Agent skill

KubeSphere Gateway Management

by kubesphere in kubesphere/kubesphere

Installs, uninstalls, checks and troubleshoots the KubeSphere Gateway extension built on ingress-nginx, including gateways stuck in bad states and Helm or pod failures.

Custom licenceAuto-check passedDevOps & Cloud

Install KubeSphere Gateway Management

skills CLI
$ npx skills add kubesphere/kubesphere --skill kubesphere-gateway -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install kubesphere/kubesphere kubesphere-gateway --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/kubesphere/kubesphere.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/kubesphere-gateway .claude/skills/kubesphere-gateway && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
kubesphere-gateway
GitHub stars
17k
Token cost
~2.9k tokens
SKILL.md length
630 words
Files
5 (incl. scripts, references)
Skills in repo
32
Repo updated
First seen
Licence
Custom licence

At a glance

Installs, uninstalls, checks and troubleshoots the KubeSphere Gateway extension built on ingress-nginx, including gateways stuck in bad states and Helm or pod failures.

  • Works in 3 steps: Detect and Select Version → Detect and Select Clusters → Generate and Apply InstallPlan
  • Installing or upgrading the Gateway extension on a KubeSphere cluster
  • SKILL.md covers Overview, Before You Start, Installation and Status Checking, plus 3 more sections
  • Runs Shell scripts from its folder; calls kubectl and helm

What it does

The Gateway extension provides external access for KubeSphere through ingress-nginx at three levels: a cluster gateway, one per workspace and one per project. Each gateway is its own Helm release, with its lifecycle handled by the gateway-controller-manager in the kubesphere-controls-system namespace. The skill explains the Gateway resource, whose status moves through Creating, Updating, Running, Faulted and Stopped with a GatewayReady condition, and the UpgradePlan resource for upgrading several gateways in one job.

Before installing, the agent checks whether the extension is already present with kubectl and lists the available extension versions, so an upgrade is just a choice of a newer one. Bundled scripts generate the install plan, check status and verify an uninstall, and references/extension-values.md lists the values. NGINX request, error and latency metrics reach Prometheus only if the optional whizard-monitoring extension is installed. The newer Kubernetes Gateway API variant with Traefik is handled by the kubesphere-gateway-api skill instead.

When your agent uses it

  • Installing or upgrading the Gateway extension on a KubeSphere cluster
  • Diagnosing a gateway stuck in Creating, Updating or Faulted
  • Troubleshooting Helm release or pod failures for a gateway
  • Confirming that an uninstall left nothing behind

Example prompts

  • “Install the Gateway extension and pick the latest stable version.”
  • “The project gateway in my namespace is stuck in Creating; find out why.”
  • “Check the status of every gateway and report any that are Faulted.”
  • “Uninstall the Gateway extension and verify nothing is left behind.”

Requirements

  • kubectl access to a cluster running KubeSphere

Workflow steps

3 steps, taken from the step headings in SKILL.md.

  1. Detect and Select Version
  2. Detect and Select Clusters
  3. Generate and Apply InstallPlan

What it can do on your machine

Read from SKILL.md and the folder at commit 04a29b5. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 3 files in scripts/ (Shell), which the agent can run.

    Shell commands in SKILL.md call:

    • kubectl
    • helm

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use kubectl and helm, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

KubeSphere Gateway Management loads about 2.9k tokens when it runs, and up to ~3.8k if it reads all its reference files. Until then it costs about 106 tokens; SKILL.md has 630 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~106
When it runs · the whole SKILL.md, loaded when a task matches
~2.9k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~3.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 630 words (~2,900 tokens).

“Provides external access management (ingress) for KubeSphere using ingress-nginx. Supports three-tier gateway management:”

— opening of SKILL.md by kubesphere, Custom licence
name
kubesphere-gateway

Read the full SKILL.md on GitHub

Files

SKILL.md and 4 other files (scripts, references) in skills/kubesphere-gateway of kubesphere/kubesphere.

