kubernetes-sigs
- 22 skills
- 0 followers
- 1 week ago last updated
- ▌ Resource Bounds Dos · kubernetes-sigs-kueueFlag missing resource bounds / DoS resistance — uncapped loops or allocations, missing timeouts, reconciler-wedging input, unbounded metric cardinality (CWE-400, CWE-770).
- ▌ Authn Authz Relaxation · kubernetes-sigs-kueueFlag AuthN/AuthZ relaxation — webhook token skipping, failurePolicy Ignore, missing SubjectAccessReview, wildcard RBAC, privileged pod specs (CWE-269, CWE-287, CWE-306, CWE-862, CWE-863).
- ▌ Information Disclosure · kubernetes-sigs-kueueFlag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).
- ▌ Was Cluster · kubernetes-sigs-kueueBuild and manage a kind cluster for Workload-Aware Scheduling (WAS) e2e tests. Use when the user wants to set up, run tests against, or tear down a WAS test cluster built from Kubernetes main.
- ▌ Kueue Lineage · kubernetes-sigs-kueueTrace workload lineage to pods. Use when a user wants to trace lineage across any tier such as workload to pods, pod to workload, or job to workload. The user may provide a resource at any level (Workload, Job, Pod, JobSet, etc.) and this skill produces the full tree from Workload down to Pods.
- ▌ Comments · kubernetes-sigs-kueueReview a diff for comment hygiene — over-commenting, what-not-why narration, inaccurate comments, and missing TODOs on compatibility shims.
- ▌ Security · kubernetes-sigs-kueueReview a diff for security issues exploitable by a tenant, neighbouring controller, or malicious workload spec — input validation, injection, DoS, nil-safety, authz, info disclosure, supply chain, webhook safety.
- ▌ Code Eval · kubernetes-sigs-kueueEvaluate the quality of a git diff between two commits by delegating per-skill analysis (Code Style, Buggy Behavior, Comments, Architectural Decisions, Security) to subagents, then aggregating their findings and recommendations into a scored report.
- ▌ Kueue Release Notes · kubernetes-sigs-kueueWrite or review Kueue PR release notes. Use when a user asks to draft, refine, validate, or combine release notes for a Kueue pull request, especially when deciding whether the note should be framed as a bugfix, feature, observability improvement, or breaking change.
- ▌ Kueue Who Preempted · kubernetes-sigs-kueueIdentify what preempted a workload. Use when a user asks why their workload was evicted or preempted, or wants to identify what preempted it. Investigates Kubernetes events, workload status conditions, and controller logs to trace preemption.
- ▌ Code Style · kubernetes-sigs-kueueReview a diff for naming precision, convention drift, reinvented helpers, log-verbosity mistakes, misaligned test names, and typos.
- ▌ Kueue Flake Debugger · kubernetes-sigs-kueueDebug Kueue CI flakes. Use when a user asks to debug a flake, investigate a test failure, a test timeout, or a CI flake. Analyzes Prow build logs, kube-scheduler logs, kubelet logs, and test code to identify root causes.
- ▌ Buggy Behavior · kubernetes-sigs-kueueReview a diff for behavioral defects — logic errors, broken edge cases, feature-gate bugs, and deletions that break backwards compatibility during rolling upgrades.
- ▌ Extract Helpers · kubernetes-sigs-kueueReview that local variables with unnecessarily wide scope are extracted into helper functions.
- ▌ Race Conditions · kubernetes-sigs-kueueReview concurrent Go code for races, preferring fixes at the mutation site over adding snapshot fields.
- ▌ Split Test Files · kubernetes-sigs-kueueReview that new feature tests are split into their own file rather than added to an already large test file.
- ▌ API Field Comments · kubernetes-sigs-kueueReview that new CRD fields have complete godoc comments with enum value descriptions.
- ▌ Injection · kubernetes-sigs-kueueFlag injection vectors from user-supplied strings — exec, SSRF, fmt.Sprintf-built selectors/URLs, template rendering, query concatenation (CWE-78, CWE-94, CWE-918).
- ▌ Kueue E2e Cluster Multikueue · kubernetes-sigs-kueueCreate (or reuse) the manager + worker kind clusters for Kueue MultiKueue e2e development. Use when a user asks to spin up MultiKueue e2e clusters, get a local multi-cluster environment ready, or debug/iterate against a MultiKueue e2e suite (baseline, extended, sequential, DRA).
- ▌ Kueue E2e Cluster Singlecluster · kubernetes-sigs-kueueCreate (or reuse) a single kind cluster for Kueue e2e development. Use when a user asks to spin up an e2e cluster, get a local kind environment ready for e2e tests, or debug/iterate against a single-cluster e2e suite (baseline, extended, sequential, TAS, cert-manager, DRA).
- ▌ Architectural Decisions · kubernetes-sigs-kueueReview a diff for small-scale structural problems — unjustified complexity, duplicated logic, scope creep, or misplaced code.
- ▌ Imprecise Names · kubernetes-sigs-kueueFlag identifiers whose name does not describe exactly what they contain — drift from package patterns, contradictory contents, misnamed feature gates, asymmetric mirror fields.