triage-unhealthy-workload

Diagnose unhealthy Kubernetes workloads with evidence-backed explanations and read-only kubectl checks.

14|Updated Jan 17, 2026
One-click install
npx skills add https://github.com/confighub/cub-scout --skill triage-unhealthy-workload
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: triage-unhealthy-workload
Source: https://github.com/confighub/cub-scout/tree/main/skills/triage-unhealthy-workload
Command: npx skills add https://github.com/confighub/cub-scout --skill triage-unhealthy-workload

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The skill helps you quickly diagnose why a Kubernetes workload is unhealthy so you can make the next operational decision under pager or incident time pressure.

Core Features & Use Cases

  • Fast triage loop (doctor → explain → trace): Composes cluster signal, resource-level cause, and source-chain attribution into a tight first-response workflow.
  • Ownership and evidence first: Surfaces which controller owns the resource, whether the cause looks like drift or manual edits, and points you to the next read-only checks.
  • Source and secret attribution: Traces the delivery chain (Argo CD, Flux, Helm, Crossplane, ConfigHub) and highlights secret resolution issues that often prevent pods from starting.

Quick Start

Use the skill to triage the failing workload by running: cub-scout triage-unhealthy-workload doctor -n prod --format json.

Frequently Asked Questions about triage-unhealthy-workload

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I quickly triage a Kubernetes workload stuck in CrashLoopBackOff?

You can triage a Kubernetes workload stuck in CrashLoopBackOff by composing doctor, explain, and trace steps to collect read-only cluster evidence and produce an evidence-backed explanation of what is broken and why.

Why does my Argo CD or Flux GitOps rollout show a health failure?

Your Argo CD or Flux GitOps rollout may show a health failure due to manual configuration drift or missing secret dependencies preventing pods from starting. The triage workflow traces the delivery chain to attribute the root cause.

How do I diagnose missing secret resolution issues preventing my Kubernetes pods from starting?

To diagnose missing secret resolution issues, the triage process surfaces secret attribution data and highlights missing dependencies that often prevent pods from starting, pointing you to the next read-only checks.

Can I use this triage process during an active incident without mutating cluster state?

Yes, you can use this triage process during an active incident because it enforces strict safety boundaries by supporting only targeted read-only kubectl evidence collection, ensuring it avoids mutating cluster state.

What is the best way to identify ownership and configuration drift for a failing Kubernetes resource?

The best way to identify ownership and configuration drift for a failing Kubernetes resource is to run the triage workflow, which surfaces which controller owns the resource and whether the cause looks like manual edits or drift.

Does this Kubernetes triage workflow support tracing resources provisioned by Crossplane or Helm?

Yes, the Kubernetes triage workflow supports tracing resources provisioned by Crossplane or Helm by attributing the source delivery chain across Argo CD, Flux, Helm, and Crossplane to pinpoint the origin of the failure.