Kubernetes

Configure Kubernetes resource limits, probes, selectors, and RBAC correctly.

3.1k|368|Updated Feb 26, 2026
One-click install
npx skills add https://github.com/openocta/openocta --skill kubernetes-openocta
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Kubernetes
Source: https://github.com/openocta/openocta/tree/main/src/embed/skills/k8s
Command: npx skills add https://github.com/openocta/openocta --skill kubernetes-openocta

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps users avoid common and costly mistakes in Kubernetes deployments, focusing on resource management, probe configuration, selector mismatches, and RBAC pitfalls.

Core Features & Use Cases

  • Resource Management: Understand and correctly configure requests and limits for CPU and memory to prevent OOMKilled or throttling.
  • Probe Configuration: Properly set up readinessProbe, livenessProbe, and startupProbe to ensure application availability and stability.
  • Labeling and Selectors: Ensure correct matching between Service selectors and Pod labels to guarantee network connectivity.
  • RBAC: Implement least privilege by correctly configuring ServiceAccount, Role, and RoleBinding.
  • Use Case: A developer is deploying a new microservice and is unsure about setting resource limits and readiness probes. This Skill provides clear guidance to prevent common deployment failures.

Quick Start

Use the Kubernetes skill to explain the difference between requests and limits for resource management.

Frequently Asked Questions about Kubernetes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent Kubernetes pods from getting OOMKilled or CPU throttled?

Prevent Kubernetes pods from getting OOMKilled or CPU throttled by correctly configuring resource `requests` and `limits` for CPU and memory. This ensures stable scheduling and avoids unexpected container terminations during peak workload loads.

What is the difference between readinessProbe and livenessProbe in Kubernetes?

In Kubernetes, a `readinessProbe` determines if a pod is ready to receive network traffic, while a `livenessProbe` checks if the application is running and restarts the container upon failure. Properly configuring both ensures high application availability.

Why does my Kubernetes Service have no available endpoints?

A Kubernetes Service has no available endpoints when its label selector fails to match the target pod labels. Ensuring exact matching between Service selectors and Pod labels guarantees network connectivity and proper traffic routing to your workload.

How do I configure RBAC for least privilege in Kubernetes?

To configure RBAC for least privilege in Kubernetes, correctly define `ServiceAccount`, `Role`, and `RoleBinding` objects. This grants only the specific permissions required by your application, ensuring secure access control within the cluster.

Do I need to set resource requests and limits for every Kubernetes deployment?

Yes, setting resource `requests` and `limits` for every Kubernetes deployment is a best practice to prevent resource starvation. Without these boundaries, your applications risk unstable scheduling and potential node failure under heavy load.