project-manifest-review

name	project-manifest-review
metadata	{"author":"rhoai3-demo","version":"1.1.0","platform-family":"rhoai","platform-baseline":"repo","ocp-baseline":"repo","skill-group":"Project Structure"}
description	Review Kubernetes, OpenShift, Argo CD, and RHOAI manifests for structural correctness, cross-resource consistency, label compliance, security posture, YAML standards, image and artifact provenance handoff, and orphaned resources. Use when reviewing GitOps changes, adding a new stage, checking a kustomization, auditing labels, or running a periodic manifest compliance pass. Do NOT use for authoring new manifests unless paired with project-gitops-authoring. Do NOT use as the final source-of-truth check for Red Hat product APIs, API tier support posture, image support posture, or model artifact provenance; pair with project-red-hat-doc-alignment-review and rhoai-api-tiers for those checks.

Manifest Review

Use this skill as a readonly review workflow. Report findings; do not modify files unless the user asks for fixes.

Workflow

1. Read the affected gitops/stage-YXX-slug/base/ folder and its kustomization.yaml.
2. Identify all rendered or referenced resources.
3. Apply references/review-checklist.md to each manifest.
4. For labels and annotations, use project-gitops-authoring/references/labels-and-annotations.md.
5. For YAML standards, cross-resource consistency, and validation, use project-gitops-authoring/references/manifest-standards.md.
6. For security posture, use project-gitops-authoring/references/security-and-secrets.md.
7. For CR field authority, operator channel support, Red Hat product images, validated model artifacts, or README source grounding, hand off to project-red-hat-doc-alignment-review. If the changed image belongs to an operator-generated operand or copied CSV state, flag it before source review as likely wrong ownership.
8. For RHOAI API compatibility tiers, Technology Preview or Developer Preview labeling, and Tier 4 boundary review, use rhoai-api-tiers.

Output Format

Stage: stage-YXX-slug
Files reviewed: N
Findings:
  - [LABEL] file.yaml: missing app.kubernetes.io/component
  - [SELECTOR] service.yaml: selector does not match pod template labels
  - [SECURITY] secret.yaml: missing demo-value warning
  - [SOURCE] servingruntime.yaml: image provenance needs Red Hat source review
  - [YAML] configmap.yaml: title comment restates kind
Summary: X findings

References

• references/review-checklist.md