Sbom Supply Chain
Generate, attach, and verify SBOMs (CycloneDX/SPDX) for container images; implement SLSA provenance; harden software supply chain.
Opa Policies
Write OPA/Gatekeeper and Kyverno admission policies for Kubernetes security guardrails.
Slo Implementation
Implement SLOs end-to-end in Prometheus — recording rules, burn rate alerts, error budget dashboards, and Sloth/pyrra integration.
State Management
Manage Terraform remote state — backend setup, state isolation, locking, import, mv, and state surgery.
Database Modeling
Design relational schemas, write efficient queries, plan indexes, and implement safe migrations.
Github Actions Patterns
Production-grade GitHub Actions workflows — reusable workflows, OIDC cloud auth, caching, matrix builds, and environment protection rules. Use when the user creates, reviews, or debugs CI/CD pipelines in .github/workflows, or asks about GitHub Actions deployment, OIDC authentication, or workflow optimization.
Postgres Operations
PostgreSQL operational runbooks — health checks, vacuum, bloat, locks, PITR, connection pool management.
Grafana Dashboards
Design and maintain Grafana dashboards — service overview panels, SLO tracking, variable templates, dashboard-as-code with Grafonnet/Jsonnet.
Redis Operations
Redis operational runbooks — memory management, eviction policy, persistence config, Sentinel/Cluster, K8s-hosted Redis ops.
Ingress Patterns
NGINX Ingress Controller patterns — TLS, rate limiting, CORS, rewrites, path-based routing, and MetalLB for bare-metal.
Pipeline Security
Secure CI/CD pipelines with keyless signing, OIDC federation, provenance attestations, policy enforcement, and hardened runners.
Helm Charts
Design, structure, and test production-grade Helm charts with multi-environment overlays.
Sigstore Signing
Sign container images and artifacts with cosign (keyless via OIDC and key-based); verify signatures in CD pipelines and admission policies.
Dns Management
DNS management for Kubernetes — CoreDNS tuning, external-dns automation, split-horizon DNS, and bare-metal DNS design.
Backup Restore
PostgreSQL backup and restore with pgBackRest — full/incremental/WAL, PITR, K8s CronJob scheduling, and restore verification.
Observability
Implement structured logging, distributed tracing, and metrics for production-ready backend services.
Cluster Operations
Day-2 cluster operations — node management, etcd backup/restore, certificate rotation, namespace lifecycle.
Api Design
Design and implement REST APIs with consistent conventions, versioning, error contracts, and security.
Data Modeling
A Claude skill from sawrus/agent-guides.
Orchestration
A Claude skill from sawrus/agent-guides.
Chaos Engineering
Design and run chaos experiments in Kubernetes — pod failures, network partitions, resource pressure with LitmusChaos and manual chaos.
Postmortem Analysis
Write blameless postmortems with 5-whys RCA, actionable follow-ups, and systematic prevention measures.
Capacity Planning
Forecast infrastructure capacity needs — traffic projection, resource headroom calculations, node pool sizing, K8s cluster capacity.
Rbac Design
Design minimal-privilege RBAC for workloads, operators, and human access in multi-tenant clusters.
Gitlab Ci Patterns
GitLab CI/CD pipelines — include templates, environments, OIDC auth, caching, protected runners, deployment gates.
Vpc Design
Design cloud-agnostic private networks — subnet layout, CIDR allocation, zone redundancy, routing, and bare-metal equivalent.
Incident Command
Structured incident command for P0/P1 — roles, timeline, communication templates, and mitigation-first approach.
Lineage Governance
A Claude skill from sawrus/agent-guides.
Tls Termination
Configure TLS termination with cert-manager — Let's Encrypt, internal CA via Vault PKI, wildcard certs, mTLS between services.
Slo Sli Design
Define SLIs, SLOs, and error budgets; implement burn rate alerts; integrate with Prometheus.
Build Optimization
Optimize CI build speed — Docker layer caching, dependency caching, multi-stage builds, parallelism, and build matrix strategies.
Pod Troubleshooting
Systematic diagnosis of Kubernetes pod failures — CrashLoopBackOff, OOMKilled, Pending, ImagePullBackOff, and service connectivity issues. Use when the user encounters pods not starting, container restart loops, scheduling failures, or service unreachability in a K8s cluster.
Async Processing
Design and implement async task queues, message consumers, and background job patterns.
Secret Detection
Detect secrets in code, git history, and running containers — pre-commit hooks, CI scanning, and incident response for exposed credentials.
Artifact Management
Manage container images, Helm charts, and build artifacts — registry organization, retention, promotion between environments.
Troubleshooting
Systematic backend debugging — reproduce, isolate root cause, implement fix with regression test.
Prometheus Alertmanager
Write production-quality Prometheus alert rules, recording rules, and Alertmanager routing configs.
Ansible Playbooks
Write idempotent Ansible playbooks and roles for server configuration, K8s node provisioning, and application bootstrap.
Network Policies
Design and implement Kubernetes NetworkPolicy and Cilium network policies for namespace isolation and service-to-service access control.
Terraform Modules
Design reusable, well-tested Terraform modules with cloud-agnostic interfaces and safe state management.
Db Performance
PostgreSQL query performance — EXPLAIN ANALYZE, index design, pg_stat_statements, slow query detection, connection pool tuning.
Service Mesh
Implement service mesh for mTLS, traffic management, and observability — Istio and Linkerd patterns for Kubernetes.
Drift Detection
Detect, classify, and automate Terraform drift detection in CI — scheduled plans, drift metrics, cloud-native audit log correlation.
Resource Tuning
Right-size pod resources, configure HPA/VPA/KEDA, and eliminate resource waste in Kubernetes.
Migration Safety
Safe database migrations in production — expand-and-contract, lock-safe DDL, timing estimation, rollback SQL.
Cost Optimization
Identify and reduce cloud infrastructure costs — right-sizing, reserved capacity, waste detection, tagging for cost attribution.
Distributed Tracing
Implement distributed tracing with OpenTelemetry, Tempo/Jaeger — instrumentation, sampling, and trace-to-log correlation. Use when the user asks about distributed tracing, OpenTelemetry setup, span instrumentation, trace propagation, or connecting traces to logs and metrics.
Log Aggregation
Set up Loki or ELK log aggregation for K8s workloads — structured logging, log routing, and log-based alerting.
Container Hardening
Harden container images and Kubernetes workload security contexts — distroless, multi-stage, minimal attack surface.
Dbt Patterns
A Claude skill from sawrus/agent-guides.