Community生產力與協作github.com

wshobson/gitops-workflow

使用 ArgoCD 和 Flux 實現 GitOps 工作流程,用於自動化、宣告式 Kubernetes 部署與持續調和。在實施 GitOps 實踐、自動化 Kubernetes 部署或設定宣告式基礎設施管理時使用。

gitops-workflow 是什麼?

這個技能旨在協助開發者和 AI 代理實作基於 GitOps 的工作流程,特別針對 Kubernetes 環境。它整合了 ArgoCD 和 Flux 這兩大主流 GitOps 工具,支援自動化、宣告式部署與持續調和(Continuous Reconciliation)。適合用於建立 CI/CD 管道、設定基礎設施即程式碼(Infrastructure as Code)、以及實現 Kubernetes 叢集的版本控制與自動化同步。該技能涵蓋了從初始安裝、配置到進階策略的完整指引,並強調安全性與可觀測性。支援的平台包含 Git 儲存庫和 Kubernetes 叢集,其運作原理是透過監控 Git 儲存庫的變更,自動將實際狀態與期望狀態同步。

相容平台~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/wshobson/agents/tree/main/skills/gitops-workflow

Installed? Explore more 生產力與協作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →

在你喜歡的 AI 中提問

開啟一個已預先載入此 Agent Skill 的新對話。

說明文件

gitops-workflow 是做什麼的?

使用 ArgoCD 和 Flux 實現 GitOps 工作流程,用於自動化、宣告式 Kubernetes 部署與持續調和。在實施 GitOps 實踐、自動化 Kubernetes 部署或設定宣告式基礎設施管理時使用。

概述

本指南提供使用 ArgoCD 和 Flux 設置 GitOps 工作流程的逐步說明,以實現 Kubernetes 叢集中的自動化部署與持續調和。

先決條件

  • 有效的 Kubernetes 叢集(1.19 或更新版本)
  • kubectl 配置為與您的叢集通訊
  • Git 儲存庫(GitHub、GitLab 或 Bitbucket)
  • 對 Kubernetes 資源的基本了解

安裝 ArgoCD

  1. 建立 argocd 命名空間:

    kubectl create namespace argocd
    
  2. 安裝 ArgoCD:

    kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
    
  3. 存取 ArgoCD API 伺服器:

    kubectl port-forward svc/argocd-server -n argocd 8080:443
    

安裝 Flux

  1. 使用 flux CLI 安裝 Flux:

    flux install
    
  2. 驗證安裝:

    flux check --pre
    

使用 ArgoCD 配置應用程式

  1. 建立一個指向您的 Git 儲存庫的應用程式:

    argocd app create my-app --repo https://github.com/your-org/your-repo.git --path apps/production --dest-server https://kubernetes.default.svc --dest-namespace production
    
  2. 同步應用程式:

    argocd app sync my-app
    

使用 Flux 配置應用程式

  1. 建立一個 GitRepository 資源:

    apiVersion: source.toolkit.fluxcd.io/v1beta2
    kind: GitRepository
    metadata:
      name: my-app
      namespace: flux-system
    spec:
      interval: 1m
      url: https://github.com/your-org/your-repo.git
      ref:
        branch: main
    
  2. 建立一個 Kustomization 資源:

    apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
    kind: Kustomization
    metadata:
      name: my-app
      namespace: flux-system
    spec:
      interval: 10m
      sourceRef:
        kind: GitRepository
        name: my-app
      path: ./apps/production
      prune: true
    

最佳實踐

  • 使用私有 Git 儲存庫並配置 SSH 金鑰或令牌以進行安全存取。
  • 為每個環境(開發、測試、生產)實施不同的分支。
  • 使用 Helm 或 Kustomize 進行配置管理。
  • 監控 ArgoCD 和 Flux 狀態以確保正常運作。
  • 設定 Webhook 以實現自動觸發。

疑難排解

  • 同步問題:檢查 argocd app get my-app 或 flux reconcile kustomization my-app 的輸出。
  • 權限錯誤:驗證 Git 存取憑證。
  • 資源衝突:確保在 ArgoCD 和 Flux 中沒有重疊的資源。

