managing-infra

Kubernetes deployments require security hardening and multi-environment setup. This Skill provides production-ready YAML templates with non-root containers, read-only filesystems, dropped capabilities, and privilege escalation prevention, eliminating boilerplate and security gaps across dev, staging, and prod.

Kustomize and Helm serve different overlay and templating needs. This Skill provides a decision framework comparing both approaches, helping you choose based on reproducibility requirements, environment-specific customization, and whether you need templating logic or pure patching.

Terraform module organization determines maintainability and reusability across environments. This Skill codifies patterns for structuring modules, managing dependencies, and applying multi-environment overlays so deployments remain consistent and automation-ready.

GitHub Actions enables multi-arch Docker builds and cross-platform testing. This Skill provides battle-tested workflow templates that run tests on both x86 and ARM, integrate security scanning, and follow DevOps best practices for reproducible, secure automation.

Security defaults prevent container escape and privilege abuse. This Skill ensures manifests enforce non-root execution, read-only root filesystems, dropped Linux capabilities, and no privilege escalation, covering both Kubernetes workload security and optimized multi-arch Dockerfile patterns.

Cloud infrastructure requires consistent policy and configuration across environments. This Skill eliminates manual toil by codifying infrastructure patterns for Kubernetes, Terraform, Helm, Kustomize, and GitHub Actions, ensuring functional and security requirements are met at scale.