platform-skills

Category: Ops & Delivery | Uploader: nitinjain999 | Downloads: 0 | Version: v1.0（Latest）

Hands-on guidance for platform and DevOps engineers working with Kubernetes, Terraform, GitOps, GitHub Actions, AWS, Azure, Linkerd, Linux, networking, compliance, and KEDA event-driven autoscaling. Use when designing or troubleshooting Kubernetes workloads and RBAC, writing Terraform modules, configuring Flux or Argo CD, setting up CI/CD pipelines, managing cloud identity and IAM, handling secrets, diagnosing DNS or VPC connectivity, operating a service mesh, applying product thinking to developer experience, implementing SOC 2 compliance controls in Terraform, or scaling workloads with KEDA scalers (SQS, Kafka, Prometheus, Cron, HTTP) — at any scale, for any team size.

Changelog: Source: GitHub https://github.com/nitinjain999/platform-skills

Directory Structure

Current level: tree/main/

📁 .claude-plugin/
- 📄 marketplace.json 3.6 KB
- 📄 plugin.json 2.0 KB
📁 .cursor/
- 📁 rules/
  - 📄 keda.mdc 3.9 KB
  - 📄 kubernetes.mdc 1.4 KB
  - 📄 platform-skills.mdc 2.4 KB
  - 📄 terraform.mdc 2.5 KB
📁 .github/
- 📁 workflows/
  - 📄 release.yml 19.5 KB
  - 📄 validate.yml 15.8 KB
- 📄 copilot-instructions.md 9.5 KB
📁 commands/
- 📄 commit.md 4.6 KB
- 📄 compliance.md 4.0 KB
- 📄 datadog.md 6.4 KB
- 📄 debug.md 1.7 KB
- 📄 document.md 3.4 KB
- 📄 dynatrace.md 7.8 KB
- 📄 gitops.md 2.1 KB
- 📄 helmcheck.md 5.3 KB
- 📄 keda.md 6.1 KB
- 📄 kyverno.md 9.7 KB
- 📄 linkerd.md 2.6 KB
- 📄 linux.md 3.9 KB
- 📄 mcp.md 2.7 KB
- 📄 observability.md 3.4 KB
- 📄 opa.md 5.3 KB
- 📄 pr-review.md 15.1 KB
- 📄 product.md 3.1 KB
- 📄 review.md 2.9 KB
- 📄 terraform.md 2.0 KB
- 📄 triage.md 4.7 KB
📁 examples/
- 📁 argocd/
  - 📁 app-of-apps/
    
    📁 applications/
    
    📄 platform-infrastructure-production.yaml 529 B
    
    📄 platform-workloads-production.yaml 514 B
    
    📄 application.yaml 470 B
  - 📁 projects/
    
    📄 platform-project.yaml 1.0 KB
  - 📄 README.md 2.5 KB
- 📁 aws/
  - 📁 iam/
    
    📄 irsa-dynamodb.json 451 B
    
    📄 s3-least-privilege.json 493 B
  - 📄 README.md 2.8 KB
- 📁 azure/
  - 📁 workload-identity/
    
    📄 main.tf 2.2 KB
    
    📄 serviceaccount.yaml 301 B
  - 📄 README.md 2.6 KB
- 📁 compliance/
  - 📁 backup/
    
    📄 main.tf 6.5 KB
  - 📁 detection/
    
    📄 main.tf 10.4 KB
  - 📁 encryption-data-services/
    
    📄 main.tf 13.5 KB
  - 📁 iam/
    
    📄 main.tf 6.7 KB
  - 📁 incident-response/
    
    📄 main.tf 6.7 KB
  - 📁 logging/
    
    📄 main.tf 11.0 KB
  - 📁 network/
    
    📄 main.tf 7.4 KB
  - 📁 vulnerability/
    
    📄 main.tf 8.6 KB
  - 📄 checkov-config.yaml 5.3 KB
  - 📄 README.md 3.9 KB
- 📁 conventional-commits/
  - 📁 commitlint/
    
