kubernetes-sigs
- 46 skills
- 0 followers
- 9 hours ago last updated
- ▌ Debug Csi · kubernetes-sigs bundleBuild, deploy, and debug the alibaba-cloud-csi-driver on a test cluster. Use this skill when the user wants to build images, deploy via helm, check logs, restart components, or troubleshoot the CSI plugin/provisioner. Also trigger for "deploy csi", "check csi logs", "restart csi", "debug csi", "build and push", or any question about how to iterate on this driver in a dev cluster.
- ▌ Init Dev Env · kubernetes-sigs bundleInitialize the local development environment for the alibaba-cloud-csi-driver project. Use this skill when the user wants to set up their dev environment, configure test cluster access, create image pull secrets, or write test-values.yaml. Also trigger when the user mentions "init dev", "setup dev env", "configure test cluster", or asks how to push/pull test images to ACR.
- ▌ Bump Go · kubernetes-sigsBump Go to a new minor or patch version across the entire project. Use when upgrading Go (e.g. from 1.24 to 1.25). Handles go.mod, Makefile, golangci-lint, GitHub Actions, netlify.toml, and cloudbuild.
- ▌ Bump K8S Capi · kubernetes-sigsBump Kubernetes and Cluster API to new minor versions across the entire project. Use when upgrading k8s (e.g. from 1.34 to 1.35) and CAPI (e.g. from 1.12 to 1.13). Handles go.mod, Makefile, versions.mk, metadata, e2e configs, CRDs, and migration-guide-driven code adaptations.
- ▌ Commit From Changes · kubernetes-sigsStage and commit changes with a Kubernetes-style commit message
- ▌
- ▌ Plugin Helm · kubernetes-sigs bundleGuidelines for maintaining the Kubebuilder Helm plugin (helm/v2-alpha) in pkg/plugins/optional/helm/v2alpha/. Use when working on Helm plugin code, templates, or chart generation.
- ▌ CLI Descriptions · kubernetes-sigs bundleStandards for CLI command and flag descriptions in Kubebuilder. Use when writing or reviewing CLI flags, commands, or help text.
- ▌ Documentation Standards · kubernetes-sigs bundleStandards for Kubebuilder documentation in docs/book/src/. Use when writing or reviewing documentation, tutorials, guides, or plugin docs.
- ▌ Run Eval · kubernetes-sigsRun ONE evaluation — a single Task × Model × AgentConfig — end to end, local or on the bastion; invoke when the user wants to run, evaluate, or "kick off" a single eval combo (e.g. "run opa-remediation on gemini-3.1-pro-preview", "evaluate this task once and watch it").
- ▌ Docs Sync · kubernetes-sigsKeep the docs current after a code change — map changed code areas to the docs that describe them, update those docs in place, and resolve known-issues rows the code has verifiably fixed. Invoke after editing the pipeline, adding a model/agent/task/metric, moving a directory, or whenever someone asks to "sync the docs", "update the docs for this change", or "do the docs still match the code?".
- ▌ Task Review · kubernetes-sigsUse when the user adds or changes a benchmark TASK and asks to review it — e.g. "review this new task", "is this task parallel-safe", "review this task.yaml + stack", "will this task collide under the matrix", "check my new tf/prebuilt stack". Reviews a newly added/changed `tasks/**/task.yaml` together with its TF stack across schema/metadata, spec parsing, outcome rubric, parallel-safety (the emphasis), infra leak prevention, placeholders, and flags — returning ranked findings with severity + file:line evidence + a concrete fix. Review-only: static analysis plus unit tests / spec-parse checks; it NEVER provisions infra or runs an eval. For a review of harness/library CODE, use the sibling `devops-bench-review` skill instead.
- ▌ Validate Eval · kubernetes-sigsValidate that a NEW eval is correct and runnable by running it and iterating in a loop until green — fixing infra/config/task bugs (not the model's score), with opt-in hands-off and unlimited/self-healing modes; invoke when authoring or vetting a task before setting `validated: true`.
