wcygan/anton

airflow-spark-lakehouse

Operate Anton's Airflow-owned Spark lakehouse workflow. Use for Workflow Run or Spark Attempt diagnosis, Flight Recorder runs, exact-window retries, shadow-gate evidence, writer cutover, retention, or cleanup.

原文语言：英语

seaweedfs-iceberg-lakehouse

Operate Anton's SeaweedFS and Iceberg lakehouse data path. Use for volume capacity, topology maintenance, S3 cache faults, catalog service, Harbor image handoff, ESO prerequisites, validation, or storage cleanup.

原文语言：英语

seaweedfs-iceberg-data-access

Read and validate Anton's SeaweedFS Iceberg tables through Spark and Trino. Use for Spark catalog configuration, Iceberg table reads and writes, Trino SQL, cross-engine comparisons, table schemas and locations, or data-access troubleshooting in the internal…

原文语言：英语

anton-remote-access

Remote access reference for Anton. Use when Codex needs to reach or reason about kubectl, flux, talosctl, Tailscale MagicDNS, kubeconfig, talosconfig, off-LAN node access, or failed connectivity to k8s nodes.

原文语言：英语

debug-flux-reconciliation

Ordered Flux reconciliation triage for Anton. Use when a Kustomization, HelmRelease, source, SOPS decryption, postBuild substitution, dependency, Helm timeout, rollback, cleanup, hook, or immutable Job is stuck.

原文语言：英语

rotate-credential

Credential rotation for Anton. Use for the age key, Flux deploy key, ESO token, Cloudflare tunnel token, or application credential exposure. Includes preconditions, verification, evidence epochs, and rollback.

原文语言：英语

add-flux-app

Scaffold a new Helm or raw Kustomize Flux app for Anton. Use to add an app, add a chart, add a raw manifest app, create a namespace, or create an ExternalSecret. Stops after repository validation and an explicit Git/rollout handoff.

原文语言：英语

anton-cluster-health

Kubernetes-layer health triage for Anton. Use when Codex checks whether the cluster is OK, Flux is healthy, platform controllers are ready, CNI or DNS is failing, cert-manager or ESO is stuck, gateways are broken, cloudflared is disconnected, or apps are…

原文语言：英语

anton-repo-conventions

Reference for Anton Flux and manifest conventions. Use when Codex writes or reviews Kubernetes manifests, adds a Flux app, chooses OCIRepository versus HelmRepository versus GitRepository, decides between ExternalSecret and SOPS, or checks the 3-file app…

原文语言：英语

cluster-intake

Intake gate for adding new system or infrastructure components to Anton. Use when deciding whether to adopt, install, evaluate, or learn a new app, operator, Helm chart, or platform component before scaffolding manifests. Applies concrete-need and…

原文语言：英语

observability-integrate

Integrate an anton workload with kube-prometheus-stack. Use to add a ServiceMonitor, add a PodMonitor, expose metrics to Prometheus, author a Grafana dashboard (sidecar ConfigMap), write a PrometheusRule (alerts or recording rules), verify scrape targets, or…

原文语言：英语

anton-cluster-health

Kubernetes-layer health triage for Anton. Starts above the Talos OS layer and walks CNI/DNS → Flux → platform components (cert-manager, ESO, envoy-gateway, cloudflared) → apps. Use when asking "is the cluster ok", "anything broken", "is Flux healthy",…

原文语言：英语

anton-repo-conventions

Reference for Anton's Flux conventions — the 3-file pattern, ks.yaml shape, HelmRelease sources (OCI/Helm/Git), postBuild substitution from cluster-secrets, and SOPS vs ExternalSecret decision. Use when writing manifests or picking a secret store.

原文语言：英语

cluster-intake

Intake gate for adding new system or infrastructure components to Anton. Asks the user to declare intent (concrete need, honest learning, or both), then applies the matching rubric — full production rubric for concrete need, contained-learning rubric for…

原文语言：英语

rotate-credential

Credential rotation for Anton — rotate age key plus SOPS key rotation across the repo, generate a new deploy key for Flux, rotate the 1password token for ESO, or rotate the cloudflare token for the tunnel. Preconditions, verification, rollback.

原文语言：英语

query-kubernetes-logs

Query and troubleshoot Anton Kubernetes logs through the OTel DaemonSet to Loki pipeline. Use for incident investigation, workload debugging, recent warning or error searches, Grafana Explore or LogQL queries, checking log collection, or explaining why a…

原文语言：英语

anton-temporal-cli

Use when Codex needs to inspect or troubleshoot the Anton cluster's self-hosted Temporal deployment with the local Temporal CLI, including checking cluster health, namespaces, workflow visibility, schedules, search attributes, Web UI reachability, or…

原文语言：英语

talos-inspect

Read-only Talos OS triage for Anton. Use to check cluster health, node readiness, etcd quorum, Talos services, disks, NVMe inventory, install disks, routes, interfaces, MTU, VIP, inter-node reachability, DNS, or suspected node-level failures.

原文语言：英语

anton-remote-access

Remote access reference for Anton. Use when Claude needs to reach or reason about kubectl, flux, talosctl, Tailscale target resolution, kubeconfig, talosconfig, off-LAN node access, or failed connectivity to k8s nodes.

