How do I install the Kubernetes Containers skill?

Run npx skillmds@latest add kiraneswaran/kubernetes-containers in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Kubernetes Containers safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Kubernetes Containers?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Kubernetes Containers free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Kubernetes Containers?

KiranEswaran (@kiraneswaran) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Kubernetes Containers by kiraneswaran

Name: Kubernetes Containers
Rating: 4.2 (5 reviews)
Author: KiranEswaran

Kubernetes Containers

Kubernetes and Helm best practices for container orchestration. Covers deployments, services, RBAC, resource management, Helm charts, and production patterns. Use when working with Kubernetes manifests, Helm charts, kubectl commands, or when asking about container orchestration, pod configuration, or cluster management.

KiranEswaran Updated Sep 10, 2026

File contents

Kubernetes & Containers

Core Concepts

Pods: Smallest deployable units
Deployments: Declarative pod management
Services: Network abstraction
ConfigMaps/Secrets: Configuration injection
RBAC: Access control

Essential Commands

# Context & Namespace
kubectl config get-contexts
kubectl config use-context prod
kubectl get pods -n my-namespace

# Pod Operations
kubectl get pods -o wide
kubectl describe pod <pod-name>
kubectl logs <pod-name> -f --tail=100
kubectl exec -it <pod-name> -- /bin/sh

# Apply & Delete
kubectl apply -f manifest.yaml
kubectl delete -f manifest.yaml
kubectl rollout restart deployment/<name>

# Debugging
kubectl get events --sort-by='.lastTimestamp'
kubectl top pods
kubectl port-forward svc/my-service 8080:80

Deployment Pattern

apiVersion: apps/v1
kind: Deployment
metadata:
  name: app
  labels:
    app: my-app
spec:
  replicas: 3
  selector:
    matchLabels:
      app: my-app
  template:
    metadata:
      labels:
        app: my-app
    spec:
      serviceAccountName: app-sa
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        fsGroup: 1000
      containers:
        - name: app
          image: myapp:1.0.0
          ports:
            - containerPort: 8080
          resources:
            requests:
              cpu: 100m
              memory: 128Mi
            limits:
              cpu: 500m
              memory: 512Mi
          livenessProbe:
            httpGet:
              path: /health
              port: 8080
            initialDelaySeconds: 10
            periodSeconds: 10
          readinessProbe:
            httpGet:
              path: /ready
              port: 8080
            initialDelaySeconds: 5
            periodSeconds: 5
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: true

Service Pattern

apiVersion: v1
kind: Service
metadata:
  name: app
spec:
  type: ClusterIP
  selector:
    app: my-app
  ports:
    - port: 80
      targetPort: 8080

Resource Management

Resource	Request	Limit
CPU	Guaranteed minimum	Throttled above
Memory	Guaranteed minimum	OOMKilled above

Always set both requests and limits:

resources:
  requests:
    cpu: 100m      # 0.1 CPU
    memory: 128Mi
  limits:
    cpu: 500m      # 0.5 CPU
    memory: 512Mi

Security Best Practices

# Pod Security Context
securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  fsGroup: 1000

# Container Security Context
securityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: true
  capabilities:
    drop:
      - ALL

Helm Quick Reference

# Install/Upgrade
helm install my-app ./chart
helm upgrade my-app ./chart
helm upgrade --install my-app ./chart

# Values
helm install my-app ./chart -f values-prod.yaml
helm install my-app ./chart --set image.tag=1.0.0

# Debug
helm template my-app ./chart
helm lint ./chart
helm diff upgrade my-app ./chart

Detailed References

Kubernetes Patterns: See references/kubernetes-patterns.md
Helm Charts: See references/helm-charts.md

---name: kubernetes-containersdescription: Kubernetes and Helm best practices for container orchestration. Covers deployments, services, RBAC, resource management, Helm charts, and production patterns. Use when working with Kubernetes manifests, Helm charts, kubectl commands, or when asking about container orchestration, pod configuration, or cluster management.---# Kubernetes & Containers## Core Concepts- **Pods**: Smallest deployable units- **Deployments**: Declarative pod management- **Services**: Network abstraction- **ConfigMaps/Secrets**: Configuration injection- **RBAC**: Access control## Essential Commands```bash# Context & Namespacekubectl config get-contextskubectl config use-context prodkubectl get pods -n my-namespace# Pod Operationskubectl get pods -o widekubectl describe pod <pod-name>kubectl logs <pod-name> -f --tail=100kubectl exec -it <pod-name> -- /bin/sh# Apply & Deletekubectl apply -f manifest.yamlkubectl delete -f manifest.yamlkubectl rollout restart deployment/<name># Debuggingkubectl get events --sort-by='.lastTimestamp'kubectl top podskubectl port-forward svc/my-service 8080:80```## Deployment Pattern```yamlapiVersion: apps/v1kind: Deploymentmetadata: name: app labels: app: my-appspec: replicas: 3 selector: matchLabels: app: my-app template: metadata: labels: app: my-app spec: serviceAccountName: app-sa securityContext: runAsNonRoot: true runAsUser: 1000 fsGroup: 1000 containers: - name: app image: myapp:1.0.0 ports: - containerPort: 8080 resources: requests: cpu: 100m memory: 128Mi limits: cpu: 500m memory: 512Mi livenessProbe: httpGet: path: /health port: 8080 initialDelaySeconds: 10 periodSeconds: 10 readinessProbe: httpGet: path: /ready port: 8080 initialDelaySeconds: 5 periodSeconds: 5 securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true```## Service Pattern```yamlapiVersion: v1kind: Servicemetadata: name: appspec: type: ClusterIP selector: app: my-app ports: - port: 80 targetPort: 8080```## Resource Management| Resource | Request | Limit ||----------|---------|-------|| CPU | Guaranteed minimum | Throttled above || Memory | Guaranteed minimum | OOMKilled above |Always set both requests and limits:```yamlresources: requests: cpu: 100m # 0.1 CPU memory: 128Mi limits: cpu: 500m # 0.5 CPU memory: 512Mi```## Security Best Practices```yaml# Pod Security ContextsecurityContext: runAsNonRoot: true runAsUser: 1000 fsGroup: 1000# Container Security ContextsecurityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true capabilities: drop: - ALL```## Helm Quick Reference```bash# Install/Upgradehelm install my-app ./charthelm upgrade my-app ./charthelm upgrade --install my-app ./chart# Valueshelm install my-app ./chart -f values-prod.yamlhelm install my-app ./chart --set image.tag=1.0.0# Debughelm template my-app ./charthelm lint ./charthelm diff upgrade my-app ./chart```## Detailed References- **Kubernetes Patterns**: See [references/kubernetes-patterns.md](references/kubernetes-patterns.md)- **Helm Charts**: See [references/helm-charts.md](references/helm-charts.md)

Frequently asked questions