cloudposse · Andriy Knysh (aknysh) · Aug 8, 2026 · Aug 5, 2026 · Aug 5, 2026 · Aug 5, 2026
@@ -180,7 +180,16 @@ jobs:
           - { os: "ubuntu-latest", target: linux }
           - { os: "windows-latest", target: windows }
           - { os: "macos-15", target: macos }
-    timeout-minutes: 75
+    # Linux is the tightest target: its timed steps alone (registry cache test 25m +
+    # coverage-enabled acceptance tests 60m + coverage upload 5m) already sum to 90m,
+    # before checkout, Go/Atmos setup, and toolchain installs. windows-latest and
+    # macos-15 sum to 85m (registry cache test 25m + acceptance tests 60m) for the
+    # same reason - a run that hit exactly 75.0 minutes was force-cancelled by the
+    # previous ceiling with every step, including the full go test suite, already
+    # completed successfully in the logs. Same variance documented on the
+    # "Acceptance tests" step's own timeout below; give the job-level ceiling real
+    # headroom above the step-budget sum, not just equal to it.
+    timeout-minutes: 120
     runs-on: ${{ matrix.flavor.os }}
     steps:
       - name: Check out code into the Go module directory

@@ -4,6 +4,7 @@ description: "Atmos AI and MCP integrations: connect external AI assistants to A
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: ai
 ---
 
 # Atmos AI and MCP

@@ -1,9 +1,10 @@
 ---
 name: atmos-ansible
 description: "Ansible orchestration: playbook execution, variable passing, inventory management, stack-based configuration for configuration management"
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: orchestrators
 ---
 
 # Atmos Ansible Orchestration
@@ -22,16 +23,16 @@
 When you run `atmos ansible playbook`, Atmos performs the following sequence:
 
 1. **Resolves stack configuration** -- Reads and deep-merges all stack manifests to produce the fully resolved
-   configuration for the target component in the target stack.
+    configuration for the target component in the target stack.
 2. **Generates a variables file** -- Writes a YAML file containing all `vars` defined for the component in the
-   stack, following the naming convention `<context>-<component>.ansible.vars.yaml`.
+    stack, following the naming convention `<context>-<component>.ansible.vars.yaml`.
 3. **Resolves the playbook** -- Determines the playbook to run from `--playbook` flag or
-   `settings.ansible.playbook` in the stack manifest.
+    `settings.ansible.playbook` in the stack manifest.
 4. **Resolves the inventory** -- Determines the inventory source from `--inventory` flag or
-   `settings.ansible.inventory` in the stack manifest.
+    `settings.ansible.inventory` in the stack manifest.
 5. **Sets environment variables** -- Applies all `env` settings from the stack manifest.
 6. **Executes `ansible-playbook`** -- Runs the playbook in the component directory, passing the generated
-   variables file via `--extra-vars @<varfile>` and any additional native flags.
+    variables file via `--extra-vars @<varfile>` and any additional native flags.
 7. **Cleans up** -- Removes the generated variables file after execution completes.
 
 This means a single command like `atmos ansible playbook webserver -s prod` replaces what would normally require
@@ -445,24 +446,24 @@
 > prompts. For fully automated pipelines, invoke `ansible-playbook` directly from a CI step.
 
 1. **Use stack manifest settings for playbook configuration.** Define `settings.ansible.playbook` and
-   `settings.ansible.inventory` rather than passing flags every time.
+    `settings.ansible.inventory` rather than passing flags every time.
 
 2. **Centralize defaults in catalog files.** Define common settings in catalog defaults and override only
-   what differs per environment.
+    what differs per environment.
 
 3. **Use `dependencies.components` for ordering.** Define dependencies when playbooks need to run
-   after infrastructure is provisioned, such as after Terraform components.
+    after infrastructure is provisioned, such as after Terraform components.
 
 4. **Keep playbooks focused.** Create small, task-specific playbooks rather than monolithic automation.
 
 5. **Use `env` for Ansible configuration.** Configure Ansible behavior through environment variables
-   rather than `ansible.cfg` for consistency across environments.
+    rather than `ansible.cfg` for consistency across environments.
 
 6. **Leverage inheritance.** Use abstract components and inheritance for shared playbook configurations
-   across environments.
+    across environments.
 
 7. **Use `--dry-run` before production runs.** Preview the commands Atmos will execute before running
-   against production infrastructure.
+    against production infrastructure.
 
