| name | infra-ops |
| description | Repo-local infrastructure operations workflow for this MoruPark repository. Use when Codex needs to inspect, plan, review, or execute repeated work under `infra/`, especially Terraform provisioning in `infra/terraform/environments/prod`, preflight checks, post-apply verification, Cloud SQL follow-up tasks, and handoff checks tied to GCP, GKE, Secret Manager, Cloudflare, or Kubernetes overlays. |
Infra Ops
Use this skill for repo-local /infra work. Keep SKILL.md concise for operator guidance and use ssl.json as the structured invocation, scene, and resource graph.
Quick Start
- Start from infra/README.md and the target environment under
infra/terraform/environments/prod.
- Read
ssl.json when the request needs machine-readable invocation fit, execution scenes, or resource-risk evidence.
- Read references/terraform-workflow.md for the Terraform path, variables, and guardrails.
- Read references/ops-followups.md when the task includes DB creation, K8s handoff, or post-apply verification.
Workflow
- Run a preflight pass before any mutable action.
- Confirm the exact environment, path, and user intent before planning changes.
- Inspect variables, credentials, and provider-sensitive inputs before
plan.
- Prefer
fmt -check, validate, and plan -out=prod.tfplan before any apply.
- Treat
apply as approval-gated and never default to -auto-approve.
- Verify outputs and downstream state after provisioning, including preserved Cloud SQL database existence and app-user grants when DB-backed workloads are in scope.
- Use repo utility scripts only when the requested follow-up is in scope.
- Record meaningful completed infra work in
infra/md/implement.md.
Guardrails
- Do not mutate infra outside the intended environment path.
- Do not skip
plan when a mutable Terraform action is requested.
- Do not use
terraform apply -auto-approve.
- Do not assume optional secrets or Cloudflare inputs are populated without checking.
- Do not create or alter production resources unless the user request clearly calls for it.
References
