Agent skill

Devops Deployment

by yonatangross in yonatangross/orchestkit

A skill your agent uses when setting up CI/CD pipelines, containerizing applications, deploying to Kubernetes, or writing infrastructure as code.

MITAuto-check passedDevOps & Cloud

Install Devops Deployment

skills CLI
$ npx skills add yonatangross/orchestkit --skill devops-deployment -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install yonatangross/orchestkit devops-deployment --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/yonatangross/orchestkit.git skills-src && mkdir -p .claude/skills && cp -r skills-src/src/skills/devops-deployment .claude/skills/devops-deployment && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
devops-deployment
GitHub stars
288
Token cost
~2.7k tokens
SKILL.md length
803 words
Files
28 (incl. scripts, references)
Skills in repo
107
Repo updated
First seen
Licence
MIT

At a glance

A skill your agent uses when setting up CI/CD pipelines, containerizing applications, deploying to Kubernetes, or writing infrastructure as code.

  • Works in 6 steps: Lint & Type Check - Code quality gates → Unit Tests - Test coverage with reporting → Security Scan - npm audit + Trivy… → …
  • Setting up CI/CD pipelines
  • SKILL.md covers Overview, Pipeline Architecture, Key Concepts and References, plus 5 more sections
  • Calls docker

What it does

Devops Deployment is an agent skill from yonatangross/orchestkit. Use when setting up CI/CD pipelines, containerizing applications, deploying to Kubernetes, or writing infrastructure as code. DevOps & Deployment covers GitHub Actions, Docker, Helm, and Terraform patterns.

Its SKILL.md is about 2.7k tokens, which your agent loads only when the skill is triggered. The skill folder holds 30 other files, including scripts and reference files (for example `references/capability-details.md`, `references/checklists-and-templates.md` and `references/deployment-strategies.md`). Compatibility notes: Claude Code 2.1.277+.

It sits in DevOps & Cloud, covering Container orchestration, Deployment and Infrastructure as code. It works with Docker, Kubernetes, GitHub Actions and Terraform. The repository describes itself as: The Complete AI Development Toolkit for Claude Code. 106 skills, 36 agents, 171 hooks. Install ork for stable (v9.x), or ork-alpha for the v10 line, which ships daily. The licence is MIT.

When your agent uses it

  • Setting up CI/CD pipelines
  • Containerizing applications
  • Deploying to Kubernetes
  • Writing infrastructure as code

Example prompts

  • “/devops-deployment”

Requirements

  • Docker
  • Compatibility (from SKILL.md): Claude Code 2.1.277+.
  • Pre-approved tools (allowed-tools): Read, Glob, Grep, WebFetch, WebSearch

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. Lint & Type Check - Code quality gates
  2. Unit Tests - Test coverage with reporting
  3. Security Scan - npm audit + Trivy vulnerability scanner
  4. Build & Push - Docker image to container registry
  5. Deploy Staging - Environment-gated deployment
  6. Deploy Production - Manual approval or automated

What it can do on your machine

Read from SKILL.md and the folder at commit 1f8d8f3. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Glob
    • Grep
    • WebFetch
    • WebSearch

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/, which the agent can run.

    Shell commands in SKILL.md call:

    • docker

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • docs.github.com
    • kubernetes.io
    • developer.hashicorp.com
    • prometheus.io
    • helm.sh
    • external-secrets.io
    • argo-cd.readthedocs.io
    • alembic.sqlalchemy.org
    • prometheus.github.io
    • opentelemetry-python-contrib.readthedocs.io
    • structlog.org
    • trivy.dev
    • docs.aws.amazon.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Claude Code 2.1.277+.

    From compatibility in the SKILL.md frontmatter.

Context cost

Devops Deployment loads about 2.7k tokens when it runs, and up to ~9.6k if it reads all its reference files. Until then it costs about 56 tokens; SKILL.md has 803 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~56
When it runs · the whole SKILL.md, loaded when a task matches
~2.7k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~9.6k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from yonatangross/orchestkit at commit 1f8d8f3, republished under its MIT licence (© yonatangross). 803 words, ~2,677 tokens.

