kubernetes

Review and harden Kubernetes manifests for secure, resilient deployments.

4|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/rbaumier/skills --skill kubernetes-rbaumier
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kubernetes
Source: https://github.com/rbaumier/skills/tree/main/kubernetes
Command: npx skills add https://github.com/rbaumier/skills --skill kubernetes-rbaumier

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams author, review, and harden Kubernetes manifests and cluster configuration to avoid downtime, security mistakes, and operational surprises during deploys.

Core Features & Use Cases

  • Manifest authoring and review: Guidance for Deployments, Services, StatefulSets, DaemonSets, Jobs, and CronJobs with recommended defaults.
  • Security & RBAC: Patterns for non-root securityContext, container restrictions, ServiceAccount per app, least-privilege Role/RoleBinding, and Pod Security Standards.
  • Networking & Availability: NetworkPolicy allowlists, Service selectors, Ingress/TLS with cert-manager, PodDisruptionBudget, topologySpreadConstraints, and HPA/autoscaling advice.
  • Operational tooling: Debugging commands with kubectl, Helm and Kustomize workflows, GitOps considerations, and observability checklist (metrics, alerts, ServiceMonitor).

Quick Start

Create a production-ready Deployment and Service in namespace production with two replicas, pinned image tags, resource requests and limits, liveness/readiness/startup probes, non-root securityContext, a PodDisruptionBudget, an HPA with minReplicas 2, and an Ingress configured for cert-manager TLS.

Frequently Asked Questions about kubernetes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden Kubernetes manifests for secure production deployments?

Harden Kubernetes manifests by applying pinned image tags, resource requests and limits, health probes, non-root security contexts, PodDisruptionBudgets, topology spread constraints, and least-privilege RBAC. This ensures resilient, secure deployments that avoid downtime and operational surprises.

What is the best way to configure HPA and PodDisruptionBudgets for Kubernetes autoscaling?

Configure Kubernetes autoscaling by defining HorizontalPodAutoscalers with appropriate minReplicas and PodDisruptionBudgets to maintain availability. This combination ensures your workloads scale under load while surviving voluntary disruptions during node maintenance.

How do I set up cert-manager TLS and Ingress for Kubernetes Services?

Set up cert-manager TLS on Kubernetes by configuring Ingress resources with cert-manager annotations to automate certificate issuance. This provides secure, encrypted routing to your Services without manual certificate management.

Does this Kubernetes hardening guidance work with Helm charts and GitOps workflows?

Yes, the Kubernetes hardening guidance applies to Helm charts, Kustomize workflows, and GitOps-friendly manifests. It helps teams author and review templated configurations that remain secure and production-ready across development and production clusters.

Why do I need topology spread constraints and NetworkPolicies in Kubernetes?

Topology spread constraints distribute Kubernetes Pods across failure domains to maximize availability, while NetworkPolicies act as allowlists controlling traffic between Pods. Both are essential for preventing single points of failure and securing cluster networking.