  • SKILL.md
  • references/extension-values.md
  • scripts/check-status.sh
  • scripts/generate-installplan.sh
  • scripts/verify-uninstall.sh

Open the folder on GitHubat commit 04a29b5

Compare with similar skills

KubeSphere Gateway Management next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

KubeSphere Gateway Management compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
KubeSphere Gateway Management this skillkubesphere/kubesphere17k—~2.9kAutomated safety check: PassCustom licence
NGINX Ingress Controller Feature Checklistsnginx/kubernetes-ingress5.1k—~1.4kAutomated safety check: PassApache-2.0
Aks Deployment Skilltimothywarner/chatgptclass143—~916Automated safety check: PassCustom licence
Kubeshark Installerkubeshark/kubeshark12k—~3.6kAutomated safety check: NotesApache-2.0
Nginx To Higress Migrationhigress-group/higress9.5k—~3.9kAutomated safety check: PassApache-2.0
NGINX Ingress Policy CRD Guidenginx/kubernetes-ingress5.1k—~2kAutomated safety check: PassApache-2.0

Similar skills

  • Gives step-by-step checklists for adding Ingress annotations, VirtualServer fields and Helm values to the NGINX Kubernetes Ingress Controller, with common gotchas.

    5.1k GitHub stars~1.4k tokensUpdated today
    DevOps & CloudAuto-check passed
  • Aks Deployment Skill

    timothywarner/chatgptclass

    Deploy and operate workloads on Azure Kubernetes Service (AKS) the safe way.

    143 GitHub stars~916 tokensUpdated 20 days ago
    DevOps & CloudAuto-check passed
  • Kubeshark Installer

    kubeshark/kubeshark

    Installs and configures Kubeshark on a Kubernetes cluster, choosing between the quick CLI path and a Helm install with custom values.

    12k GitHub stars~3.6k tokensUpdated 2 days ago
    DevOps & CloudAuto-check: notes
  • Nginx To Higress Migration

    higress-group/higress

    Migrate from ingress-nginx to Higress in Kubernetes environments.

    9.5k GitHub stars~3.9k tokensUpdated yesterday
    DevOps & CloudAuto-check passed
  • NGINX Ingress Policy CRD Guide

    nginx/kubernetes-ingress

    Step-by-step checklist for adding a new Policy CRD type to the NGINX Ingress Controller, from the Go types and validation to config generation and templates.

    5.1k GitHub stars~2k tokensUpdated today
    DevOps & CloudAuto-check passed
  • KubeShark for Kubernetes

    LukasNiessen/kubernetes-skill

    Keeps Kubernetes manifests, Helm charts and policies grounded by diagnosing six failure modes, such as insecure defaults and API drift, and loading only matching references.

    446 GitHub stars~1.2k tokensUpdated 26 days ago
    DevOps & CloudAuto-check passed

More from kubesphere/kubesphere

All 32 skills in this repo
  • Creates and queries KubeSphere users, workspaces and projects and assigns built-in roles, defaulting to least privilege and never deleting anything.

    17k GitHub stars~3.1k tokensUpdated 2 mo ago
    Auto-check passed
  • KubeSphere ServiceMesh Manager

    kubesphere/kubesphere

    Installs, checks and troubleshoots the KubeSphere ServiceMesh extension (Istio, Kiali, Jaeger), including grayscale release, sidecar injection, topology and tracing issues.

    17k GitHub stars~2.4k tokensUpdated 2 mo ago
    Auto-check passed
  • KubeEye Cluster Inspection

    kubesphere/kubesphere

    Deploys KubeEye on KubeSphere and writes InspectRule and InspectPlan resources to inspect cluster health, then retrieves the inspection reports.