Download SKILL.mdSave it as .claude/skills/devops-deployment/SKILL.md (or your agent's skills folder). This skill also uses 27 other files; get the full folder from GitHub.
name
devops-deployment
description
Use when setting up CI/CD pipelines, containerizing applications, deploying to Kubernetes, or writing infrastructure as code. DevOps & Deployment covers GitHub Actions, Docker, Helm, and Terraform patterns.
allowed-tools
Read, Glob, Grep, WebFetch, WebSearch
compatibility
Claude Code 2.1.277+.
license
MIT
context
fork
agent
ci-cd-engineer
user-invocable
false
disable-model-invocation
false
metadata.category
workflow-automation
metadata.version
1.0.0
metadata.author
OrchestKit
metadata.complexity
medium
metadata.tags
devops, ci-cd, docker, kubernetes, terraform

DevOps & Deployment Skill

Comprehensive frameworks for CI/CD pipelines, containerization, deployment strategies, and infrastructure automation.

Note: If disableSkillShellExecution is enabled (CC 2.1.91), the Docker install check won't run. Verify Docker is available for container operations: docker --version.

Overview

  • Setting up CI/CD pipelines
  • Containerizing applications
  • Deploying to Kubernetes or cloud platforms
  • Implementing GitOps workflows
  • Managing infrastructure as code
  • Planning release strategies

Pipeline Architecture

┌──────────┐ ┌──────────┐ ┌──────────┐ ┌──────────┐
│ Code     │─>│ Build    │─>│ Test     │─>│ Deploy   │
│ Commit   │ │ Lint     │ │ Scan     │ │ Release  │
└──────────┘ └──────────┘ └──────────┘ └──────────┘
  triggers     artifacts    reports      monitoring

Key Concepts

CI/CD Pipeline Stages
  1. Lint & Type Check - Code quality gates
  2. Unit Tests - Test coverage with reporting
  3. Security Scan - npm audit + Trivy vulnerability scanner
  4. Build & Push - Docker image to container registry
  5. Deploy Staging - Environment-gated deployment
  6. Deploy Production - Manual approval or automated
Container Best Practices

Multi-stage builds minimize image size:

  • Stage 1: Install production dependencies only
  • Stage 2: Build application with dev dependencies
  • Stage 3: Production runtime with minimal footprint

Security hardening:

  • Non-root user (uid 1001)
  • Read-only filesystem where possible
  • Health checks for orchestrator integration
Kubernetes Deployment

Essential manifests:

  • Deployment with rolling update strategy
  • Service for internal routing
  • Ingress for external access with TLS
  • HorizontalPodAutoscaler for scaling

Security context:

  • runAsNonRoot: true
  • allowPrivilegeEscalation: false
  • readOnlyRootFilesystem: true
  • Drop all capabilities
Deployment Strategies
StrategyUse CaseRisk
RollingDefault, gradual replacementLow - automatic rollback
Blue-GreenInstant switch, easy rollbackMedium - double resources
CanaryProgressive traffic shiftLow - gradual exposure

Rolling Update (Kubernetes default):

yaml
strategy:
  type: RollingUpdate
  rollingUpdate:
    maxSurge: 25%
    maxUnavailable: 0  # Zero downtime
Secrets Management

Use External Secrets Operator to sync from cloud providers:

  • AWS Secrets Manager
  • HashiCorp Vault
  • Azure Key Vault
  • GCP Secret Manager

References

Docker Patterns

Load: Read("references/docker-patterns.md")

Key topics covered:

  • Multi-stage build examples with 78% size reduction
  • Layer caching optimization
  • Security hardening (non-root, health checks)
  • Trivy vulnerability scanning
  • Docker Compose development setup
OrchestKit Delta (house rules)

Load: Read("references/ork-delta.md")

Key topics covered:

  • CI concurrency groups, the sub-5-minute feedback budget, path filtering
  • Service-container health gating, SHA-pinned deploys, CDN invalidation order
  • Kubernetes probe budget, request/limit baseline, PodDisruptionBudget floor
  • External Secrets refresh interval, ArgoCD prune plus selfHeal, Terraform state locking
  • Alert thresholds with dwell windows, request-id log binding, rollback rehearsal
Railway Deployment

Load: Read("rules/railway-deployment.md")

Key topics covered:

  • railway.json configuration, Nixpacks builds
  • Environment variable management, database provisioning
  • Multi-service setups, Railway CLI workflows
  • References: references/railway-json-config.md, references/nixpacks-customization.md, references/multi-service-setup.md
Deployment Strategies

Load: Read("references/deployment-strategies.md")

Key topics covered:

  • Rolling deployment (maxUnavailable / maxSurge)
  • Blue-green deployment (service-selector switch and rollback)
  • Canary releases (replica-ratio traffic split)

Show full SKILL.md (434 more words)Show less

Upstream coverage (do not restate)

This skill wraps third-party products. Vendor mechanics are not restated here; fetch them from the source below. Where a row says "house subset stays in X", that file keeps only OrchestKit's threshold, config or ordering decision, not the vendor tutorial.