- ▌ Run Parallel Evals · kubernetes-sigsRun a Task × Model × AgentConfig MATRIX of evals in parallel — local or on the bastion, with opt-in hands-off and unlimited/self-healing modes; invoke when the user wants a matrix, a comparison across models/configs, or to "run these evals in parallel" / "compare models on the same task".
- ▌ Devops Bench Review · kubernetes-sigsUse when the user asks for a CODE review of devops-bench changes — e.g. "review this PR", "review my changes", "review the working tree", "is this harness/deployer/metric change sound". Reviews a PR (number/URL) or the current working tree and returns ranked findings with severity, file:line evidence, and a concrete fix. Review-only: static analysis plus unit tests/ruff; it NEVER runs benchmark evals or provisions infra. For a NEW or CHANGED benchmark task (task.yaml + its stack), use the sibling task-review skill instead.
- ▌ Diagnose Eval Failure · kubernetes-sigsExplain WHY a model scored low on an eval — read the judge's reasons and the agent's trajectory, compare against the task rubric, and produce a rationale (capability gap vs. task/rubric problem). Distinct from infrastructure failures. Invoke when someone asks "why did the model fail this task?", "why is OutcomeValidity low?", "explain this low score", or "did the agent actually do the work?".
- ▌ Cleanup Orphaned Resources · kubernetes-sigsDiscover and remove cloud or local resources leaked by aborted or failed eval runs — stale per-run state, leftover kind clusters and their node containers, stuck harness processes, and orphaned GKE clusters, node service accounts, secrets, VPCs and their dependencies, Cloud SQL instances, and Artifact Registry repos in the sandbox project, all scoped to the aborted run's own token. Invoke when a "fresh" run fails instantly, when someone reports leaked or orphaned resources, or asks to "clean up after a failed run", "sweep the sandbox project", or "why does re-running 409?".
- ▌ Dra Project Orientation · kubernetes-sigs bundleOrient agents to the DRA Driver for NVIDIA GPUs repository by explaining what it does, mapping its runtime components and request flows, locating implementation, documentation, tests, and deployment code, and identifying source ownership and generated boundaries. Use when asked what this repo does, where logic lives, how components fit together, who owns an area, or how to onboard.
- ▌ Dra Build Test Codegen CI · kubernetes-sigs bundleGuide local builds, formatting, linting, code generation, unit and integration tests, BATS, end-to-end coverage, dependency checks, PR preparation, and CI debugging for the DRA Driver for NVIDIA GPUs. Use when a user asks how to test or validate a change, prepare a PR, run codegen, reproduce or debug CI, choose test coverage, or check whether a change is ready to merge.
- ▌ Dra Gpu Allocation Workflows · kubernetes-sigs bundleExplain, design, and troubleshoot NVIDIA GPU allocation through Kubernetes DRA, including ResourceClaims, ResourceSlices, scheduler selection, kubelet Prepare, CDI injection, MIG, and VFIO. Use when asked about GPU claims, MIG allocation, VFIO passthrough, CDI injection, scheduling, or NVIDIA GPU resource attributes.
- ▌ Dra Helm Demo Sample Workloads · kubernetes-sigs bundleGuide direct and GPU Operator-managed deployment, kind demos, sample manifest authoring, and quickstart validation for the NVIDIA DRA driver. Use when a user asks to install or demo the driver, create a resource.k8s.io ResourceClaim or ResourceClaimTemplate workload, share one claim across containers, prove the same GPU UUID, exercise the repository's kind workflow, or validate DeviceClass, ResourceSlice, claim, and container allocation evidence.
- ▌ Dra Proposal And Design Review · kubernetes-sigs bundleDraft or review maintainer-ready design proposals, architecture decision records, implementation plans, feature-gate plans, and scope analyses for the DRA Driver for NVIDIA GPUs. Use when a user asks for a proposal, design review, ADR, feature gate plan, scope analysis, or maintainer-ready technical writeup.
