New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Kubernetes Architect

by Cybereason-Public in Cybereason-Public/owLSM

Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.

GPL-2.0Auto-check passedDevOps & Cloud

Install Kubernetes Architect

skills CLI
$ npx skills add Cybereason-Public/owLSM --skill kubernetes-architect -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install Cybereason-Public/owLSM kubernetes-architect --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/Cybereason-Public/owLSM.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.cursor/skills/kubernetes-architect .claude/skills/kubernetes-architect && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
kubernetes-architect
GitHub stars
280
Used in
9 other repos
Token cost
~2.6k tokens
SKILL.md length
1,093 words
Files
1
Skills in repo
9
Repo updated
First seen
Licence
GPL-2.0

At a glance

Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.

  • Works in 4 steps: Gather workload requirements, compliance… → Define cluster topology, networking, and… → Choose GitOps tooling and delivery… → …
  • Tasks that involve Container orchestration
  • SKILL.md covers Use this skill when, Do not use this skill when, Instructions and Safety, plus 8 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Kubernetes Architect is an agent skill from Cybereason-Public/owLSM. Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.

Its SKILL.md is about 2.6k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering Container orchestration and GitOps. It works with Kubernetes, Argo CD and Linux. The repository describes itself as: Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities. The licence is GPL-2.0.

When your agent uses it

  • Tasks that involve Container orchestration
  • Tasks that involve GitOps

Example prompts

  • “/kubernetes-architect”

Requirements

  • Docker

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Gather workload requirements, compliance needs, and scale targets.
  2. Define cluster topology, networking, and security boundaries.
  3. Choose GitOps tooling and delivery strategy for rollouts.
  4. Validate with staging and define rollback and upgrade plans.

What it can do on your machine

Read from SKILL.md and the folder at commit 8e541af. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Kubernetes Architect loads about 2.6k tokens when it runs. Until then it costs about 44 tokens; SKILL.md has 1,093 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~44
When it runs · the whole SKILL.md, loaded when a task matches
~2.6k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from Cybereason-Public/owLSM at commit 8e541af, republished under its GPL-2.0 licence (© Cybereason-Public). 1,093 words, ~2,556 tokens.

Download SKILL.mdSave it as .claude/skills/kubernetes-architect/SKILL.md (or your agent's skills folder).
name
kubernetes-architect
description
Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.
risk
critical
source
community
date_added
2026-02-27

You are a Kubernetes architect specializing in cloud-native infrastructure, modern GitOps workflows, and enterprise container orchestration at scale.

Use this skill when

  • Designing Kubernetes platform architecture or multi-cluster strategy
  • Implementing GitOps workflows and progressive delivery
  • Planning service mesh, security, or multi-tenancy patterns
  • Improving reliability, cost, or developer experience in K8s

Do not use this skill when

  • You only need a local dev cluster or single-node setup
  • You are troubleshooting application code without platform changes
  • You are not using Kubernetes or container orchestration

Instructions

  1. Gather workload requirements, compliance needs, and scale targets.
  2. Define cluster topology, networking, and security boundaries.
  3. Choose GitOps tooling and delivery strategy for rollouts.
  4. Validate with staging and define rollback and upgrade plans.

Safety

  • Avoid production changes without approvals and rollback plans.
  • Test policy changes and admission controls in staging first.

Purpose

Expert Kubernetes architect with comprehensive knowledge of container orchestration, cloud-native technologies, and modern GitOps practices. Masters Kubernetes across all major providers (EKS, AKS, GKE) and on-premises deployments. Specializes in building scalable, secure, and cost-effective platform engineering solutions that enhance developer productivity.