TopicFetch from
GitHub Actions workflow syntax, matrix builds, artifact upload/download, cache mechanicshttps://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax (house cache-key subset stays in rules/devops-ci-caching.md)
Trigger filters (on.push.paths, schedules, workflow_dispatch)https://docs.github.com/en/actions/how-tos/write-workflows/choose-when-workflows-run/trigger-a-workflow
Service containers for integration testshttps://docs.github.com/en/actions/tutorials/use-containerized-services/use-docker-service-containers
Deployment environments and approval gateshttps://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/manage-environments
Protected branches and required status checkshttps://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches (house approval counts stay in rules/devops-branch-protection.md)
Kubernetes probe semantics and every probe fieldhttps://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/ (house probe numbers stay in references/ork-delta.md)
Requests, limits, quotas and QoS classeshttps://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ (house baseline stays in references/ork-delta.md)
PodDisruptionBudget semantics and eviction APIhttps://kubernetes.io/docs/tasks/run-application/configure-pdb/ (house minAvailable floor stays in references/ork-delta.md)
StatefulSets, ordinal identity, volumeClaimTemplateshttps://kubernetes.io/docs/concepts/workloads/controllers/statefulset/
Helm chart authoring, templating and values fileshttps://helm.sh/docs/topics/charts/ (the chart directory layout we use stays in references/checklists-and-templates.md)
External Secrets Operator CRD fields and backendshttps://external-secrets.io/latest/api/externalsecret/ (house refresh/creation policy stays in references/ork-delta.md)
ArgoCD automated sync, prune and self-healhttps://argo-cd.readthedocs.io/en/stable/user-guide/auto_sync/ (house retry/backoff stays in references/ork-delta.md)
Terraform S3 backend and state lockinghttps://developer.hashicorp.com/terraform/language/backend/s3 (house backend config stays in references/ork-delta.md)
Terraform module composition and variable fileshttps://developer.hashicorp.com/terraform/language/modules
Alembic revision, upgrade and downgrade CLIhttps://alembic.sqlalchemy.org/en/latest/tutorial.html (the zero-downtime migration ordering stays in rules/devops-db-migrations.md)
Prometheus client instrumentation (Counter, Histogram, exposition)https://prometheus.github.io/client_python/
PromQL functions (rate, histogram_quantile) for dashboardshttps://prometheus.io/docs/prometheus/latest/querying/functions/
Prometheus alerting rule syntaxhttps://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/ (house thresholds and dwell windows stay in references/ork-delta.md)
OpenTelemetry FastAPI auto-instrumentation and manual spanshttps://opentelemetry-python-contrib.readthedocs.io/en/latest/instrumentation/fastapi/fastapi.html
structlog context bindinghttps://www.structlog.org/en/stable/contextvars.html (the bind-then-call ordering stays in references/ork-delta.md)
Trivy severity filtering and scan configurationhttps://trivy.dev/latest/docs/configuration/filtering/ (the house image-scan CI wiring stays in references/docker-patterns.md, the weekly-scan schedule and severity floor in references/ork-delta.md)
CloudFront invalidation semantics and costhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.html (the sync-then-invalidate order stays in references/ork-delta.md)
Pre-launch security, load-testing and monitoring checklistsork:security-patterns, ork:testing-perf, ork:monitoring-observability (the deploy-day checklist stays in references/checklists-and-templates.md)

Deployment Checklist & Templates

Load: Read("references/checklists-and-templates.md") for pre/during/post-deployment checklists, Helm chart structure, and template reference table.