- ▌ Dra API Crd Feature Gate Change · kubernetes-sigs bundleGuide compatible API, CRD, opaque device configuration, ResourceSlice contract, Helm value, kubelet-plugin checkpoint schema, and feature-gate changes in the DRA Driver for NVIDIA GPUs. Use when a user mentions CRDs, API fields, ResourceSlice attributes or capacity, Helm values, checkpoint schemas, feature gates, API evolution, or upgrade and downgrade compatibility.
- ▌ Dra Compute Domain Imex Workflows · kubernetes-sigs bundleExplain, design, and troubleshoot NVIDIA ComputeDomain and IMEX workflows across MNNVL topology, daemon lifecycle, clique readiness, DRA channel allocation, and workload injection. Use when asked about ComputeDomains, IMEX, MNNVL, GB200 or GB300 systems, clique readiness, or channel injection.
- ▌ Dra Release Support Docs Readiness · kubernetes-sigs bundleGuide release readiness, supportability, documentation updates, known-issue capture, and stale-source refresh for the NVIDIA DRA Driver for GPUs. Use when asked for a release checklist, support handoff, docs readiness review, version matrix, or release-note impact analysis.
- ▌ Dra Operations Troubleshooting Observability · kubernetes-sigs bundleGuide triage of install, allocation, scheduling, runtime injection, plugin, controller, daemon, metric, and upgrade failures in the NVIDIA DRA Driver for GPUs. Use when a user provides logs, symptoms, failed pods, broken claims, missing devices, cluster events, or a support escalation.
- ▌ Release · kubernetes-sigs bundlePrepare and publish a stable release in two phases by reusing the shared release-tag and release-note-doc-pr skills, building artifacts in GitHub, generating release notes and draft releases locally, validating release assets, and controlling latest-release status explicitly. Use when the user wants to perform a full release, publish a new version, or mentions releasing, shipping a version, or the end-to-end release process.
- ▌ Build Images · kubernetes-sigs bundleBuild cloud-provider-azure container images through the repo Makefile with explicit IMAGE_TAG and IMAGE_REGISTRY inputs, optional make flag overrides, and opt-in bounded Docker or Podman retries. Use when the user wants to build CCM, CNM, health-probe-proxy, CCM e2e, or root CCM/CNM aggregate images, or mentions build-ccm-image, build-node-image-linux, build images, image registry, or image tag.
- ▌ Run E2e Test · kubernetes-sigs bundleParse a Go e2e test from tests/e2e/, translate each step to kubectl and az CLI commands, and interactively replay the test against a live cluster. Use when the user wants to manually run, debug, or reproduce an e2e test case, or when they mention replaying a test, running a test against a cluster, or verifying e2e test behavior with kubectl and az.
- ▌ Cherry Pick Pr · kubernetes-sigs bundleCherry-pick a merged pull request onto a release branch with Prow-style branch naming, manual conflict resolution, targeted validation, and GitHub PR creation. Use when the user wants to backport a PR, cherry-pick a commit to a release branch, or mentions cherry-pick, backport, or porting a fix to an older release.
- ▌ Fix Image Cves · kubernetes-sigs bundleScan a built container image with Trivy, classify fixable Go-module and base-image CVEs, apply dependency and Dockerfile fixes, and verify the result with file checks and an optional image rescan. Use when the user wants to fix CVEs in a container image, scan for vulnerabilities, or mentions Trivy, CVE remediation, image security, or dependency vulnerabilities.
- ▌ Sync Go Modules · kubernetes-sigs bundleSynchronize all tracked Go modules with the go-mod-consistency CI and refresh the root vendor tree. Use when go-mod-consistency fails, dependency bumps leave go.mod or go.sum stale, or the user asks to unblock module consistency, tidy all modules, or update vendor for the main module.
- ▌ Replace Me · kubernetes-sigs bundleDescribe what this skill does in one sentence. Use when <triggers that should activate this skill>.
