Plugins

2 plugins

Docker, Kubernetes, CI/CD and cloud (AWS/Azure/GCP) automation.

24 skills · plugin

@pwdev-solucoes

DevOps com execução segura v1.0 — leitura livre, mutação sob confirmação por comando, destrutivo bloqueado por guard script; 19 skills (AWS, Kubernetes, Docker, Linux, Nginx, PostgreSQL, observabilidade, incidente, segurança, Proxmox, automação, performance, backup, Laravel, confiabilidade, FinOps, IA, documentação) e 4 subagentes

19 skills · plugin

Results for “kubernetes”

101 skills

Benchmarking Kubernetes With Kube Bench

Run CIS Kubernetes Benchmark checks and remediate findings with kube-bench.

24.6k · bundle

Routes to specialized GKE sub-skills for cluster management, networking, security, scaling, and more on Google Kubernetes Engine.

14.4k · bundle

Kubernetes Patterns

Provides production-grade Kubernetes YAML patterns and kubectl debugging commands for deploying, managing, and debugging workloads reliably.

Implementing Kubernetes Network Policy With Calico

Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.

24.6k · bundle

Kubernetes Specialist

Create and manage Kubernetes workloads with declarative YAML manifests, covering deployments, networking, security, storage, Helm charts, and troubleshooting.

10.4k · bundle

Automates Ansible AWX setup on Kubernetes and provides playbooks for deploying backends, running database migrations, and managing Kubernetes deployments.

More results

Kubernetes Operator

Build and audit Kubernetes operators with tools that validate CRD design, lint reconcile loops, and score OperatorHub capability levels.

20.4k · bundle

Azure Kubernetes

Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters, covering Day-0 decisions, SKU selection, networking, security, and operations.

Set up and manage Google Kubernetes Engine clusters, node pools, workloads, networking, and storage with Autopilot defaults.

Scanning Kubernetes Manifests With Kubesec

Scan Kubernetes resource manifests with Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.

24.6k · bundle

Tao Run On Kubernetes

Submits TAO container jobs as single-pod Kubernetes Jobs with NVIDIA GPU scheduling on EKS, GKE, AKS, or on-prem clusters.

Kubernetes Platform

Diagnoses and operates Kubernetes clusters: pods, deployments, ingress, HPA, PVC, StorageClass, NetworkPolicy, Secrets, Helm, ArgoCD, cert-manager. Reads before changing; mutations require confirmation and diff review.

Performing Kubernetes Etcd Security Assessment

Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.

24.6k · bundle

Implementing Network Policies For Kubernetes

Create and apply Kubernetes NetworkPolicies to enforce pod-level network segmentation, restrict traffic between pods and namespaces, and block access to cloud metadata endpoints.

24.6k · bundle

Detecting Privilege Escalation In Kubernetes Pods

Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.

24.6k · bundle

Performing Kubernetes Cis Benchmark With Kube Bench

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

24.6k · bundle

Securing Kubernetes On Cloud

Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring.

24.6k · bundle

Performing Container Escape Detection

Audits Kubernetes pods for container escape vectors by analyzing privileged mode, dangerous capabilities, host namespace sharing, and writable hostPath mounts using the Kubernetes Python client.

24.6k · bundle

Performing Kubernetes Penetration Testing

Systematically evaluates Kubernetes cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets using tools like kube-hunter, Kubescape, and kube-bench.

24.6k · bundle

Implementing Kubernetes Pod Security Standards

Enforce Pod Security Standards (Privileged, Baseline, Restricted) in Kubernetes 1.25+ using the Pod Security Admission controller with namespace labels and compliant pod specs.

24.6k · bundle

Generates production-grade Kubernetes manifests including Deployments with probes and security contexts, Services, Ingress with TLS, HPA, PDB, NetworkPolicy, ConfigMaps, and Secrets, with optional Helm charts, Kustomize overlays, Istio mesh, and ArgoCD GitOps.

Gke App Onboarding

Containerizes applications and deploys them to Google Kubernetes Engine (GKE) with Dockerfiles, manifests, and best practices.

14.4k · bundle

Runs batch processing and high-performance computing (HPC) workloads on Google Kubernetes Engine (GKE), including job queues, parallel processing, and MPI workloads.

Protects stateful GKE workloads by configuring backup plans, restore workflows, and disaster recovery using Backup for GKE.

Auditing Kubernetes Rbac Privilege Escalation

Find over-permissive RBAC roles and service-account token abuse paths in Kubernetes using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess during authorized cluster security reviews.

24.6k · bundle

cloudthinker-ai

Runs kubectl and helm commands with kubeconfig injection, emphasizing parallel execution, JSON output with jq filtering, and batch operations for efficient cluster management.

Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.

12.8k · bundle

Deploy and manage a Linkerd service mesh on Kubernetes, including mTLS, traffic splitting, retries, timeouts, and observability.

Gke Multitenancy

Plans and configures multi-tenancy on GKE, covering namespace isolation, RBAC planning, resource quotas, LimitRanges, network isolation, and cost allocation.

Hardens Google Kubernetes Engine (GKE) clusters with Workload Identity, Secret Manager, RBAC, Binary Authorization, Network Policies, and Pod Security Standards.

14.4k · bundle

Plans, executes, and validates Google Kubernetes Engine (GKE) cluster upgrades and maintenance operations for both Standard and Autopilot clusters, producing upgrade plans, checklists, and runbooks with gcloud commands.

14.4k · bundle

Develop and manage Helm charts for Kubernetes, covering templates, values, hooks, dependencies, testing, and repository publishing.

Network Policies Security

Implements Kubernetes network policies for micro-segmentation, covering ingress/egress rules, Calico and Cilium, with a Python CLI for managing and validating policies.

Securing Helm Chart Deployments

Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.

24.6k · bundle

Configures ArgoCD for GitOps-based Kubernetes deployments, including installation, project and application setup, and Kustomize overlays for multi-environment management.

Deploys and manages Google Cloud Platform backends for Flutter apps, covering GKE clusters, Cloud Run services, Cloud SQL databases, Cloud Storage buckets, and Firebase integration.