All authors
Claude Skills by Manoj-11-Dahal
github.com/Manoj-11-Dahal15,860 skills0 installs0 views
- Kubernetes Image Pull Credential Namespace Scope AuditUse when a task involves reviewing which Pods and namespaces can use credentials to pull private images to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data...Votes: 0GitHub stars: 2
- Kubernetes Image Registry Outage Cold Start ReadinessUse when a task involves assessing whether workloads can start or recover when an image registry is unavailable to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persist...Votes: 0GitHub stars: 2
- Kubernetes Ingress Tls Secret Rotation ReadinessUse when a task involves checking how an ingress controller observes and serves a rotated TLS Secret to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data wi...Votes: 0GitHub stars: 2
- Kubernetes Ingressclass Controller Ownership AuditUse when a task involves identifying which controller reconciles each IngressClass and its attached routes to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent d...Votes: 0GitHub stars: 2
- Kubernetes Job Backoff Retry Budget ReviewUse when a task involves setting retry behavior for a Kubernetes Job whose task can fail transiently or permanently to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or per...Votes: 0GitHub stars: 2
- Kubernetes Job Deadline Partial Output TestUse when a task involves testing what a Kubernetes Job leaves behind when it reaches a deadline or completes only some work to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials...Votes: 0GitHub stars: 2
- Kubernetes Kubelet Api Authentication Reachability CheckUse when a task involves checking whether kubelet endpoints are restricted to authenticated and authorized callers to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or pers...Votes: 0GitHub stars: 2
- Kubernetes Kubelet System Reserved Budget AuditUse when a task involves reviewing whether node reservations leave realistic capacity for operating-system and Kubernetes daemons to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, crede...Votes: 0GitHub stars: 2
- Kubernetes Limitrange Default Injection Impact ReviewUse when a task involves checking how LimitRange defaults and bounds change newly admitted Pods or claims to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent da...Votes: 0GitHub stars: 2
- Kubernetes Liveness Probe False Positive Risk CheckUse when a task involves reviewing whether a liveness probe might restart a slow or overloaded but recoverable container to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, o...Votes: 0GitHub stars: 2
- Kubernetes Loadbalancer External Exposure ReviewUse when a task involves checking whether Service load balancers expose only approved ports and addresses to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent da...Votes: 0GitHub stars: 2
- Kubernetes Minor Upgrade Version Skew PreflightUse when a task involves checking whether a proposed Kubernetes minor upgrade follows supported component-version sequencing to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credential...Votes: 0GitHub stars: 2
- Kubernetes Namespace Rolebinding Expiry ReviewUse when a task involves reviewing namespace-scoped access grants for current ownership, least privilege, and human-enforced review dates to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resource...Votes: 0GitHub stars: 2
- Kubernetes Namespace Termination Finalizer TriageUse when a task involves diagnosing a namespace that remains in Terminating state to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data without explicit owne...Votes: 0GitHub stars: 2
- Kubernetes Node Drain Capacity PreflightUse when a task involves checking whether workloads can fit elsewhere before an authorized node drain to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data w...Votes: 0GitHub stars: 2
- Kubernetes Node Pool Capacity Headroom ReviewUse when a task involves checking whether node pools can absorb expected workload growth and a planned node loss to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persis...Votes: 0GitHub stars: 2
- Kubernetes Node Pressure Eviction Evidence TriageUse when a task involves classifying pod evictions caused by node memory, disk, or inode pressure to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data witho...Votes: 0GitHub stars: 2
- Kubernetes Operator Reconcile Health DiagnosticUse when a task involves diagnosing an operator that is slow, stuck, or repeatedly reconciling the same custom resource to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or...Votes: 0GitHub stars: 2
- Kubernetes Orphan Ownerreference InventoryUse when a task involves identifying objects whose owner references no longer resolve to a live controlling resource to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or pe...Votes: 0GitHub stars: 2
- Kubernetes Pdb Drain Deadlock DiagnosisUse when a task involves diagnosing a node drain blocked by a PodDisruptionBudget or unhealthy selected Pods to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent...Votes: 0GitHub stars: 2
- Kubernetes Pod Antiaffinity Capacity Cost AssessmentUse when a task involves evaluating whether hard or preferred pod anti-affinity matches an availability goal to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent...Votes: 0GitHub stars: 2
- Kubernetes Pod Security Admission Staged EnforcementUse when a task involves planning a namespace rollout from warning or audit mode to Pod Security enforcement to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent...Votes: 0GitHub stars: 2
- Kubernetes Pod Topology Spread Failure Domain ReviewUse when a task involves reviewing how workload replicas are distributed across zones or other topology domains to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persist...Votes: 0GitHub stars: 2
- Kubernetes Prestop Hook Idempotency ReviewUse when a task involves reviewing whether a Pod preStop action is safe across retries, delayed shutdown, and partial failure to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentia...Votes: 0GitHub stars: 2
- Kubernetes Priorityclass Preemption Policy ReviewUse when a task involves reviewing whether workload priority can evict lower-priority workloads or starve peers to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persist...Votes: 0GitHub stars: 2
