educates-training-platform: Skill for Claude Code

Educates vcluster Upgrade Protocol

Upgrade the vcluster workshop application to the vcluster version in $ARGUMENTS (e.g. 0.35.2). With no argument, find the latest stable release at https://github.com/loft-sh/vcluster/releases and confirm the target with the user before proceeding.

This is a runtime-component change (session-manager/). Confirm the scope with the user before starting if it was not explicitly requested.

Why this is not a one-line bump

Educates does not helm install vcluster at runtime. session-manager (session-manager/handlers/application_vcluster.py) deploys each virtual cluster by applying hand-written host-cluster objects and embeds the vcluster config as a Secret (vc-config-my-vcluster, key config.yaml) mounted into the control-plane pod. The StatefulSet, Services, and RBAC in that file are hand-maintained transcriptions of what the upstream vcluster Helm chart renders. Nothing regenerates them, so a version bump means re-rendering the chart and reconciling those objects by hand, preserving Educates' own customizations. Since vcluster 0.20 the k8s distro runs in-process inside the single syncer container (no separate apiserver/etcd Deployment); an init container stages the Kubernetes binaries from the loftsh-kubernetes image.

vcluster's Helm chart version equals its app/binary version (chart 0.35.2 ships vcluster 0.35.2), unlike the cluster-service charts. There is no separate appVersion to resolve.

The version-state surface (all must move together)

1. installer/charts/educates-training-platform/charts/session-manager/templates/_helpers.tpl — the imageVersions inventory: loftsh-vcluster (ghcr.io/loft-sh/vcluster-oss:<ver> — Educates uses the OSS variant), the loftsh-kubernetes-v1.NN image set, and vcluster-internal-contour / vcluster-internal-envoy (the Contour/Envoy used only when a workshop enables vcluster ingress). The air-gap image list flows from here automatically via hack/generate-image-list.sh — no separate edit.
2. session-manager/handlers/operator_config.py — the LOFTSH_KUBERNETES_V1_NN_IMAGE = image_reference(...) constants and LOFTSH_VCLUSTER_IMAGE (the latter is version-agnostic; it resolves through the inventory).
3. session-manager/handlers/application_vcluster.py — the operator_config imports, the K8S_VERSIONS map, and K8S_DEFAULT_VERSION, plus the embedded StatefulSet / Service / RBAC objects (see reconciliation below).
4. session-manager/packages/vcluster/vcluster-all-config.yaml — the upstream chart values.yaml, copied verbatim (with comments) for the target tag. session-manager loads it, applies a handful of Educates overrides, and ships it as the config Secret. Update the version pin in its 3-line header.