cjohnstoniv
@cjohnstoniv
Public Skills
wardyn-k8s-setup
by cjohnstoniv
Set up or troubleshoot Wardyn's Kubernetes runner substrate (the Helm chart with k8s.enabled=true) — cluster prereqs (proving the CNI enforces NetworkPolicy), authoring values.yaml, wiring Entra ID App Roles for admin/member RBAC, install/upgrade, and verification. Use when deploying Wardyn to Kubernetes, enabling k8s.enabled, configuring SSO/RBAC on a k8s install, or troubleshooting one (redirect loops, "no Wardyn role assigned", ImagePullBackOff, canary INDETERMINATE, NetworkPolicy not enforcing, SSH connection refused). Triggers on "deploy wardyn to kubernetes", "wardyn k8s setup", "k8s runner substrate", "helm install wardyn", "k8s.enabled", "wardyn Entra SSO", "NetworkPolicy canary", "wardyn RBAC on k8s".
wardyn-ci
by cjohnstoniv
Generate a Wardyn sandbox policy + CLI invocation (or full pipeline job) for running a governed sandboxed task in CI — GitHub Actions, Azure DevOps, or any headless/unattended launch. Use when the user wants to run Wardyn in CI/a pipeline, generate a wardyn policy or run config, launch a sandbox non-interactively, or asks about wardyn run --wait / --image / task_mode / ci-run.sh. Triggers on "wardyn in CI", "CI sandbox policy", "pipeline sandbox", "headless wardyn run", "unattended governed run", "generate a wardyn policy".