Automate CI/CD and GitOps Deployments

This skill acts as an expert deployment engineer specializing in modern CI/CD pipelines, GitOps workflows, and advanced deployment automation. Its purpose is mastering CI/CD practices, GitOps, and container orchestration, with a focus on zero-downtime deployments, progressive delivery, and enterprise-scale automation.

Its instructions run in four steps: gather release requirements, risk tolerance, and environments; design pipeline stages with quality gates and approvals; implement the deployment strategy with rollback and observability; and document runbooks and validate in staging before production. Its safety guidance is explicit: avoid production rollouts without approvals and rollback plans, and validate secrets, permissions, and target environments before running pipelines.

Its capabilities span twelve areas: modern CI/CD platforms (GitHub Actions, GitLab CI/CD, Azure DevOps, Jenkins, AWS CodePipeline, GCP Cloud Build, Tekton, Argo Workflows, and platforms like Buildkite, CircleCI, Drone CI, Harness, and Spinnaker); GitOps and continuous deployment with ArgoCD, Flux v2, and Jenkins X, app-of-apps and environment promotion patterns, and secret management via External Secrets Operator, Sealed Secrets, or Vault; container technologies including multi-stage Docker builds, BuildKit, Podman, containerd, CRI-O, gVisor, and distroless images; Kubernetes deployment patterns such as rolling updates, blue/green, canary, and A/B testing through Argo Rollouts or Flagger; advanced deployment strategies for zero-downtime rollouts, automated database migrations, feature flags (LaunchDarkly, Flagr), and rollback triggers; security and compliance covering secret management, RBAC, SLSA, Sigstore, SBOM generation, OPA/Gatekeeper, and SOX/PCI-DSS/HIPAA pipeline compliance; testing and quality assurance including SAST, DAST, quality gates, and chaos engineering in production; infrastructure integration with Terraform, CloudFormation, Pulumi, multi-cloud and edge deployment, and autoscaling; observability covering pipeline and application monitoring, log aggregation, alerting, and DORA-style metrics (deployment frequency, lead time, change failure rate, recovery time); platform engineering with self-service developer platforms and reusable pipeline templates; multi-environment management with promotion strategies and environment isolation; and advanced automation for workflow orchestration and event-driven deployment.

Its nine-step response approach analyzes deployment requirements, designs the CI/CD pipeline with quality gates, implements security controls throughout, configures progressive delivery with testing and rollback, sets up monitoring and alerting, automates environment lifecycle management, plans disaster recovery and incident response, documents operational procedures, and optimizes for developer self-service.

Use it for designing or improving CI/CD pipelines and release workflows, implementing GitOps or progressive delivery patterns, automating deployments with zero-downtime requirements, or integrating security and compliance checks into deployment flows.

Do not use it when you only need local development automation, when the task is application feature work without deployment changes, or when there is no deployment or release pipeline involved.

Inputs are release requirements, risk tolerance, and the target environments. Outputs are a designed CI/CD pipeline with quality gates and approvals, a deployment strategy with rollback and observability built in, security controls integrated into the pipeline, monitoring and alerting for deployment and application health, and documented runbooks validated in staging before production.

It is for platform and DevOps engineers building or scaling CI/CD and GitOps pipelines who need zero-downtime deployment strategies, security and compliance built into the pipeline, and self-service capabilities for developers.