    📁 .husky/
    
    📄 commit-msg 35 B
    
    📄 commitlint.config.js 783 B
    
    📄 package.json 335 B
  - 📄 README.md 2.9 KB
- 📁 datadog/
  - 📁 terraform/
    
    📄 monitors.tf 2.7 KB
  - 📄 README.md 3.0 KB
- 📁 documentation/
  - 📁 openapi-spec/
    
    📄 openapi.yaml 5.2 KB
  - 📄 README.md 3.2 KB
- 📁 dynatrace/
  - 📁 operator/
    
    📄 dynakube.yaml 1.4 KB
  - 📄 README.md 3.2 KB
- 📁 flux/
  - 📁 basic-monorepo/
    
    📁 apps/
    
    📁 base/
    
    📁 my-app/
    
    📄 deployment.yaml 823 B
    
    📄 ingress.yaml 472 B
    
    📄 service.yaml 232 B
    
    📄 kustomization.yaml 173 B
    
    📄 namespace.yaml 126 B
    
    📁 production/
    
    📄 kustomization.yaml 951 B
    
    📁 staging/
    
    📄 kustomization.yaml 738 B
    
    📁 clusters/
    
    📁 production/
    
    📄 apps.yaml 361 B
    
    📄 infrastructure.yaml 546 B
    
    📁 staging/
    
    📄 apps.yaml 352 B
    
    📄 infrastructure.yaml 465 B
    
    📁 infrastructure/
    
    📁 base/
    
    📁 cert-manager/
    
    📄 helmrelease.yaml 773 B
    
    📄 helmrepository.yaml 182 B
    
    📄 namespace.yaml 66 B
    
    📁 ingress-nginx/
    
    📄 helmrelease.yaml 841 B
    
    📄 helmrepository.yaml 204 B
    
    📄 namespace.yaml 67 B
    
    📄 kustomization.yaml 308 B
    
    📄 namespaces.yaml 278 B
    
    📁 production/
    
    📄 kustomization.yaml 514 B
    
    📁 staging/
    
    📄 kustomization.yaml 624 B
    
    📄 README.md 5.9 KB
  - 📄 README.md 2.7 KB
- 📁 github-actions/
  - 📁 composite-actions/
    
    📁 configure-cloud/
    
    📄 action.yml 2.0 KB
    
    📁 setup-terraform/
    
    📄 action.yml 1.8 KB
  - 📁 reusable-workflows/
    
    📄 terraform-plan.yml 4.5 KB
  - 📄 container-build.yml 6.0 KB
  - 📄 flux-sync.yml 6.5 KB
  - 📄 README.md 10.7 KB
  - 📄 terraform-cicd.yml 9.8 KB
- 📁 helm/
  - 📁 web-service/
    
    📁 templates/
    
    📁 tests/
    
    📄 test-connection.yaml 718 B
    
    📄 _helpers.tpl 1.5 KB
    
    📄 deployment.yaml 2.4 KB
    
    📄 hpa.yaml 1.0 KB
    
    📄 ingress.yaml 1.0 KB
    
    📄 networkpolicy.yaml 1.1 KB
    
    📄 NOTES.txt 1.0 KB
    
    📄 pdb.yaml 550 B
    
    📄 service.yaml 414 B
    
    📄 serviceaccount.yaml 437 B
    
    📄 .helmignore 42 B
    
    📄 Chart.yaml 140 B
    
    📄 values.schema.json 885 B
    
    📄 values.yaml 2.1 KB
  - 📄 README.md 2.0 KB
- 📁 keda/
  - 📄 keda-validate.sh 6.0 KB
  - 📄 README.md 1.5 KB
  - 📄 scaledjob-sqs.yaml 2.5 KB
  - 📄 scaledobject-cron.yaml 4.6 KB
  - 📄 scaledobject-kafka.yaml 2.6 KB
  - 📄 scaledobject-prometheus.yaml 1.7 KB
  - 📄 scaledobject-sqs.yaml 2.3 KB
- 📁 kubernetes/
  - 📄 deployment-baseline.yaml 1.2 KB
  - 📄 namespace-baseline.yaml 172 B
  - 📄 network-policy-default-deny.yaml 721 B
  - 📄 pod-disruption-budget.yaml 178 B
  - 📄 README.md 3.2 KB
- 📁 kyverno/
  - 📁 policies/
    