原文语言：英语

talos-inspect

Read-only triage skill for Anton's Talos OS layer. Use to check cluster health, inspect node disks (install disks, serials, NVMe, volumes), or diagnose node networking (interfaces, routes, bonds, VIP, inter-node reachability, DNS, MTU). Keywords — talos…

原文语言：英语

deepsec

Run and interpret Anton's committed DeepSec project. Use when Codex is asked to run or scan Anton with DeepSec, process or revalidate findings, inspect or export DeepSec reports, configure DeepSec project context, or add or review custom matchers.

原文语言：英语

deploy-owned-app

Deploy or onboard an owned Anton app through Flux image automation. Use for deploy, redeploy, force reconcile, deploy homepage, onboard app, new owned app, ADR 0024 image automation, ImageRepository loops, rollout watching, and public URL verification.…

原文语言：英语

expose-service

Expose a workload for Anton access. Use when choosing between envoy-internal, Tailscale Ingress, Tailscale Service annotation, or explicitly approved envoy-external plus Cloudflare tunnel. Handles HTTPRoute authoring, DNSEndpoint for secondary domains,…

原文语言：英语

clickstack-ops

Operate Anton's time-boxed ClickStack logs and traces experiment. Use when handling HyperDX UI access, ClickHouse, Keeper, MongoDB, OTel collector health, Flux reconciliation, OTLP test signals, Lucene or SQL queries, ESO and 1Password credential rotation,…

原文语言：英语

clickstack-ops

Operate the time-boxed ClickStack logs/traces experiment on anton (ClickHouse + Keeper + MongoDB + OTel collector + HyperDX, per ADR 0028). Use to access the HyperDX UI, send a test signal (pod logs via the bundled OTel collector, point Temporal's OTLP traces…

原文语言：英语

add-or-replace-node

Add or replace a Talos node in Anton. Use to add a node, replace node, scaffold a new control plane, recover a dead node, plan node replacement like k8s-4, or edit nodes.yaml / talconfig.yaml. Generates patches, applies via talosctl.

原文语言：英语

adr

Anton ADR lifecycle — author new architectural decision records, list existing ones by status or affects-category, and mark old decisions superseded. Use when capturing a decision (especially after `cluster-intake-gatekeeper` returns an ADD/DEFER/REJECT…

原文语言：英语

anton-upgrade-audit

Upgrade triage for Anton — walks open Renovate PRs, flags supersessions, proposes a tiered merge order (patches → minors → CI majors → cluster majors), reads the Renovate Dependency Dashboard, and runs live-cluster deprecation audits with kubent/pluto/nova.…

原文语言：英语

longhorn-backup-dr

Configure Longhorn backup target (S3 or NFS), author RecurringJobs for snapshot/backup/filesystem-trim, and restore a volume from a backup. Use when wiring up backups for the first time, editing recurring schedules, or performing a DR restore. Not for PVC…

原文语言：英语

longhorn-node-ops

Add or remove Longhorn disks on a Talos node, drain/evict replicas before maintenance, fix disk-routing mismatches, and integrate a replaced node into the Longhorn topology. Use for disk swaps, pre-reboot eviction, or when a node's longhorn disks don't match…

原文语言：英语

longhorn-volume-ops

Create, resize, clone, and tune per-volume Longhorn PVCs in anton. Use when adding a PVC backed by longhorn, overriding replica count or data locality for a specific workload, resizing an existing Longhorn volume, or cloning a volume from an existing PVC.…

原文语言：英语

ntfy-alert-triage

Triage ntfy.sh-routed alerts in Anton — identify which alert fired, why it fired (or why it didn't deliver), and propose a fix. Use when "got an ntfy alert", "alert just fired", "ntfy not delivering", "AlertmanagerClusterFailedToSendAlerts",…

原文语言：英语

planner

Anton planner skill — author, update, and close multi-session initiatives (migrations, rollouts, long-running refactors) in `context/plans/`. Use when starting a multi-session initiative, tracking next steps on in-flight work, migrating a memory entry to a…

原文语言：英语

upgrade-talos-or-k8s

Rolling upgrade for Anton's Talos OS or Kubernetes. Use to upgrade talos, bump kubernetes version, edit talenv, run a rolling upgrade across nodes, or change the talos version. High-stakes — one node at a time, etcd quorum gated.

原文语言：英语

ntfy-alert-triage

Triage ntfy.sh-routed alerts in Anton — identify which alert fired, why it fired (or why it didn't deliver), and propose a fix. Use when "got an ntfy alert", "alert just fired", "ntfy not delivering", "AlertmanagerClusterFailedToSendAlerts",…

原文语言：英语

debug-flux-reconciliation

Triage a flux sync stuck in Anton. Ordered diagnostic path when flux is stuck, kustomization not progressing, HelmRelease failing, SOPS decryption error blocks sync, or dependency not ready. Force reconcile in safe dependency order.

原文语言：英语

expose-service

Expose a workload for access. Four paths: envoy-internal (LAN via split-horizon DNS), Tailscale Ingress (internal remote HTTP with browser-trusted TLS), Tailscale Service annotation (raw TCP / non-HTTP), envoy-external + Cloudflare tunnel (genuinely public,…

原文语言：英语

planner

Anton planner skill — author, update, and close multi-session initiatives (migrations, rollouts, long-running refactors) in `context/plans/`. Use when starting a multi-session initiative, tracking next steps on in-flight work, migrating a memory entry to a…

原文语言：英语

adr

Anton ADR lifecycle — author new architectural decision records, list existing ones by status or affects-category, and mark old decisions superseded. Use when capturing a decision (especially after `cluster-intake-gatekeeper` returns an ADD/DEFER/REJECT…

原文语言：英语