devops-engineer

Creates Dockerfiles, CI/CD pipelines, Kubernetes manifests, and Terraform infrastructure templates.

Updated Sep 17, 2026
One-click install
npx skills add https://github.com/karenrebecag/spec-driven-standards --skill devops-engineer-karenrebecag
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: devops-engineer
Source: https://github.com/karenrebecag/spec-driven-standards/tree/main/plugins/delivery/skills/jeffallan-devops-engineer
Command: npx skills add https://github.com/karenrebecag/spec-driven-standards --skill devops-engineer-karenrebecag

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Setting up deployment infrastructure requires deep knowledge across Docker, Kubernetes, Terraform, and multiple CI/CD platforms, and mistakes in these configurations cause outages, security gaps, and failed releases. This Skill provides senior-level DevOps guidance with production-tested templates and safety guardrails for the entire build-deploy-operate lifecycle. ## Core Features & Use Cases - CI/CD Pipeline Configuration: Generates GitHub Actions and GitLab CI pipelines with testing, image building, security scanning, and staged deployments. - Container & Orchestration Templates: Writes multi-stage Dockerfiles, Kubernetes deployments with health probes, HPA autoscaling, and GitOps configurations for ArgoCD. - Infrastructure as Code: Produces Terraform configurations for AWS ECS, RDS, and networking with state management and secrets handling best practices. - Incident Response & Release Safety: Provides runbooks, rollback procedures, postmortem templates, and canary/blue-green deployment strategies with explicit production approval gates. - Use Case: You need to containerize a Python API and deploy it to Kubernetes with a GitHub Actions pipeline. The Skill generates a multi-stage Dockerfile, a CI workflow with Trivy scanning, K8s manifests with resource limits and probes, and a documented rollback procedure. ## Quick Start Ask the assistant to create a GitHub Actions CI/CD pipeline and Dockerfile for your application, including staging deployment and a rollback plan.

Frequently Asked Questions about devops-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a CI/CD pipeline with GitHub Actions?

Define a workflow with test, build, and deploy jobs: run tests first, then build and push a Docker image tagged by commit SHA, and deploy to staging or production based on the branch. Use docker/build-push-action with GitHub Actions cache for fast builds and add Trivy for image scanning.

How to write a production-ready Dockerfile for a Python app?

Use a multi-stage build: install dependencies in a builder stage, copy only the installed packages into a slim runtime image, run as a non-root user, and add a HEALTHCHECK instruction. Pin base image versions and never use the latest tag in production.

What is the difference between blue-green and canary deployments?

Blue-green runs two full environments and switches traffic instantly, giving fast rollback but doubling resource cost. Canary shifts traffic gradually (e.g., 10% then 50%) to the new version, reducing blast radius and enabling automated metric-based rollback with tools like Flagger.

Does GitLab CI support OIDC instead of static cloud credentials?

Yes, GitLab CI supports OIDC through id_tokens, letting jobs assume cloud roles via short-lived tokens instead of storing static keys in CI/CD variables. This is the recommended approach for AWS, GCP, and Azure authentication.

How do I roll back a failed Kubernetes deployment?

Run kubectl rollout undo deployment/<name> to return to the previous revision, then verify with kubectl rollout status and a health check. You can target a specific revision with --to-revision after viewing kubectl rollout history.

Why should secrets not be stored in CI/CD variables or env files?

CI/CD variables and env files are often logged, exposed to forked merge requests, or committed accidentally. Use dedicated secret managers like AWS Secrets Manager, HashiCorp Vault, or Kubernetes Secrets with OIDC-based access instead.