external-urls

Name: external-urls
Author: julianobarbosa

github.com/julianobarbosaCloud & DevOps1491 installsUpdated 2d ago

About external-urls

External URLs is a quick-reference skill for teams working with Hypera's multi-cluster GitOps infrastructure. It organizes service, cluster API, repository, and SMTP endpoints by environment, and includes health-check commands and troubleshooting guidance.

Key features

01Look up service URLs by environment
02Reference cluster API endpoints
03List Git and Helm repository URLs
04Check URL and cluster connectivity
05Consult DNS and certificate troubleshooting

Use cases

01Finding an environment's service endpoint
02Checking cluster connectivity when VPN is required
03Validating application URL health
04Troubleshooting DNS or certificate problems

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/julianobarbosa/claude-code-skills --skill external-urls

After installing, type/external-urlsin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/

urls-detail.md

scripts/

check-urls.sh

list-urls.sh

Details

From the project README

External URLs Skill

Quick reference for all external URLs and endpoints in Hypera's multi-cluster GitOps infrastructure.

Quick URL Lookup

Application URLs by Environment

Hub (Shared Services)

Service	URL	Purpose
ArgoCD	`https://argocd.cafehyna.com.br`	GitOps UI & API
Sentry	`https://sentry-hub.cafehyna.hypera.com.br`	Error tracking
SonarQube	`https://sonarqube-hub.cafehyna.com.br`	Code quality
phpMyAdmin	`https://dba.cafehyna.com.br`	MySQL admin
Adminer	`https://dba2.cafehyna.com.br`	Multi-DB admin
Mimir	`https://mimir-hub.cafehyna.com.br`	Metrics storage

Development

Service	URL	Purpose
Sentry	`https://sentry.adocyl.com.br`	Error tracking
SonarQube	`https://sonarqube.hypera.com.br`	Code quality
Grafana OnCall	`https://oncall-dev.cafehyna.com`	On-call management
phpMyAdmin	`https://dev-dba.cafehyna.com.br`	MySQL admin
RabbitMQ	`https://rabbitmq-painelclientes-dev.cafehyna.com.br`	Message queue

Production

Service	URL	Purpose
Sentry	`https://sentry.cafehyna.hypera.com.br`	Error tracking

Cluster API Endpoints

All clusters use Azure Private Link (VPN required):

Cluster	API Server	Region
cafehyna-hub	`https://aks-cafehyna-default-b2ie56p8.5bbf1042-d320-432c-bd11-cea99f009c29.privatelink.eastus.azmk8s.io:443`	East US
cafehyna-dev	`https://aks-cafehyna-dev-hlg-q3oga63c.30041054-9b14-4852-9bd5-114d2fac4590.privatelink.eastus.azmk8s.io:443`	East US
cafehyna-prd	`https://aks-cafehyna-prd-hsr83z2k.c7d864af-cbd7-481b-866b-8559e0d1c1ea.privatelink.eastus.azmk8s.io:443`	East US
painelclientes-dev	`https://akspainelclientedev-dns-vjs3nd48.hcp.eastus2.azmk8s.io:443`	East US 2
painelclientes-prd	`https://akspainelclientesprd-dns-kezy4skd.hcp.eastus2.azmk8s.io:443`	East US 2
loyalty-dev	`https://loyaltyaks-qas-dns-d330cafe.hcp.eastus.azmk8s.io:443`	East US

Repository URLs

Git Repositories (Azure DevOps)

Repository	URL
infra-team	`https://[email protected]/hypera/Cafehyna%20-%20Desenvolvimento%20Web/_git/infra-team`
argo-cd-helm-values	`https://[email protected]/hypera/Cafehyna%20-%20Desenvolvimento%20Web/_git/argo-cd-helm-values`
kubernetes-configuration	`https://[email protected]/hypera/Cafehyna%20-%20Desenvolvimento%20Web/_git/kubernetes-configuration`

Helm Repositories

Repository	URL	Charts
ingress-nginx	`https://kubernetes.github.io/ingress-nginx`	ingress-nginx
jetstack	`https://charts.jetstack.io`	cert-manager
bitnami	`https://charts.bitnami.com/bitnami`	external-dns, phpmyadmin, rabbitmq
prometheus-community	`https://prometheus-community.github.io/helm-charts`	kube-prometheus-stack
robusta	`https://robusta-charts.storage.googleapis.com`	robusta
cetic	`https://cetic.github.io/helm-charts`	adminer
defectdojo	`https://raw.githubusercontent.com/DefectDojo/django-DefectDojo/helm-charts`	defectdojo

Domain Reference

Domain	Usage	Environment
`*.cafehyna.com.br`	Primary applications	All
`*.cafehyna.hypera.com.br`	Hypera-branded services	Hub/Prd
`*.adocyl.com.br`	Development services	Dev
`*.hypera.com.br`	Corporate services	All

Certificate & DNS

Certificate Issuer: Let's Encrypt
DNS Provider: Cloudflare
ClusterIssuers: letsencrypt-prod, letsencrypt-staging
Contact: [email protected]

SMTP Services

Service	Host	Environment
Office 365	`smtp.office365.com`	Hub
SendGrid	`smtp.sendgrid.net`	Production

