backend-morupark

Handle cluster reprovisioning and post-Terraform handoff for this MoruPark repository. Use when Codex needs to recover from `terraform destroy` and rebuild flows, restore kubeconfig access, bootstrap required operators, re-apply prod overlays, or verify that infrastructure, secrets, and workloads are ready after a fresh cluster or major infra recreation.

Verify Kubernetes release state for this MoruPark repository. Use when Codex needs to check `kubectl diff/apply` readiness, review post-deploy workload health, validate namespace and overlay consistency, inspect HPA, Deployment, or StatefulSet status, or diagnose rollout failures such as `ImagePullBackOff`, `CreateContainerConfigError`, probe errors, and image tag mismatches.

Manually roll backend deployments in this MoruPark repository to a specific Artifact Registry image tag when Argo CD is not in use. Use when Codex needs to set `api-gateway`, `auth-service`, `goods-service`, or `queue-service` to a `sha-<8>` or other explicit tag, trigger Kubernetes to pull that image, and verify rollout completion in `morupark-prod`.

Build and push the current backend MSA images for this MoruPark repository to Artifact Registry. Use when Codex needs to publish api-gateway, auth-service, goods-service, or queue-service images from local code, follow the repo's Dockerfile-based release path for auth-service, goods-service, and queue-service, use Jib for api-gateway, tag images with both `latest` and `sha-<git short sha>`, and use lightweight parallel workers to push multiple services concurrently.

Route repeated MoruPark infrastructure and Kubernetes operations through the local harness documentation and skills. Use when Codex needs to choose between cluster reprovisioning, ESO recurrence prevention, Kubernetes release verification, or broader infra operations, and when a request benefits from the standard runbook order and repo-specific guardrails before acting.

Repo-local infrastructure operations workflow for this MoruPark repository. Use when Codex needs to inspect, plan, review, or execute repeated work under `infra/`, especially Terraform provisioning in `infra/terraform/environments/prod`, preflight checks, post-apply verification, Cloud SQL follow-up tasks, and handoff checks tied to GCP, GKE, Secret Manager, Cloudflare, or Kubernetes overlays.

Create or update repo-local Codex skills using a split between concise human-readable `SKILL.md` guidance and machine-readable `ssl.json` evidence graphs. Use when Codex needs to author new skills, convert existing text-first skills such as `.gemini/skills/*.md`, or standardize future skills around Scheduling, Structural, and Logical SSL layers with grounded resource and risk metadata.

Prevent and recover recurring External Secrets Operator failures in this MoruPark repository. Use when Codex needs to diagnose missing `ExternalSecret` or `SecretStore` CRDs, enforce the required order of `Terraform -> get-credentials -> ESO Helm -> Kustomize`, verify `morupark-gcp-secrets` synchronization, or stop repeat incidents after cluster reprovisioning or partial Kubernetes deploy failures.