  • ork:security-patterns - Security scanning and hardening patterns for CI/CD pipelines
  • ork:monitoring-observability - Prometheus, Grafana and alerting for deployed applications
  • ork:database-patterns - Python/Alembic migration workflow for backend deployments
  • portless (upstream) - Named .localhost URLs for multi-service local dev (portless alias api 8080)

Key Decisions

DecisionChoiceRationale
Container userNon-root (uid 1001)Security best practice, required by many orchestrators
Deployment strategyRolling update (default)Zero downtime, automatic rollback, resource efficient
Secrets managementExternal Secrets OperatorSyncs from cloud providers, GitOps compatible
Health checksSeparate startup/liveness/readinessPrevents premature traffic, enables graceful shutdown

Capability Details

Load: Read("references/capability-details.md") for full keyword index and problem-solution mapping across all 6 capabilities (ci-cd, docker, kubernetes, infrastructure-as-code, deployment-strategies, observability).

© yonatangross, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 27 other files (scripts, references) in src/skills/devops-deployment of yonatangross/orchestkit.

  • SKILL.md
  • references/capability-details.md
  • references/checklists-and-templates.md
  • references/deployment-strategies.md
  • references/docker-patterns.md
  • references/multi-service-setup.md
  • references/nixpacks-customization.md
  • references/ork-delta.md
  • references/railway-json-config.md
  • rules/_sections.md
  • rules/_template.md
  • rules/devops-branch-protection.md
  • rules/devops-ci-caching.md
  • rules/devops-db-migrations.md
  • rules/docker-layer-security.md
  • rules/docker-multistage.md
  • rules/railway-deployment.md
  • scripts/Dockerfile
  • … and 10 more

Open the folder on GitHubat commit 1f8d8f3

Compare with similar skills

Devops Deployment next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Devops Deployment compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Devops Deployment this skillyonatangross/orchestkit288—~2.7kAutomated safety check: PassMIT
Devops Excellencemajiayu000/spellbook286—~2.4kAutomated safety check: NotesMIT
Devops EngineerYikai-Liao/symusic1891 repos~1.5kAutomated safety check: PassMIT
Senior DevOps Toolkitmaslennikov-ig/claude-code-orchestrator-kit2596 repos~1.1kAutomated safety check: NotesCustom licence
Code Securitysemgrep/skills322—~1.2kAutomated safety check: PassCustom licence
Devops InfrastructureCloudAI-X/claude-workflow-v21.4k—~2.7kAutomated safety check: NotesMIT

Similar skills

  • Devops Excellence

    majiayu000/spellbook

    DevOps and CI/CD expert. An agent skill from majiayu000/spellbook.

    286 GitHub stars~2.4k tokensUpdated yesterday
    DevOps & CloudAuto-check: notes
  • Devops Engineer

    Yikai-Liao/symusic

    Creates Dockerfiles, configures CI/CD pipelines, writes Kubernetes manifests, and generates Terraform/Pulumi infrastructure templates.

    189 GitHub starsUsed in 1 repo~1.5k tokens
    DevOps & CloudAuto-check passed
  • Senior DevOps Toolkit

    maslennikov-ig/claude-code-orchestrator-kit

    Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…

    259 GitHub starsUsed in 6 repos~1.1k tokens
    DevOps & CloudAuto-check: notes
  • Code Security

    semgrep/skills

    Official

    Security guidelines for writing secure code. An agent skill from semgrep/skills.

    322 GitHub stars~1.2k tokensUpdated 2 mo ago
    SecurityAuto-check passed
  • Devops Infrastructure

    CloudAI-X/claude-workflow-v2

    Guides Docker, CI/CD pipelines, deployment strategies, infrastructure as code, and observability setup.

    1.4k GitHub stars~2.7k tokensUpdated yesterday
    DevOps & CloudAuto-check: notes
  • Supercheck Infrastructure Deployment

    supercheck-io/supercheck

    Work on Supercheck Docker Compose, K3s, Kubernetes manifests, gVisor, OpenTofu/Hetzner, secrets, external services, autoscaling, backups, disaster recovery, DNS/TLS, or production deployment.

    215 GitHub stars~1.4k tokensUpdated today
    DevOps & CloudAuto-check: notes

More from yonatangross/orchestkit

All 107 skills in this repo
  • API Design

    yonatangross/orchestkit

    API contract design for REST and GraphQL, covering resource shape, URL and header versioning with deprecation windows, RFC 9457 Problem Details error handling, and OpenAPI specs.

