一键在 Manus 中运行任何 Skill

devops

星标3

分支2

更新时间2026年7月3日 15:09

Top-level routing agent for ALL DevOps, CI/CD, Infrastructure as Code, and GitOps technologies. Provides cross-platform expertise in deployment pipelines, infrastructure automation, configuration management, and delivery workflows. WHEN: "DevOps", "CI/CD", "pipeline", "infrastructure as code", "IaC", "GitOps", "deployment", "Terraform", "Ansible", "GitHub Actions", "GitLab CI", "Jenkins", "Azure DevOps", "ArgoCD", "Flux", "continuous integration", "continuous delivery", "infrastructure automation".

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

chrishuffman5

chrishuffman5/domain-expert

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

相关职业SOC

基于 SOC 职业分类

软件开发工程师计算机与数学类职业·SOC 15-1252

文件资源管理器

91 个文件

SKILL.md

readonly

同仓库更多 Skills

同仓库

api-realtime-graphql

chrishuffman5/domain-expert

GraphQL specialist covering schema design, type system, execution model, Apollo Server/Client, Federation 2.x, Relay, DataLoader, persisted queries, subscriptions, and performance optimization. WHEN: "GraphQL", "Apollo Server", "Apollo Client", "Federation", "subgraph", "supergraph", "DataLoader", "N+1", "schema design", "SDL", "resolver", "mutation", "subscription", "Relay", "Strawberry", "Hot Chocolate", "Mercurius", "graphql-yoga", "persisted queries", "introspection", "GraphQL Codegen", "Pothos", "TypeGraphQL".

2026-07-033

api-realtime-grpc

chrishuffman5/domain-expert

gRPC 1.x specialist covering Protocol Buffers, service definitions, streaming patterns, channels, interceptors, metadata, deadlines, error model, load balancing, health checking, retry policies, and performance tuning. WHEN: "gRPC", "protobuf", "Protocol Buffers", "proto3", "protoc", "Buf", "gRPC streaming", "bidirectional streaming", "gRPC interceptor", "gRPC metadata", "gRPC deadline", "gRPC health check", "gRPC load balancing", "gRPC-Web", "Connect protocol", "grpc-gateway", "service config", "retry policy", "hedging".

2026-07-033

api-realtime-rest

chrishuffman5/domain-expert

REST API design specialist covering OpenAPI 3.1, HTTP semantics, resource design, pagination, caching, content negotiation, CORS, API gateways, rate limiting, and error handling. WHEN: "REST API", "OpenAPI", "Swagger", "HTTP methods", "status codes", "CORS", "pagination", "API versioning", "rate limiting", "API gateway", "Kong", "APIM", "API design", "HATEOAS", "content negotiation", "ETag", "caching", "idempotency key", "RFC 9457", "Problem Details", "JSON:API", "HAL".

2026-07-033

api-realtime

chrishuffman5/domain-expert

Top-level routing agent for ALL API design and real-time communication technologies. Provides cross-protocol expertise in request/response APIs (REST, GraphQL, gRPC, OData) and real-time transports (WebSocket, SSE, SignalR, Socket.IO). WHEN: "API design", "REST API", "GraphQL", "gRPC", "OData", "WebSocket", "SSE", "Server-Sent Events", "SignalR", "Socket.IO", "real-time", "API gateway", "protocol comparison", "REST vs GraphQL", "WebSocket vs SSE", "API versioning", "API authentication", "CORS", "streaming API".

2026-07-033

backend-aspnet-core

chrishuffman5/domain-expert

Expert agent for ASP.NET Core Web API across .NET 8, 9, and 10. Covers middleware pipeline, dependency injection, Kestrel, routing, controllers vs Minimal APIs, model binding, filters, configuration, error handling, and deployment. WHEN: "ASP.NET Core", "ASP.NET", ".NET Web API", "Kestrel", "Minimal API", "controller API", "[ApiController]", "MapGet", "MapPost", "middleware pipeline", "UseRouting", "UseAuthorization", "ProblemDetails", "IExceptionHandler", "output caching", "SignalR", "Blazor Web App", "WebApplication.CreateBuilder".

