create-k8s-deployment

What problem does it solve?

It streamlines creating consistent, production-ready Kubernetes deployments by guiding you through choosing images, wiring auth (authentik), provisioning storage (volsync or NFS), and configuring secrets and optional networking like Tailscale.

Core Features & Use Cases

• Standardized Deployment Scaffolding: Produces a HelmRelease + Kustomize structure aligned with established patterns in the repository (helmrelease.yaml, kustomization.yaml, definition.yaml, and optional externalsecret.yaml/resources).
• Component-Aware Composition: Helps you decide and include the right components such as postgres (DB), volsync (persistent storage), tailscale (internal access), valkey/redis (cache), and authentik OAuth2 or authentik forward-proxy based on the application’s capabilities.
• Secret Integration via ExternalSecrets: Connects 1Password-managed secrets to ExternalSecret templates for app-specific keys and pulls repo-managed DB/OIDC credentials through the appropriate ClusterSecretStores.
• Production Safety Defaults: Recommends driftDetection, remediation/rollback strategies, securityContext patterns, and readiness/liveness probe conventions to reduce operational risk.
• Use Case: Add a new internal web app like FreshRSS, Glance, or Immich by selecting a pinned container version, selecting the correct component set, and generating the Flux manifests that will reconcile cleanly.

Quick Start

Use this skill to generate the Kubernetes manifests for a new app named freshrss in namespace database with its container image pinned to a stable GHCR version.