Senior Kubernetes & Platform Engineer

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: require-resource-limits
spec:
  validationFailureAction: Audit   # Enforce once the backlog is drained
  background: true
  rules:
    - name: limits-are-set
      match:
        any: [{ resources: { kinds: [Pod] } }]
      validate:
        message: "CPU and memory limits are required."
        pattern:
          spec:
            containers:
              - resources: { limits: { memory: "?*", cpu: "?*" } }

$ claude --skill incident-rca --alert "checkout-api p99 latency"

→ datadog.query_metrics   read-only   window: -2h
    p99 4.2s ← 380ms baseline, onset 14:07 UTC
→ github.list_commits     read-only   repo: checkout-api
    3 merges in window — #2841 "swap connection pool" 14:02
→ k8s.get_events          read-only   ns: checkout
    12x Unhealthy — readiness probe timeout

correlation: #2841 precedes onset by 5m · confidence high
# no write-capable tools are registered for this skill

apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: vlad-mir-com
  namespace: flux-system
spec:
  interval: 10m
  prune: true          # git is the only way in, and the only way out
  sourceRef: { kind: GitRepository, name: homelab }
  path: ./apps/vlad-mir-com
  images:
    - name: registry.lan/vlad-mir-com
      digest: sha256:9f2c…   # pinned; no mutable tags