skills.rest
filippolmt
filippolmtCOMMUNITY
Explore all skills by this author →
GitHub

kubernetes-specialist

Generate and validate Kubernetes manifests for workloads, networking, security, and GitOps deployments.

1|Updated Jul 2, 2026
Search Tags:#rbac#kubernetes#manifests#helm#gitops#kubectl#networkpolicy
One-click install
npx skills add https://github.com/filippolmt/skills --skill kubernetes-specialist-filippolmt
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: kubernetes-specialist
Source: https://github.com/filippolmt/skills/tree/main/skills/kubernetes-specialist
Command: npx skills add https://github.com/filippolmt/skills --skill kubernetes-specialist-filippolmt

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Writing correct, secure Kubernetes YAML by hand is error-prone: missing resource limits, overly permissive RBAC, absent health probes, and open network policies are common production risks. This Skill produces declarative manifests that follow security and reliability best practices, and guides troubleshooting when workloads misbehave. ## Core Features & Use Cases - Manifest Generation: Create Deployments, StatefulSets, Services, Ingress, RBAC roles, and NetworkPolicies with resource limits, probes, and hardened security contexts built in. - Deep Reference Guides: On-demand references cover Helm charts, custom operators (CRDs and controller-runtime), service mesh (Istio/Linkerd), GitOps (ArgoCD/Flux), cost optimization (VPA/HPA, spot instances), and multi-cluster management. - Troubleshooting & Validation: Provides kubectl commands for rollout status, log inspection, RBAC auditing, and rollback procedures. - Use Case: Ask for a production deployment of a web app and receive a complete manifest set: Deployment with non-root security context and probes, a least-privilege ServiceAccount/Role/RoleBinding, and a default-deny NetworkPolicy with explicit allow rules. ## Quick Start Ask the assistant to create a production-ready Kubernetes deployment manifest for your application, including resource limits, health probes, RBAC, and network policies.

Frequently Asked Questions about kubernetes-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a production-ready Kubernetes deployment manifest?▼

A production Deployment needs resource requests and limits, liveness and readiness probes, a non-root security context, and a dedicated ServiceAccount instead of the default. Pin image tags rather than using latest, and add labels for organization and cost attribution.

How to set up least-privilege RBAC in Kubernetes?▼

Create a dedicated ServiceAccount per application, then bind it to a Role granting only the specific API groups, resources, and verbs the app needs. Audit effective permissions with kubectl auth can-i --list --as=system:serviceaccount:namespace:name.

ArgoCD vs Flux for GitOps deployments?▼

ArgoCD offers a built-in web UI, AppProjects for multi-tenancy, and centralized architecture. Flux is distributed, uses native Kubernetes RBAC, and has built-in image automation via ImagePolicy. Both support Helm, Kustomize, and automated sync with pruning.

Why does my Kubernetes pod keep crashing?▼

Check kubectl describe pod for events like image pull errors or failed probes, and use kubectl logs --previous to see output from the crashed container. Common causes include missing resource limits, failing health checks, and misconfigured environment variables.

How do NetworkPolicies work in Kubernetes?▼

NetworkPolicies select pods by labels and define allowed ingress and egress traffic. Start with a default-deny policy for all traffic, then add explicit allow rules for required pod-to-pod, namespace, and DNS communication on specific ports.

When should I use VPA versus HPA for autoscaling?▼

HPA scales pod replica count based on CPU, memory, or custom metrics and suits stateless workloads with variable traffic. VPA adjusts CPU and memory requests per pod, useful for right-sizing; run it in recommendation mode first to avoid unexpected restarts.

Related Skills

Explore More Software Engineering Skills→
yongseongkimyongseongkim

Deploy Skill

Deploy the Sunrei application to a k3s cluster with OCI images and Helm charts.

Community
Advanced
lrstanleylrstanley

kubernetes-specialist

Generate and validate Kubernetes manifests, Helm charts, RBAC policies, and NetworkPolicies for workload deployment.

Community
Advanced
abhijeetkakade1234abhijeetkakade1234
1

container-kubernetes-security-audit

Identify and remediate security misconfigurations in container images, Kubernetes workloads, and RBAC policies.

Community
Advanced
faionfaionfaionfaion
4

faion-infrastructure-engineer

Automate cloud infrastructure provisioning across Docker, Kubernetes, Terraform, AWS, and GCP.

Community
Advanced