autoworkflow 3.1.5 → 3.6.0

package/.claude/skills/kubernetes.md

@@ -0,0 +1,363 @@
+# Kubernetes Skill
+
+## Complete Deployment
+\`\`\`yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: myapp
+  labels:
+    app: myapp
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: myapp
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+  template:
+    metadata:
+      labels:
+        app: myapp
+    spec:
+      containers:
+      - name: myapp
+        image: myapp:v1.0.0
+        ports:
+        - containerPort: 3000
+        env:
+        - name: NODE_ENV
+          value: "production"
+        - name: DATABASE_URL
+          valueFrom:
+            secretKeyRef:
+              name: myapp-secrets
+              key: database-url
+        envFrom:
+        - configMapRef:
+            name: myapp-config
+        resources:
+          requests:
+            memory: "128Mi"
+            cpu: "100m"
+          limits:
+            memory: "256Mi"
+            cpu: "500m"
+        livenessProbe:
+          httpGet:
+            path: /health
+            port: 3000
+          initialDelaySeconds: 10
+          periodSeconds: 10
+        readinessProbe:
+          httpGet:
+            path: /ready
+            port: 3000
+          initialDelaySeconds: 5
+          periodSeconds: 5
+        volumeMounts:
+        - name: config-volume
+          mountPath: /app/config
+          readOnly: true
+      volumes:
+      - name: config-volume
+        configMap:
+          name: myapp-files
+      imagePullSecrets:
+      - name: regcred
+\`\`\`
+
+## Service (ClusterIP & LoadBalancer)
+\`\`\`yaml
+# Internal service (ClusterIP - default)
+apiVersion: v1
+kind: Service
+metadata:
+  name: myapp
+spec:
+  selector:
+    app: myapp
+  ports:
+  - port: 80
+    targetPort: 3000
+  type: ClusterIP
+
+---
+# External service (LoadBalancer)
+apiVersion: v1
+kind: Service
+metadata:
+  name: myapp-public
+spec:
+  selector:
+    app: myapp
+  ports:
+  - port: 80
+    targetPort: 3000
+  type: LoadBalancer
+\`\`\`
+
+## Ingress (NGINX)
+\`\`\`yaml
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: myapp-ingress
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: "50m"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - myapp.example.com
+    secretName: myapp-tls
+  rules:
+  - host: myapp.example.com
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: myapp
+            port:
+              number: 80
+      - path: /api
+        pathType: Prefix
+        backend:
+          service:
+            name: myapp-api
+            port:
+              number: 80
+\`\`\`
+
+## ConfigMap
+\`\`\`yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: myapp-config
+data:
+  LOG_LEVEL: "info"
+  API_TIMEOUT: "30000"
+  FEATURE_FLAGS: "new-dashboard,dark-mode"
+
+---
+# ConfigMap from file
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: myapp-files
+data:
+  config.json: |
+    {
+      "cache": {
+        "ttl": 3600,
+        "maxSize": 1000
+      }
+    }
+\`\`\`
+
+## Secrets
+\`\`\`yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: myapp-secrets
+type: Opaque
+stringData:
+  database-url: "postgresql://user:password@db:5432/myapp"
+  api-key: "sk-xxxxxxxxxxxx"
+
+---
+# Docker registry credentials
+apiVersion: v1
+kind: Secret
+metadata:
+  name: regcred
+type: kubernetes.io/dockerconfigjson
+data:
+  .dockerconfigjson: <base64-encoded-docker-config>
+\`\`\`
+
+## Horizontal Pod Autoscaler
+\`\`\`yaml
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: myapp-hpa
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: myapp
+  minReplicas: 2
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 70
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+  behavior:
+    scaleDown:
+      stabilizationWindowSeconds: 300
+\`\`\`
+
+## PersistentVolumeClaim
+\`\`\`yaml
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: myapp-data
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+  storageClassName: standard
+\`\`\`
+
+## CronJob
+\`\`\`yaml
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: myapp-cleanup
+spec:
+  schedule: "0 2 * * *"  # 2 AM daily
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+          - name: cleanup
+            image: myapp:v1.0.0
+            command: ["node", "scripts/cleanup.js"]
+            envFrom:
+            - secretRef:
+                name: myapp-secrets
+          restartPolicy: OnFailure
+\`\`\`
+
+## kubectl Commands
+\`\`\`bash
+# Apply manifests
+kubectl apply -f deployment.yaml
+kubectl apply -f k8s/  # Apply all in directory
+kubectl apply -k overlays/production/  # Kustomize
+
+# Get resources
+kubectl get pods
+kubectl get pods -o wide  # More details
+kubectl get all -n myapp  # All resources in namespace
+kubectl get pods -l app=myapp  # By label
+
+# Describe & Debug
+kubectl describe pod myapp-xxx
+kubectl logs myapp-xxx
+kubectl logs -f myapp-xxx  # Follow
+kubectl logs myapp-xxx -c container-name  # Specific container
+kubectl logs --previous myapp-xxx  # Previous instance
+
+# Exec into pod
+kubectl exec -it myapp-xxx -- sh
+kubectl exec -it myapp-xxx -c container-name -- sh
+
+# Port forward
+kubectl port-forward svc/myapp 3000:80
+kubectl port-forward pod/myapp-xxx 3000:3000
+
+# Scale
+kubectl scale deployment myapp --replicas=5
+
+# Rollout
+kubectl rollout status deployment/myapp
+kubectl rollout history deployment/myapp
+kubectl rollout undo deployment/myapp
+kubectl rollout restart deployment/myapp
+
+# Config & Secrets
+kubectl create secret generic myapp-secrets --from-literal=key=value
+kubectl create configmap myapp-config --from-file=config.json
+
+# Delete
+kubectl delete pod myapp-xxx
+kubectl delete -f deployment.yaml
+\`\`\`
+
+## Namespace Setup
+\`\`\`yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: myapp
+  labels:
+    name: myapp
+
+---
+# Resource Quota
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: myapp-quota
+  namespace: myapp
+spec:
+  hard:
+    requests.cpu: "10"
+    requests.memory: 20Gi
+    limits.cpu: "20"
+    limits.memory: 40Gi
+    pods: "50"
+\`\`\`
+
+## Kustomize Structure
+\`\`\`
+k8s/
+├── base/
+│   ├── kustomization.yaml
+│   ├── deployment.yaml
+│   ├── service.yaml
+│   └── configmap.yaml
+└── overlays/
+    ├── development/
+    │   ├── kustomization.yaml
+    │   └── replicas-patch.yaml
+    └── production/
+        ├── kustomization.yaml
+        ├── replicas-patch.yaml
+        └── resources-patch.yaml
+\`\`\`
+
+## ❌ DON'T
+- Use \`:latest\` tag in production
+- Store secrets in plain ConfigMaps
+- Skip resource limits
+- Run containers as root
+- Forget liveness/readiness probes
+- Use NodePort for production traffic
+- Commit secrets to version control
+
+## ✅ DO
+- Use specific image tags
+- Set resource requests AND limits
+- Use namespaces for isolation
+- Configure health probes
+- Use Secrets for sensitive data
+- Enable HPA for scaling
+- Use Ingress for external traffic
+- Apply network policies
+- Use Kustomize or Helm for environments