giga/cloud-skills
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add GIGA Chapters 1-4 learning and operator skill system #2

Merged
karsten merged 2 commits from skills/giga-chapters-1-4-learning-system into main 2026-09-10 18:03:03 +00:00
Conversation 0 Commits 2 Files changed 140 +33756 -285
karsten commented 2026-09-09 07:26:02 +00:00
Owner
Copy link

Summary

  • add giga-cloud-learning-guide as the cross-chapter coordinator for learning, review and bounded operation
  • provide nine learner-facing skills covering GIGA Cloud Chapters 1 to 4
  • make Chapter 3 operational through a portable OpenStack tenant-resource kit
  • make Chapter 4 operational through a portable CAPI/CAPO cluster-lifecycle kit
  • retain ask, learn, work, challenge and review, with work supporting assess, prepare, provision, validate, maintain and cleanup

Practical operator paths

Chapter 3

iaas-foundation-practitioner now carries the complete reviewed Chapter 3 lab from content commit 65055f17aaf13cf1944e2f4c4e1180dd3b94478a.

It supports:

  • OpenStack project discovery and explicit environment contracts
  • Horizon, OpenStackClient and OpenTofu paths
  • Nova, Neutron and Cinder identity-chain validation
  • format, preflight, provider-schema and cleanup checks
  • owner-aware retention and absence proof

The scope is tenant resources inside an existing OpenStack project. It does not install or operate an OpenStack control plane.

Chapter 4

kubernetes-cluster-lifecycle-practitioner now carries the complete reviewed Chapter 4 lab from content commit b56cad92b74b4335de99879415d437b97ab677cd, which is also present in the current content main tree.

It supports:

  • seed and management-cluster establishment
  • CAPI/CAPO provider setup and workload-cluster rollout
  • per-cluster cert-manager and private Contour/Envoy ingress
  • a bounded Local Path Provisioner storage smoke baseline
  • scaling, Kubernetes/image upgrades and rollout observation
  • bounded Argo CD cluster and workload reconciliation
  • public-edge to private workload-Envoy to Service to Pods path checks
  • owner-aware cleanup with stable OpenStack identifiers

The kit remains a production-oriented learning and test path. Highly available management, production edge/TLS, production storage acceptance, backup, recovery and broad multi-team platform operation remain Chapter 5 or environment-specific work.

Safety and portability

  • operator kits are copied to protected working directories before use
  • examples are rejected for live use until environment contracts are completed
  • live mutations require exact targets, protected credentials, reviewed plan or diff, explicit operation approval, bounded waits and cleanup ownership
  • credentials, kubeconfigs, OpenTofu state, plans and live evidence remain outside the installed skill and repository
  • each kit has an immutable source record and final-file checksum manifest
  • redistributed cert-manager, Contour and Local Path Provisioner manifests carry a THIRD_PARTY_NOTICES.md record
  • direct raw-URL installation is not claimed to include recursive operator assets; checkout or plugin installation is required for the practical kits

Source state

Package version 0.4.0 records the current non-linear content state:

  • Chapter 1 remains byte-identical to current content main
  • Chapter 2 retains the reviewed 1ad5168… pin and explicitly records that current main differs
  • Chapter 3 retains the reviewed branch-only lab package at 65055f1…
  • Chapter 4 is updated to b56cad9…, whose Chapter 4 tree matches current content main

Verification

VALIDATION PASSED: 9 skills, 4 chapter contracts, 2 plugin manifests
LEARNING PATH TESTS PASSED: 8 routes, 4 chapter contracts, 4 handoffs
OPERATOR KIT TESTS PASSED: 2 kits, 6 operations, checksums and offline validation
PYTHON COMPILE PASSED
CHAPTER 4 SOURCE PARITY PASSED: 78 source files, 78 packaged files
ISOLATED HERMES DISCOVERY PASSED: guide plus Chapter 3 and Chapter 4 practitioners
CHAPTER 3 INSTALLED OPERATOR KIT PASSED: 11 tests
CHAPTER 4 INSTALLED OPERATOR KIT PASSED: 30 tests, 9 rendered manifests
OpenTofu PROVIDER SCHEMA VALIDATION PASSED: Chapter 3 and Chapter 4
NEGATIVE CREDENTIAL TEST PASSED

Also checked:

  • git diff --cached --check
  • ShellCheck for all 29 executable operator shell helpers
  • no private keys, credential assignments, machine-local secret paths or added eval
  • no operator-kit symlinks, binaries or path escapes
  • no generated .terraform or Python cache directories in the repository
## Summary - add `giga-cloud-learning-guide` as the cross-chapter coordinator for learning, review and bounded operation - provide nine learner-facing skills covering GIGA Cloud Chapters 1 to 4 - make Chapter 3 operational through a portable OpenStack tenant-resource kit - make Chapter 4 operational through a portable CAPI/CAPO cluster-lifecycle kit - retain `ask`, `learn`, `work`, `challenge` and `review`, with `work` supporting `assess`, `prepare`, `provision`, `validate`, `maintain` and `cleanup` ## Practical operator paths ### Chapter 3 `iaas-foundation-practitioner` now carries the complete reviewed Chapter 3 lab from content commit `65055f17aaf13cf1944e2f4c4e1180dd3b94478a`. It supports: - OpenStack project discovery and explicit environment contracts - Horizon, OpenStackClient and OpenTofu paths - Nova, Neutron and Cinder identity-chain validation - format, preflight, provider-schema and cleanup checks - owner-aware retention and absence proof The scope is tenant resources inside an existing OpenStack project. It does not install or operate an OpenStack control plane. ### Chapter 4 `kubernetes-cluster-lifecycle-practitioner` now carries the complete reviewed Chapter 4 lab from content commit `b56cad92b74b4335de99879415d437b97ab677cd`, which is also present in the current content `main` tree. It supports: - seed and management-cluster establishment - CAPI/CAPO provider setup and workload-cluster rollout - per-cluster cert-manager and private Contour/Envoy ingress - a bounded Local Path Provisioner storage smoke baseline - scaling, Kubernetes/image upgrades and rollout observation - bounded Argo CD cluster and workload reconciliation - public-edge to private workload-Envoy to Service to Pods path checks - owner-aware cleanup with stable OpenStack identifiers The kit remains a production-oriented learning and test path. Highly available management, production edge/TLS, production storage acceptance, backup, recovery and broad multi-team platform operation remain Chapter 5 or environment-specific work. ## Safety and portability - operator kits are copied to protected working directories before use - examples are rejected for live use until environment contracts are completed - live mutations require exact targets, protected credentials, reviewed plan or diff, explicit operation approval, bounded waits and cleanup ownership - credentials, kubeconfigs, OpenTofu state, plans and live evidence remain outside the installed skill and repository - each kit has an immutable source record and final-file checksum manifest - redistributed cert-manager, Contour and Local Path Provisioner manifests carry a `THIRD_PARTY_NOTICES.md` record - direct raw-URL installation is not claimed to include recursive operator assets; checkout or plugin installation is required for the practical kits ## Source state Package version `0.4.0` records the current non-linear content state: - Chapter 1 remains byte-identical to current content `main` - Chapter 2 retains the reviewed `1ad5168…` pin and explicitly records that current `main` differs - Chapter 3 retains the reviewed branch-only lab package at `65055f1…` - Chapter 4 is updated to `b56cad9…`, whose Chapter 4 tree matches current content `main` ## Verification ```text VALIDATION PASSED: 9 skills, 4 chapter contracts, 2 plugin manifests LEARNING PATH TESTS PASSED: 8 routes, 4 chapter contracts, 4 handoffs OPERATOR KIT TESTS PASSED: 2 kits, 6 operations, checksums and offline validation PYTHON COMPILE PASSED CHAPTER 4 SOURCE PARITY PASSED: 78 source files, 78 packaged files ISOLATED HERMES DISCOVERY PASSED: guide plus Chapter 3 and Chapter 4 practitioners CHAPTER 3 INSTALLED OPERATOR KIT PASSED: 11 tests CHAPTER 4 INSTALLED OPERATOR KIT PASSED: 30 tests, 9 rendered manifests OpenTofu PROVIDER SCHEMA VALIDATION PASSED: Chapter 3 and Chapter 4 NEGATIVE CREDENTIAL TEST PASSED ``` Also checked: - `git diff --cached --check` - ShellCheck for all 29 executable operator shell helpers - no private keys, credential assignments, machine-local secret paths or added `eval` - no operator-kit symlinks, binaries or path escapes - no generated `.terraform` or Python cache directories in the repository
karsten changed title from feat: add GIGA Chapters 1-4 learning skill system to feat: add GIGA Chapters 1-4 learning and operator skill system 2026-09-10 17:36:57 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
giga/cloud-skills!2
No description provided.