    📄 disallow-privileged-containers.yaml 1.4 KB
    
    📄 generate-default-networkpolicy.yaml 1.6 KB
    
    📄 require-team-labels.yaml 1.1 KB
  - 📁 resources/
    
    📄 deployment-missing-labels.yaml 545 B
    
    📄 deployment-with-labels.yaml 603 B
    
    📄 pod-non-privileged.yaml 277 B
    
    📄 pod-privileged.yaml 270 B
  - 📄 kyverno-test.yaml 896 B
  - 📄 README.md 661 B
- 📁 mcp/
  - 📁 docs-server/
    
    📄 index.ts 2.4 KB
    
    📄 package.json 450 B
    
    📄 tsconfig.json 294 B
  - 📄 README.md 2.8 KB
- 📁 observability/
  - 📁 prometheus-alerts/
    
    📄 orders-service.yaml 2.5 KB
  - 📄 README.md 3.3 KB
- 📁 opa/
  - 📁 conftest/
    
    📁 .regal/
    
    📄 config.yaml 232 B
    
    📁 policies/
    
    📄 deny_unencrypted_s3.rego 1.6 KB
    
    📄 deny_unencrypted_s3_test.rego 2.3 KB
    
    📁 tests/
    
    📄 main.tf 692 B
  - 📄 README.md 1.0 KB
- 📁 openshift/
  - 📄 README.md 3.1 KB
  - 📄 resource-quota.yaml 509 B
  - 📄 route.yaml 346 B
- 📁 pr-review/
  - 📁 compliance/
    
    📄 iam-wildcard.tf 2.8 KB
  - 📁 cost/
    
    📄 deployment-replica-increase.yaml 2.3 KB
    
    📄 terraform-nat-gateway.tf 2.3 KB
  - 📁 drift/
    
    📄 kustomization-prod.yaml 1.1 KB
    
    📄 values-dev.yaml 1.7 KB
    
    📄 values-prod.yaml 614 B
  - 📁 ownership/
    
    📄 missing-codeowners.txt 1.5 KB
    
    📄 namespace-missing-labels.yaml 1.9 KB
  - 📁 rollback/
    
    📄 rds-storage-increase.tf 2.1 KB
    
    📄 resource-rename.yaml 3.0 KB
  - 📁 upgrade/
    
    📄 deprecated-apis.yaml 2.4 KB
    
    📄 terraform-loose-constraints.tf 1.6 KB
  - 📄 README.md 4.3 KB
- 📁 terraform/
  - 📁 eks-cluster/
    
