Skill Claude CodeCodex
Query Prometheus and Grafana Mimir, write and debug PromQL, and build or fix Grafana dashboards — for agents solving problems from metrics. Covers the Prometheus HTTP API (/api/v1/query, queryrange, series, labels, metadata), Mimir multi-tenancy (X-Scope-OrgID, federation a|b|c, per-tenant 422/429 limits), the PromQL…
Skill Claude CodeCodex
Migrate off the Rancher-bundled rancher-logging chart (cattle-logging-system, rancher/mirrored-kube-logging- images) to the upstream kube-logging logging-operator ≥6.7.0 — air-gap-first. Rancher 2.11 through 2.15-dev all bundle a frozen operator 4.10.0 that is inside the affected range of CVE-2026-54680 (CVSS 9.9…
Skill Claude CodeCodex
Plan and sequence COMMUNITY-edition Rancher upgrades across air-gapped multi-cluster fleets — a management/"hosting" Rancher cluster plus the downstream RKE2/K3s clusters it provisions. Covers the community release model (2.11→2.14, community-vs-Prime cadence, EOL), the Kontainer Driver Metadata (KDM) matrix deciding…
Skill Claude CodeCodex
Migrate Redis deployments (especially Bitnami Redis Helm charts in Sentinel HA mode) to Valkey on Kubernetes, including fully air-gapped clusters. Core knowledge: the RDB-version wall (Valkey replicates/loads only from Redis ≤ 7.2.x; Redis 7.4+ writes RDB v12 which Valkey rejects; Valkey 9 writes its own v80 — a…
Skill Claude CodeCodex
Reference for the OpenAI Responses API (/v1/responses), OpenResponses open standard, and Codex CLI. Covers the request/response schema, previousresponseid, Conversations API, server-side compaction, WebSocket transport, hosted Shell tool, Skills, toolsearch, MCP connectors, prompt caching, phase field, 53 typed…
Skill Claude CodeCodex
Triage and fix the Microsoft Secure Boot 2011→2023 UEFI certificate rotation across Dell PowerEdge / iDRAC9 bare metal, Ubuntu/Linux servers, and Harvester HCI / KubeVirt guest VMs. Two 2011 CAs expired June 2026 and Windows Production PCA 2011 expires 2026-10-19 — but UEFI firmware ignores certificate expiry, so…
Skill Claude CodeCodex
SGLang HiCache (hierarchical KV cache) — three-tier prefix cache: GPU HBM (L1) → pinned host DRAM (L2) → distributed L3 (Mooncake / 3FS / NIXL / AIBrix / EIC / SiMM / file / LMCache). Covers --enable-hierarchical-cache, all --hicache- flags, write policies, pagefirst layouts, prefetch policy (besteffort / waitcomplete…
Skill Claude CodeCodex
SGLang Model Gateway (sgl-model-gateway, formerly sgl-router) — Rust router fronting vLLM and SGLang inference workers on Kubernetes. Covers first-class vLLM gRPC backend plus HTTP transparent-proxy for vanilla vLLM, the policy set (six --policy values, cacheaware default), tokenizer-format dispatch (tokenizer.json…
Skill Claude CodeCodex
Autoresearch loop for Claude Code skills — greedy keep/discard hill climbing on a 10-dimension quality rubric, with blind subagent validation for self-scoring bias, plus a freshen mode that probes external references (release notes, docs, deprecation signals) and applies verified updates, plus a trigger mode that…
Skill Claude CodeCodex
Best practices for Prometheus snmpexporter (v0.30.x): writing generator.yml modules, curating MIB walks, SNMPv2c/v3 auth, timeout tuning, Kubernetes deployment (Probe/ScrapeConfig CRDs, secrets, UDP egress), local docker testing, and debugging failed scrapes. Includes worked device references for Dell iDRAC 9/10…
Skill Claude CodeCodex
First leg of the defending-code loop (/threat-model → /vuln-scan → /triage → /patch), and an optional one — the loop can start at /vuln-scan. Running this first is what makes later steps scope to real attack surface and rank by impact on a named asset.
Skill Claude CodeCodex
Harden a Traefik 2.x/3.x reverse proxy against abusive or unwanted traffic — per-identity rate + concurrency limiting, IP allowlisting, request-body buffering, middleware chaining, keying limits on a JWT claim/header instead of raw source IP, air-gapped plugin loading (localPlugins/WASM), and detection/response via…