- ▌ Debug E2e Pipeline · kubernetes-sigs bundleFetch and analyze Prow e2e pipeline failures for cloud-provider-azure. Downloads build logs, JUnit reports, and node-level artifacts from GCS, extracts failed tests, parses Ginkgo results, and surfaces cluster node info. Use when debugging a failing Prow e2e job, investigating a cloud-provider-azure-ccm-windows-capz or cloud-provider-azure-master-capz build, triaging CI failures, or when the user pastes a prow.k8s.io URL.
- ▌ Create Release Tags · kubernetes-sigs bundleCreate and optionally push the next Kubernetes-style release tag (vX.Y.Z) from a release-X.Y branch by resolving the remote branch tip, computing the next patch tag, and tagging the commit directly without checking out the branch. Use when the user wants to tag a release, create a version tag, or mentions release tagging, cutting a release, or bumping a patch version.
- ▌ Remediate Image Cves · kubernetes-sigs bundleOrchestrate end-to-end CVE remediation for the Linux CCM, CNM, and health-probe-proxy images on cloud-provider-azure master or a release-X.Y branch, including builds, repeated Trivy verification, checkpoint commits, cleanup, validation, push, and pull-request creation. Use when the user wants to verify or fix CVEs on master or a release branch, run the three-image CVE workflow, or open a CVE remediation PR for either supported target branch.
- ▌ Unblock Dependabot Pr · kubernetes-sigs bundleDiagnose and unblock failed Dependabot pull requests in cloud-provider-azure by closing Kubernetes minor-version dependency bumps, classifying CI failures, syncing Go modules, retesting quota-flaked e2e jobs, and updating PR status. Use when a Dependabot PR fails go-mod-consistency, pull-cloud-provider-azure-e2e jobs, or dependency/toolchain CI.
- ▌ Create Release Note Doc Pr · kubernetes-sigs bundleGenerate or update the documentation-site release note for a given tag, commit it on a branch, push it to a writable remote, and open a GitHub PR to the docs branch. Use when the user wants to create or update release notes, generate a changelog for a tag, or mentions release notes, docs PR, or documentation for a release.
- ▌ Debug Capz K8S · kubernetes-sigsDebug CAPZ (Cluster API Provider Azure) Kubernetes cluster failures. Covers live cluster inspection via kubectl, VM-level debugging via az CLI, Prow/GCS artifact analysis, and build log triage. Knows CAPZ template flavors, E2E test structure, addon deployment (Calico, cloud-provider-azure, CSI), common failure patterns, and transient errors to ignore.
- ▌ K8S Agent Sandbox MCP · kubernetes-sigs bundleAn MCP server skill for managing Kubernetes sandboxes. Enables creating, executing commands, managing files, and terminating instances via the official kubernetes-sigs/agent-sandbox MCP server.
- ▌ Triage Issues · kubernetes-sigs bundleTriage open GitHub issues for kubernetes-sigs/agent-sandbox by mapping them to roadmap.md and assigning k8s priority labels + Kanban Priority (P0–P4) on Project
- ▌ Bump Go Version · kubernetes-sigs bundleBumps the Go version to the latest release across go.mod, tools.mod, and Dockerfiles.
- ▌ K8S API Conventions · kubernetes-sigs bundleGuides the agent to follow Kubernetes API conventions for OSS standards.
- ▌
- ▌ Fix Flakes · kubernetes-sigsDiagnose and fix flaky tests tracked as open kind/flake issues in kubernetes-sigs/agent-sandbox — reproduce the flake, apply a minimal fix, and open a PR linking the issue. Use when asked to fix a flake, work through kind/flake issues, or when run on a schedule after dev/tools/flake-report has filed flake issues.
- ▌ Test Pyramid · kubernetes-sigsAnalyze the repo's unit and E2E tests and propose rebalancing toward a test pyramid — which E2E tests (or assertions inside them) can be covered by unit tests, which unit-level gaps genuinely need E2E coverage, and where coverage is duplicated. Use when the user asks about test pyramid, test rebalancing, "should this be an e2e or unit test", E2E-to-unit migration, or slow/flaky E2E suites that might shrink.