agentmods.dev

migrate-k8s

A command for moving Kubernetes manifests, Docker Compose projects, or Helm charts to Control Plane. Kubernetes manages containerized applications; Compose and Helm are formats for describing them.

In plain words
What is it for?
It is for migrating applications, identities, volumes, workloads, domains, and related configuration from those source formats to Control Plane.
Why use it?
It helps convert deployment files while checking what changed or was left out, then provisions and verifies the resulting Control Plane resources.

Command

10 8d ago A scan 21 tokens original MIT
View the source file controlplane-com/ai-plugin
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/controlplane-com/ai-plugin/migrate-k8s
Clone the repo
git clone --depth 1 https://github.com/controlplane-com/ai-plugin
Per session 21 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 323 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00021 $0.00323
Opus 5 $0.00010 $0.00161
Sonnet 5 $0.00004 $0.00065
Haiku 4.5 $0.00002 $0.00032

Measured 2d ago against content hash f2f429a53764, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

migrate-k8s scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/cpln/commands/migrate-k8s.md · 17 lines

What it actually says

Migrate the Kubernetes, Docker Compose, or Helm source the user pointed to onto Control Plane.

Use the cpln-k8s-migrator agent — it loads the migration-patterns skill (the canonical conversion reference) and carries the migration end to end:

  1. Identify the source and pick the converter (CLI-only, no MCP equivalent): cpln convert for Kubernetes manifests (pipe helm template output in for a Helm chart), cpln stack for Docker Compose, or cpln helm to deploy a chart that already renders Control Plane resources.
  2. Convert to a file and review it — diff the source against the output for what the converter changed or silently dropped (pinned scaling, envFrom, init containers, NetworkPolicy/RBAC, minimal sizing).
  3. Provision in dependency order, MCP-first via the typed create_* tools (GVC, then identities, volumesets, workloads, domains; secrets are created by the user first — draft the manifests for them to fill and apply); fall back to cpln apply -f when MCP is unavailable or in CI/CD.
  4. Verify every workload is ready across its locations and report the canonical endpoint — never a constructed URL.

If the org or target GVC isn't named, ask — never guess.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 17 lines · 21 tokens per session scan A f2f429a53764

Subscribe to this mod's changes

migrate-k8s is a command published in the GitHub repository controlplane-com/ai-plugin (10 stars, last pushed 8d ago), licensed MIT. It adds 21 tokens to every session and 323 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

DevOps and cloudaiai-agentsclaude-codecloud-nativecodexcontrolplane
Related

Other commands, from other repositories

visual-test

Visually test Radar changes against a real cluster using Playwright MCP. Takes screenshots, organizes them, and reports what looks right or wrong.

skyhook-io/radar · 0 tokens

Issue Spec: Apply

Implement directly or use an optional PROCESS when managed coordination is required.

higress-group/higress · 18 tokens

Issue Spec: Propose

Create or continue proposal, SPEC, QUESTION, design, and TASK artifacts for an issue-spec change.

higress-group/higress · 26 tokens

gen-agent

You are a specialized prompt engineer tasked with generating high-quality, structured prompts for AI agents based on user descriptions. Your goal is to create agent prompts that follow a consistent format inspired by subagent creation workflows, similar to Claude's structured agent design. When you receive an input in…

higress-group/higress · 0 tokens

dependabot-batch

Review Radar's weekly Dependabot updates and batch only soaked, low-risk bumps into one tested PR.

skyhook-io/radar · 19 tokens

test-radar

Build and test Radar changes using a real running instance. Combines build verification, API smoke tests, and optional Playwright E2E tests.

skyhook-io/radar · 0 tokens