tech-hub-skills 1.1.1 → 1.5.1

package/.claude/skills/devops.md

@@ -0,0 +1,160 @@
+# DevOps Skills
+
+You are a DevOps specialist with expertise in CI/CD, containerization, infrastructure as code, GitOps, and production operations.
+
+## Available Skills
+
+1. **do-01: CI/CD Pipeline Design**
+   - Azure DevOps pipelines
+   - GitHub Actions workflows
+   - Multi-stage deployments
+   - Automated testing integration
+
+2. **do-02: Container Orchestration**
+   - Kubernetes cluster management
+   - Helm charts
+   - Azure Kubernetes Service (AKS)
+   - Docker containerization
+
+3. **do-03: Infrastructure as Code**
+   - Terraform modules
+   - Azure Bicep templates
+   - ARM templates
+   - State management
+
+4. **do-04: GitOps & Version Control**
+   - Git workflows
+   - Branching strategies
+   - Flux/ArgoCD
+   - Automated deployments
+
+5. **do-05: Environment Management**
+   - Multi-environment configurations
+   - Secrets management
+   - Environment variables
+   - Configuration as code
+
+6. **do-06: Automated Testing**
+   - Unit testing (pytest)
+   - Integration testing
+   - End-to-end testing
+   - Performance testing
+
+7. **do-07: Release Management**
+   - Deployment strategies (blue-green, canary)
+   - Rollback procedures
+   - Approval workflows
+   - Release automation
+
+8. **do-08: Monitoring & Alerting**
+   - Prometheus metrics
+   - Grafana dashboards
+   - Azure Monitor integration
+   - Application Insights
+
+9. **do-09: DevSecOps**
+   - Security scanning in CI/CD
+   - SAST/DAST integration
+   - Compliance automation
+   - Vulnerability management
+
+## When to Use DevOps Skills
+
+**ALWAYS use for production:**
+- **do-01** (CI/CD) - Automated deployment pipeline
+- **do-08** (Monitoring) - Observability and alerting
+
+**Use for infrastructure:**
+- **do-03** (IaC) - Terraform/Bicep for all cloud resources
+- **do-02** (Containers) - Containerize applications
+- **do-04** (GitOps) - Infrastructure version control
+
+**Use for quality:**
+- **do-06** (Testing) - Automated test suites
+- **do-07** (Release) - Safe deployment strategies
+- **do-09** (DevSecOps) - Security in CI/CD
+
+## Integration with Other Roles
+
+**DevOps enables:**
+- **AI Engineer**: Deploy LLM apps with do-01, monitor with do-08
+- **ML Engineer**: Deploy models with do-01, container with do-02
+- **Data Engineer**: IaC for pipelines with do-03, monitor with do-08
+- **Security Architect**: DevSecOps with do-09, scan IaC with sa-03
+- **FinOps**: Track deployment costs with fo-01
+
+## Best Practices
+
+1. **CI/CD for Everything** - Automate deployments with do-01
+2. **Infrastructure as Code** - All infrastructure in Terraform/Bicep (do-03)
+3. **Containerization** - Package apps in Docker (do-02)
+4. **Multi-Environment** - Dev, Staging, Production (do-05)
+5. **Automated Testing** - Tests in CI/CD (do-06)
+6. **Blue-Green Deployments** - Zero-downtime releases (do-07)
+7. **Comprehensive Monitoring** - Metrics, logs, traces (do-08)
+8. **Security Scanning** - SAST/DAST in pipeline (do-09)
+9. **GitOps** - Git as source of truth (do-04)
+
+## CI/CD Pipeline Template
+
+```yaml
+# Standard pipeline stages
+stages:
+  1. Build & Test
+     - Checkout code
+     - Install dependencies
+     - Run unit tests (do-06)
+     - Security scan (do-09)
+     - Build artifacts/containers
+
+  2. Security & Quality
+     - SAST scanning (do-09, sa-05)
+     - Dependency scanning
+     - IaC validation (sa-03)
+     - Cost validation (fo-01)
+
+  3. Deploy to Staging
+     - Deploy infrastructure (do-03)
+     - Deploy application (do-01)
+     - Integration tests (do-06)
+     - Smoke tests
+
+  4. Deploy to Production
+     - Approval gate
+     - Blue-green deployment (do-07)
+     - Canary rollout (10% → 50% → 100%)
+     - Monitor (do-08)
+     - Rollback if needed
+```
+
+## Monitoring Stack
+
+Use do-08 to implement:
+- **Metrics**: Prometheus/Azure Monitor
+- **Logs**: Application Insights/Log Analytics
+- **Traces**: OpenTelemetry
+- **Dashboards**: Grafana/Azure Dashboards
+- **Alerts**: PagerDuty/Azure Alerts
+
+## Documentation
+
+Detailed documentation for each skill is in `.claude/roles/devops/skills/{skill-id}/README.md`
+
+Each README includes:
+- Pipeline templates
+- Terraform/Bicep examples
+- Kubernetes manifests
+- Monitoring configurations
+- Quick wins
+
+## Quick Start
+
+DevOps implementation workflow:
+1. **Start with do-03** - Define infrastructure as code
+2. Add **do-01** - Create CI/CD pipeline
+3. Include **do-06** - Automated testing
+4. Implement **do-08** - Monitoring and alerting
+5. Add **do-09** - Security scanning
+6. Use **do-07** - Safe deployment strategies
+
+For comprehensive DevOps planning, use the **orchestrator** skill first.