 ## Additional Resources
 

@@ -1,6 +1,8 @@
 ---
 name: atmos-asciicast
 description: Create and review portable Atmos CLI asciicast demos for community-facing documentation, examples, and training materials.
+metadata:
+  category: dev-tooling
 ---
 
 # Atmos Asciicast Skill

@@ -1,9 +1,10 @@
 ---
 name: atmos-auth
 description: "Authentication and identity management: providers (SSO/SAML/OIDC/GCP/Atmos Pro), identities, keyring, identity chaining, login/exec/shell/console, and github/sts for private GitHub access"
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: security
 ---
 
 # Atmos Authentication and Identity Management

@@ -4,6 +4,7 @@ description: "AWS compliance commands in Atmos: atmos aws compliance report, Sec
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: aws
 ---
 
 # Atmos AWS Compliance

@@ -4,6 +4,7 @@ description: "AWS ECR commands in Atmos: atmos aws ecr login, ECR auth integrati
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: aws
 ---
 
 # Atmos AWS ECR

@@ -4,6 +4,7 @@ description: "AWS EKS commands in Atmos: atmos aws eks update-kubeconfig, atmos
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: aws
 ---
 
 # Atmos AWS EKS

@@ -4,6 +4,7 @@ description: "AWS security finding analysis: analyze findings, map to Atmos comp
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: security
 ---
 
 # Atmos AWS Security Finding Analysis

@@ -4,6 +4,7 @@ description: "Atmos caching: CI cache configuration and commands, GitHub Actions
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: ci-automation
 ---
 
 # Atmos Cache

@@ -4,6 +4,7 @@ description: "Atmos cast recording and rendering: atmos cast play/render, output
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: dev-tooling
 ---
 
 # Atmos Cast

@@ -4,6 +4,7 @@ description: "Atmos CI: Native CI with GitHub Actions containers, native outputs
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: ci-automation
 references:
   - references/native-ci.md
 ---

@@ -1,9 +1,10 @@
 ---
 name: atmos-components
 description: "Component architecture: Terraform root modules, remote source provisioning, abstract components, component inheritance, versioning, mixins, catalog patterns"
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: core-config
 ---
 
 # Atmos Component Architecture

@@ -4,6 +4,7 @@ description: "Atmos compositions: named service groupings, compositions.<name>.s
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: templating-data
 ---
 
 # Atmos Compositions

@@ -4,6 +4,7 @@ description: "Atmos root configuration: atmos.yaml discovery, precedence, deep m
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: core-config
 references:
   - references/sections-reference.md
 ---

@@ -4,6 +4,7 @@ description: "Atmos container components: components.container, Docker Compose m
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: orchestrators
 ---
 
 # Atmos Container Components
@@ -93,13 +94,13 @@ Migration process:
 
 1. Inventory Compose services and split long-lived services into separate container components.
 2. Move shared `.env` values into stack vars, component env, declared secrets, or `!secret`
-   references.
+    references.
 3. Use `composition: <name>` so former Compose services validate and run as one system.
 4. Replace `docker compose up/down/logs/exec/ps` with the matching `atmos container` commands.
 5. Use workflow `container`, `wait`, `wait-all`, and explicit dependencies for startup order
-   instead of Compose-only `depends_on` assumptions.
+    instead of Compose-only `depends_on` assumptions.
 6. Prefer first-class `components.container` for Atmos-managed services. Keep a native Compose
-   file only when the project must remain compatible with external Compose tooling.
+    file only when the project must remain compatible with external Compose tooling.
 
 ## Operational Guidance
 

@@ -4,6 +4,7 @@ description: "Custom CLI commands: command definition in atmos.yaml, arguments,
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: ci-automation
 references:
   - references/command-syntax.md
 ---

@@ -4,6 +4,7 @@ description: "Design patterns: stack organization, component catalogs, inheritan
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: core-config
 ---
 
 # Atmos Design Patterns

@@ -4,6 +4,7 @@ description: "Devcontainer orchestration: start/stop/attach/shell/exec/rebuild,
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: dev-tooling
 references:
   - references/commands-reference.md
 ---

@@ -4,6 +4,7 @@ description: "Atmos diagnostics: machine-readable JSONL event streams, diagnosti
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: dev-tooling
 ---
 
 # Atmos Diagnostics

@@ -4,6 +4,7 @@ description: "Atmos emulator components: local AWS/GCP/Azure/Kubernetes/Vault/Op
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: orchestrators
 ---
 
 # Atmos Emulators

@@ -4,6 +4,7 @@ description: "Atmos Git and GitOps: git.repositories, clone/pull/status/diff/com
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: ci-automation
 ---
 
