kubernetes-specialist

Generate and validate Kubernetes manifests for workload deployment, networking, security, and cluster operations.

Updated Mar 9, 2026
One-click install
npx skills add https://github.com/ArMaTeC/Redball --skill kubernetes-specialist-armatec
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kubernetes-specialist
Source: https://github.com/ArMaTeC/Redball/tree/main/.devin/skills/kubernetes-specialist
Command: npx skills add https://github.com/ArMaTeC/Redball --skill kubernetes-specialist-armatec

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Deploying and managing Kubernetes workloads requires deep knowledge of YAML manifests, RBAC, NetworkPolicies, Helm charts, and troubleshooting commands, and mistakes like missing resource limits or hardcoded secrets create security and reliability risks. ## Core Features & Use Cases - Manifest Generation: Produces declarative YAML for Deployments, StatefulSets, Services, Ingress, RBAC, and NetworkPolicies with resource limits, probes, and security contexts built in. - Troubleshooting & Validation: Guides kubectl-based debugging of pod crashes, image pull errors, and rollouts, including rollback procedures. - Specialized Domains: Covers Helm chart authoring, GitOps with ArgoCD/Flux, custom operators and CRDs, service mesh, cost optimization with VPA/HPA and spot instances, and multi-cluster management. - Use Case: Ask for a production-ready Deployment for a web app and receive complete YAML with least-privilege RBAC, default-deny NetworkPolicy, health probes, and validation commands. ## Quick Start Ask the assistant to create a production-ready Kubernetes Deployment manifest for your application with resource limits, probes, RBAC, and a NetworkPolicy.

Frequently Asked Questions about kubernetes-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a production-ready Kubernetes Deployment manifest?

Define a Deployment with pinned image tags, resource requests and limits, liveness and readiness probes, a non-root security context, and a dedicated ServiceAccount. Pair it with a least-privilege Role and a default-deny NetworkPolicy for isolation.

How to debug a pod stuck in CrashLoopBackOff in Kubernetes?

Run kubectl describe pod to inspect events, then use kubectl logs with the --previous flag to see output from the crashed container. Common causes include failed liveness probes, missing environment variables, or image pull errors.

What is the difference between ArgoCD and Flux for GitOps?

ArgoCD provides a built-in web UI, AppProjects for multi-tenancy, and centralized architecture, while Flux is distributed, uses native Kubernetes RBAC, and has built-in image automation via ImagePolicy. Both support Helm and automated sync with pruning.

Does Kubernetes NetworkPolicy block traffic by default?

No, Kubernetes allows all traffic by default. You must apply a default-deny NetworkPolicy selecting all pods for Ingress and Egress, then add explicit allow rules for required pod-to-pod or namespace communication.

Why should I not use the latest tag for container images in production?

The latest tag is mutable, so different nodes may run different image versions, making rollouts and rollbacks unpredictable. Pin images to explicit version tags or digests to ensure consistent, auditable deployments.

How do I right-size Kubernetes resource requests and limits?

Compare actual usage from kubectl top pods against configured requests, then set requests to average usage plus a 10-20 percent buffer. Use the Vertical Pod Autoscaler in recommendation mode to automate right-sizing suggestions.