K8s YAML Generator

Kubernetes YAML Generator

Generate Kubernetes manifests with deterministic steps, bounded CRD research, and mandatory validation for full-resource output.

Trigger Guidance

Use this skill when the user asks to create or update Kubernetes YAML, for example:

• "Generate a Deployment + Service manifest for my app."
• "Create an Argo CD Application CRD."
• "Write a StatefulSet with PVC templates."
• "Produce production-ready Kubernetes YAML with best practices."

Do not use this skill for validation-only requests. For validation-only work, use k8s-yaml-validator.

Execution Model

Normative keywords:

• MUST: required
• SHOULD: default unless user requests otherwise
• MAY: optional

Deterministic sequence:

1. Preflight request and path/rendering sanity.
2. Capture minimum required inputs.
3. Resolve CRD references (bounded workflow only when CRD/custom API is involved).
4. Generate YAML with baseline quality checks.
5. Run mandatory validation (or documented fallback path when tooling is unavailable).
6. Deliver YAML plus explicit validation report and assumptions.

If one step is blocked by environment constraints, execute that step's fallback and continue.

1) Preflight

Before generation:

• Confirm whether output is full manifest(s) or snippet-only.
• Confirm target Kubernetes version when provided.
• Verify any referenced local file path exists before using it.
• Normalize resource naming to DNS-1123-compatible names where applicable.

Preflight stop condition:

• If required core inputs are missing (resource type, workload image for Pod-based resources, or CRD kind/apiVersion), ask for those first.

2) Capture Required Inputs

Collect:

• Resource types (Deployment, Service, ConfigMap, CRD kind, etc.)
• apiVersion + kind
• Namespace/scoping requirements
• Ports, replicas, images, probes, storage, and secret/config needs
• Environment assumptions (dev/staging/prod)
• For CRDs: project name and target CRD version if known

Safe defaults (state explicitly in output):

• Namespace: default (namespace-scoped resources)
• Deployment replicas: 2
• Service type: ClusterIP
• Image pull policy: IfNotPresent (unless user needs forced pulls)

3) CRD Lookup Workflow (Bounded)

Run this step only for custom APIs outside Kubernetes built-in groups.

3.1 Identify CRD target

Extract:

• API group, version, kind (for example argoproj.io/v1alpha1, Application)
• Requested product/version (for example Argo CD v2.9.x)

3.2 Context7 primary path

Use the correct Context7 tools and payloads:

1. mcp__context7__resolve-library-id
2. mcp__context7__query-docs

Sample payloads:

Tool: mcp__context7__resolve-library-id
libraryName: "argo-cd"
query: "Find Argo CD documentation for Application CRD schema compatibility"

Tool: mcp__context7__query-docs
libraryId: "/argoproj/argo-cd/v2.9.0"
query: "Application CRD required spec fields for apiVersion argoproj.io/v1alpha1 with minimal valid example"

Selection rules:

• Prefer exact project/library name matches.
• Prefer versioned libraryId when user specifies a version.
• Otherwise use unversioned ID and note version uncertainty.

3.3 Thresholds and stop conditions

Bound the lookup to prevent unbounded retries:

• resolve-library-id: max 2 attempts (primary name + one alternate name).
• query-docs: max 3 focused queries total.
• Web fallback: max 2 version-specific searches.

Stop early when all are true:

• Required CRD fields are identified.
• At least one authoritative example is found.
• Version compatibility is known or explicitly marked unknown.

Hard stop when budgets are exhausted:

• Generate only fields verified by sources.
• Mark remaining fields as Needs confirmation.
• Report residual risk and request one of:
  • exact CRD docs URL, or
  • cluster introspection output (for example kubectl explain <kind>.spec when available).

3.4 Fallback order

Use this order:

1. Context7 (resolve-library-id -> query-docs)
2. Official project docs via web search
3. Cluster-local introspection (kubectl explain, if cluster access exists)

If none are available, provide a minimal, clearly marked draft and do not claim full CRD correctness.