provisioning-cluster-for-production
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches CockroachDB binaries and Kubernetes manifests from the official vendor domains (binaries.cockroachdb.com) and the vendor's GitHub organization (cockroachdb). These are legitimate resources required for the installation process.- [CREDENTIALS_UNSAFE]: Includes examples using environment variables for sensitive tokens (e.g., $COCKROACH_API_KEY) and provides specific guidance on secure certificate generation and CA key storage, following established security best practices.- [COMMAND_EXECUTION]: Employs standard system administration commands (tar, cp, systemctl) and the official CockroachDB CLI for cluster initialization and configuration. All commands are appropriate for the deployment tasks described in the skill.
Audit Metadata