Quick Commands

Check Application URL Health

# Check ArgoCD
curl -sI https://argocd.cafehyna.com.br | head -1

# Check all hub services
for url in argocd.cafehyna.com.br sentry-hub.cafehyna.hypera.com.br sonarqube-hub.cafehyna.com.br dba.cafehyna.com.br; do
  echo -n "$url: "; curl -sI "https://$url" -o /dev/null -w "%{http_code}\n" --connect-timeout 5 2>/dev/null || echo "FAILED"
done

Check Cluster Connectivity

# Test cluster API (requires VPN)
curl -sk https://aks-cafehyna-default-b2ie56p8.5bbf1042-d320-432c-bd11-cea99f009c29.privatelink.eastus.azmk8s.io:443/healthz

# Using kubectl
kubectl --kubeconfig ~/.kube/aks-rg-hypera-cafehyna-hub-config cluster-info

Check Helm Repository

# Add and update
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update ingress-nginx

# Search charts
helm search repo ingress-nginx

Configuration File Locations

URLs are defined in these configuration files:

Category	Path Pattern
Application Ingress	`argo-cd-helm-values/kube-addons/<service>/<cluster>/values.yaml`
Cluster Endpoints	`infra-team/argocd-clusters/<cluster>.yaml`
Git Repositories	`infra-team/argocd-repos/base/git-repositories/*.yaml`
Helm Repositories	`infra-team/argocd-repos/base/helm-repositories/*.yaml`

Troubleshooting

Issue	Resolution
Application URL not reachable	Check ingress-nginx pods, verify DNS in Cloudflare
Cluster API timeout	Verify VPN connection, check Azure AKS status
Certificate error	Verify cert-manager ClusterIssuer, check Let's Encrypt rate limits
DNS not resolving	Check external-dns logs, verify Cloudflare API token

Scripts

scripts/check-urls.sh - Health check all application URLs
scripts/list-urls.sh - List URLs by environment or category

Detailed Reference

For complete URL inventory with source file locations:

references/urls-detail.md - Complete URL reference
docs/external-urls-reference.md - Full documentation

Gotchas

Private Link API endpoints require VPN, not just kubeconfig: All privatelink.eastus.azmk8s.io URLs resolve only inside the corporate network. kubectl will hang for 30s then time out — not produce a clear DNS error — when VPN is dropped.
cafehyna.com.br and cafehyna.hypera.com.br are different zones: Records added to the wrong zone propagate fine and resolve fine in browsers, but cert-manager DNS-01 challenges fail because the ACME validator queries the apex zone's NS records. Verify the zone with dig NS <domain> before adding records.
adocyl.com.br is the dev-only domain — don't reuse for hub: Cross-environment hostname reuse breaks Let's Encrypt staging vs prod issuer scoping, and SonarQube/Sentry session cookies leak across envs if they share the apex.
Azure DevOps Git URLs need URL-encoded project names: Cafehyna%20-%20Desenvolvimento%20Web must keep the encoding — raw spaces break git clone with a cryptic 404. The Azure DevOps UI hides this; copy from the SSH tab or use the encoded form.
smtp.office365.com requires modern auth (OAuth2) since Oct 2022: Basic auth on port 587 is disabled tenant-wide. Apps still configured with username/password silently fail with 535 5.7.139. Use SendGrid or app passwords with MFA bypass.
East US vs East US 2 cluster mix breaks cross-region pod traffic: painelclientes (EUS2) and cafehyna (EUS) clusters can't share private DNS zones without explicit VNet peering — ingress hostnames resolve but pod-to-pod fails. Check the region column before assuming connectivity.

Comments

Markdown supported

Details

Author: julianobarbosa
Repository: julianobarbosa/claude-code-skills
Category: Cloud & DevOps
Installs: 91
GitHub stars: 14

Report

More skills

All skills

lark-apps

open.feishu.cn

732.0k

Develop and host Miaoda (Spark/Miaoda) apps: app creation, local full-stack development, cloud generation and iteration, creative design (UI mockups / interactive prototypes / wireframes / landing pages / dashboards / slide decks / visual exploration), integration of AI-related capabilities, Feishu platform capabilities, or other external capabilities; log/Trace/monitoring metric/PV/UV queries; environment variable management; app collaborators and collaboration permissions; app roles and members; and automation triggers (scheduled / record changes / Webhook / Feishu approvals). Use when users want to develop or create a system, tool, platform, or app; develop locally or in the cloud, modify, deploy, publish, launch, or get a shareable link; create a page or website with HTML and deploy it to Miaoda; design, create a mockup, prototype, wireframe, PPT, deck, or visual exploration; or mention Miaoda/Spark/Miaoda apps (links like `/app/app_xxx` or `/page/<token>`, runtime domains like *.aiforce.cloud), app databases, app file storage, open API Keys, visibility, app collaborators/developer permissions, app roles/role members, production logs, API request volume, error volume, latency, traffic, environment variables, or setting up automation tasks, scheduled triggers, or approval-triggered automation for Miaoda apps. Not for regular cloud drive file uploads (lark-drive), Feishu document editing (lark-doc), or native slide creation (lark-slides).

azure-prepare

github.com/microsoft

571.7k

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

wizard

github.com/mattpocock

571.5k

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

azure-ai

github.com/microsoft

571.2k

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.