Create and modify GitHub Actions CI/CD workflows for the homelab repository.
Covers validation pipelines, OCI artifact promotion, and infrastructure testing.
Use when: (1) Creating new GitHub Actions workflows, (2) Modifying existing CI/CD pipelines,
(3) Adding validation or testing stages, (4) Debugging workflow failures.
Triggers: "github actions", "workflow", "ci/cd", "pipeline", "gha",
"build artifact", "validation workflow", "ci pipeline"
Adversarial security testing methodology for the Kubernetes homelab. Covers network policy
evasion, authentication bypass, privilege escalation, credential theft, and supply chain attacks.
Use when: (1) Red team testing against the homelab, (2) Validating network policy enforcement,
(3) Testing WAF bypass on external gateway, (4) Probing authentication layers,
(5) Assessing container escape paths, (6) Auditing RBAC and service accounts,
(7) Testing supply chain security of OCI promotion pipeline.
Triggers: "security test", "red team", "pentest", "penetration test", "attack surface",
"WAF bypass", "network policy evasion", "privilege escalation", "lateral movement",
"credential theft", "container escape", "RBAC audit", "security audit", "vulnerability"
SRE debugging methodology for Kubernetes incident investigation, root cause analysis,
and failure diagnosis.
Use when: (1) Pods not starting, stuck, or failing (CrashLoopBackOff, ImagePullBackOff, OOMKilled, Pending),
(2) Debugging Kubernetes errors or investigating "why is my pod...", (3) Service degradation or unavailability,
(4) Root cause analysis for any Kubernetes incident, (5) Network policy blocking traffic,
(6) Stalled HelmReleases or Flux failures that need troubleshooting.
Triggers: "pod not starting", "pod stuck", "CrashLoopBackOff", "ImagePullBackOff", "OOMKilled",
"Pending pod", "why is my pod", "kubernetes error", "k8s error", "service not available",
"can't reach service", "debug kubernetes", "troubleshoot k8s", "what's wrong with my pod",
"deployment not working", "helm install failed", "flux not reconciling", "root cause",
"5 whys", "incident", "network policy blocking", "hubble dropped", "stalled helmrelease",
"live not updating", "promotion pipeline stuck", "artifact not promoted"
