Best container orchestration skills for Claude Code, Codex and other agents.

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

Cybereason-Public/owLSM

Installs and configures Kubeshark on a Kubernetes cluster, choosing between the quick CLI path and a Helm install with custom values.

kubeshark/kubeshark

Creates and queries KubeSphere users, workspaces and projects and assigns built-in roles, defaulting to least privilege and never deleting anything.

kubesphere/kubesphere

Install, upgrade, and operate the Sim Helm chart on Kubernetes.

simstudioai/sim

Comprehensive guidance for creating, organizing, and managing Helm charts for packaging and deploying Kubernetes applications.

Cybereason-Public/owLSM

Syntax reference for KFL2, the CEL-based display filter language used to search Kubernetes network traffic captured by Kubeshark, loaded before any filter is written.

kubeshark/kubeshark

Installs, checks and troubleshoots the KubeSphere ServiceMesh extension (Istio, Kiali, Jaeger), including grayscale release, sidecar injection, topology and tracing issues.

kubesphere/kubesphere

Migrate from ingress-nginx to Higress in Kubernetes environments.

higress-group/higress

Deploys and configures a LangBot instance with Docker Compose or Kubernetes, covering config.yaml, the Box sandbox runtime, the plugin runtime and the global API key.

langbot-app/LangBot

Maintain and validate OpenShell's build-only Windows MSVC lane for x64 and ARM64.

NVIDIA/OpenShell

Run vet immediately after ANY logical unit of code changes. An agent skill from atilladeniz/Kubeli.

atilladeniz/Kubeli

Deploys KubeEye on KubeSphere and writes InspectRule and InspectPlan resources to inspect cluster health, then retrieves the inspection reports.

kubesphere/kubesphere

Gives step-by-step checklists for adding Ingress annotations, VirtualServer fields and Helm values to the NGINX Kubernetes Ingress Controller, with common gotchas.

nginx/kubernetes-ingress

Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.

Cybereason-Public/owLSM

Queries, creates, updates, binds and troubleshoots NodeGroup resources in the edgewize nodegroup project through a bundled authenticated API script.

kubesphere/kubesphere

Creates and checks Kubernetes manifests, Helm charts, RBAC and network policies, and helps debug pod problems, with kubectl checks and rollback steps.

Jeffallan/claude-skills

Step-by-step checklist for adding a new Policy CRD type to the NGINX Ingress Controller, from the Go types and validation to config generation and templates.

nginx/kubernetes-ingress

Use with the dstack skill for model-serving work when the image, serving command, resources, backend/fleet choice, or service behavior is not proven.

dstackai/dstack

Deploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm).

nicepkg/auto-company

Automates the ngrok-operator release process: gathers PR data, classifies changes by component (container, Helm chart, CRDs chart), generates changelogs, updates version files, and prepares the…

ngrok/ngrok-operator

Install and configure Kelos; author, document, inspect, troubleshoot, and operate its Kubernetes custom resources and CRD schemas in the kelos.dev API group using manifests, kubectl, or the kelos CLI.

kelos-dev/kelos

Deploy or upgrade OpenBKN on a customer-authorized Linux server through the repository's deploy scripts, with preflight checks, explicit confirmation, secret handling, and post-deployment…

openbkn-ai/bkn-foundry

Keeps Kubernetes manifests, Helm charts and policies grounded by diagnosing six failure modes, such as insecure defaults and API drift, and loading only matching references.

