kubernetes-platform-skills

Plugin kubernetes-platform-skills from marketplace ops-engineering-skills in selvarajmurugesan90/ops-engineering-skills. Commands read from the repo's manifest — 1 month ago.

Skills (35)

• cert-manager-tls-automation

  Guides installing and configuring cert-manager for automated TLS certificate issuance and renewal — Issuers vs. ClusterIssuers, ACME/ Let's Encrypt HTTP-01 and DNS-01 challenges, private-CA issuance, and integration with Ingress-nginx and Istio gateways. Use when a user asks to "automate TLS certifi

• cni-networking-calico-flannel

  Guides choosing and installing a Kubernetes CNI plugin — Calico vs. Flannel — including NetworkPolicy enforcement capability differences, BGP vs. VXLAN/overlay data paths, and IP address management (IPAM) tradeoffs. Use when a user asks to "choose a CNI plugin for Kubernetes," "enable NetworkPolicy

• complete-kubernetes-deployment-on-aks-from-scratch

  Sequences a complete, end-to-end AKS deployment from a bare Azure subscription to a production-ready cluster serving a first workload — Azure landing zone prerequisites, AKS cluster and node pool provisioning, Azure CNI (with the Calico/Cilium alternative noted), ingress (Application Gateway Ingress

• complete-kubernetes-deployment-on-eks-from-scratch

  Sequences a complete, end-to-end EKS deployment from a bare AWS account to a production-ready cluster serving a first workload — landing zone/IAM prerequisites, EKS cluster and node group provisioning, VPC CNI (with the Calico/Cilium alternative noted), ingress (ALB vs. ingress-nginx), cert- manager

• complete-kubernetes-deployment-on-gke-from-scratch

  Sequences a complete, end-to-end GKE deployment from a bare GCP project to a production-ready cluster serving a first workload — GCP landing zone prerequisites, GKE cluster and node pool provisioning, VPC-native/ Dataplane V2 CNI (with the Calico alternative noted), ingress (GKE Ingress/Gateway API

• complete-kubernetes-deployment-on-oke-oci-from-scratch

  Sequences a complete, end-to-end OKE (Oracle Container Engine for Kubernetes) deployment from a bare OCI tenancy to a production-ready cluster serving a first workload — OCI landing zone prerequisites (Compartments, Dynamic Groups), OKE Enhanced cluster and node pool provisioning, VCN-Native pod net

• complete-kubernetes-deployment-on-prem-with-kubeadm-from-scratch

  Sequences a complete, end-to-end self-managed on-prem Kubernetes deployment from bare-metal hosts to a production-ready HA cluster serving a first workload — physical/network prerequisites, kubeadm init/join HA control plane with kube-vip, CNI (Calico/Flannel), MetalLB for LoadBalancer Services (bar

• complete-kubernetes-deployment-with-k3s-from-scratch

  Sequences a complete K3s deployment from bare hosts (edge, on-prem VM, or dev/CI) to a production-ready lightweight cluster serving a first workload — topology/datastore choice, bundled Flannel CNI (with the Calico alternative noted), built-in Traefik vs. ingress-nginx, K3s's ServiceLB vs. MetalLB,

• container-runtime-docker-containerd

  Guides choosing and configuring the container RUNTIME engine — Docker Engine vs. containerd vs. CRI-O — including rootless mode, runtime (runc/crun/gVisor/Kata) configuration, and migration considerations for clusters moving off dockershim. This is about the runtime that executes containers, not bui

• crossplane-configuration-validation

  Validates Crossplane `Composition`s, `CompositeResourceDefinition`s (XRDs), and `Claim`s before applying them — schema validation with `crossplane beta validate`/`crossplane render`, catching field-path patch typos, and dry-running a Claim against an XRD's schema to catch mismatches before they reac

• crossplane-kubernetes-native-provisioning

  Provisions cloud infrastructure through Crossplane's Kubernetes-native control plane model — Providers, `Composition`/`CompositeResourceDefinition` (XRD), and namespaced Claims — as an alternative to Terraform for teams that want infrastructure requests to look like any other Kubernetes API object,

