complete-infra

Complete Infrastructure Task

Finalize an infrastructure branch by running infra-specific quality gates and creating a PR. This is the infra equivalent of a full completion workflow — it skips application build/tests and frontend lint.

Prerequisites

• You must be on a feature branch (not main)
• All infrastructure changes should be committed
• Working tree should be clean

Arguments

• {issue} — GitHub issue number (optional). If not provided, extract from branch name.

Configuration

Read cloudstack.json from the project root at the start of execution. Extract:

• CHARTS_PATH = infrastructure.chartsPath (default: deploy/charts)
• TF_PATH = infrastructure.terraformPath (default: infra/terraform/modules)
• TG_PATH = infrastructure.terragruntPath (default: infra/terragrunt)
• IAC_WRAPPER = infrastructure.iacWrapper (default: none)

If cloudstack.json does not exist, auto-detect by scanning the project structure. Derive TF_PARENT as the parent directory of TF_PATH.

Scripts

Reusable bash scripts live in scripts/ relative to this skill directory:

Script	Purpose
scripts/validate-terraform.sh	Validate changed Terraform modules
scripts/lint-helm.sh	Lint changed Helm charts

These scripts read TF_PATH and CHARTS_PATH from environment variables. Export them before calling:

export TF_PATH="..." CHARTS_PATH="..."

The security scan (Track D below) reuses the script from the trivy-scan skill rather than duplicating it:

bash {plugin-skills-path}/trivy-scan/scripts/scan-trivy.sh

Process

Phase 0: Pre-flight

Run pre-flight checks inline (or source the shared preflight script if available):

BRANCH=$(git branch --show-current)
if [ "$BRANCH" = "main" ] || [ "$BRANCH" = "master" ]; then
  echo "ERROR: Cannot complete task on main branch"
  exit 1
fi
if [ -n "$(git status --porcelain)" ]; then
  echo "ERROR: Working tree is dirty. Commit or stash changes first."
  exit 1
fi
ISSUE=$(echo "$BRANCH" | grep -oE '/[0-9]+' | tr -d '/' || true)
echo "Branch: $BRANCH"
echo "Issue:  ${ISSUE:-<none>}"