From ork
Sets up CI/CD pipelines with GitHub Actions, containerizes apps using Docker and docker-compose, deploys to Kubernetes with Helm, and manages IaC with Terraform.
npx claudepluginhub yonatangross/orchestkit --plugin orkThis skill is limited to using the following tools:
Comprehensive frameworks for CI/CD pipelines, containerization, deployment strategies, and infrastructure automation.
checklists/production-readiness.mdexamples/github-actions-cicd.mdreferences/capability-details.mdreferences/checklists-and-templates.mdreferences/ci-cd-pipelines.mdreferences/deployment-strategies.mdreferences/docker-patterns.mdreferences/environment-management.mdreferences/kubernetes-basics.mdreferences/multi-service-setup.mdreferences/nixpacks-customization.mdreferences/observability.mdreferences/railway-json-config.mdrules/_sections.mdrules/_template.mdrules/devops-branch-protection.mdrules/devops-ci-caching.mdrules/devops-db-migrations.mdrules/docker-layer-security.mdrules/docker-multistage.mdDesigns modern CI/CD pipelines with GitHub Actions, GitLab CI, Jenkins; implements GitOps via ArgoCD/Flux; enables zero-downtime deployments, container security, and progressive delivery.
Designs modern CI/CD pipelines, GitOps workflows with ArgoCD and Flux, and zero-downtime deployments using Docker, Helm, and Kubernetes.
Creates Dockerfiles, configures CI/CD pipelines, Kubernetes manifests, and Terraform/Pulumi IaC templates. Handles GitOps, deployment automation, incident response runbooks, and internal developer platforms.
Share bugs, ideas, or general feedback.
Comprehensive frameworks for CI/CD pipelines, containerization, deployment strategies, and infrastructure automation.
┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ Code │──>│ Build │──>│ Test │──>│ Deploy │
│ Commit │ │ & Lint │ │ & Scan │ │ & Release │
└─────────────┘ └─────────────┘ └─────────────┘ └─────────────┘
│ │ │ │
v v v v
Triggers Artifacts Reports Monitoring
Multi-stage builds minimize image size:
Security hardening:
Essential manifests:
Security context:
runAsNonRoot: trueallowPrivilegeEscalation: falsereadOnlyRootFilesystem: true| Strategy | Use Case | Risk |
|---|---|---|
| Rolling | Default, gradual replacement | Low - automatic rollback |
| Blue-Green | Instant switch, easy rollback | Medium - double resources |
| Canary | Progressive traffic shift | Low - gradual exposure |
Rolling Update (Kubernetes default):
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 25%
maxUnavailable: 0 # Zero downtime
Use External Secrets Operator to sync from cloud providers:
Load: Read("${CLAUDE_SKILL_DIR}/references/docker-patterns.md")
Key topics covered:
Load: Read("${CLAUDE_SKILL_DIR}/references/ci-cd-pipelines.md")
Key topics covered:
Load: Read("${CLAUDE_SKILL_DIR}/references/kubernetes-basics.md")
Key topics covered:
Load: Read("${CLAUDE_SKILL_DIR}/references/environment-management.md")
Key topics covered:
Load: Read("${CLAUDE_SKILL_DIR}/references/observability.md")
Key topics covered:
Load: Read("${CLAUDE_SKILL_DIR}/rules/railway-deployment.md")
Key topics covered:
${CLAUDE_SKILL_DIR}/references/railway-json-config.md, ${CLAUDE_SKILL_DIR}/references/nixpacks-customization.md, ${CLAUDE_SKILL_DIR}/references/multi-service-setup.mdLoad: Read("${CLAUDE_SKILL_DIR}/references/deployment-strategies.md")
Key topics covered:
Load: Read("${CLAUDE_SKILL_DIR}/references/checklists-and-templates.md") for pre/during/post-deployment checklists, Helm chart structure, template reference table, and extended thinking triggers.
zero-downtime-migration - Database migration patterns for zero-downtime deploymentssecurity-scanning - Security scanning integration for CI/CD pipelinesork:monitoring-observability - Monitoring and alerting for deployed applicationsork:database-patterns - Python/Alembic migration workflow for backend deploymentsportless (upstream) - Named .localhost URLs for multi-service local dev (portless alias api 8080)| Decision | Choice | Rationale |
|---|---|---|
| Container user | Non-root (uid 1001) | Security best practice, required by many orchestrators |
| Deployment strategy | Rolling update (default) | Zero downtime, automatic rollback, resource efficient |
| Secrets management | External Secrets Operator | Syncs from cloud providers, GitOps compatible |
| Health checks | Separate startup/liveness/readiness | Prevents premature traffic, enables graceful shutdown |
Load: Read("${CLAUDE_SKILL_DIR}/references/capability-details.md") for full keyword index and problem-solution mapping across all 6 capabilities (ci-cd, docker, kubernetes, infrastructure-as-code, deployment-strategies, observability).