Kubernetes · Container orchestration

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

Cybereason-Public/owLSM

Installs and configures Kubeshark on a Kubernetes cluster, choosing between the quick CLI path and a Helm install with custom values.

kubeshark/kubeshark

Creates and queries KubeSphere users, workspaces and projects and assigns built-in roles, defaulting to least privilege and never deleting anything.

kubesphere/kubesphere

Install, upgrade, and operate the Sim Helm chart on Kubernetes.

simstudioai/sim

Comprehensive guidance for creating, organizing, and managing Helm charts for packaging and deploying Kubernetes applications.

Cybereason-Public/owLSM

Help users install and configure the mirrord Operator for team/enterprise environments.

metalbear-co/mirrord

Syntax reference for KFL2, the CEL-based display filter language used to search Kubernetes network traffic captured by Kubeshark, loaded before any filter is written.

kubeshark/kubeshark

Installs, checks and troubleshoots the KubeSphere ServiceMesh extension (Istio, Kiali, Jaeger), including grayscale release, sidecar injection, topology and tracing issues.

kubesphere/kubesphere

Migrate from ingress-nginx to Higress in Kubernetes environments.

higress-group/higress

Deploys and configures a LangBot instance with Docker Compose or Kubernetes, covering config.yaml, the Box sandbox runtime, the plugin runtime and the global API key.

langbot-app/LangBot

Helps DevOps engineers configure mirrord Operator's Temporal task queue splitting feature end-to-end.

metalbear-co/mirrord

Maintain and validate OpenShell's build-only Windows MSVC lane for x64 and ARM64.

NVIDIA/OpenShell

Creates and checks Kubernetes manifests, Helm charts, RBAC and network policies, and helps debug pod problems, with kubectl checks and rollback steps.

Jeffallan/claude-skills

Run vet immediately after ANY logical unit of code changes. An agent skill from atilladeniz/Kubeli.

atilladeniz/Kubeli

Deploys KubeEye on KubeSphere and writes InspectRule and InspectPlan resources to inspect cluster health, then retrieves the inspection reports.

kubesphere/kubesphere

Gives step-by-step checklists for adding Ingress annotations, VirtualServer fields and Helm values to the NGINX Kubernetes Ingress Controller, with common gotchas.

nginx/kubernetes-ingress

Help users set up mirrord in CI pipelines for testing against real Kubernetes environments.

metalbear-co/mirrord

Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.

Cybereason-Public/owLSM

Queries, creates, updates, binds and troubleshoots NodeGroup resources in the edgewize nodegroup project through a bundled authenticated API script.

kubesphere/kubesphere

Step-by-step checklist for adding a new Policy CRD type to the NGINX Ingress Controller, from the Go types and validation to config generation and templates.

nginx/kubernetes-ingress

Deploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm).

nicepkg/auto-company

Use with the dstack skill for model-serving work when the image, serving command, resources, backend/fleet choice, or service behavior is not proven.

dstackai/dstack

Helps users generate, edit, and validate mirrord.json configuration files for mirrord (MetalBear).

metalbear-co/mirrord

Automates the ngrok-operator release process: gathers PR data, classifies changes by component (container, Helm chart, CRDs chart), generates changelogs, updates version files, and prepares the…

ngrok/ngrok-operator

Install and configure Kelos; author, document, inspect, troubleshoot, and operate its Kubernetes custom resources and CRD schemas in the kelos.dev API group using manifests, kubectl, or the kelos CLI.

kelos-dev/kelos

Deploy or upgrade OpenBKN on a customer-authorized Linux server through the repository's deploy scripts, with preflight checks, explicit confirmation, secret handling, and post-deployment…

openbkn-ai/bkn-foundry

Diagnose and fix flaky tests tracked as open kind/flake issues in kubernetes-sigs/agent-sandbox — reproduce the flake, apply a minimal fix, and open a PR linking the issue.

kubernetes-sigs/agent-sandbox

Keeps Kubernetes manifests, Helm charts and policies grounded by diagnosing six failure modes, such as insecure defaults and API drift, and loading only matching references.

LukasNiessen/kubernetes-skill

Run ServiceRadar web-ng locally against the live Kubernetes demo CNPG database for dashboard, SRQL, services, and UI testing.

carverauto/serviceradar

Helps DevOps engineers configure mirrord Operator's Kafka queue splitting feature end-to-end.

metalbear-co/mirrord

Install NVIDIA NIM Operator on Kubernetes with prerequisite checks, optional NVIDIA GPU Operator dependency installation, public or local Helm chart selection, optional Dynamo support, and optional…

NVIDIA/k8s-nim-operator

Sets up GitOps continuous delivery for Kubernetes with ArgoCD or Flux, covering installation, repository layout, sync policies, progressive delivery and secrets.

wshobson/agents

Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes.

NVIDIA/OpenShell

Run a goal end to end inside an isolated K8E sandbox pod (gVisor / Kata / Firecracker) instead of on the host: exec bash / Python / Node / TypeScript, install packages, move files in and out, reuse…

xiaods/k8e

Intrinsic Core gRPC service selection, Envoy x-resource-instance-name routing, and progressive disclosure hub across ObjectWorldService, MotionPlannerService, ICON, cameras, KVStore, and platform…

intrinsic-ai/intrinsic-core

Deploy, configure, verify, upgrade, and troubleshoot DeepSeek Harness with the community Docker, Docker Compose, rootless Podman, and Helm runtime, including the built-in Chromium/noVNC browser…

runzhliu/deepseek-harness-docker

Parse a Go e2e test from tests/e2e/, translate each step to kubectl and az CLI commands, and interactively replay the test against a live cluster.

kubernetes-sigs/cloud-provider-azure

Runs the lifecycle of FrontendExtension resources in a Kubernetes cluster: create, rebuild, package, publish, unpublish, delete and debug stuck states.

kubesphere/kubesphere

An MCP server skill for managing Kubernetes sandboxes. An agent skill from kubernetes-sigs/agent-sandbox.

kubernetes-sigs/agent-sandbox

A skill your agent uses when building, wiring, reviewing, or debugging MailTime and ostrio:mailer email queues for horizontally scaled Node.js, Bun, or Meteor apps.

veliovgroup/mail-time

A skill your agent uses when writing, editing, reviewing, or running Helm chart tests for the Astronomer APC repository.

astronomer/astronomer

Deep static code review of an mql provider for logic errors, nil-handling bugs, pagination truncation, caching/id collisions, and other defects that silently give users wrong data.

mondoohq/mql

Trigger when a user is building, writing, or debugging Helm chart source files — not deploying or installing charts.

community-charts/helm-charts

基于 tgf v2（github.com/thkhxm/tgf/v2）用确定性的 tgfctl 工作流创建、验证和维护 Go 游戏服务器项目。

thkhxm/tgf

Guide users from zero to their first working mirrord session.

metalbear-co/mirrord

Safely uninstall NVIDIA NIM Operator from Kubernetes with inventory checks, explicit approval gates for destructive actions, optional custom resource cleanup, optional CRD removal, and…

NVIDIA/k8s-nim-operator

A skill your agent uses when validating DCGM Exporter in a local GPU-backed k3d/Kubernetes environment.

NVIDIA/dcgm-exporter

Check Docker Hub for a new :latest image on a managed service and roll it out to the home Pi k8s cluster, the same way authentication-service was deployed on 2026-08-29 (SSH + kubectl rollout…

rodrigorodrigues/microservices-design-patterns