k8s-service-path

Trace Kubernetes service paths from Ingress through Services, selectors, pods, and EndpointSlices.

650|182|Updated Feb 19, 2026
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill k8s-service-path
Or copy as Structured Prompt for Agentβ–Ό
Please help me install this Agent Skill.
Skill: k8s-service-path
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/k8s-service-path
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill k8s-service-path

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

When a Kubernetes service gets no traffic or an Ingress stops routing, the cause can hide anywhere along the chain from Ingress to Service to selector to pods to EndpointSlice readiness. This Skill walks every link in that path so you get a complete, evidence-based diagnosis instead of a partial check that misleads the next engineer.

Core Features & Use Cases

  • Full Path Tracing: Systematically checks Ingress, Service, selector-to-pod matching, EndpointSlices, and readiness, marking each link as checked or not checked.
  • Differential Diagnosis: Distinguishes look-alike symptoms such as selector mismatches, unready pods, port mismatches, NetworkPolicy denials, and Ingress backends pointing at non-existent Services.
  • Readiness Accounting: Reports ready and not-ready endpoint counts separately so a Service with zero serving capacity is never reported as healthy.
  • Use Case: A user reports the web service in namespace app1 is unreachable. The Skill retrieves the Service, matches its selector against pods, inspects EndpointSlices, and reports that 3 pods match but none are Ready β€” a readiness-probe problem, not a wiring problem.

Quick Start

Ask the agent to trace why the Kubernetes service named web in namespace app1 is receiving no traffic and report every link it checked.

Frequently Asked Questions about k8s-service-path

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot a Kubernetes service with no endpoints?β–Ό

Check the Service selector against actual pods, then inspect EndpointSlices for readiness. No endpoints can mean the selector matches no pods, pods exist but none are Ready, or no container exposes the target port β€” each has a different fix.

How to trace why a Kubernetes Ingress is not routing traffic?β–Ό

Verify the Ingress backend references a Service that actually exists, then follow the path Service to selector to pods to EndpointSlices. A backend naming a non-existent Service is a common silent misconfiguration that should be called out explicitly.

Why does my Kubernetes service show endpoints but still get no traffic?β–Ό

EndpointSlices list both ready and not-ready addresses, so a Service can show endpoints while having zero serving capacity. Check readiness counts separately, and verify no NetworkPolicy is denying the traffic.

Can this skill check Kubernetes NetworkPolicy or packet flow?β–Ό

No, it traces wiring only and is read-only. NetworkPolicy evaluation is handled by the k8s-network-policy skill, actual packet flow by kubeshark-traffic, and latency or error rates by prometheus or grafana.

What tools are required to run Kubernetes service path tracing?β–Ό

It requires the kubectl binary plus the K8S_MCP_CMD and K8S_KUBECONFIG environment variables for the vendored read-only k8s-mcp server. Without confirmed cluster-wide scope, cross-namespace Ingress traces may be silently incomplete.