DevOps & Cloud · Kubernetes

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

Cybereason-Public/owLSM

Installs and configures Kubeshark on a Kubernetes cluster, choosing between the quick CLI path and a Helm install with custom values.

kubeshark/kubeshark

Creates and queries KubeSphere users, workspaces and projects and assigns built-in roles, defaulting to least privilege and never deleting anything.

kubesphere/kubesphere

Install, upgrade, and operate the Sim Helm chart on Kubernetes.

simstudioai/sim

Comprehensive guidance for creating, organizing, and managing Helm charts for packaging and deploying Kubernetes applications.

Cybereason-Public/owLSM

Syntax reference for KFL2, the CEL-based display filter language used to search Kubernetes network traffic captured by Kubeshark, loaded before any filter is written.

kubeshark/kubeshark

Installs, checks and troubleshoots the KubeSphere ServiceMesh extension (Istio, Kiali, Jaeger), including grayscale release, sidecar injection, topology and tracing issues.

kubesphere/kubesphere

Migrate from ingress-nginx to Higress in Kubernetes environments.

higress-group/higress

Communicate clearly in every response, progress update and agent-authored document.

databasus/databasus

Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…

maslennikov-ig/claude-code-orchestrator-kit

Deploys and configures a LangBot instance with Docker Compose or Kubernetes, covering config.yaml, the Box sandbox runtime, the plugin runtime and the global API key.

langbot-app/LangBot

Maintain and validate OpenShell's build-only Windows MSVC lane for x64 and ARM64.

NVIDIA/OpenShell

Creates and checks Kubernetes manifests, Helm charts, RBAC and network policies, and helps debug pod problems, with kubectl checks and rollback steps.

Jeffallan/claude-skills

Run vet immediately after ANY logical unit of code changes. An agent skill from atilladeniz/Kubeli.

atilladeniz/Kubeli

Investigates past Kubernetes incidents from Kubeshark traffic snapshots: takes captures, dissects API calls, extracts PCAPs and compares traffic over time.

kubeshark/kubeshark

Deploys KubeEye on KubeSphere and writes InspectRule and InspectPlan resources to inspect cluster health, then retrieves the inspection reports.

kubesphere/kubesphere

Diagnoses a failed GreptimeDB fuzz CI job by pulling its GitHub Actions logs and fuzz artifacts, then matching the evidence to the local source code.

GreptimeTeam/greptimedb

Gives step-by-step checklists for adding Ingress annotations, VirtualServer fields and Helm values to the NGINX Kubernetes Ingress Controller, with common gotchas.

nginx/kubernetes-ingress

Bumps the Go version to the latest release across go.mod, tools.mod, and Dockerfiles.

kubernetes-sigs/agent-sandbox

Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.

Cybereason-Public/owLSM

Hunts for compromised workloads and malicious traffic in a Kubernetes cluster by sweeping network data through Kubeshark MCP, mapped to MITRE ATT&CK.

kubeshark/kubeshark

Queries, creates, updates, binds and troubleshoots NodeGroup resources in the edgewize nodegroup project through a bundled authenticated API script.

kubesphere/kubesphere

Step-by-step checklist for adding a new Policy CRD type to the NGINX Ingress Controller, from the Go types and validation to config generation and templates.

nginx/kubernetes-ingress

Create or modify code in the filters package and all its sub-folders

zalando/skipper

Deploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm).

nicepkg/auto-company

Installs and configures the WizTelemetry Platform Service extension for KubeSphere, the shared API server behind its observability extensions.

kubesphere/kubesphere

Post a comment (or a formal PR review) to a GitHub issue or pull request in mariadb-operator/mariadb-operator.

mariadb-operator/mariadb-operator

Automates the ngrok-operator release process: gathers PR data, classifies changes by component (container, Helm chart, CRDs chart), generates changelogs, updates version files, and prepares the…

ngrok/ngrok-operator

Explains the multi-stage Dockerfile, the 25 image variant combinations, and the Makefile targets for building NGINX Ingress Controller images.

nginx/kubernetes-ingress

Install and configure Kelos; author, document, inspect, troubleshoot, and operate its Kubernetes custom resources and CRD schemas in the kelos.dev API group using manifests, kubectl, or the kelos CLI.

kelos-dev/kelos

Deploy or upgrade OpenBKN on a customer-authorized Linux server through the repository's deploy scripts, with preflight checks, explicit confirmation, secret handling, and post-deployment…

openbkn-ai/bkn-foundry

Run Ethereum multi-client devnets using Kurtosis and the ethpandaops/ethereum-package.

ethpandaops/ethereum-package

A skill your agent uses when the user requests diagrams, flowcharts, architecture diagrams, ER diagrams, UML / sequence / class diagrams, SysML / MBSE diagrams (block definition, internal block…

yuanchen-home/cumcm-step-review

Diagnose and fix flaky tests tracked as open kind/flake issues in kubernetes-sigs/agent-sandbox — reproduce the flake, apply a minimal fix, and open a PR linking the issue.

kubernetes-sigs/agent-sandbox

Keeps Kubernetes manifests, Helm charts and policies grounded by diagnosing six failure modes, such as insecure defaults and API drift, and loading only matching references.

LukasNiessen/kubernetes-skill

Run ServiceRadar web-ng locally against the live Kubernetes demo CNPG database for dashboard, SRQL, services, and UI testing.

carverauto/serviceradar

Create or modify code in the predicates package and all its sub-folders

zalando/skipper

Audit and validate Flux CD GitOps repositories by scanning local repo files (not live clusters) — runs Kubernetes schema validation, detects deprecated Flux APIs, reviews RBAC/multi-tenancy/secrets…

fluxcd/agent-skills

A skill your agent uses when asked to help install or uninstall BoltMCP

boltmcp/boltmcp

Install NVIDIA NIM Operator on Kubernetes with prerequisite checks, optional NVIDIA GPU Operator dependency installation, public or local Helm chart selection, optional Dynamo support, and optional…

NVIDIA/k8s-nim-operator

Sets up GitOps continuous delivery for Kubernetes with ArgoCD or Flux, covering installation, repository layout, sync policies, progressive delivery and secrets.

wshobson/agents

Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes.

NVIDIA/OpenShell

Maps the NGINX Kubernetes Ingress Controller codebase: repository layout, architectural layers, layer-crossing rules and which files are generated.

nginx/kubernetes-ingress

Deploy, configure, verify, upgrade, and troubleshoot DeepSeek Harness with the community Docker, Docker Compose, rootless Podman, and Helm runtime, including the built-in Chromium/noVNC browser…

runzhliu/deepseek-harness-docker

Runs the lifecycle of FrontendExtension resources in a Kubernetes cluster: create, rebuild, package, publish, unpublish, delete and debug stuck states.

kubesphere/kubesphere

Configures automatic crash dumps or captures dumps from running processes for modern .NET apps on Linux, macOS and Windows, including Docker and Kubernetes.

dotnet/skills

An MCP server skill for managing Kubernetes sandboxes. An agent skill from kubernetes-sigs/agent-sandbox.

kubernetes-sigs/agent-sandbox

Skipper architecture reference: routing table lifecycle, request processing pipeline, and package layout

zalando/skipper