    288 GitHub stars~2.9k tokensUpdated yesterday
    Auto-check passed
  • Architecture Decision Record

    yonatangross/orchestkit

    ADR templates in the Nygard format with context, decision, consequences, and alternatives.

    288 GitHub stars~2k tokensUpdated yesterday
    Auto-check passed
  • Audit Full

    yonatangross/orchestkit

    Single-pass codebase analysis leveraging a 1M-token context window for comprehensive security scanning, architecture review, and dependency auditing.

    288 GitHub stars~3.5k tokensUpdated yesterday
    Auto-check: notes
  • Code Review Playbook

    yonatangross/orchestkit

    Structured review processes, conventional comments, language-specific checklists, and feedback templates.

    288 GitHub stars~2.2k tokensUpdated yesterday
    Auto-check passed
  • Create PR

    yonatangross/orchestkit

    Creates GitHub pull requests with pre-flight validation, conventional title formatting, and structured summary generation.

    288 GitHub stars~4.5k tokensUpdated yesterday
    Auto-check: notes
  • Explore

    yonatangross/orchestkit

    Multi-angle codebase exploration spawning 3-5 parallel agents for code structure, data flow, architecture patterns, and health assessment.

    288 GitHub stars~3.9k tokensUpdated yesterday
    Auto-check: notes

Categories

Questions about Devops Deployment

What does Devops Deployment do?

A skill your agent uses when setting up CI/CD pipelines, containerizing applications, deploying to Kubernetes, or writing infrastructure as code. Devops Deployment is an agent skill from yonatangross/orchestkit. Use when setting up CI/CD pipelines, containerizing applications, deploying to Kubernetes, or writing infrastructure as code.

When should I use Devops Deployment?

Devops Deployment fits situations like: setting up CI/CD pipelines; containerizing applications; deploying to Kubernetes; writing infrastructure as code.

How do I install Devops Deployment in Claude Code?

Run `npx skills add yonatangross/orchestkit --skill devops-deployment -a claude-code`. Or copy the skill folder (src/skills/devops-deployment in yonatangross/orchestkit) into .claude/skills/devops-deployment in your project. Claude Code loads it when a task matches its description.

How do I install Devops Deployment in Codex?

Run `npx skills add yonatangross/orchestkit --skill devops-deployment -a codex`. Or copy the skill folder (src/skills/devops-deployment in yonatangross/orchestkit) into .agents/skills/devops-deployment in your project. Codex loads it when a task matches its description.

Can I use Devops Deployment in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add yonatangross/orchestkit --skill devops-deployment -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/devops-deployment, .gemini/skills/devops-deployment, .github/skills/devops-deployment and .opencode/skills/devops-deployment in your project.

What does Devops Deployment need to run?

Going by SKILL.md and its folder, Devops Deployment needs the command-line tools its instructions call (docker). Our summary lists: Docker. Its frontmatter pre-approves these tools: Read, Glob, Grep, WebFetch, WebSearch. Compatibility (from SKILL.md): Claude Code 2.1.277+..

Does Devops Deployment access the network?

SKILL.md names 13 domains. As links in the text: docs.github.com, kubernetes.io, developer.hashicorp.com, prometheus.io, helm.sh, external-secrets.io, argo-cd.readthedocs.io, alembic.sqlalchemy.org, prometheus.github.io, opentelemetry-python-contrib.readthedocs.io, structlog.org, trivy.dev and docs.aws.amazon.com. This is read from the text; nothing was executed.

Is Devops Deployment safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Devops Deployment use?

Devops Deployment is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Devops Deployment use?

About 2.7k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 6.9k tokens, read only when the agent opens those files.

What are the alternatives to Devops Deployment?

Skills that share tags, products or a category with Devops Deployment: Devops Excellence (majiayu000/spellbook, 286 stars), Devops Engineer (Yikai-Liao/symusic, 189 stars), Senior DevOps Toolkit (maslennikov-ig/claude-code-orchestrator-kit, 259 stars) and Code Security (semgrep/skills, 322 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Devops Deployment?

yonatangross (a GitHub user) maintains it in yonatangross/orchestkit, which has 288 GitHub stars. The repository holds 107 skills in this directory. The repository was last updated on October 6, 2026.

Source: yonatangross/orchestkit on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.