edercnj/infrastructure
java/src/main/resources/targets/claude/skills/knowledge-packs/infrastructure/SKILL.md
Infrastructure patterns: Docker multi-stage builds, Kubernetes manifests (cloud-agnostic), security context, 12-Factor App principles, graceful shutdown, resource management, and cloud-native design.
development
Updated Apr 23, 2026
$ install --global
skillsauthnpx skillsauth add edercnj/claude-environment infrastructureInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 4:35 AM12.7s2 files scanned
SKILL.md
- name:
- infrastructure
- description:
- Infrastructure patterns: Docker multi-stage builds, Kubernetes manifests (cloud-agnostic), security context, 12-Factor App principles, graceful shutdown, resource management, and cloud-native design.
- user-invocable:
- false
Knowledge Pack: Infrastructure
Purpose
Provides infrastructure and deployment patterns for {{LANGUAGE}} {{FRAMEWORK}}, enabling cloud-agnostic, cloud-native service deployment. Covers container best practices (multi-stage Docker), Kubernetes manifests (Kustomize-based), security hardening, 12-Factor compliance, health probes, graceful shutdown, resource management, and observability integration.
Quick Reference (always in context)
See references/infrastructure-principles.md for the essential infrastructure summary (cloud-agnostic, IaC, health probes, graceful shutdown, security context).
Detailed References
Read these files for comprehensive infrastructure guidance:
| Reference | Content |
|-----------|---------|
| patterns/infrastructure/docker-multi-stage.md | Multi-stage Dockerfile structure, build stage (dependencies, compilation), runtime stage (minimal image), optimization strategies, layer caching, base image selection |
| patterns/infrastructure/container-security.md | Non-root user (UID >= 1000), read-only filesystem, capability dropping, minimal base images, secret management (never bake secrets), image scanning and signing |
| patterns/infrastructure/kubernetes-manifests.md | YAML structure, Deployment vs StatefulSet, Service types, ConfigMap vs Secret, resource requests/limits, probes (liveness/readiness/startup), security context, labels, annotations |
| patterns/infrastructure/kustomize-organization.md | Directory structure (base vs overlays), patch strategies, environment-specific configuration, ConfigMap and Secret generation, image tagging, resource composition |
| patterns/infrastructure/health-probes.md | Liveness probe (process alive), readiness probe (dependencies OK), startup probe (initialization complete), probe timing per runtime, endpoint implementation, degradation reflection |
| patterns/infrastructure/graceful-shutdown.md | SIGTERM handling, drain in-flight requests, timeout budgets, preStop hooks, connection cleanup, database/broker disconnection, zero-downtime deployments |
| patterns/infrastructure/resource-management.md | CPU/memory requests and limits, QoS classes (Guaranteed, Burstable, BestEffort), vertical pod autoscaling, horizontal pod autoscaling (HPA) configuration |
| patterns/infrastructure/cloud-native-principles.md | 12-Factor App compliance checklist, statelessness verification, configuration externalization, backing services as resources, dev/prod parity, logs to stdout/stderr |
Related Knowledge Packs
skills/observability/— health checks, structured logging, and monitoring integrationskills/security/— container security, secrets management, and image scanningskills/resilience/— graceful degradation and circuit breaker patterns for infrastructure
Related Skills
edercnj/x-validate-docs
development
VerifiedTrustedCommunity
Documentation freshness gate: validates 6 dimensions (readme, api, adr, etc.) per PR.
SKILL.mdUpdated Jun 10, 2026
edercnj/x-validate-dependency-policy
testing
VerifiedTrustedCommunity
Conditional dep-policy gate: CVEs, licenses, versions, freshness; SARIF + report.
SKILL.mdUpdated Jun 10, 2026
edercnj/x-update-architecture
documentation
VerifiedTrustedCommunity
Incrementally updates the service or system architecture document; never regenerative.
SKILL.mdUpdated Jun 10, 2026
edercnj/x-scan-secrets
development
VerifiedTrustedCommunity
Scans code and git history for leaked credentials, API keys, and tokens; SARIF output.
SKILL.mdUpdated Jun 10, 2026