• etcd-backup-restore-and-cluster-health

  Guides taking and verifying etcd snapshots (`etcdctl snapshot save`), restoring a Kubernetes cluster's control-plane state from a snapshot, and monitoring etcd cluster health — quorum, member status, disk fsync/ backend commit latency, and DB size — on self-managed clusters (kubeadm, Cluster API, K3

• flux-cd-configuration-and-reconciliation

  Configures Flux CD's GitOps toolkit CRDs — `GitRepository` / `OCIRepository` sources, `Kustomization` and `HelmRelease` reconcilers, and the reconciliation loop's interval/dependency/health-check behavior — as the other major CNCF GitOps operator alongside Argo CD. Use when a user asks to "set up Fl

• flux-cd-configuration-validation

  Validates Flux CD `Kustomization`s and `HelmRelease`s with build/diff/ dry-run tooling (`flux diff kustomization`, `kustomize build`, `helm template`) before they reconcile against a live cluster, and interprets `flux get`/status conditions to distinguish a genuinely healthy reconciliation from one

• helm-chart-authoring

  Guides creating, templating, testing, versioning, and publishing Helm charts for Kubernetes applications — chart scaffolding, values schema design, template helpers, helm unittest/chart-testing (ct), semantic versioning of charts vs. app versions, and publishing to an OCI or classic chart repository

• ingress-nginx-configuration

  Guides installing and configuring the NGINX Ingress Controller — install methods, per-Ingress annotations, TLS termination, rate limiting, path-based/host-based routing, and troubleshooting. Use when a user asks to "install nginx ingress controller," "route traffic to a Kubernetes service by path or

• keda-configuration-validation

  Validates a KEDA `ScaledObject`/`ScaledJob` configuration before production — confirming `TriggerAuthentication` actually resolves and authenticates, scaling thresholds match real workload capacity, and `cooldownPeriod`/`minReplicaCount` won't cause flapping or cold-start latency spikes. Use when th

• keda-event-driven-autoscaling-configuration

  Configures KEDA (Kubernetes Event-Driven Autoscaling) `ScaledObject` and `ScaledJob` custom resources to scale pods based on external event-source metrics — Kafka consumer lag, SQS/Azure Queue depth, a Prometheus query, or a cron schedule — rather than only CPU/memory like the built-in HPA. Use when

• kubernetes-cluster-post-provision-conformance-validation

  Guides validating a freshly provisioned Kubernetes cluster before declaring it production-ready — running CNCF conformance tests via Sonobuoy (quick mode first, then `certified-conformance`), and layering targeted smoke tests (Service DNS resolution, cross-node pod connectivity, PVC provisioning) th

• kubernetes-cluster-provisioning-with-kubeadm-and-cluster-api

  Guides bootstrapping self-managed/bare-metal Kubernetes clusters with kubeadm — `kubeadm init`/`kubeadm join`, stacked vs. external etcd, control-plane HA behind a load balancer/VIP — and managing cluster lifecycle declaratively and provider-agnostically with Cluster API (CAPI): `Cluster`, `KubeadmC

• kubernetes-node-maintenance-and-troubleshooting

  Guides safely taking a Kubernetes node out of service for maintenance — `kubectl cordon`/`kubectl drain` with PodDisruptionBudget awareness so eviction doesn't cause an outage — and diagnosing a node stuck `NotReady` (kubelet, container runtime, network, and disk-pressure causes) before `kubectl unc

• kubernetes-operator-development

  Guides building Kubernetes Operators with Kubebuilder or the Operator SDK — CustomResourceDefinition (CRD) API design, controller scaffolding, the reconciliation loop pattern, status/conditions reporting, finalizers for cleanup, and testing with envtest. Use when a user asks to "build a Kubernetes O

• kubernetes-service-connectivity-troubleshooting

  Guides diagnosing a Kubernetes Service with no Endpoints or traffic that isn't reaching backend pods — label selector mismatches between a Service and its pods, readiness probe failures silently excluding otherwise-healthy pods from Endpoints, and DNS resolution failures (CoreDNS health, NetworkPoli

