alexei-led

managing-infra

Infrastructure patterns for Kubernetes, Terraform, Helm, Kustomize, and GitHub Actions. Use when making K8s architectural decisions, choosing between Helm vs Kustomize, structuring Terraform modules, writing CI/CD workflows, or applying security best practices.

alexei-led 35 5 Updated 7mo ago

Resources

6
GitHub

Install

npx skillscat add alexei-led/claude-code-config/managing-infra

Install via the SkillsCat registry.

About this skill

We need to produce a 2-3 sentence plain-text summary, objective, factual, no marketing language, no superlatives, no calls to action, natural prose, no bullet points, no headings, no markdown formatting. At most 60 words. Must be only the summary text, no quotes. Provide only the summary. We need to explain what the skill does, what problem it solves, when to use it. Skill: Infrastructure patterns for Kubernetes, Terraform, Helm, Kustomize, GitHub Actions.

SKILL.md

Infrastructure Patterns

When to Use What

Tool Use For
Raw K8s YAML Simple deployments, one-off resources
Kustomize Environment variations, overlays without templating
Helm Complex apps, third-party charts, heavy templating
Terraform Cloud resources, infrastructure lifecycle
GitHub Actions CI/CD, automated testing, releases
Makefile Build automation, self-documenting targets
Dockerfile Container builds, multi-stage, multi-arch

Quick Decisions

Kustomize when: Simple env differences, readable manifests, patching YAML
Helm when: Complex templating, third-party charts, release management

K8s Security Defaults

Every workload: non-root user, read-only filesystem, no privilege escalation, dropped capabilities, network policies.

GitHub Actions Patterns

  • CI workflow: Lint, test, compile on PRs (run on both x86 + ARM)
  • Release workflow: Multi-arch Docker build on tags (native ARM runners)
  • Pin actions by SHA, least-privilege permissions

References

Commands

kubectl apply -k ./              # Apply kustomize
helm upgrade --install NAME .    # Install/upgrade chart
terraform plan && terraform apply