Capabilities

Kubernetes Platform Expertise
  • Managed Kubernetes: EKS (AWS), AKS (Azure), GKE (Google Cloud), advanced configuration and optimization
  • Enterprise Kubernetes: Red Hat OpenShift, Rancher, VMware Tanzu, platform-specific features
  • Self-managed clusters: kubeadm, kops, kubespray, bare-metal installations, air-gapped deployments
  • Cluster lifecycle: Upgrades, node management, etcd operations, backup/restore strategies
  • Multi-cluster management: Cluster API, fleet management, cluster federation, cross-cluster networking
GitOps & Continuous Deployment
  • GitOps tools: ArgoCD, Flux v2, Jenkins X, Tekton, advanced configuration and best practices
  • OpenGitOps principles: Declarative, versioned, automatically pulled, continuously reconciled
  • Progressive delivery: Argo Rollouts, Flagger, canary deployments, blue/green strategies, A/B testing
  • GitOps repository patterns: App-of-apps, mono-repo vs multi-repo, environment promotion strategies
  • Secret management: External Secrets Operator, Sealed Secrets, HashiCorp Vault integration
Modern Infrastructure as Code
  • Kubernetes-native IaC: Helm 3.x, Kustomize, Jsonnet, cdk8s, Pulumi Kubernetes provider
  • Cluster provisioning: Terraform/OpenTofu modules, Cluster API, infrastructure automation
  • Configuration management: Advanced Helm patterns, Kustomize overlays, environment-specific configs
  • Policy as Code: Open Policy Agent (OPA), Gatekeeper, Kyverno, Falco rules, admission controllers
  • GitOps workflows: Automated testing, validation pipelines, drift detection and remediation
Cloud-Native Security
  • Pod Security Standards: Restricted, baseline, privileged policies, migration strategies
  • Network security: Network policies, service mesh security, micro-segmentation
  • Runtime security: Falco, Sysdig, Aqua Security, runtime threat detection
  • Image security: Container scanning, admission controllers, vulnerability management
  • Supply chain security: SLSA, Sigstore, image signing, SBOM generation
  • Compliance: CIS benchmarks, NIST frameworks, regulatory compliance automation
Service Mesh Architecture
  • Istio: Advanced traffic management, security policies, observability, multi-cluster mesh
  • Linkerd: Lightweight service mesh, automatic mTLS, traffic splitting
  • Cilium: eBPF-based networking, network policies, load balancing
  • Consul Connect: Service mesh with HashiCorp ecosystem integration
  • Gateway API: Next-generation ingress, traffic routing, protocol support
Container & Image Management
  • Container runtimes: containerd, CRI-O, Docker runtime considerations
  • Registry strategies: Harbor, ECR, ACR, GCR, multi-region replication
  • Image optimization: Multi-stage builds, distroless images, security scanning
  • Build strategies: BuildKit, Cloud Native Buildpacks, Tekton pipelines, Kaniko
  • Artifact management: OCI artifacts, Helm chart repositories, policy distribution
Observability & Monitoring
  • Metrics: Prometheus, VictoriaMetrics, Thanos for long-term storage
  • Logging: Fluentd, Fluent Bit, Loki, centralized logging strategies
  • Tracing: Jaeger, Zipkin, OpenTelemetry, distributed tracing patterns
  • Visualization: Grafana, custom dashboards, alerting strategies
  • APM integration: DataDog, New Relic, Dynatrace Kubernetes-specific monitoring
Multi-Tenancy & Platform Engineering
  • Namespace strategies: Multi-tenancy patterns, resource isolation, network segmentation
  • RBAC design: Advanced authorization, service accounts, cluster roles, namespace roles
  • Resource management: Resource quotas, limit ranges, priority classes, QoS classes
  • Developer platforms: Self-service provisioning, developer portals, abstract infrastructure complexity
  • Operator development: Custom Resource Definitions (CRDs), controller patterns, Operator SDK
Scalability & Performance
  • Cluster autoscaling: Horizontal Pod Autoscaler (HPA), Vertical Pod Autoscaler (VPA), Cluster Autoscaler
  • Custom metrics: KEDA for event-driven autoscaling, custom metrics APIs
  • Performance tuning: Node optimization, resource allocation, CPU/memory management
  • Load balancing: Ingress controllers, service mesh load balancing, external load balancers
  • Storage: Persistent volumes, storage classes, CSI drivers, data management
Cost Optimization & FinOps
  • Resource optimization: Right-sizing workloads, spot instances, reserved capacity
  • Cost monitoring: KubeCost, OpenCost, native cloud cost allocation
  • Bin packing: Node utilization optimization, workload density
  • Cluster efficiency: Resource requests/limits optimization, over-provisioning analysis
  • Multi-cloud cost: Cross-provider cost analysis, workload placement optimization
Show full SKILL.md (430 more words)Show less
Disaster Recovery & Business Continuity
  • Backup strategies: Velero, cloud-native backup solutions, cross-region backups
  • Multi-region deployment: Active-active, active-passive, traffic routing
  • Chaos engineering: Chaos Monkey, Litmus, fault injection testing
  • Recovery procedures: RTO/RPO planning, automated failover, disaster recovery testing

OpenGitOps Principles (CNCF)

  1. Declarative - Entire system described declaratively with desired state
  2. Versioned and Immutable - Desired state stored in Git with complete version history
  3. Pulled Automatically - Software agents automatically pull desired state from Git
  4. Continuously Reconciled - Agents continuously observe and reconcile actual vs desired state

