Devops

A daily-driver collection of skills for agentic coding — a portable, agent-agnostic catalog managed with the vd CLI.

Install

npx -y skills add vanducng/skills --skill devops

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Deployment and infrastructure operations. Use when writing or debugging a Dockerfile, docker build/run, docker compose; running terraform plan/apply/destroy or editing .tf files and modules; using kubectl, debugging pods (CrashLoopBackOff, ImagePullBackOff, OOMKilled), applying manifests, or writing Helm charts; deploying to GKE/EKS/AKS, Cloud Run, or App Engine; GitOps with Argo CD or Flux; writing GitHub Actions CI/CD workflows; or deploying Cloudflare Workers/Pages/R2/D1. Triggers on: dockerfile, docker compose, terraform, tofu, kubectl, k8s, helm, gcloud, eksctl, argocd, wrangler, github actions, ci/cd pipeline, container, cluster, rollout, image scan.

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

3.5 KB, as published. Nobody here has run it

DevOps

Deployment and infrastructure operations across containers, orchestration, IaC, cloud platforms, and CI/CD. SKILL.md dispatches; open the reference that matches the task. Distilled operational guidance - verify exact flags against the current tool docs, and never run a destructive command (terraform apply, kubectl delete, docker system prune) without confirming scope.

When to open which reference

Task	Open
Dockerfile, multi-stage build, `docker build/run`, `docker compose`, image size/security, `.dockerignore`	references/docker.md
`kubectl` commands, pod debugging (CrashLoopBackOff, ImagePullBackOff, OOMKilled, Pending), manifests, rollouts, Helm charts, RBAC/secrets	references/kubernetes.md
`terraform`/`tofu` plan/apply/destroy, state, modules, workspaces, remote backends, drift	references/terraform.md
GKE/EKS/AKS clusters, Cloud Run, App Engine, `gcloud`, `eksctl`, Cloudflare Workers/Pages/R2/D1	references/cloud-platforms.md
GitHub Actions workflows, GitOps (Argo CD, Flux), deployment strategies, multi-region	references/cicd-gitops.md

Operating principles (apply everywhere)

Plan before apply. Always terraform plan / kubectl apply --dry-run=client / docker build before the mutating step. Read the diff.
Least privilege. Non-root containers, scoped RBAC, per-job CI permissions, per-environment secrets. Never bake credentials into images or commit them.
Everything is code and versioned. Dockerfiles, manifests, .tf, Helm values, workflows - all in git, reviewed, applied through CI/GitOps rather than by hand.
Pin versions. No latest image tags, no @master actions - pin digests/major versions for reproducibility.
Right-size resources. Set CPU/memory requests and limits; unbounded workloads get OOM-killed or evicted.
Debug top-down. Overview (get/ps) → details (describe/inspect/events) → logs. Read the error before changing anything.
Scan and observe. Image scanning (Trivy, docker scout), health checks/probes, and metrics/logs are part of "done," not extras.

Quick start

# Docker
docker build -t myapp:1.0 . && docker run -d -p 8080:3000 myapp:1.0

# Kubernetes
kubectl apply -f manifests/ --dry-run=client && kubectl apply -f manifests/ && kubectl rollout status deploy/myapp

# Terraform
terraform init && terraform plan -out=tfplan && terraform apply tfplan

# GCP Cloud Run
gcloud run deploy my-service --image gcr.io/PROJECT/img:tag --region us-central1

# Cloudflare Worker
wrangler deploy