Containers & Kubernetes Agent Skills

Inspect containers, logs, and images using podman on Bazzite/Fedora systems.

Provides guidance and best practices for working with containerd, covering setup, configuration, deployment, and troubleshooting.

Provides expertise in containerization technology, covering container creation, orchestration integration, security hardening, and operational best practices for production workloads.

Manage Uncloud clusters with the `uc` CLI: bootstrap machines, deploy Compose services, publish ports, configure Caddy ingress, scale, inspect logs, and manage volumes.

Manage AWS EKS clusters, node groups, IRSA, add-ons, and workloads using AWS CLI and eksctl commands.

Builds and debugs n8n workflows, covering nodes, RAG with vector stores, the REST API, Code node scripts, expressions, and Docker hosting.

Detect container escape attempts using Falco, seccomp, and auditd, with rules for privileged containers, Docker socket access, and kernel module loading.

Guides containerizing apps with Docker Compose, optimizing Dockerfiles, and deploying to Kubernetes, with a focus on turning these tasks into a paid service.

Configures Istio service mesh on Kubernetes for traffic management, mTLS security, and observability, including canary routing, authorization policies, and telemetry.

Develop and manage Helm charts for Kubernetes, covering templates, values, hooks, dependencies, testing, and repository publishing.

Build and deploy automation workflows using cron, IFTTT, n8n, webhooks, and self-hosted alternatives, with guidance on monetizing these services.

Configures ArgoCD for GitOps-based Kubernetes deployments, including installation, project and application setup, and Kustomize overlays for multi-environment management.

Manages multi-cloud infrastructure declaratively through Kubernetes custom resources, covering Crossplane installation, provider setup, and provisioning of AWS resources like RDS and S3.

Implements service mesh with Istio or Linkerd, covering traffic management, mTLS, circuit breakers, and observability for microservices on Kubernetes.

Implements Kubernetes network policies for micro-segmentation, covering ingress/egress rules, Calico and Cilium, with a Python CLI for managing and validating policies.

Automates security and compliance checks using OPA policies, Trivy vulnerability scanning, AWS CIS benchmark verification, and Kubernetes remediation scripts.

Runs kubectl and helm commands with kubeconfig injection, emphasizing parallel execution, JSON output with jq filtering, and batch operations for efficient cluster management.

Manages Google Kubernetes Engine clusters via gcloud CLI, covering cluster discovery, node pool management, workload analysis, autopilot configuration, and upgrade planning.

Manages and analyzes Azure Kubernetes Service clusters via Azure CLI, covering node pools, addons, upgrades, and health diagnostics.

Manage and inspect OPA policies, Gatekeeper constraints, and Rego rules, including discovery, testing, and audit analysis.

Manages Helm charts, releases, repositories, and template rendering for Kubernetes, including installation, upgrades, rollbacks, and debugging.

Optimize Kubernetes cluster costs by right-sizing resources, configuring autoscalers, using spot instances, and monitoring spend.

Benchmarks Raspberry Pi 5 Docker performance and storage speeds, with setup instructions for Docker on Raspberry Pi.

Evaluates a containerized framework for deploying distributed big data workloads, measuring execution time and cloud cost scaling from four to eight nodes.

Configures GKE autoscaling with HPA, VPA, and Node Auto-Provisioning using golden path defaults for cost optimization.

Runs batch processing and high-performance computing (HPC) workloads on Google Kubernetes Engine (GKE), including job queues, parallel processing, and MPI workloads.

Convert single-node PyTorch distributed scripts into multi-node Slurm sbatch jobs and debug common multi-node failures, covering srun-native and torch.distributed approaches, container setup, NCCL timeouts, and interactive allocation.

Deploys the vss-video-analytics-api REST service standalone with config, data-log bind, and optional Elasticsearch/Kafka connectivity.

Install npm packages in a Docker sandbox environment with virtiofs-mounted workspaces, avoiding native binary crashes by installing on the local ext4 filesystem and symlinking back.

Containerize an ASP.NET Core project by creating Dockerfile and .dockerignore files customized for the project.

Deploys applications to a self-hosted Platform-as-a-Service using Dokku, supporting buildpacks, Dockerfiles, custom domains, and SSL via Let's Encrypt.

Configures and operates an Oxla cluster: YAML config and OXLA__ environment-variable overrides, node ports, roles, and leader election; storage backends (local/S3/GCS/Azure); memory limits; access control; and TLS/OIDC, plus the HTTP-based ConnectRPC admin service and Prometheus metrics endpoint. Also covers Oxla's.

Audits deployment readiness across CI/CD, containers, monitoring, IaC, secrets, CDN, and DNS, scoring each area and identifying critical gaps, with optional auto-fix via chained sub-skills.

Containeriza aplicaciones con Docker: crea Dockerfiles multi-stage, docker-compose.yml, y manifiestos de Kubernetes, optimiza imágenes y depura contenedores.

Otimiza imagens Docker com multi-stage builds, reduz tamanho, acelera builds e aplica práticas de segurança, incluindo análise de vulnerabilidades com Trivy.

Designs cloud-native architectures using containers, microservices, Kubernetes, serverless, and event-driven patterns, with guidance on observability and GitOps.