    📄 main.tf 7.5 KB
    
    📄 outputs.tf 2.4 KB
    
    📄 README.md 2.4 KB
    
    📄 variables.tf 2.2 KB
    
    📄 versions.tf 228 B
  - 📁 multi-env-structure/
    
    📄 README.md 6.3 KB
  - 📄 README.md 6.7 KB
- 📁 triage/
  - 📁 actionable-fix/
    
    📄 broken-helm-probe-path.yaml 1.3 KB
    
    📄 deprecated-k8s-api.yaml 1.2 KB
    
    📄 missing-resource-limits.yaml 1.3 KB
    
    📄 plaintext-secret-in-config.yaml 1.4 KB
    
    📄 security-wildcard-iam.tf 1.1 KB
  - 📁 informational/
    
    📄 ask-about-kms-rotation.md 1.4 KB
    
    📄 question-why-two-replicas.md 1.4 KB
    
    📄 suggest-pdb-follow-up.md 1.4 KB
  - 📁 not-applicable/
    
    📄 ci-status-bot.md 1.3 KB
    
    📄 duplicate-thread.md 1.1 KB
    
    📄 out-of-scope-file.md 1.6 KB
  - 📄 README.md 11.8 KB
📁 references/
- 📄 argocd.md 1.9 KB
- 📄 aws.md 5.9 KB
- 📄 azure.md 6.8 KB
- 📄 compliance.md 59.2 KB
- 📄 conventional-commits.md 9.5 KB
- 📄 datadog.md 10.6 KB
- 📄 documentation.md 9.4 KB
- 📄 dynatrace.md 10.7 KB
- 📄 flux.md 6.6 KB
- 📄 github-actions.md 1.6 KB
- 📄 helm.md 16.0 KB
- 📄 keda.md 25.0 KB
- 📄 kubernetes.md 6.8 KB
- 📄 kyverno.md 24.1 KB
- 📄 linkerd.md 11.7 KB
- 📄 linux-networking.md 16.7 KB
- 📄 mcp.md 8.4 KB
- 📄 observability.md 10.1 KB
- 📄 opa.md 13.4 KB
- 📄 openshift.md 2.0 KB
- 📄 platform-mindset.md 10.5 KB
- 📄 platform-operating-model.md 2.9 KB
- 📄 pr-review.md 18.7 KB
- 📄 secrets.md 10.8 KB
- 📄 terraform.md 5.1 KB
📁 skills/
- 📁 platform-skills/
  - 📄 SKILL.md 14.7 KB
📁 tests/
- 📄 handbook-consistency.sh 3.3 KB
- 📄 validate-helmcheck.sh 10.4 KB
- 📄 validate-skill.sh 6.1 KB
📄 .cursorrules 5.6 KB
📄 .gitignore 2.3 KB
📄 CHANGELOG.md 37.4 KB
📄 CLAUDE.md 10.7 KB
📄 COMMANDS.md 61.4 KB
📄 CONTRIBUTING.md 14.2 KB
📄 EDITOR_INTEGRATIONS.md 18.5 KB
📄 GETTING_STARTED.md 7.1 KB
📄 HOW_IT_WORKS.md 16.1 KB
📄 INSTALLATION.md 3.8 KB
📄 LICENSE 11.1 KB
📄 NOTICE 155 B
📄 QUICKSTART.md 2.0 KB
📄 README.md 18.1 KB
📄 renovate.json 3.3 KB
📄 SKILL.md 14.7 KB

SKILL.md

---
name: platform-skills
description: Hands-on guidance for platform and DevOps engineers working with Kubernetes, Terraform, GitOps, GitHub Actions, AWS, Azure, Linkerd, Linux, networking, compliance, and KEDA event-driven autoscaling. Use when designing or troubleshooting Kubernetes workloads and RBAC, writing Terraform modules, configuring Flux or Argo CD, setting up CI/CD pipelines, managing cloud identity and IAM, handling secrets, diagnosing DNS or VPC connectivity, operating a service mesh, applying product thinking to developer experience, implementing SOC 2 compliance controls in Terraform, or scaling workloads with KEDA scalers (SQS, Kafka, Prometheus, Cron, HTTP) — at any scale, for any team size.
---

# Platform Skills

Use this skill for hands-on help with Kubernetes, GitOps, cloud infrastructure, CI/CD, secrets management, service mesh, Linux administration, networking, and platform product thinking — whether you are a solo developer or part of a large platform team.

## Pick the right tool for the job

Match the task to the right layer:

1. `Terraform`: Provision cloud primitives, cluster bootstrap, shared services, identity, networking, and policy foundations.
2. `Kubernetes`: Define workload, namespace, RBAC, service, policy, and platform baseline patterns that apply across distributions.
3. `OpenShift`: Adapt Kubernetes patterns to OpenShift-native routing, security, operator, and tenancy constraints.
4. `Flux` or `Argo CD`: Reconcile in-cluster desired state after bootstrap and manage promotion of workloads or platform add-ons.
5. `GitHub Actions`: Validate, package, test, and promote changes. Keep workflows declarative and reusable.
6. `AWS` or `Azure`: Apply provider-specific account, subscription, identity, and governance patterns.
7. `Linkerd`: Apply service mesh for automatic mTLS, golden-signal observability, and traffic management between workloads.
8. `Linux & Networking`: Diagnose Linux systems and network problems — DNS resolution, load balancer routing, VPC/VNet design, kernel tuning, and connectivity troubleshooting.
9. `Platform Mindset`: Treat developers as customers. Apply product thinking, friction audits, DevEx metrics, RFC/ADR processes, incident communication, and blameless post-mortems.
10. `Cross-platform`: Design repo boundaries, ownership, promotion flows, and security controls first.
11. `Compliance`: Implement SOC 2 Trust Services Criteria controls in Terraform — IAM least privilege, encryption, audit logging, network security, and change management. Run Checkov for continuous enforcement and collect evidence for auditors.
12. `Helm (Helmcheck)`: Build, lint, and audit Helm charts — scaffolding, values design, template patterns, dependency management, security hardening, and the full lint/validation pipeline.
13. `MCP (Model Context Protocol)`: Build, review, and debug MCP servers and clients — tool and resource handlers, Zod/Pydantic schema validation, stdio/HTTP/SSE transports, protocol compliance, auth, and rate limiting.
14. `Observability`: Instrument services with structured logging, Prometheus metrics, and OpenTelemetry tracing. Build Grafana dashboards, write alerting rules, run k6 load tests, and plan capacity.
15. `Documentation`: Generate and validate inline docstrings (Google/NumPy/JSDoc), OpenAPI 3.1 specs, documentation sites (MkDocs, TypeDoc), and getting started guides.
16. `Datadog`: Deploy and configure the Datadog Agent on Kubernetes, instrument services with APM and log correlation, write monitors, dashboards, SLOs, and synthetic tests — all as Terraform-managed resources.
17. `Dynatrace`: Deploy OneAgent via the Kubernetes Operator with automatic injection, configure anomaly detection, ingest custom metrics, define SLOs, and manage dashboards and alerting profiles with the Dynatrace Terraform provider.
18. `Conventional Commits`: Analyze git diffs, generate commit messages that explain WHY a change was made, intelligently stage files for atomic commits, and validate messages against the Conventional Commits specification.
19. `OPA / Conftest`: Generate Rego policies with correct rule types and namespacing, write unit tests, run the full validation pipeline (fmt → regal lint → conftest verify → integration test), explain existing policies, and debug why a rule is not firing.
20. `Kyverno`: Write and maintain Kubernetes-native admission policies using the CEL-based types — ValidatingPolicy, MutatingPolicy, GeneratingPolicy, ImageValidatingPolicy (all `policies.kyverno.io/v1`). Covers matchConstraints, matchConditions, CEL validations/mutations, generator.Apply(), Audit→Deny promotion, PolicyException, and kyverno-cli testing.
21. `PR Review`: Comprehensive pre-merge risk review across six dimensions — cost impact, environment drift, ownership and governance gaps, SOC 2 compliance, deprecated API / version hygiene, and rollback feasibility scoring.
22. `PR Comment Triage`: Triage bot or human PR comments, classify them as ACTIONABLE_FIX / INFORMATIONAL / NOT_APPLICABLE, make the minimal fix when valid, reply on the thread, and resolve it through `gh`.
23. `KEDA`: Design, generate, debug, and review KEDA ScaledObject and ScaledJob resources. Covers all major scalers (Prometheus, SQS, Kafka, Redis, Cron, HTTP Add-on, Azure Service Bus), TriggerAuthentication with IRSA/Workload Identity, scaling lifecycle tuning, scale-to-zero patterns, and GitOps integration.

If a task spans multiple areas, decide which layer owns the source of truth and keep the other layers consumers of that state.