 # Atmos Git

@@ -4,6 +4,7 @@ description: "Native Helm components (experimental): Helm Go SDK rendering/apply
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: orchestrators
 ---
 
 # Atmos Native Helm Components

@@ -1,9 +1,10 @@
 ---
 name: atmos-helmfile
 description: "Helmfile orchestration: sync/apply/destroy/diff, Kubernetes deployments, varfile generation, EKS integration, source management"
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: orchestrators
 ---
 
 # Atmos Helmfile Orchestration
@@ -17,12 +18,12 @@
 When you run any `atmos helmfile` command, Atmos performs the following sequence:
 
 1. **Resolves stack configuration** -- Reads and deep-merges all stack manifests to produce the fully resolved
-   configuration for the target component in the target stack.
+    configuration for the target component in the target stack.
 2. **Generates variable file** -- Writes a varfile containing all `vars` defined for the component in the stack.
 3. **Configures EKS authentication** -- If `use_eks: true`, runs `aws eks update-kubeconfig` to generate
-   kubeconfig from the EKS cluster and set up authentication.
+    kubeconfig from the EKS cluster and set up authentication.
 4. **Executes the requested command** -- Runs `helmfile diff`, `apply`, `sync`, `destroy`, etc. with the
-   generated varfile and any additional flags.
+    generated varfile and any additional flags.
 
 This means a single command like `atmos helmfile apply nginx-ingress -s ue2-dev` replaces what would normally
 require multiple manual steps: configuring kubeconfig, writing variable files, and then running helmfile.
@@ -454,24 +455,24 @@
 ## Best Practices
 
 1. **Use diff before apply.** Run `helmfile diff` first, review the output, then run `helmfile apply`
-   to ensure exactly the reviewed changes are applied.
+    to ensure exactly the reviewed changes are applied.
 
 2. **Use deploy for combined operations.** The `deploy` command runs diff and apply in a single step.
 
 3. **Store kubeconfig in `/dev/shm`.** When using EKS integration, use shared memory for security
-   since files are not persisted to disk.
+    since files are not persisted to disk.
 
 4. **Use `cluster_name_template` instead of `cluster_name_pattern`.** The Go template syntax is
-   more powerful and the token replacement pattern is deprecated.
+    more powerful and the token replacement pattern is deprecated.
 
 5. **Use source-based version pinning for multi-environment setups.** Override the `source.version`
-   per environment to control which version is deployed to each stack.
+    per environment to control which version is deployed to each stack.
 
 6. **Use `atmos describe component`** to debug configuration resolution issues. It shows the fully
-   merged result of all stack manifest inheritance.
+    merged result of all stack manifest inheritance.
 
 7. **Leverage component inheritance** to share common configuration across Helmfile components
-   and reduce duplication in stack manifests.
+    and reduce duplication in stack manifests.
 
 ## Additional Resources
 

@@ -4,6 +4,7 @@ description: "Atmos hooks: lifecycle events, hook kinds, command/store/git/secur
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: ci-automation
 ---
 
 # Atmos Hooks

@@ -4,6 +4,7 @@ description: "Atmos imports: local and remote stack imports, go-getter schemes,
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: core-config
 ---
 
 # Atmos Imports

@@ -4,6 +4,7 @@ description: "Bootstrapping new Atmos projects with atmos init: built-in templat
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: scaffolding
 ---
 
 # Atmos Init

@@ -4,6 +4,7 @@ description: "Introspection & Querying: describe/list commands, config filtering
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: dev-tooling
 references:
   - references/commands-reference.md
 ---

@@ -4,6 +4,7 @@ description: "Native Kubernetes components (experimental): render/plan/diff/appl
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: orchestrators
 ---
 
 # Atmos Native Kubernetes Components

@@ -4,6 +4,7 @@ description: "Atmos Terraform linting with TFLint: standalone `atmos terraform l
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: ci-automation
 ---
 
 # Atmos Linting

@@ -4,6 +4,7 @@ description: "Migrating to Atmos from existing IaC: techniques, tactics, and des
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: state-versioning
 references:
   - references/from-native-terraform.md
   - references/from-terraform-workspaces.md

@@ -4,6 +4,7 @@ description: "Atmos Modernization: migrate deprecated or legacy Atmos patterns t
 metadata:
   copyright: Copyright Cloud Posse, LLC 2026
   version: "1.0.0"
+  category: state-versioning
 ---
 
 # Atmos Modernization