• kustomize-overlay-management

  Guides structuring Kustomize bases and environment overlays, writing strategic-merge and JSON6902 patches, using generators (ConfigMap/Secret with hash suffixes, image/replica transformers), and deciding when to use Kustomize vs. Helm vs. both together. Use when a user asks to "set up a Kustomize ba

• lightweight-kubernetes-k3s

  Guides deploying K3s for edge, on-prem, and development Kubernetes — single-binary install, choosing the embedded SQLite/etcd datastore vs. an external database for HA, and sizing tradeoffs for resource- constrained nodes. Use when a user asks to "set up a lightweight Kubernetes cluster," "install K

• longhorn-storage-configuration

  Deploys and configures Longhorn as cloud-native distributed block storage for Kubernetes — StorageClass replica count, data locality, volume snapshot/backup targets, and node/disk scheduling — as a simpler alternative to Rook-Ceph when only replicated block storage (no object store, no shared filesy

• managed-kubernetes-eks-aks-gke

  Guides provisioning and configuring managed Kubernetes clusters on AWS EKS, Azure AKS, and Google GKE — cluster creation, node group/pool design, and per-cloud workload identity (IRSA on EKS, Azure AD Workload Identity on AKS, Workload Identity Federation on GKE) so pods get least-privilege cloud AP

• metallb-bare-metal-load-balancer-configuration

  Configures MetalLB to provide working `Service` type `LoadBalancer` support on bare-metal/on-prem Kubernetes clusters that have no cloud provider to allocate real load balancers — IP address pools, Layer2 (ARP/NDP failover) mode, and BGP mode with peer configuration. Use when a user asks to "set up

• metallb-configuration-validation

  Validates a MetalLB installation's actual IP pool allocation and BGP peering health before relying on it in production — confirming pool exhaustion isn't imminent, address assignment matches expectation, BGPPeer sessions reach `Established` (not just `Active`/`Connect`), and end-to-end external reac

• openshift-and-rosa-platform

  Guides working with OpenShift-specific Kubernetes concepts — Routes, Security Context Constraints (SCCs), Projects, and Operator Lifecycle Manager (OLM) — plus Red Hat OpenShift Service on AWS (ROSA) provisioning and the AWS/Red Hat shared responsibility split. Use when a user asks to "expose a serv

• pod-crashloop-and-oom-troubleshooting

  Guides diagnosing `CrashLoopBackOff` pods (using `kubectl logs --previous`, `kubectl describe pod`, and exit-code interpretation to find the real root cause) and `OOMKilled` terminations specifically (distinguishing an undersized memory limit from a genuine application memory leak using events, `kub

• rook-ceph-configuration-validation

  Validates a Rook-managed Ceph cluster's actual health before relying on it for production persistent storage — reading `ceph status`/`ceph health detail`, checking OSD placement against intended failure domains, placement group (PG) state, and CephCluster/CephBlockPool CRD status conditions. Use whe

• rook-ceph-storage-operations

  Deploys and operates Rook as the Kubernetes operator managing a Ceph storage cluster in-cluster — the `CephCluster` CRD, OSD device discovery/placement, and exposing block (RBD), shared filesystem (CephFS), and object (RGW/S3-compatible) storage as Kubernetes StorageClasses. Use when a user asks to

• service-mesh-istio

  Guides installing and operating Istio service mesh — choosing an install profile, configuring traffic management with VirtualService and DestinationRule, enforcing mutual TLS (mTLS), and wiring up mesh observability (metrics, distributed tracing, access logs). Use when a user asks to "install Istio,

• testkube-kubernetes-native-test-execution

  Runs test suites (Postman/Newman, k6, Cypress, Playwright, JMeter, and other supported executors) as Kubernetes-native `Test`/`TestSuite` (or `TestWorkflow`) custom resources via Testkube, executing tests inside the cluster against in-cluster services and wiring results back into CI. Use when the us

Similar plugins