confighub-skills

Explain and prepare worker setup. OCI Release delivery uses a server-worker entity (no process); external workers host custom functions and support read-only diagnosis. Use for "do I need a worker?", "host custom functions", or crashing workers. Direct ConfigHub-provider delivery is historical and unsupported in the reviewed current profile.

Verify a published ConfigHub Space Release, then prove controller and cluster convergence read-only. Use after release-publish or for "did it deploy?", "is it live?", "did Argo pick it up?", and release close-out.

Prepare or diagnose Trigger policy, ApplyGates, ApplyWarnings, and native revision approval via platform Space + Filter + TriggerFilterID. Use for "block bad config", "enforce/warn", "require approval", or "why is this Unit blocked?". Not one-off validation (cub-mutate).

Prepare OCI Target, Space.ReleaseTargetID, and matching Unit.TargetID membership. Use for "set up a target", "publish this Space to OCI", "attach Units", or "do I need a worker?". Direct ConfigHub-provider delivery is historical and unsupported in the reviewed current profile.

Create or refresh a skill-examples Space with representative Kubernetes Units for exercising the other skills. Use for "set up the skill-examples space", "bootstrap the examples", "give me a Unit to tinker with", or "reset the examples". Not for real application Spaces (use confighub-core).

Roll back by moving one or more Unit heads to bound prior revisions via cub unit update --restore, then hand off to release-publish. Use for "roll back this change", "revert the last release", "undo the ChangeSet", or "restore to the last applied revision". Not for a clearer one-field forward fix.

Prepare Variant or ChangeSet promotion and reconcile what a merge withheld. Use for "promote to staging", "roll forward to prod", "which Units are behind?", partial promotion, "why was my override overwritten?", or outstanding merge conflicts. Covers variant upload/create/promote and protection. Not rollback (rollback-revision).

Author a specific Kubernetes resource type as literal YAML in a ConfigHub Unit with best-practice defaults. Use for "create a StatefulSet", "add an Ingress", "set up NetworkPolicy", "I need a CronJob", "add RBAC for my app", "set up autoscaling", "add a PDB". Not for AppConfig-based ConfigMaps (use app-config).

ConfigHub incident orchestration: bind the exact Release/runtime failure, choose rollback vs fix-forward, account for emergency cluster edits, and close with Release/controller/runtime proof. Use for outages, prod crashing, mitigation, and cleanup. Not planned releases.

Find, count, inspect, or audit Kubernetes config stored in ConfigHub — cub k8s get and cub resource list to browse resources, cub unit list for Units. Use for fleet sweeps and single-workload lookups; route "currently running/deployed" claims through verify-apply, because ConfigHub metadata alone is not runtime proof.

Change data inside an existing ConfigHub Unit, preferring a function over a hand-edit, and write it so it still works in every variant. Use for "update the image", "bump the replicas", "set the annotation", "apply defaults", a bulk edit, or "why did that change miss some variants?". Not for creating a Unit (kubernetes-resources).

Deprecated 0.4.x compatibility identity for prior cub-apply/apply/deploy requests. Grants no tools, performs no operation, and routes the unchanged intent to release-publish with its whole-Space scope and safety checks.

ConfigHub orientation and routing: vocabulary, the component model (Component / Variant / base / deployment), config-as-data, one resource per Unit, protection and merges, and delete/destroy gates. Use for tours, entity questions, topology, granularity, or broad help. Route concrete tasks to the dedicated skill.

Turn .env, properties, YAML, JSON, TOML, INI, or text into an AppConfig Unit and rendered ConfigMap via Upsert + render-configmap, or hash a hand-authored mutable ConfigMap with set-hash so linked workloads roll. Use for "use my .env", configMapGenerator-like config, envFrom, and a Deployment that never restarts on a ConfigMap change.