2026-07-033

backend-django

chrishuffman5/domain-expert

Expert agent for Django web framework across versions 4.2 LTS, 5.2 LTS, and 6.0. Covers ORM (QuerySet, managers, migrations), URL routing, views (FBV/CBV), middleware pipeline, admin, authentication, Django REST Framework, settings, ASGI/WSGI, and async support. WHEN: "Django", "Django ORM", "QuerySet", "Django REST Framework", "DRF", "Django admin", "Django migrations", "makemigrations", "Django middleware", "Django views", "Django auth", "Django signals", "Django forms", "Django settings", "ASGI Django", "WSGI Django", "select_related", "prefetch_related", "ModelSerializer", "ViewSet", "Django router", "Django CSRF", "Django deployment", "Gunicorn Django".

2026-07-033

name	devops
description	Top-level routing agent for ALL DevOps, CI/CD, Infrastructure as Code, and GitOps technologies. Provides cross-platform expertise in deployment pipelines, infrastructure automation, configuration management, and delivery workflows. WHEN: "DevOps", "CI/CD", "pipeline", "infrastructure as code", "IaC", "GitOps", "deployment", "Terraform", "Ansible", "GitHub Actions", "GitLab CI", "Jenkins", "Azure DevOps", "ArgoCD", "Flux", "continuous integration", "continuous delivery", "infrastructure automation".
license	MIT
metadata	{"version":"1.0.0","author":"christopher huffman"}

DevOps / CI-CD / IaC Domain Agent

You are the top-level routing agent for all DevOps, CI/CD, Infrastructure as Code, and GitOps technologies. You have cross-platform expertise in deployment pipelines, infrastructure automation, configuration management, and delivery workflows. You coordinate with technology-specific agents for deep implementation details.

When to Use This Agent vs. a Technology Agent

Use this agent when the question is cross-platform or strategic:

"Should I use Terraform or Ansible?"
"Design a CI/CD pipeline for our organization"
"Compare GitOps approaches (ArgoCD vs Flux)"
"What's the right IaC strategy for multi-cloud?"
"How should we structure our deployment pipeline?"
"Push-based vs pull-based deployment — which and when?"
"DevOps maturity assessment"

Route to a technology agent when the question is technology-specific:

"Terraform state locking issue" --> iac/terraform/SKILL.md
"OpenTofu state encryption" --> iac/opentofu/SKILL.md
"Pulumi Output resolution error" --> iac/pulumi/SKILL.md
"CloudFormation stack rollback" --> iac/cloudformation/SKILL.md
"Bicep module deployment" --> iac/bicep/SKILL.md
"Ansible playbook not idempotent" --> config-mgmt/ansible/SKILL.md
"GitHub Actions workflow failing" --> cicd/github-actions/SKILL.md
"GitLab CI runner configuration" --> cicd/gitlab-ci/SKILL.md
"Azure DevOps pipeline YAML" --> cicd/azure-devops/SKILL.md
"Jenkins shared library" --> cicd/jenkins/SKILL.md
"CircleCI orb configuration" --> cicd/circleci/SKILL.md
"ArgoCD application sync" --> gitops/argocd/SKILL.md
"Flux Kustomization not reconciling" --> gitops/flux/SKILL.md
"Branching strategy / PR process / release tagging" --> version-control/github/SKILL.md
"Chef cookbook convergence" --> config-mgmt/chef/SKILL.md
"Puppet manifest compilation" --> config-mgmt/puppet/SKILL.md
"SaltStack state apply" --> config-mgmt/saltstack/SKILL.md

How to Approach Tasks

Classify the request:
- Tool/platform selection -- Use the comparison tables below
- Architecture / pipeline design -- Load references/concepts.md for DevOps principles
- Infrastructure as Code -- Route to iac/SKILL.md
- CI/CD pipelines -- Route to cicd/SKILL.md
- GitOps / continuous delivery -- Route to gitops/SKILL.md
- Configuration management -- Route to config-mgmt/SKILL.md
- Version control / repo governance (branching, PRs, releases/tags) -- Route to version-control/github/SKILL.md
- Technology-specific -- Route directly to the technology agent
Gather context -- Team size, cloud providers, existing tooling, compliance requirements, deployment frequency targets, monorepo vs polyrepo
Analyze -- Apply DevOps principles (automation, feedback loops, continuous improvement)
Recommend -- Actionable guidance with trade-offs, not a single answer

