Helm, Kustomize, Operators, Istio, NGINX Ingress, Calico/Flannel, EKS/AKS/GKE, OpenShift/ROSA, K3s, Docker/containerd, and cert-manager skills.
35 skills
Service mesh and API gateway skills: Linkerd, Consul, Cilium eBPF, Kong, Apigee, gRPC troubleshooting, and API gateway rate-limiting/quota management.
Plugin service-mesh-gateway-skills from marketplace ops-engineering-skills in selvarajmurugesan90/ops-engineering-skills. Commands read from the repo's manifest — 1 month ago.
api-gateway-rate-limiting-and-quota-managementDesigns rate-limiting and quota strategy that applies across gateway tools — token bucket vs. sliding/fixed window algorithm choice, per-client vs. global vs. tiered limit scoping, burst allowance design, and distributed counter consistency — as the vendor-neutral layer underneath tool-specific plug
apigee-api-management-and-governanceGoverns the full API lifecycle in Google Apigee (or comparable enterprise API-management platforms) — API proxy design, policy attachment (OAuth2/API key verification, quota, spike arrest, transformation), developer portal publishing, product-based monetization, and semantic versioning/deprecation o
cilium-configuration-validationValidates CiliumNetworkPolicy, CiliumClusterwideNetworkPolicy, and Hubble observability configuration before a production rollout — syntax-checking policy files offline, confirming which endpoints and identities a policy actually selects, and using Hubble flow data to prove a policy enforces what it
cilium-ebpf-cni-and-mesh-configurationConfigures Cilium as an eBPF-based Kubernetes CNI — kube-proxy replacement, CiliumNetworkPolicy for L3/L4/L7 network policy, and Cilium's ambient-style service mesh capability built on the same eBPF datapath rather than per-pod sidecars. Use when a user asks to "install Cilium," "replace kube-proxy
consul-configuration-validationValidates Consul service definitions, config entries, and intentions (mesh-level authorization) before applying them to a production datacenter — syntax-checking agent config, dry-running catalog changes, and confirming intentions produce the intended allow/deny decisions. Use when a user asks to "v
consul-service-mesh-and-discovery-configurationConfigures HashiCorp Consul as a combined service mesh and service discovery layer, especially across multi-cloud or hybrid (VM + Kubernetes, multi-datacenter) environments where a Kubernetes-only mesh doesn't reach. Covers Consul Connect sidecar injection, intentions, config entries (service-splitt
grpc-service-troubleshootingDiagnoses gRPC-specific failure modes — DEADLINE_EXCEEDED, connection and keepalive/GOAWAY issues, HTTP/2 multiplexing problems behind L4/L7 load balancers, and protobuf/proto-compatibility breakage across client/server versions — distinct from generic HTTP ingress troubleshooting. Use when a user a
kong-api-gateway-configurationConfigures Kong Gateway's core objects — Services, Routes, and Plugins — including rate-limiting, authentication (key-auth, JWT, OAuth2), and request/response transformation, in both declarative (`kong.yml`) and imperative (Admin API) modes, on Kubernetes (via the Kong Ingress Controller) or standal
kong-configuration-validationValidates Kong's declarative configuration (`kong.yml`) and Kubernetes CRDs (`KongPlugin`, `KongIngress`, `KongConsumer`) before they reach production — schema-checking with `deck validate`, diffing against the live gateway state with `deck diff`, and confirming a route/plugin actually behaves as in
linkerd-configuration-validationValidates a Linkerd installation, proxy injection, and traffic/ authorization policy before a production rollout — running the built-in health checks, confirming which connections are actually mTLS-secured, and dry-running policy changes against real traffic patterns. Use when a user asks to "check
linkerd-service-mesh-configurationGuides installing and operating Linkerd as a simpler, mTLS-first alternative to Istio — choosing extensions deliberately, enabling automatic mutual TLS with zero-config identity, injecting the proxy per namespace/workload, and splitting traffic between service versions. Use when a user asks to "inst
Helm, Kustomize, Operators, Istio, NGINX Ingress, Calico/Flannel, EKS/AKS/GKE, OpenShift/ROSA, K3s, Docker/containerd, and cert-manager skills.
35 skills
Operational skills for running production databases: PostgreSQL, MongoDB, Redis, and Elasticsearch/OpenSearch tuning, high availability, configuration validation, and schema migration.
23 skills
Model packaging, feature stores, training pipelines, monitoring/drift, LLMOps, experiment tracking, and serving skills.
22 skills
Agent architecture, MCP server development, prompt/context engineering, evaluation, RAG, and multi-agent orchestration skills.
20 skills
Internal developer platform skills: no-code service catalog tools (Port/Cortex/OpsLevel), Humanitec Score workload specs, golden-path template design, and developer experience measurement.
20 skills
SAST/DAST/SCA, secrets management, supply-chain security, policy-as-code, and secure pipeline gate skills.
17 skills
Network observability skills powered by Kubeshark MCP — root cause analysis, KFL traffic filtering, snapshot forensics, PCAP extraction.
4 skills · 1 MCP server
Configure service mesh (Istio, Linkerd) for microservices
1 skill · 1 command
OpenTelemetry profiles signal and the eBPF profiler: deploying otelcol-ebpf-profiler on hosts and Kubernetes (including kind/k3d), version-pinned receiver keys, exporting OTLP profiles to backends, verification, and troubleshooting.
1 skill
Production-grade platform engineering handbook for Claude, Codex, and Cursor. 51 slash-command workflows: Kubernetes (baseline, RBAC, workload, debug), GitHub Actions (design, security, review, debug), Azure (Workload Identity, AKS, tagging, RBAC), OpenShift (SCC, Routes, GitOps, upgrades), Secrets (ESO, Sealed Secrets, rotation, audit), Helm, Terraform, Flux CD, Argo CD, Gateway API (ingress-nginx migration), AWS, Kyverno, OPA, KEDA, Karpenter, cluster upgrades (EKS version rollback), Flagger progressive delivery, Velero backup and restore drills, FinOps (Infracost, cost tags, OpenCost), supply chain security, Kubescape posture and operator (NSA, MITRE, CIS, SOC2), Falco, chaos engineering, DORA metrics, Datadog, Dynatrace, Linkerd, AWS MCP, Renovate, Checkov, Trivy, Zizmor workflow auditing, Kingfisher secret scanning and revocation, token optimization, and multi-agent scaffolding. Every answer includes blast radius, validation steps, and rollback plan.
52 skills · 1 agent
Use when networking fails on a Kubernetes cluster that runs Cilium as its CNI: traffic between pods dropped or timing out after a CiliumNetworkPolicy or CiliumClusterwideNetworkPolicy, "Policy denied" drops in Hubble, DNS that stops resolving after an egress policy, HTTP 403 "Access denied" from an L7 rule, toFQDNs rules that do not match, pods stuck ContainerCreating with "unable to connect to Cilium agent", Cilium agent or operator pods not ready, CiliumEndpoints not ready, or IPAM exhaustion. Investigates with kubectl get, describe, events and logs, asks before running cilium-dbg or hubble inside the agent, and proposes fixes. Reads first and asks before changing anything.
1 skill
Making eBPF verifier errors as friendly as Rust compiler errors, and let LLM fix it.
1 skill
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.