LukasNiessen/kubernetes-skill

Diagnose and fix flaky tests tracked as open kind/flake issues in kubernetes-sigs/agent-sandbox — reproduce the flake, apply a minimal fix, and open a PR linking the issue.

kubernetes-sigs/agent-sandbox

Run ServiceRadar web-ng locally against the live Kubernetes demo CNPG database for dashboard, SRQL, services, and UI testing.

carverauto/serviceradar

Guided authoring of Helm Improvement Proposals (HIPs). An agent skill from helm/community.

helm/community

Audit and validate Flux CD GitOps repositories by scanning local repo files (not live clusters) — runs Kubernetes schema validation, detects deprecated Flux APIs, reviews RBAC/multi-tenancy/secrets…

fluxcd/agent-skills

Install NVIDIA NIM Operator on Kubernetes with prerequisite checks, optional NVIDIA GPU Operator dependency installation, public or local Helm chart selection, optional Dynamo support, and optional…

NVIDIA/k8s-nim-operator

Run a goal end to end inside an isolated K8E sandbox pod (gVisor / Kata / Firecracker) instead of on the host: exec bash / Python / Node / TypeScript, install packages, move files in and out, reuse…

xiaods/k8e

Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes.

NVIDIA/OpenShell

Intrinsic Core gRPC service selection, Envoy x-resource-instance-name routing, and progressive disclosure hub across ObjectWorldService, MotionPlannerService, ICON, cameras, KVStore, and platform…

intrinsic-ai/intrinsic-core

Deploy, configure, verify, upgrade, and troubleshoot DeepSeek Harness with the community Docker, Docker Compose, rootless Podman, and Helm runtime, including the built-in Chromium/noVNC browser…

runzhliu/deepseek-harness-docker

Parse a Go e2e test from tests/e2e/, translate each step to kubectl and az CLI commands, and interactively replay the test against a live cluster.

kubernetes-sigs/cloud-provider-azure

Runs the lifecycle of FrontendExtension resources in a Kubernetes cluster: create, rebuild, package, publish, unpublish, delete and debug stuck states.

kubesphere/kubesphere

An MCP server skill for managing Kubernetes sandboxes. An agent skill from kubernetes-sigs/agent-sandbox.

kubernetes-sigs/agent-sandbox

A skill your agent uses when building, wiring, reviewing, or debugging MailTime and ostrio:mailer email queues for horizontally scaled Node.js, Bun, or Meteor apps.

veliovgroup/mail-time

A skill your agent uses when writing, editing, reviewing, or running Helm chart tests for the Astronomer APC repository.

astronomer/astronomer

Deep static code review of an mql provider for logic errors, nil-handling bugs, pagination truncation, caching/id collisions, and other defects that silently give users wrong data.

mondoohq/mql

Trigger when a user is building, writing, or debugging Helm chart source files — not deploying or installing charts.

community-charts/helm-charts

基于 tgf v2（github.com/thkhxm/tgf/v2）用确定性的 tgfctl 工作流创建、验证和维护 Go 游戏服务器项目。

thkhxm/tgf

Safely uninstall NVIDIA NIM Operator from Kubernetes with inventory checks, explicit approval gates for destructive actions, optional custom resource cleanup, optional CRD removal, and…

NVIDIA/k8s-nim-operator

A skill your agent uses when validating DCGM Exporter in a local GPU-backed k3d/Kubernetes environment.

NVIDIA/dcgm-exporter

Check Docker Hub for a new :latest image on a managed service and roll it out to the home Pi k8s cluster, the same way authentication-service was deployed on 2026-08-29 (SSH + kubectl rollout…

rodrigorodrigues/microservices-design-patterns

Multi-agent PR review using Claude Code, Codex, and CodeRabbit.

NVIDIA/aicr

ANALYSIS SKILL - Observe Aspire apps: logs, traces, metrics, resource state, telemetry export, browser telemetry, and the standalone dashboard.

CommunityToolkit/Aspire

Meta-level debugging workflows, architectural layer isolation, and progressive disclosure routing across Envoy ingress, Kubernetes pods, Behavior Trees, ObjectWorld synchronization, ICON real-time…

intrinsic-ai/intrinsic-core

Clean up Docker resources created by the Learn Docker & K8s game.

ericboy0224/learn-docker-and-k8s

Reviews CRDs for compliance with Kubernetes API conventions.

agent-substrate/substrate