메뉴
Provisions tenant-level MySQL resources such as database, user, and grants in a controlled way. Use when: coordinator routes a MySQL tenant provisioning step, or the user explicitly asks for database-per-tenant or account-per-tenant setup on MySQL or MariaDB.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Produces a weekly CISO management briefing as a Marp-compatible Markdown presentation. Use when: weekly cybersecurity notes, KPI/KRI data, incidents, vulnerabilities, threat intelligence, regulatory updates, or management decision needs must become an executive-ready cyber risk and security management brief.
Operating protocol for a Crux project. Use when: an agent or IDE needs to understand Crux layout, locate framework-home definitions, locate project `.crux` state, route work to the right agent, run onboarding, manage task continuity, or decide which files are read-only versus writable.
Enforces a disciplined implementation posture before coding or broad refactors: surface assumptions, narrow scope, prefer the simplest complete fix, define verification targets, and avoid speculative cleanup. Use when: a developer agent is about to implement, refactor, review, or change non-trivial code and there is meaningful ambiguity, risk, or temptation to over-engineer.
Analyses a live Kubernetes cluster and produces .crux/docs/kubernetes.md and .crux/summaries/kubernetes.md. Read-only — does not modify any cluster resources. Use when: (1) .crux/docs/kubernetes.md is missing during onboarding, (2) user requests an architecture review, (3) cluster configuration has significantly changed.
Audits all cluster namespaces against tenant naming conventions defined in decisions/tenant-naming-conventions.md. Checks label compliance, missing resource quotas, and naming pattern violations. Use when: naming convention question, pre-release namespace review, SOC Type 2 audit, or periodic drift check.
Applies or updates Kubernetes NetworkPolicy resources for a target namespace. Supports standard policy templates (deny-all-ingress, allow-same-namespace, allow-ingress-controller, allow-monitoring) and custom policies from user input. Requires explicit user approval before applying any change. Use when: hardening a namespace, onboarding a new tenant, policy drift repair.
| name | mysql-tenant-provisioning |
| description | Provisions tenant-level MySQL resources such as database, user, and grants in a controlled way. Use when: coordinator routes a MySQL tenant provisioning step, or the user explicitly asks for database-per-tenant or account-per-tenant setup on MySQL or MariaDB. |
| license | MIT |
| compatibility | opencode |
| metadata | {"owner":"mysql-admin","type":"read-write","approval":"Yes"} |
Owner: mysql-admin
Type: read-write
Approval: Yes
Plans and, after approval, applies tenant-level MySQL provisioning steps such as database creation, user creation, and scoped grants.
Requires already loaded:
{framework-home}/agents/mysql-admin/AGENT.md
.crux/workspace/mysql-admin/MEMORY.md
.crux/decisions/tenant-naming-conventions.md (if available)
Estimated token cost: ~700 tokens
Unloaded after: task completion
| Input | Source | Required |
|---|---|---|
tenant-id | coordinator / user | Yes |
environment | coordinator / user | Yes |
provisioning-model | MEMORY.md / user | No |
1. Resolve naming pattern and provisioning model
2. Produce exact SQL plan for database, user, and grants
3. Present approval gate with affected resources
4. Apply only after explicit approval
5. Update mysql tenant docs if applicable
6. Skill complete — unload
Writes to: .crux/docs/mysql-tenants.md when applicable
Format: markdown
| Condition | Action |
|---|---|
| Tenant naming unclear | stop and clarify naming convention |
| Privilege scope too broad | present narrower alternative |
| Unexpected failure | Stop. Write error to bus. Notify user. |