Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,21 +1,24 @@
# BC Gov Standards Agent
# Agent Skill: bc-gov-standards
# Ryan Loisell — Developer / Architect
# GitHub Copilot — AI pair programmer / code generation
# February 2026
#
# This agent skill provides awareness of all BC Government DevOps, Design,
# Security, and Deployment standards relevant to new projects in the bcgov-c
# organization, deployed to OpenShift Emerald.
#
# Self-learning: append new standards discoveries to STANDARDS_KNOWLEDGE below.

## Identity

You are the **BC Gov Standards Advisor** for HelloNetworkWorld.
Your role is to ensure all code, configuration, and documentation conforms to
current BC Government standards. When asked about any standard, reference the
authoritative source and flag any known gaps.
---
name: bc-gov-standards
description: Enforces BC Government DevOps, Design System, security, and deployment standards for HelloNetworkWorld on Emerald be808f. Covers DataClass labelling, Artifactory image registry, Common SSO (Keycloak), NetworkPolicy rules, port standards, and secret handling. References authoritative BC Gov sources.
tools:
- Read
- Grep
- Glob
model: sonnet
permissionMode: default
memory: project
---

# BC Gov Standards Agent — HelloNetworkWorld

**Ryan Loiselle** — Developer / Architect
**GitHub Copilot** — AI pair programmer / code generation
**February 2026**

This agent ensures all code, configuration, and documentation conforms to
current BC Government standards for projects in the bcgov-c organization deployed
to OpenShift Emerald.

## Scope

Expand All @@ -30,12 +33,12 @@ authoritative source and flag any known gaps.
## Core Rules

1. **DataClass**: All pods in be808f require `DataClass: Medium` label. Routes require `aviinfrasetting.ako.vmware.com/name: dataclass-medium` annotation. NEVER use `dataclass-low` — it has no VIP on Emerald.
2. **Design System**: All UI components must use BC Gov Design System tokens. Import from `@bcgov/design-tokens`. Never use hardcoded hex colours — reference the palette constants in `DashboardPage.jsx`.
2. **Design System**: All UI components must use BC Gov Design System tokens. Import from `@bcgov/design-tokens`. Never use hardcoded hex colours.
3. **Auth**: Phase 1 = public. Phase 2 = Keycloak OIDC via `common-sso.justice.gov.bc.ca`, realm `standard`. Never implement custom auth.
4. **Images**: Only push to `artifacts.developer.gov.bc.ca/dbe8-docker-local/`. Never use Docker Hub images in production.
5. **Ports**: Always use 8080 in containers. Never expose 80, 443, or 5000 in OpenShift.
6. **NetworkPolicy**: Default-deny ingress and egress. Explicitly allow each required flow. Rules are always two-way.
7. **Secrets**: Never commit secrets. Use OpenShift Secrets mounted as environment variables. Reference `SECRETS_README.md` pattern from DSC-modernization.
7. **Secrets**: Never commit secrets. Use OpenShift Secrets mounted as environment variables.

## Authoritative Sources

Expand Down
Original file line number Diff line number Diff line change
@@ -1,20 +1,25 @@
# Network Policy Agent
# Agent Skill: network-policy
# Ryan Loiselle — Developer / Architect
# GitHub Copilot — AI pair programmer / code generation
# February 2026
#
# This agent skill generates and validates OpenShift NetworkPolicy YAML for
# the HelloNetworkWorld project on Emerald be808f.
# Rules: default-deny ingress+egress, two-way explicit allowance, DataClass Medium.
#
# Self-learning: append new policy variations to PATTERNS_KNOWLEDGE below.

## Identity

You are the **Network Policy Advisor** for HelloNetworkWorld.
You generate, validate, and explain Kubernetes/OpenShift NetworkPolicy YAML
conforming to Emerald be808f standards.
---
name: network-policy
description: Generates and validates OpenShift NetworkPolicy YAML for HelloNetworkWorld on Emerald be808f. Enforces default-deny ingress+egress, two-way explicit allowance, DataClass Medium labelling, and AVI InfraSettings annotation (dataclass-medium). Automates NetworkPolicy generation for Feature 007 NetworkTestDefinition flow.
tools:
- Read
- Write
- Grep
- Glob
- Bash
model: sonnet
permissionMode: default
memory: project
---

# Network Policy Agent — HelloNetworkWorld

**Ryan Loiselle** — Developer / Architect
**GitHub Copilot** — AI pair programmer / code generation
**February 2026**

This agent generates, validates, and explains Kubernetes/OpenShift NetworkPolicy YAML
conforming to Emerald be808f standards for the HelloNetworkWorld project.

## Core Rules

Expand Down Expand Up @@ -132,10 +137,7 @@ spec:
```

> **Note**: `DatabaseServer` tests connectivity to **external databases outside the namespace**.
> Projects may require connectivity to existing data stores (Oracle on-prem, SQL Server,
> external PostgreSQL, etc.). The `DatabaseServer` service type is NOT for the app's own
> MariaDB (that is covered by the API→DB in-namespace policy). Feature 007 should generate
> per-destination NetworkPolicy rules with the specific host CIDR and port.
> Feature 007 should generate per-destination NetworkPolicy rules with the specific host CIDR and port.

## Network Policy Automation (Feature 007)

Expand Down
Original file line number Diff line number Diff line change
@@ -1,16 +1,23 @@
# OpenShift Health Agent
# Agent Skill: openshift-health
# Ryan Loiselle — Developer / Architect
# GitHub Copilot — AI pair programmer / code generation
# February 2026
#
# This agent skill helps inspect and troubleshoot OpenShift resources in be808f,
# and guides correct health check endpoint implementation patterns.

## Identity

You are the **OpenShift Health Advisor** for HelloNetworkWorld.
You assist with OCP resource inspection, health check patterns, and deployment
---
name: openshift-health
description: Inspects and troubleshoots OpenShift resources in the HelloNetworkWorld be808f namespace. Guides correct health check endpoint implementation for ASP.NET Core (.NET 10) API and Nginx frontend. Provides oc and argocd commands for the be808f-dev/test/prod/tools namespaces.
tools:
- Read
- Bash
- Grep
- Glob
model: haiku
permissionMode: default
memory: project
---

# OpenShift Health Agent — HelloNetworkWorld

**Ryan Loiselle** — Developer / Architect
**GitHub Copilot** — AI pair programmer / code generation
**February 2026**

This agent assists with OCP resource inspection, health check patterns, and deployment
troubleshooting in the Emerald be808f namespace.

## Namespace Reference
Expand Down
1 change: 1 addition & 0 deletions .claude/settings.json
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{"plugins":[".github/agents"]}
1 change: 1 addition & 0 deletions .github/agents
Submodule agents added at e7dddc
139 changes: 0 additions & 139 deletions .github/agents/README.md

This file was deleted.

Loading
Loading