Agent skills for Kubernetes cluster operations — Cilium, Talos, Flux, Rook-Ceph, CNPG, Gitea, Tekton, Cert-Manager, VictoriaMetrics, ZITADEL
This repository also configures its own agents. See what k8s-agent-skills tells them →
Skill Claude CodeCodex
Use when working with Sealed Secrets — encrypting Kubernetes Secrets for safe Git storage. Covers SealedSecret CRD, kubeseal, key management, encryption flow, Helm values, controller config, key rotation.
Skill Claude CodeCodex
Use when working with Stakater Reloader — watching ConfigMaps/Secrets and triggering workload rollouts on changes. Covers annotations, Helm values, patterns, and troubleshooting. NOT for CRD-based operators (no CRDs).
Skill Claude CodeCodex
Use when working with Tailscale — mesh VPN, tailnet device discovery, connectivity troubleshooting, subnet routing, or running Tailscale on Talos/Kubernetes. Triggers: tailscale, tailnet, 100.x.y.z IP, ts.net, tailscale status, tailscale ping, MagicDNS.
Skill Claude CodeCodex
Tailscale integration with Talos Linux — system extension, machine config, node IP binding, subnet routing, cross-cluster connectivity. Use when deploying or troubleshooting Tailscale on Talos nodes.
Skill Claude CodeCodex
Talos Linux Terraform provider (siderolabs/talos) — machine secrets, machine configuration, config apply, bootstrap, and the sidero-blessed production pattern (live secrets + patch-based config, upgrades owned elsewhere).
Skill Claude CodeCodex
Use when working with Talos Linux — route to the correct sub-skill based on what you need: talosctl CLI operations, machine configuration, or the Terraform provider.
Skill Claude CodeCodex
Talos Linux machine configuration — multi-document YAML format, config documents, generation flags, patching, apply modes, and v1.13+ config features.
Skill Claude CodeCodex
Talos Linux CLI operations — cluster lifecycle, upgrades, reboots, node-level diagnosis, etcd maintenance, and troubleshooting with talosctl.
Skill Claude CodeCodex
Tekton operator (tektoncd/operator) — install, upgrade, and manage Tekton components (Pipelines, Triggers, Dashboard, Chains, Results, PaC) via TektonConfig and component CRs. Covers profiles, pipeline config, tektonpruner, external results DB.
Skill Claude CodeCodex
Pipelines-as-Code (tektoncd/pipelines-as-code) — Git-native CI for Tekton. PipelineRuns in .tekton/ triggered by Git events; Repository CR, matching annotations, dynamic variables, ChatOps commands, Gitea/Forgejo/GitHub/GitLab providers, and the tkn pac CLI.
Skill Claude CodeCodex
Authoring Tekton PipelineRun/TaskRun YAML — resolver-based task refs, git auth, node targeting, matrix+param scheduling, when/CEL expressions, finally tasks, timeouts, and troubleshooting tekton.dev/v1 patterns.
Skill Claude CodeCodex
Use when working with Tekton — route to the correct sub-skill based on what you need: PipelineRun/TaskRun authoring, the Tekton operator (install/config), or Pipelines-as-Code (Git-native CI).
Skill Claude CodeCodex
Tuppr — Kubernetes controller for automated, orchestrated Talos and Kubernetes upgrades. Declare a target version in a CR; tuppr drains, upgrades, reboots, and health-checks nodes. Covers TalosUpgrade and KubernetesUpgrade CRDs, coordination, health checks, maintenance windows.
Skill Claude CodeCodex
Use when working with HashiCorp Vault REST API — health checks, init/unseal, auth login, KV read/write, policy management, token operations. Covers endpoints, auth methods, curl examples.
Skill Claude CodeCodex
Use when deploying, configuring, or upgrading HashiCorp Vault on Kubernetes via Helm. Covers HelmRelease values, HA+Raft, injector, storage, TLS, telemetry, post-deploy steps.
Skill Claude CodeCodex
Use when managing HashiCorp Vault resources as Terraform code. Covers provider config, auth backends, roles, policies, KV secrets, identity entities, ephemeral resources for write-once secrets.
Skill Claude CodeCodex
Use when working with HashiCorp Vault — deploying to Kubernetes (Helm), REST API operations, or managing Vault resources as Terraform code. Triggers: vault.example.com, Vault HA setup, Vault unseal, Vault Terraform resources.
Skill Claude CodeCodex
Deploy Vector on Kubernetes via Helm — Agent/Aggregator/Stateless roles, customConfig, sources, transforms, sinks, and production patterns.
Skill Claude CodeCodex
Create and manage Vector operator CRDs (kaasops) — Vector, VectorPipeline, ClusterVectorPipeline, VectorAggregator, ClusterVectorAggregator, with auto-routing by source type.
Skill Claude CodeCodex
Use when working with Vector — observability data pipeline, Helm deployment, or operator CRDs. Triggers: vector, observability pipeline, log shipping, metrics.
Skill Claude CodeCodex
Route to the correct VictoriaMetrics skill. Use when working with VictoriaMetrics — operator CRDs, queries, cardinality analysis, logs, traces, or trace analysis.
Skill Claude CodeCodex
Use when creating or managing VictoriaMetrics Operator CRDs — VMAgent, VMSingle, VMCluster, VMAlert, VMAlertmanager, VMAuth, VMUser, VMServiceScrape, VMPodScrape, VMRule, VMProbe, VMNodeScrape, VMScrapeConfig, VMStaticScrape, VMAlertmanagerConfig, VLogs, VLAgent, VLCluster, VMDistributed.
Skill Claude CodeCodex
ZITADEL identity management platform (v4 GA, v2 API). Covers resource-based API for managing organizations, projects, applications (OIDC/SAML/API), roles, users, and OIDC settings via Connect RPC (HTTP/1.1 JSON) and REST endpoints. PAT or JWT assertion auth.
Skill Claude CodeCodex
Use when deploying, configuring, or upgrading ZITADEL on Kubernetes via Helm. Covers HelmRelease values, CNPG database, Gateway API routing, caches, masterkey, SMTP, and production patterns. NOT for API-level operations (orgs/apps/users).
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: