igou-openshift

Use when onboarding a new Forgejo repo to Pipelines-as-Code on this cluster — adding an entry to clusters/ocp/pac-tenants/values.yaml, wiring Tekton container-build pipelines, or extending CI access for a new project.

Add a CloudNative-PG (CNPG) PostgreSQL `Cluster` to an existing application or component. Generates the Cluster YAML with the project's defaults baked in (sync-wave -1, enablePDB:false on single-instance, freenas-nvmeof-ssd-csi storage, PodMonitor on), patches kustomization.yaml, validates, and prints the workload-side env-from-secret snippet for the auto-generated `<cluster>-app` Secret.

Add an ExternalSecret to an existing component or application. Creates the ExternalSecret YAML, patches kustomization.yaml, and verifies the 1Password item exists in the correct vault using the op CLI.

Scaffold a new user-facing application in applications/ that uses the bjw-s app-template Helm chart. Generates a Namespace, kustomization.yaml with a fully-populated helmCharts stanza (controllers, service, ingress as OpenShift Route, optional persistence/serviceMonitor/serviceAccount), and optional ExternalSecret, NFS PV+PVC, and Probe placeholder. Use when adding a self-hosted app that does not have its own Helm chart.

Add a Prometheus exporter (or bare ServiceMonitor/PodMonitor) to user workload monitoring. Supports four render modes — helm chart, bjw-s app-template chart, OLM operator, and servicemonitor-only. Generates the exporter directory under components/user-workload-monitoring/exporters/<name>/, wires a ServiceMonitor and optional PrometheusRule, registers it in the UWM kustomization, and chains into add-externalsecret / import-grafana-dashboard / scaffold-component-olm as needed.

Add a component or application to a cluster's values.yaml for the ArgoCD app-of-apps pattern. Reads the existing values.yaml, determines the correct insertion point by sync-wave ordering, and adds the entry.

Import a dashboard from grafana.com or a URL into a Grafana instance managed by the grafana-operator. Fetches the dashboard JSON, resolves its `__inputs` to existing GrafanaDatasources, generates a `GrafanaDashboard` CR, and wires it into the target component's kustomization.yaml.

Add a blackbox-exporter Probe target (HTTP/HTTPS/TCP/DNS) to monitor an external or internal service. Appends the URL to an existing Probe CR when the module and label set match, or creates a new Probe. Use when the user asks to monitor a URL, check a cert, or add something to blackbox.

Scaffold a new OLM operator component in components/ following repo conventions. Generates Namespace, OperatorGroup, Subscription, kustomization.yaml, and optionally ExternalSecret. Use when adding a new OLM operator to the platform.

Refresh and sync ArgoCD applications. Can target all apps, a specific app, or filter by sync status (OutOfSync, Degraded, etc.). Shows sync status before and after.

Scaffold a new test workload under test-workloads/ with namespace, NetworkAttachmentDefinition, pod or deployment, and optionally Service/Route. Supports macvlan, ipvlan, OVN-K localnet CNI types and static/DHCP/whereabouts/OVN IPAM modes.

Scaffold a KubeVirt VirtualMachine manifest under test-workloads/ with options for instance type, storage, networking (including Multus), and cloud-init SSH configuration.

Diagnose issues in a Kubernetes namespace by inspecting pods, events, operator CSVs, InstallPlans, CRDs, and common failure modes. Extends /inspect with root-cause analysis.

Inspect a Kubernetes namespace using MCP tools to show pod status, network interfaces, events, and resources

Scaffold a new user-facing application in applications/ following repo conventions. Generates Namespace, kustomization.yaml with helmCharts stanza, and optionally ExternalSecret. Use when adding a new self-hosted app to the platform.