2. DevOps & Infrastructure

Expert guide for creating, reviewing, and troubleshooting production-ready Helm charts with ArgoCD/GitOps integration, security, and deployment strategies.

Diagnoses system process anomalies and resource spikes (CPU, memory, IO) to resolve performance issues in infrastructure.

Generates and validates production-ready Helm charts for Kubernetes deployments, including chart structure, values, and templates.

Manages development server operations including start, stop, status checks, and sync for cloud-based dev environments like fly.io.

Guides AWS IAM configuration, account setup, and credential management for secure access to AWS services including S3, EC2, and Lambda.

Provides essential patterns for tmux pane/window management, ensuring reliability by using $TMUX_PANE instead of dynamic queries.

Safely identifies and terminates processes blocking specific ports, preventing accidental termination of critical user applications.

Enables production Helm chart deployments with secrets management, blue-green, and canary strategies on Kubernetes.

Automates security and quality audits for Helm charts, validating resource limits, security contexts, and production readiness.

Automates code commit operations in CI environments without manual intervention, ensuring continuous integration workflows.

Guides GitOps workflow for Kubernetes changes, avoiding direct kubectl use. Handles manifest management, Git commits, and sync via ArgoCD/Flux.

Automates GitOps compliance checks by detecting configuration drift and policy violations in Kubernetes clusters against Git-managed manifests.

Automatically generates pull request descriptions during CI/CD pipelines without requiring user input.

Validates shell commands against best practices, ensuring security, efficiency, and adherence to DevOps standards.

Applies consistent Bash style conventions to new and existing shell scripts for reliability and maintainability in infrastructure workflows.

Guides secure SSH access to Financeiro RATC production server for command execution, log inspection, service management, and troubleshooting.

Automates cloning of bgf project repositories (Shopify theme and website) for new development environment setup.

Enables secure, keyless authentication for GKE pods to Google Cloud services using Workload Identity, eliminating service account keys.

Provides infrastructure guidelines for A4C-AppSuite covering idempotent Supabase migrations, Kubernetes deployments, and AsyncAPI event design with SQL-first development emphasis.

Manages version synchronization and release processes for CI/CD pipelines, including GitHub releases and rollback capabilities.

Enables seamless application deployment to Dokploy via CLI or API, automating production releases and infrastructure setup.

Provides safe execution and modification of PowerShell scripts in the scripts/ directory, adhering to module import conventions and verification steps.

Comprehensive pre-deployment verification checklist to confirm all necessary steps are completed before launching a new version.

Pulls and starts the Tesseract Knowledge Engine with Firebase backend, providing accessible URLs via localhost and Tailscale.