staging and production pipelines non-destructively by detecting existing CI setups from arn-spark and generating extension-based pipeline files that preserve your original configurations.

OIDC authentication in infrastructure pipelines provides secure, keyless cloud access by issuing short-lived tokens for per-environment IAM roles. You need it for SOC 2-aligned, auditable deployment workflows.

Yes, scheduled cleanup is one of the four pipeline jobs generated for SOC 2 alignment. It works alongside PR validation, staging deployment, and production promotion to maintain an auditable environment lifecycle.

The primary limitation is that it requires an Arness config and existing CI configurations from arn-spark to detect. It generates extension-based pipeline files rather than replacing your entire CI/CD setup.