其他資源

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

wshobson/accessibility-compliance

Implement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, and assistive technology support. Use when auditing accessibility, implementing ARIA patterns, building for screen readers, or ensuring inclusive user experiences.

wshobson/airflow-dag-patterns

Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.

wshobson/angular-migration

Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning framework migrations, or modernizing legacy Angular code.

wshobson/anti-reversing-techniques

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques, when implementing anti-debugging protections for CTF challenges, when reverse engineering packed binaries, or when building security research tools that need to detect virtualized environments.

wshobson/api-design-principles

Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers. Use when designing new APIs, reviewing API specifications, or establishing API design standards.

wshobson/architecture-decision-records

Write and maintain Architecture Decision Records (ADRs) following best practices for technical decision documentation. Use when documenting significant technical decisions, reviewing past architectural choices, or establishing decision processes.

wshobson/architecture-patterns

Implement proven backend architecture patterns including Clean Architecture, Hexagonal Architecture, and Domain-Driven Design. Use this skill when designing clean architecture for a new microservice, when refactoring a monolith to use bounded contexts, when implementing hexagonal or onion architecture patterns, or when debugging dependency cycles between application layers.

wshobson/async-python-patterns

Master Python asyncio, concurrent programming, and async/await patterns for high-performance applications. Use when building async APIs, concurrent systems, or I/O-bound applications requiring non-blocking operations.

wshobson/attack-tree-construction

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

wshobson/auth-implementation-patterns

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.

wshobson/avoid-ai-writing

Audit and rewrite prose so it stops reading as machine-generated. Use this skill when asked to remove AI-isms, clean up AI writing, edit a draft for AI tells, audit a README, changelog, release note, PR description, or blog post for machine-sounding prose, or make text sound less like AI. Supports a detect-only mode, a rewrite mode, and an edit-in-place mode, with optional voice and context profiles.

wshobson/backtesting-frameworks

Build robust backtesting systems for trading strategies with proper handling of look-ahead bias, survivorship bias, and transaction costs. Use when developing trading algorithms, validating strategies, or building backtesting infrastructure.

wshobson/bash-defensive-patterns

Master defensive Bash programming techniques for production-grade scripts. Use when writing robust shell scripts, CI/CD pipelines, or system utilities requiring fault tolerance and safety.

wshobson/bats-testing-patterns

Master Bash Automated Testing System (Bats) for comprehensive shell script testing. Use when writing tests for shell scripts, CI/CD pipelines, or requiring test-driven development of shell utilities.

wshobson/bazel-build-optimization

Optimize Bazel builds for large-scale monorepos. Use when configuring Bazel, implementing remote execution, or optimizing build performance for enterprise codebases.

wshobson/before-you-build

Pre-build product and feature risk review for founders, product managers, and AI-assisted builders. Use this skill when the user is about to build a landing page, MVP, SaaS product, internal tool, agent workflow, or major feature and needs to check demand, positioning, monetization, retention, trust, distribution, and adoption risk before implementation starts.

wshobson/billing-automation

Build automated billing systems for recurring payments, invoicing, subscription lifecycle, and dunning management. Use when implementing subscription billing, automating invoicing, or managing recurring payment systems.

wshobson/binary-analysis-patterns

Master binary analysis patterns including disassembly, decompilation, control flow analysis, and code pattern recognition. Use when analyzing executables, understanding compiled code, or performing static analysis on binaries.

wshobson/block-no-verify-hook

Configure a PreToolUse hook to prevent AI agents from skipping git pre-commit hooks with --no-verify and other bypass flags. Use when setting up Claude Code projects that enforce commit quality gates.

wshobson/brand-landingpage

Brand-first landing page designer — runs a brand-identity interview (colors, typography, shape language), then generates and iterates on a polished landing page via Stitch with deployment-ready HTML. Use when the user asks to create, design, or build a landing page, homepage, or marketing page and has no established visual direction. Skip when they have a design mockup, need a dashboard or app UI, are working at component level, building a multi-page app, or restyling with known design tokens — use frontend-design instead.

相關技能