kubernetes_specialist

Generates production-grade Kubernetes manifests with security hardening and reliability best practices.

Updated Jan 14, 2026
One-click install
npx skills add https://github.com/jvsandhu/agentic-skills --skill kubernetes-specialist-jvsandhu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kubernetes_specialist
Source: https://github.com/jvsandhu/agentic-skills/tree/main/skills/kubernetes_specialist
Command: npx skills add https://github.com/jvsandhu/agentic-skills --skill kubernetes-specialist-jvsandhu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Writing secure, reliable Kubernetes configurations by hand is error-prone: missing resource limits, absent health probes, overly permissive RBAC, and hardcoded secrets are common causes of outages and breaches. This Skill guides the creation of production-grade K8s manifests following official best practices. ## Core Features & Use Cases - Workload Deployment: Create Deployments, StatefulSets, DaemonSets, Jobs, and CronJobs with proper resource requests, limits, and liveness/readiness probes. - Security Hardening: Apply RBAC with least privilege, NetworkPolicies for segmentation, Pod Security Standards, and non-root security contexts. - Reliability & GitOps: Configure HPA, PodDisruptionBudgets, pod anti-affinity, and deliver configuration via Helm, Kustomize, ArgoCD, or Flux with sealed secrets. - Use Case: You need to deploy a stateful application to production. The Skill generates the StatefulSet, PVC, ServiceAccount with scoped RBAC, NetworkPolicy, and PDB, then validates the setup against a production checklist. ## Quick Start Ask the agent to generate a production-ready Kubernetes deployment manifest for your application with resource limits, health probes, RBAC, and a NetworkPolicy.

Frequently Asked Questions about kubernetes_specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy an application to Kubernetes with best practices?

Create declarative YAML manifests with resource requests and limits, liveness and readiness probes, and a non-root security context. Add a dedicated ServiceAccount with least-privilege RBAC and a NetworkPolicy, then deliver via Helm or Kustomize through a GitOps tool like ArgoCD.

What is the difference between Helm and Kustomize for Kubernetes?

Helm packages applications as charts with templated values, hooks, and release management, while Kustomize overlays patches on plain YAML without templating. Both avoid hardcoded values and integrate with GitOps workflows.

How do I secure secrets in Kubernetes?

Never store secrets in ConfigMaps or plain environment variables. Use Kubernetes Secrets with RBAC restrictions, and for GitOps workflows encrypt them with SealedSecrets or sync from an external vault using the External Secrets Operator.

Why should I avoid the latest image tag in Kubernetes?

The latest tag is mutable, so different nodes may pull different image versions, making rollouts and rollbacks unpredictable. Pin images to immutable version tags or digests for reproducible production deployments.

How do I prevent downtime during Kubernetes node maintenance?

Define a PodDisruptionBudget to limit how many pods can be evicted voluntarily, and use podAntiAffinity to spread replicas across nodes. Combined with readiness probes, this keeps the service available during drains and upgrades.