What is container-manager-kubernetes-operations?

A set of operations for managing Kubernetes, the system that runs containerized applications across machines, through a typed control interface.

Use it to deploy and inspect applications, manage services and network rules, handle storage and access permissions, maintain cluster machines, and check cluster health.

It avoids relying on shell commands such as kubectl and brings workload, networking, storage, permissions, node, and monitoring tasks into one operational surface.

container-manager-kubernetes-operations — Skill for Claude Code and Co

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add Knuckles-Team/container-manager-mcp --skill container-manager-kubernetes-operations

Clone the repo

git clone --depth 1 https://github.com/Knuckles-Team/container-manager-mcp

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/knuckles-team/container-manager-mcp/container-manager-kubernetes-operations/github.svg)](https://agentmods.dev/skills/knuckles-team/container-manager-mcp/container-manager-kubernetes-operations)

Your own site

<a href="https://agentmods.dev/skills/knuckles-team/container-manager-mcp/container-manager-kubernetes-operations"><img src="https://agentmods.dev/badge/skills/knuckles-team/container-manager-mcp/container-manager-kubernetes-operations/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/knuckles-team/container-manager-mcp/container-manager-kubernetes-operations"><img src="https://agentmods.dev/badge/skills/knuckles-team/container-manager-mcp/container-manager-kubernetes-operations.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 189 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 4,609 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00189	$0.04609
Opus 5	$0.00095	$0.02305
Sonnet 5	$0.00038	$0.00922
Haiku 4.5	$0.00019	$0.00461

Measured 10d ago against content hash 0c846aaa8f28, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

container-manager-kubernetes-operations scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

container_manager_mcp/skills/container-manager-kubernetes-operations/SKILL.md · 245 lines

How it starts

The opening of the file, as written. The whole thing — 245 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Kubernetes Operations

Domain-typed control of a Kubernetes cluster through the eight themed cm_k8s_* tools on the container-manager-mcp server. These wrap the Kubernetes Python client with typed records and drive real clusters end to end — deploys, rollouts, networking, storage, RBAC, node maintenance, governance, and metrics — without ever shelling out to kubectl. Prefer these cm_* tools over raw kubectl/docker/podman shell.

When to use

Operate workloads: list/describe/exec/port-forward pods, drive rollouts, manage StatefulSets/DaemonSets/ReplicaSets/Jobs/CronJobs.
Manage cluster configuration: ConfigMaps, Secrets, Namespaces, CRDs, generic label/annotate/patch, and config/secret drift tracking.
Manage networking: Ingress + IngressClasses, NetworkPolicy (incl. CIDR rules and connectivity tests), DNS debugging, and true core/v1 Services.
Manage storage: PersistentVolumes/Claims (incl. expansion), StorageClasses, VolumeSnapshots, CSI drivers.
Audit and manage RBAC: roles/bindings/service accounts, auth_can_i, SubjectAccessReviews, ServiceAccount tokens, pod security evaluation.
Manage the cluster itself: node cordon/drain/taint/affinity, kubeconfig contexts, CSR approval, API resource discovery, cluster info, admission plugins.
Enforce governance: ResourceQuotas, LimitRanges, PriorityClasses, PodDisruptionBudgets, HorizontalPodAutoscalers.
Observe: top pods/nodes, pod/node/cluster resource summaries, autoscaler metrics and history, watch/stream/events, and the debug_* helpers.

When NOT to use

Single-host Docker/Podman container/image lifecycle → container-manager-lifecycle.
Docker Swarm cluster services/nodes → container-manager-swarm.
Rootless Podman pods, generate/play kube, checkpoint/restore → container-manager-podman-operations.
Operating several clusters/backends in one call, or fanning an action out across contexts → container-manager-multi-context.
First-time environment setup / choosing CONTAINER_MANAGER_TYPE → container-manager-config-walkthrough.
Snapshotting inventory into the KG → container-manager-kg-ingestion.

Read the full file on GitHub · 245 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

WORKFLOW.md 17 KB

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

10d ago First seen · 245 lines · 189 tokens per session scan A 0c846aaa8f28

Subscribe to this mod's changes

container-manager-kubernetes-operations is a skill published in the GitHub repository Knuckles-Team/container-manager-mcp (5 stars, last pushed 12d ago), licensed MIT. It adds 189 tokens to every session and 4,609 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Cloud Containers DevOps and cloud agentic-ai ai cluster compose container container-manager-mcp docker dockers-compose k8s kubernetes mcp ops

kubernetes-docs

Kubernetes 1.36 — Pods, Deployments, Services, Ingress, ConfigMaps, Secrets, RBAC, CRDs, Operators, kubectl, Helm.

pledgeandgrow/pledge-skills · 40 tokens

kubectl-basics

A guide to kubectl, the command-line tool used to manage Kubernetes clusters, which run containerized applications.

chaterm/terminal-skills · 15 tokens

bazel-k8s-expert

Expert knowledge for deploying Quarkus/Java applications to Kubernetes using Bazel. Covers rulesk8s, Helm, Kustomize, ConfigMaps, Secrets, and health probes.

kinhluan/rules-quarkus-skills · 45 tokens

k8e-sandbox

Execute a goal inside the K8E sandbox (gVisor/Kata/Firecracker). Use when the user runs /k8e-sandbox , $k8e-sandbox , or asks to run/execute/test code safely off the host.

xiaods/k8e · 61 tokens

Cloud Security & Container Hardening

AWS/Azure/GCP security auditing, container and Kubernetes hardening, Infrastructure as Code scanning, and cloud compliance assessment.

Masriyan/Claude-Code-CyberSecurity-Skill · 30 tokens

coolify

Use when self-hosting apps and databases with Coolify on a VPS you own — install, first-admin lockdown, Git-to-deploy (Nixpacks/Dockerfile/compose), managed Postgres/Redis, scheduled S3 backups, domains + auto-SSL. NOT a PaaS someone else runs (that is railway), NOT sizing/hardening the box (that is hetzner), NOT…

ericrisco/rsc-harness · 100 tokens