## Apply These Platform Rules

- Separate reusable platform building blocks from live environment configuration.
- Prefer GitOps pull-based reconciliation for cluster state and CI push-based automation for validation and packaging.
- Choose either Flux or Argo CD for a given ownership boundary unless the task is explicitly about migration between them.
- Keep Terraform responsible for bootstrapping clusters, cloud resources, secrets backends, and access primitives. Do not let Flux or Argo CD recreate those foundations unless there is a deliberate controller-based design.
- Use Flux or Argo CD for in-cluster add-ons, workloads, Helm releases, and app-level environment promotion after bootstrap.
- Use GitHub Actions for checks, plans, policy gates, artifact publishing, and promotion orchestration. Do not store long-lived environment truth in workflow YAML.
- Prefer OIDC or workload identity over static cloud credentials.
- Model environments explicitly. Promotion should be visible in Git history and reversible by commit rollback.
- For Linux and networking changes, validate at each layer before escalating: confirm the process is listening (`ss -tulnp`), then L3 reachability (`ping`), L4 connectivity (`nc -zv`), L7 response (`curl -v`), and security group / NACL rules last. Do not skip layers.
- For every Terraform change, enforce in order: `terraform fmt -check -recursive`, `terraform validate`, `tflint --recursive`, security scan (`tfsec` or `checkov`), then `plan`. Do not let format or lint failures reach the plan step.
- For every Helm chart change, enforce in order: `helm lint --strict`, `helm template --debug`, `kubeconform -strict -summary` on rendered output, `checkov` on rendered manifests, then `helm test` in-cluster. Fail CI on any `helm lint --strict` warning.
- Enforce a tag baseline on all cloud resources. The specific keys are an organizational decision. Use AWS `default_tags` (provider level) or Azure `merge(local.common_tags, {...})` (module local) so the baseline is applied once, not repeated per resource. Back it with AWS Tag Policies or Azure Policy so resources created outside Terraform are also covered.

## Structure the Response

For design or implementation work, provide output in this order:

1. Target architecture and ownership boundaries
2. Repository or directory layout
3. Identity, secrets, and promotion model
4. Validation and deployment workflow
5. Risks, tradeoffs, and migration path

When asked to generate code, start from the thinnest useful slice that proves the pattern and note which layer remains intentionally out of scope.

## Pick the Right Reference Files

- For repo topology, boundaries, and promotion flow, read [references/platform-operating-model.md](references/platform-operating-model.md).
- For Terraform module, environment, testing, and state guidance, read [references/terraform.md](references/terraform.md).
- For cluster baseline, workload, RBAC, and policy guidance, read [references/kubernetes.md](references/kubernetes.md).
- For OpenShift-specific operating patterns, read [references/openshift.md](references/openshift.md).
- For Flux bootstrap, reconciliation, image automation, and app delivery guidance, read [references/flux.md](references/flux.md).
- For Argo CD app delivery and application set patterns, read [references/argocd.md](references/argocd.md).
- For AWS landing zones, IAM, and EKS-oriented patterns, read [references/aws.md](references/aws.md).
- For Azure management groups, identity, and AKS-oriented patterns, read [references/azure.md](references/azure.md).
- For reusable workflows, OIDC, and delivery controls, read [references/github-actions.md](references/github-actions.md).
- For secrets strategy, External Secrets Operator, and Sealed Secrets patterns, read [references/secrets.md](references/secrets.md).
- For Linkerd service mesh, mTLS, observability, traffic management, and multi-cluster, read [references/linkerd.md](references/linkerd.md).
- For Linux administration, DNS, load balancing, VPC/VNet design, kernel tuning, and network troubleshooting, read [references/linux-networking.md](references/linux-networking.md).
- For product mindset, developer experience, friction audits, RFC/ADR, incident communication, post-mortems, and capacity planning, read [references/platform-mindset.md](references/platform-mindset.md).
- For SOC 2 Trust Services Criteria controls in Terraform — IAM, encryption, audit logging, network security, change management, Checkov enforcement, and audit evidence — read [references/compliance.md](references/compliance.md).
- For Helm chart scaffolding, template patterns, values design, lint pipeline, and GitOps integration, read [references/helm.md](references/helm.md).
- For MCP server and client development — protocol, TypeScript/Python SDKs, schema validation, transports, security, and testing — read [references/mcp.md](references/mcp.md).
- For observability instrumentation, Prometheus metrics, OpenTelemetry tracing, alerting rules, Grafana dashboards, load testing, and capacity planning, read [references/observability.md](references/observability.md).
- For code documentation — Python docstrings, JSDoc, OpenAPI 3.1 specs, documentation sites, and developer guides — read [references/documentation.md](references/documentation.md).
- For Datadog Agent setup, APM, log management, monitors, dashboards, SLOs, and synthetic tests — read [references/datadog.md](references/datadog.md).
- For Dynatrace OneAgent Operator, auto-instrumentation, custom metrics, SLOs, anomaly detection, and Terraform provider — read [references/dynatrace.md](references/dynatrace.md).
- For Conventional Commits — type classification, scope rules, breaking changes, message structure, atomic commits, commitlint, husky, semantic-release, and validation rules — read [references/conventional-commits.md](references/conventional-commits.md).
- For OPA / Conftest — Rego v1 syntax, rule types, package namespacing, input shapes, unit tests, validation pipeline (fmt/regal/verify), GitHub Actions integration, and troubleshooting — read [references/opa.md](references/opa.md).
- For Kyverno CEL-based admission policies — ValidatingPolicy, MutatingPolicy, GeneratingPolicy, ImageValidatingPolicy, matchConstraints, matchConditions, Audit→Deny promotion, PolicyException, kyverno-cli testing, and migration from legacy ClusterPolicy — read [references/kyverno.md](references/kyverno.md).
- For comprehensive PR review — cost impact, environment drift, ownership gaps, SOC 2 compliance, deprecated APIs, version hygiene, rollback feasibility, and bot comment triage — read [references/pr-review.md](references/pr-review.md).
- For KEDA event-driven autoscaling — ScaledObject, ScaledJob, TriggerAuthentication, IRSA, scalers (Prometheus, SQS, Kafka, Redis, Cron, HTTP Add-on, Azure Service Bus), scaling lifecycle, security patterns, and troubleshooting — read [references/keda.md](references/keda.md).

