What problem does it solve?
This Skill helps teams author, review, and harden Kubernetes manifests and cluster configuration to avoid downtime, security mistakes, and operational surprises during deploys.
Core Features & Use Cases
- Manifest authoring and review: Guidance for Deployments, Services, StatefulSets, DaemonSets, Jobs, and CronJobs with recommended defaults.
- Security & RBAC: Patterns for non-root securityContext, container restrictions, ServiceAccount per app, least-privilege Role/RoleBinding, and Pod Security Standards.
- Networking & Availability: NetworkPolicy allowlists, Service selectors, Ingress/TLS with cert-manager, PodDisruptionBudget, topologySpreadConstraints, and HPA/autoscaling advice.
- Operational tooling: Debugging commands with kubectl, Helm and Kustomize workflows, GitOps considerations, and observability checklist (metrics, alerts, ServiceMonitor).
Quick Start
Create a production-ready Deployment and Service in namespace production with two replicas, pinned image tags, resource requests and limits, liveness/readiness/startup probes, non-root securityContext, a PodDisruptionBudget, an HPA with minReplicas 2, and an Ingress configured for cert-manager TLS.