    17k GitHub stars~3.6k tokensUpdated 2 mo ago
    Auto-check passed
  • KubeSphere NodeGroup Operations

    kubesphere/kubesphere

    Queries, creates, updates, binds and troubleshoots NodeGroup resources in the edgewize nodegroup project through a bundled authenticated API script.

    17k GitHub stars~1.9k tokensUpdated 2 mo ago
    Auto-check passed
  • WizTelemetry Platform Service

    kubesphere/kubesphere

    Installs and configures the WizTelemetry Platform Service extension for KubeSphere, the shared API server behind its observability extensions.

    17k GitHub stars~1.8k tokensUpdated 2 mo ago
    Auto-check passed
  • Runs the lifecycle of FrontendExtension resources in a Kubernetes cluster: create, rebuild, package, publish, unpublish, delete and debug stuck states.

    17k GitHub stars~3.2k tokensUpdated 2 mo ago
    Auto-check passed

Categories

Questions about KubeSphere Gateway Management

What does KubeSphere Gateway Management do?

Installs, uninstalls, checks and troubleshoots the KubeSphere Gateway extension built on ingress-nginx, including gateways stuck in bad states and Helm or pod failures. The Gateway extension provides external access for KubeSphere through ingress-nginx at three levels: a cluster gateway, one per workspace and one per project. Each gateway is its own Helm release, with its lifecycle handled by the gateway-controller-manager in the kubesphere-controls-system namespace.

When should I use KubeSphere Gateway Management?

KubeSphere Gateway Management fits situations like: installing or upgrading the Gateway extension on a KubeSphere cluster; diagnosing a gateway stuck in Creating, Updating or Faulted; troubleshooting Helm release or pod failures for a gateway; confirming that an uninstall left nothing behind.

How do I install KubeSphere Gateway Management in Claude Code?

Run `npx skills add kubesphere/kubesphere --skill kubesphere-gateway -a claude-code`. Or copy the skill folder (skills/kubesphere-gateway in kubesphere/kubesphere) into .claude/skills/kubesphere-gateway in your project. Claude Code loads it when a task matches its description.

How do I install KubeSphere Gateway Management in Codex?

Run `npx skills add kubesphere/kubesphere --skill kubesphere-gateway -a codex`. Or copy the skill folder (skills/kubesphere-gateway in kubesphere/kubesphere) into .agents/skills/kubesphere-gateway in your project. Codex loads it when a task matches its description.

Can I use KubeSphere Gateway Management in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add kubesphere/kubesphere --skill kubesphere-gateway -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/kubesphere-gateway, .gemini/skills/kubesphere-gateway, .github/skills/kubesphere-gateway and .opencode/skills/kubesphere-gateway in your project.

What does KubeSphere Gateway Management need to run?

Going by SKILL.md and its folder, KubeSphere Gateway Management needs a shell for the scripts in its folder and the command-line tools its instructions call (kubectl and helm). Our summary lists: kubectl access to a cluster running KubeSphere.

Does KubeSphere Gateway Management access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is KubeSphere Gateway Management safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does KubeSphere Gateway Management use?

KubeSphere Gateway Management has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does KubeSphere Gateway Management use?

About 2.9k tokens (SKILL.md is roughly 12k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 910 tokens, read only when the agent opens those files.

What are the alternatives to KubeSphere Gateway Management?

Skills that share tags, products or a category with KubeSphere Gateway Management: NGINX Ingress Controller Feature Checklists (nginx/kubernetes-ingress, 5.1k stars), Aks Deployment Skill (timothywarner/chatgptclass, 143 stars), Kubeshark Installer (kubeshark/kubeshark, 12k stars) and Nginx To Higress Migration (higress-group/higress, 9.5k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains KubeSphere Gateway Management?

kubesphere (a GitHub organization) maintains it in kubesphere/kubesphere, which has 17,057 GitHub stars. The repository holds 32 skills in this directory. The repository was last updated on July 15, 2026.

Source: kubesphere/kubesphere on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.