Load only the files needed for the current request.

## Slash Commands

For explicit, repeatable workflows use these commands:

- `/platform-skills:debug` — structured troubleshooting for any platform symptom
- `/platform-skills:review` — production-readiness review of any manifest, Terraform, or workflow
- `/platform-skills:terraform` — full fmt/validate/tflint/security pipeline + blast radius review
- `/platform-skills:gitops` — Flux CD and Argo CD reconciliation troubleshooting
- `/platform-skills:linkerd` — Linkerd mTLS, injection, policy, and multi-cluster diagnostics
- `/platform-skills:linux` — Linux administration, DNS, load balancing, VPC/VNet, and connectivity troubleshooting
- `/platform-skills:product` — product thinking, friction audits, DevEx, RFC/ADR, incident updates, post-mortems
- `/platform-skills:compliance` — SOC 2 gap analysis, control implementation, evidence collection, and Checkov remediation for Terraform
- `/platform-skills:helmcheck` — Helm chart scaffolding, structural review, and security audit with full lint/validation pipeline
- `/platform-skills:mcp` — MCP server/client scaffolding, protocol review, and integration debugging
- `/platform-skills:observability` — instrument services, build dashboards, write alerts, run load tests, plan capacity
- `/platform-skills:document` — generate docstrings, OpenAPI specs, documentation sites, and getting started guides
- `/platform-skills:datadog` — Datadog Agent setup, APM instrumentation, monitors, dashboards, SLOs, and debugging
- `/platform-skills:dynatrace` — OneAgent deployment, instrumentation, anomaly detection, SLOs, and debugging
- `/platform-skills:commit` — analyze diff, generate conventional commit message, stage files atomically, validate message
- `/platform-skills:opa` — generate Rego policies, write unit tests, run fmt/regal/verify pipeline, explain or debug policies
- `/platform-skills:kyverno` — generate, test, audit, debug, or migrate Kyverno CEL-based admission policies
- `/platform-skills:pr-review` — comprehensive PR review: cost, drift, ownership, compliance, upgrade, rollback
- `/platform-skills:triage` — triage a PR comment (bot or human): classify as ACTIONABLE_FIX / INFORMATIONAL / NOT_APPLICABLE, produce the exact fix if needed, and write the thread reply
- `/platform-skills:keda` — design, generate, debug, or review KEDA ScaledObject/ScaledJob autoscaling

Comments 0

Latest | Hot

Please login before commenting.

Loading comments...

platform-skills

Directory Structure

SKILL.md

Report

Notice