devops-patterns

Review Terraform modules by enforcing remote state with locking, environment separation, provider pinning, and proper module structure to prevent configuration drift and insecure deployments. Run tfmt and validate checks to ensure reliability and consistency across infrastructure code.

Secure Kubernetes manifests and Dockerfiles by using multi-stage builds, non-root containers, resource requests and limits, liveness and readiness probes, namespaces, RBAC, and PodDisruptionBudgets. These patterns ensure reliable and secure containerized workloads in production environments.

Harden GitHub Actions pipelines by using reusable workflows, OIDC authentication, dependency and layer caching, matrix builds, and environment protection. Manage secrets securely by implementing a secrets hierarchy with rotation and auditing to prevent unauthorized access.

Yes, you can establish production readiness by instrumenting metrics, logs, and traces, defining SLIs and SLOs, alerting on symptoms, and establishing on-call and escalation policies. This ensures infrastructure resilience and reliable operations for production workloads.

Yes, the skill operates without external dependencies to review infrastructure as code, Kubernetes manifests, Dockerfiles, and GitHub Actions workflows. It provides an opinionated playbook to identify and fix state, security, and deployment reliability issues directly.