Skill UI

This skill outlines how to implement and manage Role-Based Access Control (RBAC) and namespace isolation for multi-team GPU workloads running on CoreWeave's Kubernetes platform. It provides guidance on setting strict resource quotas, preventing noisy-neighbor issues, and defining granular roles (e.g., ML Engineer, Inference Operator). This is essential for maintaining resource isolation, ensuring compliance (SOC 2, HIPAA), and managing access across large-scale cloud deployments.

This guide details setting up and managing CoreWeave GPU cloud infrastructure across Development, Staging, and Production environments. It ensures strict resource separation using dedicated Kubernetes namespaces for GPU quotas and scaling policies. Use this when deploying complex ML/AI workloads requiring robust environment isolation and controlled promotion workflows.

A comprehensive guide to managing the full application lifecycle on Fly.io. This workflow covers deploying applications, configuring the environment using fly.toml, managing sensitive secrets, scaling resources across multiple regions, and controlling the application's operational state (including suspension and destruction). Ideal for setting up production-grade, resilient cloud services.

This skill implements Role-Based Access Control (RBAC) for Glean Enterprise Search. It establishes a secure framework by mapping permissions from various source systems (like AD/Okta) to the centralized search index. The functionality allows management of distinct roles (Super Admin, Admin, Content Manager), performing detailed document access checks via API, and maintaining comprehensive audit logs. This is crucial for maintaining compliance with standards like GDPR and SOC 2.

This skill provides guidelines and mechanics for managing multi-tenant environments within KubeSphere. It focuses on the controlled creation and configuration of core resources—including workspaces, projects, and users—while strictly adhering to least privilege principles. It details the proper use of RBAC roles (Viewer, Regular, Admin) and guides users through the process of setting up organizational boundaries and access controls for secure, scalable deployment.

A comprehensive guide for migrating cloud workloads from AWS or Azure to Oracle Cloud Infrastructure (OCI). It provides detailed concept mapping for core services like IAM, networking (VPC/VCN), compute (AMI/Custom Image), and data storage. The skill covers end-to-end migration procedures, including using OCI CLI and Python SDK for controlled deployment and resource translation.

This skill allows users to programmatically set up a comprehensive observability stack for Oracle Cloud Infrastructure (OCI) resources. It guides the creation of metric queries, alarm rules, custom metric publishing, and detailed log searches using the Python SDK. By automating monitoring and alerting, users gain full control over their infrastructure visibility, eliminating reliance on the OCI Console UI for critical operational checks.

This skill provides comprehensive SQL queries and procedures to analyze and optimize Snowflake usage costs. It covers budgeting via resource monitors, right-sizing compute warehouses, tuning auto-suspend settings, and minimizing storage costs. Use it when reviewing billing, implementing cost controls, or reducing credit consumption in your Snowflake environment.

This guide identifies and provides solutions for common anti-patterns and mistakes when working with Snowflake. It covers best practices in SQL writing, warehouse resource management, data loading strategies (e.g., using MERGE), and access control setup. It is essential for auditing existing deployments, onboarding new users, or performing code reviews to ensure cost efficiency and data integrity.

This comprehensive guide details how to set up robust, isolated, and secure development, staging, and production environments within Snowflake. It utilizes best practices like zero-copy cloning for efficient data replication, implements granular Role-Based Access Control (RBAC), and defines environment-specific compute resources (warehouses) and data masking policies. This ensures data integrity, compliance, and cost optimization across all stages of the data lifecycle.

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

This skill provides comprehensive operational capabilities for managing FrontendExtension resources in a Kubernetes cluster. It covers the entire lifecycle, including resource creation, package generation, artifact inspection, publishing, unpublishing, deletion, and deep debugging of package and publish controller behaviors. Use it for troubleshooting FE status, managing deployment pipelines, or interacting with the FE API.