infra-ops
Cloud, DevOps, SRE and platform engineering bench driven by the infra engine: discover, graph, plan, run through the broker, verify and recover. Entry point: infra-orchestrator.
Reference
| Field | Value |
|---|---|
| Name | infra-ops |
| Version | 1.0.0 |
| Category | Devops |
| Licence | Not declared |
| Source | catalog/navin/builtin_plugins/infra-ops/plugin.json |
| README | catalog/navin/builtin_plugins/infra-ops/README.md |
| Digest | sha256:5b3d30a30043c40c8127ff9f3e45cefa96355ffac9f0db05995d78dfcbfc2b17 |
| plugin.json | agents, category, commands, description, name, skills, steps, version |
Commands
The plugin declares no command.
Agents
The plugin declares no agent.
Skills
| Name | Description |
|---|---|
| infra-orchestrator | Master playbook for any Cloud, DevOps, SRE, platform, security or observability mission stated in natural language (build a platform, migrate, audit, fix, scale). |
| ops-supervisor | Orchestrate end-to-end DevOps/SysOps work - plan the ops chain, delegate to specialized agents (Kubernetes, cloud, GitOps, SRE, sysops), enforce approvals, and verify outcomes. |
| aws-architect | Design and build production AWS architectures - HA multi-AZ VPC, EKS, RDS PostgreSQL, ElastiCache Redis, ALB, Route 53, ACM, S3, backups - with Well-Architected checks and IaC (Terraform, CDK, CloudFormation, Cloud Control). |
| cloud-aws | Operate AWS with the aws CLI - EC2, EKS, S3, IAM, VPC, RDS, Lambda, costs. Read-first; mutations gated by approval. |
| cloud-gcp | Operate Google Cloud with gcloud - GCE, GKE, storage, networking, IAM, logs, costs. Read-first; mutations gated by approval. |
| cloud-azure | Operate Microsoft Azure with the az CLI - VMs, AKS, storage, networking, ARM resources, costs. Read-first; mutations gated by approval. |
| kubernetes-platform | Build and operate Kubernetes platforms - EKS, GKE, AKS, OpenShift, K3s, RKE2, MicroK8s - with ingress, cert-manager, external-dns, autoscaling, storage classes, CRDs/operators and version upgrades. |
| kubernetes-operator | Inspect pods, logs, services, ingress, and deployments with kubectl. |
| openshift-operator | Operate Red Hat OpenShift with oc - projects, routes, SecurityContextConstraints, builds and image streams, operators through OLM, cluster operators and upgrades with oc adm. |
| helm-operator | Inspect, template, install, and upgrade Helm releases safely; author and lint charts. |
| docker-operator | Build, run, inspect, and diagnose containers safely - Docker and Compose, Podman, containerd (nerdctl, crictl). |
| terraform-agent | Author and validate Terraform / OpenTofu IaC with plan-before-apply discipline. |
| config-management | Manage configuration as code - Ansible playbooks and roles, SSH fleets, cloud-init, Helm values, Kustomize overlays - always check/diff before apply. |
| network-engineer | Design and troubleshoot networks - cloud VPC/VNet, subnets, routing, VPN, NAT, DNS, firewalls and security groups, load balancers - and debug hosts with ip, ss, nft, dig, tcpdump, openssl. |
| database-reliability | Run databases reliably - PostgreSQL, MySQL, Redis, MongoDB, Kafka, Amazon RDS/Aurora, Cloud SQL, Azure Database - HA and failover, backups, PITR, restore drills, replication, performance and safe schema migrations. |
| storage-operator | Operate object, block and file storage - S3, GCS, Azure Blob, MinIO, EBS, EFS, Persistent Volumes, Ceph, NFS - encryption, lifecycle, versioning, replication, quotas and backups. |
| private-cloud-operator | Operate private clouds and virtualization - OpenStack (openstack CLI), VMware vSphere (govc), Proxmox VE (pvesh, qm, pct) - VMs, templates, networks, storage, snapshots and capacity. |
| platform-engineer | Build golden paths for developers - CI/CD (GitHub Actions, GitLab CI, Jenkins, Forgejo Actions), GitOps (Argo CD, Flux), environments, secrets management and an observability baseline - so a team ships a service from template to production safely. |
| cicd-agent | Work with GitHub Actions, GitLab CI, and deployment pipelines - inspect runs, fix workflows, and gate releases. |
| gitops-argocd | Run GitOps deployments with Argo CD and Flux - inspect applications, diff desired vs live state, deploy through git commits and PRs, sync and verify rollouts. |
| cloud-security-posture | Audit and harden cloud and Kubernetes security posture - IAM, RBAC, KMS, Vault, cert-manager, OPA/Gatekeeper, Kyverno, Trivy, Falco, CIS benchmarks. Read-only audit first, then gated remediation. |
| iac-security-auditor | Audit infrastructure-as-code and runtime config - Dockerfiles, Kubernetes manifests, Terraform, CI/CD pipelines, and cloud settings for misconfigurations and hardening gaps. |
| finops-analyst | Analyze and reduce cloud spend - inventory, cost breakdown per provider/service/tag, rightsizing, idle and orphaned resources, budgets and alerts, savings plans and reservations, cleanup. |
| observability-agent | Query metrics, logs, and traces (Prometheus, Grafana, Loki, Tempo, Sentry, OpenTelemetry, CloudWatch) to diagnose incidents. |
| sre-incident-responder | Triage incidents like an SRE - correlate logs, metrics, events and traces, find the root cause, propose remediation, and write the postmortem. Uses k8sgpt when available. |
| resilience-tester | Test that a system holds - network checks, API tests, performance and load (k6, hey, vegeta), security scans, availability probes, disaster recovery drills and chaos experiments (pod/node/AZ failure). |
| sysops-administrator | Administer Linux, macOS, and Windows servers and VMs - systemd services, Nginx, Traefik, HAProxy, IIS, disks, memory, processes, network, certificates, backups, patches. Whitelisted read commands; dangerous ops need approval. |
Hooks, MCP servers and settings
plugin.json declares no hook, no MCP server and no setting: the plugin is made of the components above only.
Workflow
| Step | Use |
|---|---|
| decompose and run a multi-domain infra mission | skill:infra-orchestrator |
| design an AWS platform | skill:aws-architect |
| build or upgrade a Kubernetes cluster | skill:kubernetes-platform |
| debug Kubernetes workloads | skill:kubernetes-operator |
| change infrastructure as code | skill:terraform-agent |
| network, DNS and TLS issues | skill:network-engineer |
| databases: HA, backups, restore drills | skill:database-reliability |
| security posture audit and remediation | skill:cloud-security-posture |
| cost analysis and savings | skill:finops-analyst |
| golden paths, CI/CD and GitOps | skill:platform-engineer |
| incident response | skill:sre-incident-responder |
| load, chaos and DR drills | skill:resilience-tester |
Enable it in a project
Activating infra-ops creates 28 activations in the project: the plugin itself and 27 skills. Removing the plugin activation removes them all.
curl -X POST <control-plane-url>/v1/projects/<project>/navin-library/activations \
-H "Authorization: Bearer <token>" -H "Content-Type: application/json" \
-d '{"kind": "plugin", "name": "infra-ops"}'
<project>: id or slug of the project. <token>: API key with the editor role on the project.
client.navin_library.activate("<project>", "plugin", "infra-ops")