- Kubernetes Privileged Workload Exception RegisterUse when a task involves recording and governing workloads that need a privileged or host-level exception to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent da...Votes: 0GitHub stars: 2
- Kubernetes Projected Token Audience Expiry ValidationUse when a task involves checking that projected workload identity tokens are scoped and expire as intended to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent ...Votes: 0GitHub stars: 2
- Kubernetes Pv Reclaim Policy Data Retention CheckUse when a task involves verifying what happens to backing storage when a claim or workload is removed to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data ...Votes: 0GitHub stars: 2
- Kubernetes Pvc Expansion Failure Recovery PlanUse when a task involves planning a safe response when a supported persistent-volume claim expansion stalls or fails to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or pe...Votes: 0GitHub stars: 2
- Kubernetes Pvc Pending Binding Root Cause TriageUse when a task involves diagnosing a PersistentVolumeClaim that remains unbound or prevents a Pod from scheduling to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or pers...Votes: 0GitHub stars: 2
- Kubernetes Pvc Restore Integrity RehearsalUse when a task involves rehearsing restoration of a persistent-volume claim from an approved snapshot or backup to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persis...Votes: 0GitHub stars: 2
- Kubernetes Qos Class Eviction Outcome AnalysisUse when a task involves evaluating how request and limit configuration affects Pod QoS and likely node-pressure eviction to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, ...Votes: 0GitHub stars: 2
- Kubernetes Rbac Wildcard Permission ReductionUse when a task involves identifying Kubernetes RBAC wildcard grants that create unnecessary current or future access to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or p...Votes: 0GitHub stars: 2
- Kubernetes Readiness Probe Traffic Gating AuditUse when a task involves checking whether readiness signals correctly control traffic eligibility for a workload to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persis...Votes: 0GitHub stars: 2
- Kubernetes Resourcequota Object Count Admission TestUse when a task involves testing whether namespace object quotas block expected deployments or emergency recovery to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persi...Votes: 0GitHub stars: 2
- Kubernetes Runtimeclass Node Compatibility ReviewUse when a task involves checking whether a workload's RuntimeClass is available and appropriate on every eligible node to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or...Votes: 0GitHub stars: 2
- Kubernetes Secret At Rest Encryption VerificationUse when a task involves verifying encryption-at-rest configuration for Kubernetes Secret objects to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data witho...Votes: 0GitHub stars: 2
- Kubernetes Securitycontext Capability MinimizationUse when a task involves reducing Linux privileges and capabilities requested by a container to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data without ex...Votes: 0GitHub stars: 2
- Kubernetes Service Endpoint Readiness Mismatch TriageUse when a task involves diagnosing a Service that routes to too few, stale, or unexpected backend endpoints to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent...Votes: 0GitHub stars: 2
- Kubernetes Serviceaccount Automount Scope ReviewUse when a task involves checking whether Pods receive API credentials they do not need to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data without explici...Votes: 0GitHub stars: 2
- Kubernetes Stalled Rollout Condition TriageUse when a task involves finding the blocking condition in a Deployment that is not progressing to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data without...Votes: 0GitHub stars: 2
- Kubernetes Startup Probe Warmup Budget ValidationUse when a task involves validating whether a startup probe budget covers realistic application initialization to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persiste...Votes: 0GitHub stars: 2
- Kubernetes Stateful Volume Zone Placement ReviewUse when a task involves checking whether stateful Pods can be scheduled where their bound storage is accessible to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persis...Votes: 0GitHub stars: 2
- Kubernetes Statefulset Partitioned Canary PlanUse when a task involves planning a staged StatefulSet update using ordinal partitions and explicit observation gates to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or p...Votes: 0GitHub stars: 2
- Kubernetes Statefulset Quorum Rollout ReadinessUse when a task involves checking whether a stateful application can preserve its own quorum during a StatefulSet update to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, o...Votes: 0GitHub stars: 2
- Kubernetes Storageclass Default Change Impact ReviewUse when a task involves assessing workloads affected by changing or removing a default StorageClass to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data wi...Votes: 0GitHub stars: 2
- Kubernetes Stuck Finalizer Resource Recovery PlanUse when a task involves planning recovery when a custom or core resource remains terminating because a finalizer is not cleared to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, creden...Votes: 0GitHub stars: 2
- Kubernetes Taint Toleration Scope AuditUse when a task involves checking whether workload tolerations unintentionally admit Pods to restricted or drained nodes to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, o...Votes: 0GitHub stars: 2
- Kubernetes Termination Grace Period Sequence TestUse when a task involves testing whether a workload finishes requests and releases resources before Pod termination to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or per...Votes: 0GitHub stars: 2
- Kubernetes Unschedulable Pod Event Root Cause TriageUse when a task involves diagnosing why a pending Pod has no feasible node to record Kubernetes server and client versions, cluster distribution and provider, API versions, namespace and workload owner, data sensitivity, evidence requirements, and maintenance window. Check current Kubernetes and provider documentation, begin with read-only evidence, and validate changes in an approved environment. Do not modify production resources, credentials, or persistent data without explicit owner appro...Votes: 0GitHub stars: 2