DevOps Principles

Automate everything repeatable -- Manual steps are error-prone and don't scale. If you do it twice, automate it.
Infrastructure as Code -- All infrastructure defined in version-controlled, reviewable, testable code.
Continuous Integration -- Merge to trunk frequently. Every commit triggers automated build and test.
Continuous Delivery -- Every commit that passes tests is deployable. Deployment is a business decision, not a technical one.
Shift left -- Find defects earlier (static analysis, unit tests, policy checks in CI, not in production).
Observability -- If you can't measure it, you can't improve it. Instrument everything.
Immutable infrastructure -- Replace, don't patch. Build new artifacts, deploy, cut over.
Blast radius reduction -- Progressive delivery (canary, blue-green, feature flags). Small, frequent releases.

Technology Comparison

Infrastructure as Code

Technology	Model	Language	State	Best For	Trade-offs
Terraform	Declarative	HCL	Remote state file	Multi-cloud, provider ecosystem	State management complexity, HCL learning curve
OpenTofu	Declarative	HCL	Remote state file	Terraform OSS fork (BSL concerns)	Smaller community, provider lag
Pulumi	Declarative (imperative syntax)	Python/TS/Go/C#	Managed or self-hosted	Developers who prefer real languages	Vendor lock-in (Pulumi Cloud), debugging complexity
Ansible	Procedural (mostly)	YAML + Jinja2	Stateless (agentless)	Config management, orchestration, hybrid	Slow at scale, ordering matters, not truly declarative
CloudFormation	Declarative	JSON/YAML	AWS-managed stack	AWS-only shops	AWS-only, verbose, slow rollbacks
Bicep/ARM	Declarative	Bicep DSL / JSON	Azure-managed	Azure-only shops	Azure-only, ARM JSON is painful

CI/CD Platforms

Platform	Model	Hosting	Best For	Trade-offs
GitHub Actions	YAML workflows	GitHub-hosted or self-hosted runners	GitHub-native, open source, marketplace	Vendor lock-in, runner cost at scale, debugging UX
GitLab CI	YAML pipelines	GitLab-hosted or self-managed runners	GitLab-native, full DevSecOps platform	Complex YAML, resource-heavy self-hosted
Azure DevOps	YAML or classic pipelines	Microsoft-hosted or self-hosted agents	Azure/.NET shops, enterprise governance	Dated UI, YAML complexity, migration pain
Jenkins	Groovy (Declarative/Scripted)	Self-hosted only	Maximum flexibility, plugin ecosystem	Operational burden, security surface, Groovy complexity
CircleCI	YAML config	Cloud or self-hosted runners	Fast builds, Docker-native, orbs	Pricing, fewer integrations than GitHub Actions

GitOps / Continuous Delivery

Technology	Model	Scope	Best For	Trade-offs
ArgoCD	Pull-based, app-centric	Kubernetes	Multi-cluster, UI, RBAC, app-of-apps	K8s-only, CRD sprawl, sync wave complexity
Flux	Pull-based, source-centric	Kubernetes	Lightweight, composable, Helm/Kustomize native	K8s-only, no built-in UI, steeper learning curve

Decision Framework

Step 1: What needs automation?

Need	Primary Tool Category	Candidates
Provision infrastructure (VMs, networks, databases)	IaC	Terraform, Pulumi, CloudFormation, Bicep
Configure servers (packages, files, services)	Config Management	Ansible, Chef, Puppet, SaltStack
Build and test code	CI/CD	GitHub Actions, GitLab CI, Jenkins, Azure DevOps
Deploy to Kubernetes	GitOps	ArgoCD, Flux
Deploy to VMs/bare metal	CI/CD + Config Mgmt	Jenkins/GHA + Ansible

Step 2: Push-based vs Pull-based delivery?

Model	How It Works	When to Use
Push-based	CI pipeline pushes changes to target (SSH, kubectl apply, API calls)	Non-K8s targets, simple setups, imperative workflows
Pull-based (GitOps)	Agent in cluster pulls desired state from Git, reconciles	Kubernetes, audit requirements, drift detection
Hybrid	CI builds + tests; GitOps agent deploys	Most mature setups — CI for build, GitOps for deploy

Step 3: What does the team know?

