メニュー
Deploy a change to the cluster via Flux GitOps and VERIFY it actually reconciled. Use after editing anything under clusters/prod. A push alone is NOT a verified deploy.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Run long or multi-checkpoint repository work through Hermes Kanban with autonomous OpenAI author/reviewer routing.
Take a routine on-demand k3s etcd snapshot and confirm it reached offsite R2. Non-destructive. Use for ad-hoc backups. RESTORE is NOT covered here (it is destructive + owner-gated).
Commit a change and get it pushed. The git origin + write deploy key live ONLY on uap-ops-1 (100.82.241.121), NOT the workstation. Use whenever a change is ready to land.
Deploy a change to the cluster via Flux GitOps and VERIFY it actually reconciled. Use after editing anything under clusters/prod. A push alone is NOT a verified deploy.
Offload a token-HEAVY, quote-verifiable read (big log/doc/corpus) to the free local LLM so the big input never enters this paid context. Use when you are about to read a large file only to extract/locate/enumerate specific facts. NOT for judgment, synthesis, code edits, or small inputs.
Encrypt a Kubernetes Secret with SOPS for clusters/prod. MUST run on uap-home-1 (sops is absent on Windows; the age private key lives only there). Use when adding/rotating any secret.
| name | uap-flux-deploy |
| description | Deploy a change to the cluster via Flux GitOps and VERIFY it actually reconciled. Use after editing anything under clusters/prod. A push alone is NOT a verified deploy. |
Flux is pull-based. "Pushed" != "deployed". The Ready check at the new SHA is the real confirmation.
sudo k3s kubectl) or via uap-ops-1 (kubectl):
ssh uap@100.106.223.120 "sudo k3s kubectl -n flux-system get gitrepository,kustomization"
ssh uap@100.106.223.120 "sudo k3s kubectl -n flux-system describe kustomization uap-platform | tail -30"
GitRepository/uap-platform Ready (revision = your SHA) AND Kustomization/uap-platform Ready (Applied revision = your SHA).ssh uap@100.106.223.120 "sudo k3s kubectl -n uap-system get deploy,pod"
kustomization.yaml or Flux never applies it (this is currently true of litellm.yaml/hermes.yaml — they are NOT in clusters/prod/infra/kustomization.yaml).Authoritative reference: runbooks/flux-remote-git.md (Verify After Enabling), runbooks/gitops-flux-sops.md.