skills.rest
camilooscargbaptista
camilooscargbaptistaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

kubernetes-review

Review Kubernetes manifests for security, reliability, and best-practice compliance.

7|Updated Mar 19, 2026
Search Tags:#security#kubernetes#observability#review#helm#gitops#k8s
One-click install
npx skills add https://github.com/camilooscargbaptista/cto-toolkit --skill kubernetes-review-camilooscargbaptista
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: kubernetes-review
Source: https://github.com/camilooscargbaptista/cto-toolkit/tree/main/kubernetes-review
Command: npx skills add https://github.com/camilooscargbaptista/cto-toolkit --skill kubernetes-review-camilooscargbaptista

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps platform and DevOps engineers find security, reliability, and configuration issues in Kubernetes manifests, Helm charts, and GitOps repositories so teams can reduce outages and attack surface.

Core Features & Use Cases

  • Pod Security & RBAC: Detects container run-as-root, privilege escalation, missing readOnlyRootFilesystem, automountServiceAccountToken misconfigurations, and least-privilege RBAC issues.
  • Resource & Reliability Checks: Flags missing requests/limits, unsuitable QoS, absent probes, single-replica production workloads, missing PodDisruptionBudgets, and topology/affinity misconfigurations.
  • Networking, Secrets & Image Policies: Reviews NetworkPolicy coverage, TLS/Ingress settings, secret handling (SealedSecrets/ExternalSecrets), and image pinning/vulnerability controls.
  • GitOps & Observability: Verifies manifests are versioned, checks Helm values patterns, recommends GitOps practices, and validates observability hooks and health endpoints.
  • Use Case: Run this Skill during a pre-deploy review or PR check to get a prioritized list of critical security and reliability findings with remediation advice and references.

Quick Start

Use the kubernetes-review skill to audit the project's k8s manifests and return a prioritized report of critical, important, and suggested fixes.

Frequently Asked Questions about kubernetes-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check Kubernetes manifests for security and reliability issues?▼

Kubernetes manifest audits validate pod security, RBAC least-privilege, resource requests/limits, and probe configurations to detect security vulnerabilities and reliability risks before deployment.

What Kubernetes security checks should I run on Helm charts?▼

Helm chart security reviews check for container run-as-root, privilege escalation, missing readOnlyRootFilesystem, automountServiceAccountToken misconfigurations, and least-privilege RBAC issues.

Does this manifest review work with GitOps repositories?▼

GitOps repository reviews verify manifests are versioned, check Helm values patterns, recommend GitOps practices, and validate observability hooks and health endpoints for cloud-native configurations.

How do I validate PodDisruptionBudgets and NetworkPolicies in k8s manifests?▼

Kubernetes manifest audits validate PodDisruptionBudgets for single-replica workloads and review NetworkPolicy coverage and TLS/Ingress settings to ensure reliability and networking compliance.

Can I check image pinning and secret handling in Kubernetes configurations?▼

Manifest reviews validate image pinning and vulnerability controls, and review secret handling including SealedSecrets and ExternalSecrets to reduce attack surface in cloud-native configurations.

What is the best way to audit k8s manifests during a pre-deploy review?▼

Running a Kubernetes manifest audit during pre-deploy review returns a prioritized report of critical, important, and suggested fixes with remediation advice and references for security and reliability issues.

Related Skills

Explore More Software Engineering Skills→
oktetookteto
5

okteto-onboarding

Discover services and draft an Okteto manifest for repos without one.

Official
Advanced
roderikroderik
54

rr-kubernetes

Generate Kubernetes manifests, Helm charts, and RBAC configurations.

Community
Advanced
Kushal9889Kushal9889

land-and-deploy

Automate Git repository land and deploy with CI checks and canary checks.

Community
Advanced
zzw4257zzw4257

OPA Gatekeeper

Enforce organizational policies on Kubernetes clusters using OPA Gatekeeper admission control.

Community
Advanced