devops-deployment by yonatangross/orchestkit
npx skills add https://github.com/yonatangross/orchestkit --skill devops-deployment用于 CI/CD 流水线、容器化、部署策略和基础设施自动化的综合框架。
┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ Code │──>│ Build │──>│ Test │──>│ Deploy │
│ Commit │ │ & Lint │ │ & Scan │ │ & Release │
└─────────────┘ └─────────────┘ └─────────────┘ └─────────────┘
│ │ │ │
v v v v
Triggers Artifacts Reports Monitoring
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者,精准高效
多阶段构建以最小化镜像大小:
安全加固:
核心清单文件:
安全上下文:
runAsNonRoot: trueallowPrivilegeEscalation: falsereadOnlyRootFilesystem: true| 策略 | 使用场景 | 风险 |
|---|---|---|
| 滚动更新 | 默认,逐步替换 | 低 - 自动回滚 |
| 蓝绿部署 | 即时切换,易于回滚 | 中 - 双倍资源 |
| 金丝雀发布 | 渐进式流量切换 | 低 - 逐步暴露 |
滚动更新 (Kubernetes 默认):
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 25%
maxUnavailable: 0 # 零停机时间
使用 External Secrets Operator 从云提供商同步:
加载:Read("${CLAUDE_SKILL_DIR}/references/docker-patterns.md")
涵盖的关键主题:
加载:Read("${CLAUDE_SKILL_DIR}/references/ci-cd-pipelines.md")
涵盖的关键主题:
加载:Read("${CLAUDE_SKILL_DIR}/references/kubernetes-basics.md")
涵盖的关键主题:
加载:Read("${CLAUDE_SKILL_DIR}/references/environment-management.md")
涵盖的关键主题:
加载:Read("${CLAUDE_SKILL_DIR}/references/observability.md")
涵盖的关键主题:
加载:Read("${CLAUDE_SKILL_DIR}/rules/railway-deployment.md")
涵盖的关键主题:
${CLAUDE_SKILL_DIR}/references/railway-json-config.md, ${CLAUDE_SKILL_DIR}/references/nixpacks-customization.md, ${CLAUDE_SKILL_DIR}/references/multi-service-setup.md加载:Read("${CLAUDE_SKILL_DIR}/references/deployment-strategies.md")
涵盖的关键主题:
加载:Read("${CLAUDE_SKILL_DIR}/references/checklists-and-templates.md") 以获取部署前/中/后清单、Helm chart 结构、模板参考表和扩展思考触发器。
zero-downtime-migration - 用于零停机部署的数据库迁移模式security-scanning - 用于 CI/CD 流水线的安全扫描集成ork:monitoring-observability - 用于已部署应用程序的监控和告警ork:database-patterns - 用于后端部署的 Python/Alembic 迁移工作流portless (上游) - 用于多服务本地开发的命名 .localhost URL (portless alias api 8080)| 决策 | 选择 | 理由 |
|---|---|---|
| 容器用户 | 非 root (uid 1001) | 安全最佳实践,许多编排器要求 |
| 部署策略 | 滚动更新 (默认) | 零停机时间,自动回滚,资源高效 |
| 密钥管理 | External Secrets Operator | 从云提供商同步,兼容 GitOps |
| 健康检查 | 独立的启动/存活/就绪探针 | 防止过早接收流量,实现优雅关闭 |
加载:Read("${CLAUDE_SKILL_DIR}/references/capability-details.md") 以获取完整的关键字索引和跨所有 6 项能力(ci-cd、docker、kubernetes、infrastructure-as-code、deployment-strategies、observability)的问题-解决方案映射。
每周安装次数
181
代码仓库
GitHub 星标数
132
首次出现
2026年2月6日
安全审计
安装于
github-copilot173
gemini-cli173
opencode172
codex171
cursor169
kimi-cli165
Comprehensive frameworks for CI/CD pipelines, containerization, deployment strategies, and infrastructure automation.
┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ Code │──>│ Build │──>│ Test │──>│ Deploy │
│ Commit │ │ & Lint │ │ & Scan │ │ & Release │
└─────────────┘ └─────────────┘ └─────────────┘ └─────────────┘
│ │ │ │
v v v v
Triggers Artifacts Reports Monitoring
Multi-stage builds minimize image size:
Security hardening :
Essential manifests :
Security context :
runAsNonRoot: trueallowPrivilegeEscalation: falsereadOnlyRootFilesystem: true| Strategy | Use Case | Risk |
|---|---|---|
| Rolling | Default, gradual replacement | Low - automatic rollback |
| Blue-Green | Instant switch, easy rollback | Medium - double resources |
| Canary | Progressive traffic shift | Low - gradual exposure |
Rolling Update (Kubernetes default):
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 25%
maxUnavailable: 0 # Zero downtime
Use External Secrets Operator to sync from cloud providers:
Load:Read("${CLAUDE_SKILL_DIR}/references/docker-patterns.md")
Key topics covered:
Load:Read("${CLAUDE_SKILL_DIR}/references/ci-cd-pipelines.md")
Key topics covered:
Load:Read("${CLAUDE_SKILL_DIR}/references/kubernetes-basics.md")
Key topics covered:
Load:Read("${CLAUDE_SKILL_DIR}/references/environment-management.md")
Key topics covered:
Load:Read("${CLAUDE_SKILL_DIR}/references/observability.md")
Key topics covered:
Load:Read("${CLAUDE_SKILL_DIR}/rules/railway-deployment.md")
Key topics covered:
${CLAUDE_SKILL_DIR}/references/railway-json-config.md, ${CLAUDE_SKILL_DIR}/references/nixpacks-customization.md, ${CLAUDE_SKILL_DIR}/references/multi-service-setup.mdLoad:Read("${CLAUDE_SKILL_DIR}/references/deployment-strategies.md")
Key topics covered:
Load: Read("${CLAUDE_SKILL_DIR}/references/checklists-and-templates.md") for pre/during/post-deployment checklists, Helm chart structure, template reference table, and extended thinking triggers.
zero-downtime-migration - Database migration patterns for zero-downtime deploymentssecurity-scanning - Security scanning integration for CI/CD pipelinesork:monitoring-observability - Monitoring and alerting for deployed applicationsork:database-patterns - Python/Alembic migration workflow for backend deploymentsportless (upstream) - Named .localhost URLs for multi-service local dev (portless alias api 8080)| Decision | Choice | Rationale |
|---|---|---|
| Container user | Non-root (uid 1001) | Security best practice, required by many orchestrators |
| Deployment strategy | Rolling update (default) | Zero downtime, automatic rollback, resource efficient |
| Secrets management | External Secrets Operator | Syncs from cloud providers, GitOps compatible |
| Health checks | Separate startup/liveness/readiness | Prevents premature traffic, enables graceful shutdown |
Load: Read("${CLAUDE_SKILL_DIR}/references/capability-details.md") for full keyword index and problem-solution mapping across all 6 capabilities (ci-cd, docker, kubernetes, infrastructure-as-code, deployment-strategies, observability).
Weekly Installs
181
Repository
GitHub Stars
132
First Seen
Feb 6, 2026
Security Audits
Gen Agent Trust HubPassSocketPassSnykPass
Installed on
github-copilot173
gemini-cli173
opencode172
codex171
cursor169
kimi-cli165
Azure Data Explorer (Kusto) 查询技能:KQL数据分析、日志遥测与时间序列处理
119,800 周安装