DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
cyberstrikeus Skill Cis Ocp V170 1 1 11Ensure that the etcd data directory permissions are set to 700 or more restrictive (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 12
Ensure that the etcd data directory ownership is set to etcd:etcd (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 13
Ensure that the kubeconfig file permissions are set to 600 or more restrictive (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 14
Ensure that the kubeconfig file ownership is set to root:root (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 15
Ensure that the Scheduler kubeconfig file permissions are set to 600 or more restrictive (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 16
Ensure that the Scheduler kubeconfig file ownership is set to root:root (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 17
Ensure that the Controller Manager kubeconfig file permissions are set to 600 or more restrictive (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 18
Ensure that the Controller Manager kubeconfig file ownership is set to root:root (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 1 19
Ensure that the OpenShift PKI directory and file ownership is set to root:root (Manual)
- cyberstrikeus Skill Cis Ocp V170 1 1 20
Ensure that the OpenShift PKI certificate file permissions are set to 600 or more restrictive (Manual)
- cyberstrikeus Skill Cis Ocp V170 1 1 21
Ensure that the OpenShift PKI key file permissions are set to 600 or more restrictive (Manual)
- cyberstrikeus Skill Cis Ocp V170 1 2 10
Ensure that the admission control plugin AlwaysAdmit is not set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 11
Ensure that the admission control plugin AlwaysPullImages is not set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 12
Ensure that the admission control plugin ServiceAccount is set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 13
Ensure that the admission control plugin NamespaceLifecycle is set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 14
Ensure that the admission control plugin SecurityContextConstraint is set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 15
Ensure that the admission control plugin NodeRestriction is set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 16
Ensure that the --insecure-bind-address argument is not set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 17
Ensure that the --insecure-port argument is set to 0 (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 18
Ensure that the --secure-port argument is not set to 0 (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 19
Ensure that the healthz endpoint is protected by RBAC (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 20
Ensure that the --audit-log-path argument is set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 21
Ensure that the audit logs are forwarded off the cluster for retention (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 22
Ensure that the maximumRetainedFiles argument is set to 10 or as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 23
Ensure that the maximumFileSizeMegabytes argument is set to 100 (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 24
Ensure that the --request-timeout argument is set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 25
Ensure that the --service-account-lookup argument is set to true (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 26
Ensure that the --service-account-key-file argument is set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 27
Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 28
Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 29
Ensure that the --client-ca-file argument is set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 30
Ensure that the --etcd-cafile argument is set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 31
Ensure that encryption providers are appropriately configured (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 32
Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 1 2 33
Ensure that unsupported configuration overrides are not used (Manual)
Audited - cyberstrikeus Skill Cis Ocp V170 4 1 10
Ensure that the kubelet configuration file ownership is set to root:root (Automated)
Audited
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include cis-ocp-v170-1.1.11, cis-ocp-v170-1.1.12, cis-ocp-v170-1.1.13. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.