القائمة
Deploy a change to the cluster via Flux GitOps and VERIFY it actually reconciled. Use after editing anything under clusters/prod. A push alone is NOT a verified deploy.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Run long or multi-checkpoint repository work through Hermes Kanban with autonomous OpenAI author/reviewer routing.
Take a routine on-demand k3s etcd snapshot and confirm it reached offsite R2. Non-destructive. Use for ad-hoc backups. RESTORE is NOT covered here (it is destructive + owner-gated).
Commit a change and get it pushed. The git origin + write deploy key live ONLY on uap-ops-1 (100.82.241.121), NOT the workstation. Use whenever a change is ready to land.
Deploy a change to the cluster via Flux GitOps and VERIFY it actually reconciled. Use after editing anything under clusters/prod. A push alone is NOT a verified deploy.
Offload a token-HEAVY, quote-verifiable read (big log/doc/corpus) to the free local LLM so the big input never enters this paid context. Use when you are about to read a large file only to extract/locate/enumerate specific facts. NOT for judgment, synthesis, code edits, or small inputs.
Encrypt a Kubernetes Secret with SOPS for clusters/prod. MUST run on uap-home-1 (sops is absent on Windows; the age private key lives only there). Use when adding/rotating any secret.
| name | uap-flux-deploy |
| description | Deploy a change to the cluster via Flux GitOps and VERIFY it actually reconciled. Use after editing anything under clusters/prod. A push alone is NOT a verified deploy. |
Flux is pull-based. "Pushed" != "deployed". The Ready check at the new SHA is the real confirmation.
sudo k3s kubectl) or via uap-ops-1 (kubectl):
ssh uap@100.106.223.120 "sudo k3s kubectl -n flux-system get gitrepository,kustomization"
ssh uap@100.106.223.120 "sudo k3s kubectl -n flux-system describe kustomization uap-platform | tail -30"
GitRepository/uap-platform Ready (revision = your SHA) AND Kustomization/uap-platform Ready (Applied revision = your SHA).ssh uap@100.106.223.120 "sudo k3s kubectl -n uap-system get deploy,pod"
kustomization.yaml or Flux never applies it (this is currently true of litellm.yaml/hermes.yaml — they are NOT in clusters/prod/infra/kustomization.yaml).Authoritative reference: runbooks/flux-remote-git.md (Verify After Enabling), runbooks/gitops-flux-sops.md.