Skill UI

Configure NFS servers and clients for network file sharing on Linux systems. Covers server setup, export options, client mounting, security tuning, and Kubernetes integration for shared storage environments.

Implement vendor-neutral observability using OpenTelemetry standards for traces, metrics, and logs. Configure collectors, set up Kubernetes deployments, and instrument Python services. Supports Prometheus, Jaeger, and Loki backends. Essential for unified monitoring in microservices and infrastructure environments.

Master the discipline of building Internal Developer Platforms (IDPs) to enable self-service capabilities for engineering teams. Learn to configure Backstage developer portals and use Crossplane for declarative infrastructure provisioning on Kubernetes. Includes setup, Docker builds, and AWS resource composition.

Implement policy as code using OPA, Kyverno, and Sentinel to automate compliance enforcement in CI/CD pipelines. Define security rules for infrastructure and Kubernetes resources, preventing violations before production deployment. Ideal for DevSecOps teams ensuring consistent governance across cloud environments.

This skill provides a comprehensive guide for setting up Prometheus, including metric collection, scrape configurations, recording rules, and alerting. It covers installation methods like Kubernetes Helm and Docker Compose, helping users monitor infrastructure and applications effectively.

Configure Prometheus and Grafana for comprehensive metrics collection, visualization, and alerting. This skill covers Docker and Kubernetes deployment, PromQL query writing for analysis, and setting up alerting rules for system performance monitoring. Ideal for DevOps engineers managing infrastructure observability.

This skill enables encryption of secrets within configuration files using Mozilla SOPS. It supports GitOps workflows, Kubernetes secret management, and secure configuration storage. Users can encrypt files with KMS or PGP keys, decrypt them for editing, and integrate with tools like ArgoCD. It ensures sensitive data remains protected while maintaining file structure visibility for version control.

Manage SSL/TLS certificates for web servers, Kubernetes clusters, and internal services. Covers Let's Encrypt with Certbot, automated renewal, cert-manager deployment, and configuration of ClusterIssuers and Certificate resources.