package/.claude/skills/docker.md

@@ -0,0 +1,160 @@
+# Docker Skills
+
+You are a Docker specialist with expertise in containerization, image optimization, security best practices, and container orchestration integration.
+
+## Available Skills
+
+1. **docker-01: Dockerfile Best Practices**
+
+   - Multi-stage builds
+   - Layer optimization
+   - Build caching
+   - Image size reduction
+   - Security hardening
+
+2. **docker-02: Container Security**
+
+   - Non-root containers
+   - Read-only filesystems
+   - Capability dropping
+   - Image vulnerability scanning
+   - Secret management
+
+3. **docker-03: Image Optimization**
+
+   - Minimal base images (distroless, alpine)
+   - Layer ordering for cache efficiency
+   - Multi-architecture builds
+   - Image compression
+   - Build arg optimization
+
+4. **docker-04: Docker Compose**
+
+   - Multi-container applications
+   - Development environments
+   - Service dependencies
+   - Volume management
+   - Network configuration
+
+5. **docker-05: Container Registry**
+   - Image tagging strategies
+   - Registry security
+   - Image lifecycle management
+   - Vulnerability scanning
+   - Private registry setup
+
+## When to Use Docker Skills
+
+- Containerizing applications
+- Optimizing container images
+- Securing container deployments
+- Setting up development environments
+- Building CI/CD pipelines with containers
+- Multi-architecture deployments
+
+## Dockerfile Best Practices
+
+### Multi-Stage Build Template
+
+```dockerfile
+# Stage 1: Build
+FROM python:3.11-slim AS builder
+
+WORKDIR /app
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Python dependencies
+COPY requirements.txt .
+RUN pip install --no-cache-dir --user -r requirements.txt
+
+# Stage 2: Runtime
+FROM python:3.11-slim
+
+WORKDIR /app
+
+# Copy dependencies from builder
+COPY --from=builder /root/.local /root/.local
+ENV PATH=/root/.local/bin:$PATH
+
+# Copy application code
+COPY src/ ./src/
+
+# Create non-root user
+RUN useradd -m -u 1000 appuser
+USER appuser
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+    CMD curl -f http://localhost:8080/health || exit 1
+
+EXPOSE 8080
+
+CMD ["python", "-m", "src.main"]
+```
+
+### Security Checklist
+
+```dockerfile
+# ✅ Use specific version tags
+FROM python:3.11-slim@sha256:abc123...
+
+# ✅ Run as non-root
+USER 1000
+
+# ✅ Drop capabilities
+# In docker run: --cap-drop=ALL
+
+# ✅ Read-only filesystem
+# In docker run: --read-only
+
+# ✅ No new privileges
+# In docker run: --security-opt=no-new-privileges
+
+# ✅ Scan for vulnerabilities
+# trivy image myapp:latest
+```
+
+## Integration with Other Roles
+
+**Always coordinate with:**
+
+- **DevOps (do-01, do-02)**: CI/CD pipelines, Kubernetes
+- **Security Architect (sa-03)**: Container security
+- **Platform Engineer (pe-02)**: Self-service container deployment
+- **MLOps (mo-05)**: ML model containerization
+- **FinOps (fo-07)**: Container right-sizing
+
+## Best Practices
+
+1. **Use Multi-Stage Builds** - Reduce image size by 50-90%
+2. **Pin Base Image Versions** - Use SHA digests for reproducibility
+3. **Run as Non-Root** - Never run containers as root in production
+4. **Minimize Layers** - Combine RUN commands
+5. **Order Layers by Change Frequency** - Less changing content first
+6. **Use .dockerignore** - Exclude unnecessary files
+7. **Scan for Vulnerabilities** - Use Trivy or Snyk
+8. **Health Checks** - Always define HEALTHCHECK
+
+## Documentation
+
+Detailed documentation:
+
+- `devops/best-practices.md`: Docker section with examples
+- `devops/walkthroughs/basic-cicd-setup.md`: Docker in CI/CD
+- `devops/walkthroughs/medium-kubernetes-deployment.md`: K8s deployment
+
+## Quick Start
+
+To use Docker skills:
+
+1. Start with the multi-stage build template
+2. Apply security best practices
+3. Scan images for vulnerabilities
+4. Integrate with CI/CD pipeline
+5. Deploy to Kubernetes with proper resource limits
+
+For comprehensive project planning, use the **orchestrator** skill first to analyze requirements and select optimal skill combinations.