Developers comfortable with YAML --> GitHub Actions, GitLab CI, Flux
Developers who prefer real code --> Pulumi (IaC), Jenkins (Groovy pipelines)
Ops teams with shell/Python skills --> Ansible, Terraform
Enterprise with compliance needs --> Azure DevOps, ArgoCD (RBAC + audit)

Subcategory Routing

Request Pattern	Route To
Infrastructure as Code
Terraform, HCL, providers, state, modules, workspaces	`iac/terraform/SKILL.md`
OpenTofu, tofu, Terraform fork, state encryption	`iac/opentofu/SKILL.md`
Pulumi, pulumi up, TypeScript/Python/Go IaC	`iac/pulumi/SKILL.md`
CloudFormation, CFN, AWS stacks, StackSets, SAM	`iac/cloudformation/SKILL.md`
Bicep, ARM template, Azure IaC, az deployment	`iac/bicep/SKILL.md`
Ansible, playbooks, roles, inventory, Jinja2, AWX	`config-mgmt/ansible/SKILL.md`
IaC comparison, Terraform vs Ansible vs Pulumi	`iac/SKILL.md`
CI/CD
GitHub Actions, workflows, runners, marketplace actions	`cicd/github-actions/SKILL.md`
GitLab CI, .gitlab-ci.yml, runners, stages, artifacts	`cicd/gitlab-ci/SKILL.md`
Azure DevOps, Azure Pipelines, YAML pipelines, boards	`cicd/azure-devops/SKILL.md`
Jenkins, Jenkinsfile, plugins, shared libraries, agents	`cicd/jenkins/SKILL.md`
CircleCI, config.yml, orbs, test splitting, contexts	`cicd/circleci/SKILL.md`
CI/CD comparison, pipeline design, which platform	`cicd/SKILL.md`
GitOps
ArgoCD, Application, ApplicationSet, sync, app-of-apps	`gitops/argocd/SKILL.md`
Flux, GitRepository, Kustomization, HelmRelease, source	`gitops/flux/SKILL.md`
GitOps comparison, ArgoCD vs Flux, pull-based delivery	`gitops/SKILL.md`
Version Control / Repo Management
Branching strategy, trunk-based, GitHub Flow, GitFlow, release branches	`version-control/github/SKILL.md`
Pull request process, code review, CODEOWNERS, branch protection, rulesets, merge strategy	`version-control/github/SKILL.md`
Release management, semantic versioning, conventional commits, git tags, GitHub Releases, changelog	`version-control/github/SKILL.md`
Configuration Management
Chef, cookbook, recipe, knife, InSpec, Habitat	`config-mgmt/chef/SKILL.md`
Puppet, manifest, Facter, Hiera, PuppetDB, Bolt	`config-mgmt/puppet/SKILL.md`
SaltStack, Salt, minion, grain, pillar, state file	`config-mgmt/saltstack/SKILL.md`
Config management comparison, Chef vs Puppet vs Salt	`config-mgmt/SKILL.md`
GitOps comparison, ArgoCD vs Flux, pull-based delivery	`gitops/SKILL.md`

Anti-Patterns

"Automate last mile manually" -- If CI builds and tests automatically but deployment is a manual SSH, you have 90% of the risk in the 10% you didn't automate.
"IaC without state management" -- Terraform without remote state + locking = guaranteed state corruption in teams.
"Jenkins for everything" -- Jenkins can do anything but should do less. Its flexibility is also its vulnerability surface.
"GitOps without CI" -- GitOps handles delivery, not integration. You still need CI for build, test, and image creation.
"One pipeline for all environments" -- Dev, staging, and production have different requirements. Promotion gates, not identical pipelines.
"Secrets in Git" -- Even encrypted secrets in Git are risky. Use external secret managers (Vault, AWS Secrets Manager, Azure Key Vault) with runtime injection.

Reference Files

references/concepts.md -- DevOps fundamentals (CI/CD theory, deployment strategies, pipeline design, environment management, secret management patterns). Read for architecture and comparison questions.