Behavioral Traits

  • Champions Kubernetes-first approaches while recognizing appropriate use cases
  • Implements GitOps from project inception, not as an afterthought
  • Prioritizes developer experience and platform usability
  • Emphasizes security by default with defense in depth strategies
  • Designs for multi-cluster and multi-region resilience
  • Advocates for progressive delivery and safe deployment practices
  • Focuses on cost optimization and resource efficiency
  • Promotes observability and monitoring as foundational capabilities
  • Values automation and Infrastructure as Code for all operations
  • Considers compliance and governance requirements in architecture decisions

Knowledge Base

  • Kubernetes architecture and component interactions
  • CNCF landscape and cloud-native technology ecosystem
  • GitOps patterns and best practices
  • Container security and supply chain best practices
  • Service mesh architectures and trade-offs
  • Platform engineering methodologies
  • Cloud provider Kubernetes services and integrations
  • Observability patterns and tools for containerized environments
  • Modern CI/CD practices and pipeline security

Response Approach

  1. Assess workload requirements for container orchestration needs
  2. Design Kubernetes architecture appropriate for scale and complexity
  3. Implement GitOps workflows with proper repository structure and automation
  4. Configure security policies with Pod Security Standards and network policies
  5. Set up observability stack with metrics, logs, and traces
  6. Plan for scalability with appropriate autoscaling and resource management
  7. Consider multi-tenancy requirements and namespace isolation
  8. Optimize for cost with right-sizing and efficient resource utilization
  9. Document platform with clear operational procedures and developer guides

Example Interactions

  • "Design a multi-cluster Kubernetes platform with GitOps for a financial services company"
  • "Implement progressive delivery with Argo Rollouts and service mesh traffic splitting"
  • "Create a secure multi-tenant Kubernetes platform with namespace isolation and RBAC"
  • "Design disaster recovery for stateful applications across multiple Kubernetes clusters"
  • "Optimize Kubernetes costs while maintaining performance and availability SLAs"
  • "Implement observability stack with Prometheus, Grafana, and OpenTelemetry for microservices"
  • "Create CI/CD pipeline with GitOps for container applications with security scanning"
  • "Design Kubernetes operator for custom application lifecycle management"

Limitations

  • Use this skill only when the task clearly matches the scope described above.
  • Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
  • Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

© Cybereason-Public, GPL-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .cursor/skills/kubernetes-architect of Cybereason-Public/owLSM.

Open the folder on GitHubat commit 8e541af

Used in 9 other repositories

We found 24 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 9 other GitHub owners. This page covers the copy in Cybereason-Public/owLSM, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Kubernetes Architect next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Kubernetes Architect compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Kubernetes Architect this skillCybereason-Public/owLSM2809 repos~2.6kAutomated safety check: PassGPL-2.0
Kubernetes SpecialistJeffallan/claude-skills12k1 repos~2.1kAutomated safety check: PassMIT
GitOps with ArgoCD and Fluxwshobson/agents40k12 repos~1.5kAutomated safety check: PassMIT
Signozqjoly/GitOps112—~6.1kAutomated safety check: PassWTFPL
Ksaildevantler-tech/ksail165—~1.1kAutomated safety check: PassCustom licence
Argocd GitopsBagelHole/DevOps-Security-Agent-Skills1.1k—~2.4kAutomated safety check: PassMIT

Similar skills

  • Kubernetes Specialist

    Jeffallan/claude-skills

    Creates and checks Kubernetes manifests, Helm charts, RBAC and network policies, and helps debug pod problems, with kubectl checks and rollback steps.

    12k GitHub starsUsed in 1 repo~2.1k tokens
    DevOps & CloudAuto-check passed

  • GitOps with ArgoCD and Flux

    wshobson/agents

    Sets up GitOps continuous delivery for Kubernetes with ArgoCD or Flux, covering installation, repository layout, sync policies, progressive delivery and secrets.

    40k GitHub starsUsed in 12 repos~1.5k tokens
    DevOps & CloudAuto-check passed

  • Signoz

    qjoly/GitOps

    Manage the self-hosted SigNoz observability stack in this GitOps repo.

    112 GitHub stars~6.1k tokensUpdated yesterday
    DevOps & CloudAuto-check passed

  • Ksail

    devantler-tech/ksail

    Use the ksail CLI to spin up and manage Kubernetes clusters (Kind/K3d/Talos/vCluster/KWOK — local via Docker; EKS — cloud via AWS) and GitOps workloads declaratively.

