new-component
Scaffold a new infrastructure component, choosing the right layout (Helm multi-source / raw YAML / ApplicationSet) for its category
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Scaffold a new infrastructure component, choosing the right layout (Helm multi-source / raw YAML / ApplicationSet) for its category
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
Longhorn の健全性チェック — volume robustness(degraded 検出)、node 容量、R2 バックアップの鮮度、recurring job の動作状況を一括診断
Create a new Sealed Secret — generates raw secret, seals it with kubeseal, and places it in the correct resources/ directory
Troubleshoot a specific infrastructure component — resolve namespace, check pods, events, logs, and Argo CD sync status
全 Helm Application の chart バージョン鮮度を一括チェック — 各 app.yaml の targetRevision を upstream 最新と突き合わせ、更新候補を優先度付きでレポート(/helm-upgrade の前段)
Secret 管理 4 方式(Vault dynamic / Vault static via ESO / Vault Transit / SealedSecret)の健全性を一括チェック — Vault seal 状態、ESO 同期、SealedSecret 復号、関連 cert をまとめて診断
OpenAI Codex に作業を委譲する。コードレビュー、セカンドオピニオン、別解の生成、調査・分析を Codex にやらせたいとき(「Codex にレビューさせて」「Codex に聞いて」「Codex の意見も欲しい」等)に使う。
基于 SOC 职业分类
| name | new-component |
| description | Scaffold a new infrastructure component, choosing the right layout (Helm multi-source / raw YAML / ApplicationSet) for its category |
| argument-hint | <category> <component-name> |
Scaffold $ARGUMENTS[1] under category $ARGUMENTS[0].
Validate category:
kubernetes/ uses these categories: apps, argocd, auth, environments, kube-system, network, observability, policy, secrets, storagesecrets (not security); Argo CD itself lives under argocd (its Application CR is kubernetes/argocd/applications/gitops/)Pick the component layout. Read kubernetes/README.md (Pattern A/B) and .claude/rules/helm-multisource.md for the authoritative rules, then choose:
values.yaml + resources/): the Argo CD app renders an upstream Helm chart and combines it with extra raw YAML. Most of secrets, storage, auth, network Helm components use this.
kubernetes/$ARGUMENTS[0]/$ARGUMENTS[1]/
├── values.yaml # Helm values
└── resources/ # chart 外の生 YAML (namespace, HTTPRoute, SealedSecret 等)
.yaml files directly in the component dir (do NOT add resources/). Examples: kubernetes/kube-system/, kubernetes/namespaces/*.
kubernetes/$ARGUMENTS[0]/$ARGUMENTS[1]/
└── *.yaml # raw manifests, flat
config.json: components under kubernetes/observability/ are NOT scaffolded with their own app.yaml. They are discovered by kubernetes/argocd/applications/observability/applicationset.yaml, which reads a per-component config.json. To add one, create kubernetes/observability/$ARGUMENTS[1]/ with config.json (+ values.yaml / resources/ per the chart) and let the ApplicationSet pick it up — do NOT create an app.yaml.
kubernetes/observability/$ARGUMENTS[1]/
├── config.json # name/chart/chartRepo/chartVersion/namespace/hasResources/createNamespace
├── values.yaml # if Helm-based
└── resources/ # if hasResources: "true"
Create the Application CR (skip for observability — the ApplicationSet handles it):
kubernetes/argocd/applications/$ARGUMENTS[0]/$ARGUMENTS[1]/app.yaml
Populate sources:
values.yaml with placeholder comment; helm show values <repo>/<chart> for referenceconfig.json (mirror an existing one like grafana/config.json)Add resources/ only when it applies (Pattern A or observability with hasResources: "true"):
Verify structure:
Do NOT auto-commit — let user review the scaffolded files