An autonomous agentic harness for Kubernetes. Proactive fleet audits, declarative GitOps remediation, and ChatOps in one place.
This repository also configures its own agents. See what kube-agents tells them →
Skill Claude CodeCodex
Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or GKE metadata server unreachable) by verifying cluster and node-pool Workload Identity configuration, the Kubernetes…
Skill Claude CodeCodex
Configures alerting policies in Terraform for Google Kubernetes Engine (GKE) clusters, workloads, and services using PromQL and Google Cloud Managed Service for Prometheus. Use when writing, analyzing, validating, or deploying Terraform alerting policies to monitor GKE service latency, traffic, error rates using…
Skill Claude CodeCodex
Establish whether an out-of-band change to a live object is load-bearing — whether the state the manifests declare would still run if the change were undone — before recommending a revert. Read-only. For drift triage, emergency hotfixes found in a cluster, and any decision between a declared state and a live one.
Skill Claude CodeCodex needs its repo
Installs or upgrades a third-party Helm chart (cert-manager, ingress-nginx, external-dns, an operator) on a cluster by adding it to the GitOps repository in the form the repository's reconciler already syncs: an Argo CD Application, a Flux HelmRelease, a Config Sync RootSync, or kustomize helmCharts. Opens one pull…
Skill Claude CodeCodex
File a bug report, feature request, or question about kube-agents itself on the user's behalf, through the project's public feedback form, exactly once, after the user has confirmed the exact text in chat. A submission becomes a public GitHub issue on gke-labs/kube-agents. Not for telling a user where to report — the…
Skill Claude CodeCodex
Writes Terraform (HCL) for Google Cloud resource changes and hands them to submit-suggestion as one pull request, on an install whose GitOps repository keeps clusters/ /provisioning/ (or its Terraform root) as HCL. Use when a request creates or changes a GKE cluster or node pool (new cluster, grow, autoscale, adopt)…
Skill Claude CodeCodex
Compose the upgrade readiness brief on request — which upgrade readiness findings need the user's decision now, what else the week found, and where the full report is — from the Saturday review's record and the findings queue, in the brief's fixed shape. Never the readiness table, never a summary of the report, never…
Skill Claude CodeCodex
Five required checks, and the arithmetic, before any proposal to lower a workload's CPU or memory requests or limits, or to change a node pool's machine type or size, and before any claim of capacity freed. Read-only. For "lower the requests of X", "right-size this deployment", "can this pool use a smaller machine…
Skill Claude CodeCodex
Generates a structured, redacted Google Cloud Support escalation bundle when a GKE issue requires Google-side control plane intervention, quota adjustments, or platform bug escalation. Use when diagnostics confirm the root cause is outside customer-managed Kubernetes/GitOps state (such as stuck GKE control plane…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: