review-k8s

Kubernetes Review

Run a comprehensive review of Kubernetes manifests covering security, cost optimization, and operational readiness.

Usage

/review-k8s [path]

Paths

Writes registry-tracked paths under {review_dir} = {output_dir}/{feature}/reviews/code/{date}{_counter} (review_type=code, agents=k8s-security / k8s-cost / k8s-operations — one {review_detailed} per skill). See shield/schema/output-paths.yaml and the counter-resolution rule in /review. changes.md is a side-artifact.

Behavior

1. Detect K8s manifest files at the given path (or current working directory):
   • Look for YAML files containing apiVersion: and kind: with K8s resource types
   • If no K8s manifests found, inform the user and exit
   • If kustomization.yaml found, also invoke shield:kubernetes:kustomize-review
2. Invoke the following skills in parallel:
   • shield:kubernetes:security-audit
   • shield:kubernetes:cost-review
   • shield:kubernetes:operational-review
3. Dispatch shield:platform-engineer agent in all three modes (security, cost, operational) in parallel
4. If deprecated APIs found by any skill, run shield:kubernetes:deprecation-check-and-upgrade for upgrade guidance
5. Aggregate findings, deduplicate, sort by severity
6. Present unified findings to the user

Output Path

First, find the project root by locating .shield.json (check current directory, then parent directories). Read .shield.json to get output_dir (default: docs/shield). Determine {feature} (current feature directory name; if none exists yet, derive from current branch or story context + -YYYYMMDD). Resolve {date}{_counter} per the counter rule in /review (today's ISO date in YYYY-MM-DD format; empty _counter for first same-day run, _2/_3/... otherwise).

Write findings under {review_dir} = {output_dir}/{feature}/reviews/code/{date}{_counter}/:

{review_dir}/
├── summary.md              ← {review_summary}
├── changes.md              ← applied-fixes log (side-artifact)
└── detailed/
    ├── k8s-security.md     ← {review_detailed} (agent=k8s-security)
    ├── k8s-cost.md         ← {review_detailed} (agent=k8s-cost)
    └── k8s-operations.md   ← {review_detailed} (agent=k8s-operations)