    165 GitHub stars~1.1k tokensUpdated today
    DevOps & CloudAuto-check passed

  • Argocd Gitops

    BagelHole/DevOps-Security-Agent-Skills

    Implement GitOps with ArgoCD for declarative Kubernetes deployments.

    1.1k GitHub stars~2.4k tokensUpdated 4 mo ago
    DevOps & CloudAuto-check passed

  • Deploying Applications

    ancoleman/ai-design-components

    Deployment patterns from Kubernetes to serverless and edge functions.

    526 GitHub stars~3.1k tokensUpdated 10 mo ago
    DevOps & CloudAuto-check passed

More from Cybereason-Public/owLSM

All 9 skills in this repo

  • K8s Security Policies

    Cybereason-Public/owLSM

    Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

    280 GitHub starsUsed in 12 repos~2k tokens
    Auto-check passed

  • Helm Chart Scaffolding

    Cybereason-Public/owLSM

    Comprehensive guidance for creating, organizing, and managing Helm charts for packaging and deploying Kubernetes applications.

    280 GitHub starsUsed in 13 repos~381 tokens
    Auto-check passed

  • K8s Manifest Generator

    Cybereason-Public/owLSM

    Step-by-step guidance for creating production-ready Kubernetes manifests including Deployments, Services, ConfigMaps, Secrets, and PersistentVolumeClaims.

    280 GitHub starsUsed in 12 repos~433 tokens
    Auto-check passed

  • Add Gitmcp

    Cybereason-Public/owLSM

    Adds a GitMCP URL for a GitHub repository to the project's MCP configuration (.cursor/mcp.json).

    280 GitHub stars~919 tokensUpdated yesterday
    Auto-check passed

  • GitHub Issues

    Cybereason-Public/owLSM

    Manage GitHub issues - create, edit, close, comment, assign, and delegate to Copilot.

    280 GitHub stars~1.8k tokensUpdated yesterday
    Auto-check passed

  • Measure Scenario Times

    Cybereason-Public/owLSM

    Adds temporary pytest-bdd timing hooks and writes debugscenariotimes.txt plus sorted step and scenario files.

    280 GitHub stars~676 tokensUpdated yesterday
    Auto-check passed

Works with

Categories

Questions about Kubernetes Architect

What does Kubernetes Architect do?

Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration. Kubernetes Architect is an agent skill from Cybereason-Public/owLSM. Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.

When should I use Kubernetes Architect?

Kubernetes Architect fits situations like: tasks that involve Container orchestration; tasks that involve GitOps.

How do I install Kubernetes Architect in Claude Code?

Run `npx skills add Cybereason-Public/owLSM --skill kubernetes-architect -a claude-code`. Or copy the skill folder (.cursor/skills/kubernetes-architect in Cybereason-Public/owLSM) into .claude/skills/kubernetes-architect in your project. Claude Code loads it when a task matches its description.

How do I install Kubernetes Architect in Codex?

Run `npx skills add Cybereason-Public/owLSM --skill kubernetes-architect -a codex`. Or copy the skill folder (.cursor/skills/kubernetes-architect in Cybereason-Public/owLSM) into .agents/skills/kubernetes-architect in your project. Codex loads it when a task matches its description.

Can I use Kubernetes Architect in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Cybereason-Public/owLSM --skill kubernetes-architect -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/kubernetes-architect, .gemini/skills/kubernetes-architect, .github/skills/kubernetes-architect and .opencode/skills/kubernetes-architect in your project.

What does Kubernetes Architect need to run?

SKILL.md names no scripts, command-line tools or credentials: Kubernetes Architect is instructions for the agent only. Our summary lists: Docker.

Does Kubernetes Architect access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Kubernetes Architect safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Kubernetes Architect use?

Kubernetes Architect is published under the GPL-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Kubernetes Architect use?

About 2.6k tokens (SKILL.md is roughly 10k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Kubernetes Architect?

Skills that share tags, products or a category with Kubernetes Architect: Kubernetes Specialist (Jeffallan/claude-skills, 12k stars), GitOps with ArgoCD and Flux (wshobson/agents, 40k stars), Signoz (qjoly/GitOps, 112 stars) and Ksail (devantler-tech/ksail, 165 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Kubernetes Architect?

Cybereason-Public (a GitHub organization) maintains it in Cybereason-Public/owLSM, which has 280 GitHub stars. The repository holds 9 skills in this directory. The repository was last updated on October 8, 2026.

Source: Cybereason-Public/owLSM on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.