282 skills · sorted by relevance
Prepare a local Terraform environment by checking installation, choosing a macOS or Linux installation method, initializing configuration folders, and validating files. It also addresses plugin download failures and common initialization errors.
Audit Terraform infrastructure definitions and planned changes for excessive permissions, public exposure, and missing encryption. Use security scanners and custom rules to produce actionable findings and add automated checks before cloud infrastructure is deployed.
Turn existing Azure infrastructure into Terraform code using Azure Verified Modules, reusable infrastructure components. Discover resources, document dependencies, derive import addresses from module source, and check plans for unwanted changes to the live environment.
Design Google Cloud infrastructure with Terraform, validate it locally, and assess the planned changes for security, cost, and reliability. The skill then imports templates into Application Design Center, deploys them, investigates failures, and checks the deployed services.
Build infrastructure as code with Terraform across AWS, Azure, and GCP. Create reusable modules, manage state records that track resources, configure environments and providers, and validate proposed changes before applying an explicitly approved plan.
Build reusable Terraform modules for AWS, Azure, GCP, and OCI. Organize cloud infrastructure as code with documented inputs, validation, usage examples, provider version constraints, and Terratest tests for consistent provisioning.
Creates Terraform configuration for Google Cloud Monitoring notification channels, including email, Slack, and Pub/Sub, and attaches channels to existing alert policies. It also checks Pub/Sub topic compatibility and publishing permissions when inspecting the cloud environment.
Create and validate Terraform alerts for GKE using PromQL, a monitoring query language. Cover response times, errors, traffic, memory usage, and cluster health, with checks for alert timing, duplicate signals, and metric ingestion costs.
Write and manage infrastructure as code with Terraform and OpenTofu. Design reusable modules, review planned changes before applying them, bring existing resources under management, and organize shared state so teams can track infrastructure across environments.
Guide reviews of Linux Kernel patches for memory safety, Terraform plans for costly resource changes, and Kubernetes configurations for restricted permissions. A separately installed tool and configured AI model produce advisory findings and candidate manifests for validation.
Design and implement Google Cloud serverless web apps with separate presentation, application, and data layers. Produces architecture diagrams, Terraform infrastructure code, deployment instructions, and validation scripts for private networking and controlled access between layers.
Generate Terraform alerts for Cloud Run services, jobs, and worker pools using PromQL, a monitoring query language. Monitor errors, latency, resource usage, job failures, and queue delays, with configurable thresholds and explanations of when each alert triggers.
Plan and configure Kubernetes deployments, Git-based continuous delivery, and cloud resources defined in code. Covers Helm, Kustomize, ArgoCD, Flux, Terraform, Pulumi, and AWS CDK, with patterns for environment separation, secrets, validation, updates, and rollback.
Design and review infrastructure managed with Terraform or OpenTofu. Get guidance on reusable modules, testing choices, automated deployment workflows, and security checks, with approaches suited to different software versions and the cost of running tests.
Configure AWS Verified Access for VPN-free access to internal applications. Combine user identity and device security checks, write Cedar access policies, and use Terraform and AWS RAM to deploy and share access controls across AWS accounts.
Create CI/CD configurations, which automate build, test, and deployment steps, alongside Terraform infrastructure templates and Kubernetes deployment files. Generate health-check and rollback instructions to review before applying changes to cloud infrastructure or application environments.
Define reliability goals for Google Cloud services and generate Terraform files for Cloud Monitoring SLO alerts. A guided conversation gathers service scope, measurement metrics, targets, and alert conditions, then explains the PromQL queries used to evaluate them.
Create Terraform files that define alerts for AI agent latency, errors, token use, safety, security, and response quality. Check telemetry and existing policies first, then validate the generated configuration. Quality alerts require Vertex AI.
Review build and deployment pipelines for unsafe workflows, exposed credentials, and configuration flaws across GitHub Actions, Jenkins, GitLab CI, and Terraform state files. Use concrete evidence and false-positive checks to distinguish exploitable issues from suspicious settings.
既存リソースを Terraform に import する。「import して」「リソース import」「既存リソース取り込み」「terraform import」「tf import」「インポート」「既存インフラを管理」「import ガイド」「リソースを terraform で管理」などで起動。
The English summary is being prepared. Showing the original description.
Build GitLab workflows that automate building, testing, and deployment. The skill covers pipeline stages, dependency caching, runners that execute jobs, and manual approval before production deployment, with examples for Docker, Kubernetes, and Terraform.
Design and create new Cloud Storage buckets for uses such as backups, media, and AI data. Check project security and name availability, choose storage and protection settings, and produce creation commands or code in the preferred format.
Design and deploy a Google Cloud global external Application Load Balancer with caching and web attack protection. Matches settings to workload types, discovers existing backends, and generates Terraform or gcloud deployment scripts.
Choose Cloudflare services and implement applications using guidance for compute, storage, AI, networking, and security. The skill directs the agent to relevant references and current official documentation for configuration, APIs, limits, and pricing.