Not in the top 1,000 by GitHub stars
k8s-servant/k8s-skills
Read-only Kubernetes troubleshooting skills for Claude Code, Codex, Gemini CLI and Copilot. Each one tested by an agent on a real kind cluster.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/k8s-aks-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-api-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-argocd-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-autoscaling-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-cert-manager-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-cilium-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-cloudnative-pg-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-coredns-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-envoy-gateway-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-envoy-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-external-secrets-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-fluent-bit-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-flux-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-gatekeeper-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-gateway-api-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-grafana-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-helm-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-istio-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-kyverno-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-loki-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-network-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-node-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-opentelemetry-collector-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-prometheus-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-rbac-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-storage-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-triage/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-upgrade-readiness/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-velero-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
skills/k8s-workload-troubleshooting/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6919c56810a3
No earlier version was observed for comparison.
Verified commit 6919c56810a3995714beecedaa8b516db82f41bc
git clone --filter=blob:none --no-checkout https://github.com/k8s-servant/k8s-skills.git .hotskills/k8s-servant-k8s-skills && git -C .hotskills/k8s-servant-k8s-skills checkout --detach 6919c56810a3995714beecedaa8b516db82f41bc
# Copy each selected skill directory from .hotskills/k8s-servant-k8s-skills into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/k8s-servant/k8s-skills.git .hotskills/k8s-servant-k8s-skills && git -C .hotskills/k8s-servant-k8s-skills checkout --detach 6919c56810a3995714beecedaa8b516db82f41bc
# Copy each selected skill directory from .hotskills/k8s-servant-k8s-skills into .agents/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/k8s-servant/k8s-skills.git .hotskills/k8s-servant-k8s-skills && git -C .hotskills/k8s-servant-k8s-skills checkout --detach 6919c56810a3995714beecedaa8b516db82f41bc
# Copy each selected skill directory from .hotskills/k8s-servant-k8s-skills into .gemini/skills/<skill-name>/Heat
Insufficient historyNot enough history yet to measure heat. It appears after a few days of data.
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- k8s-aks-troubleshooting
skills/k8s-aks-troubleshooting - k8s-api-troubleshooting
skills/k8s-api-troubleshooting - k8s-argocd-troubleshooting
skills/k8s-argocd-troubleshooting - k8s-autoscaling-troubleshooting
skills/k8s-autoscaling-troubleshooting - k8s-cert-manager-troubleshooting
skills/k8s-cert-manager-troubleshooting - k8s-cilium-troubleshooting
skills/k8s-cilium-troubleshooting - k8s-cloudnative-pg-troubleshooting
skills/k8s-cloudnative-pg-troubleshooting - k8s-coredns-troubleshooting
skills/k8s-coredns-troubleshooting - k8s-envoy-gateway-troubleshooting
skills/k8s-envoy-gateway-troubleshooting - k8s-envoy-troubleshooting
skills/k8s-envoy-troubleshooting - k8s-external-secrets-troubleshooting
skills/k8s-external-secrets-troubleshooting - k8s-fluent-bit-troubleshooting
skills/k8s-fluent-bit-troubleshooting - k8s-flux-troubleshooting
skills/k8s-flux-troubleshooting - k8s-gatekeeper-troubleshooting
skills/k8s-gatekeeper-troubleshooting - k8s-gateway-api-troubleshooting
skills/k8s-gateway-api-troubleshooting - k8s-grafana-troubleshooting
skills/k8s-grafana-troubleshooting - k8s-helm-troubleshooting
skills/k8s-helm-troubleshooting - k8s-istio-troubleshooting
skills/k8s-istio-troubleshooting - k8s-kyverno-troubleshooting
skills/k8s-kyverno-troubleshooting - k8s-loki-troubleshooting
skills/k8s-loki-troubleshooting - k8s-network-troubleshooting
skills/k8s-network-troubleshooting - k8s-node-troubleshooting
skills/k8s-node-troubleshooting - k8s-opentelemetry-collector-troubleshooting
skills/k8s-opentelemetry-collector-troubleshooting - k8s-prometheus-troubleshooting
skills/k8s-prometheus-troubleshooting - k8s-rbac-troubleshooting
skills/k8s-rbac-troubleshooting - k8s-storage-troubleshooting
skills/k8s-storage-troubleshooting - k8s-triage
skills/k8s-triage - k8s-upgrade-readiness
skills/k8s-upgrade-readiness - k8s-velero-troubleshooting
skills/k8s-velero-troubleshooting - k8s-workload-troubleshooting
skills/k8s-workload-troubleshooting
How it works
k8s-aks-troubleshooting
When your agent uses it
Use when a problem is specific to Azure Kubernetes Service (AKS): a cluster or node pool in "Failed" state, an upgrade or scale that fails ("UpgradeFailed", "violate the pod's disruption budget", "QuotaExceeded", "AllocationFailed"), a LoadBalancer Service stuck at <pending> ("SyncLoadBalancerFailed", "AuthorizationFailed"), an Azure Disk or Files PVC that fails ("ProvisioningFailed", "volume node affinity conflict", "Multi-Attach error", "Mount error(13)"), workload identity errors ("AADSTS700016", "AADSTS70021"), CoreDNS edits that AKS reverts, "error dialing backend", Azure Policy denials, or API server access (authorized IP ranges, private clusters, kubelogin, "User does not have access to the resource in Azure"). Investigates with kubectl and read-only az commands, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
258 tokensAlways available to the agent
SKILL.md
3,539 tokensWhen the skill is activated
Reference documents
162,960 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
../../.claude-plugin/icon.pngasset21,631 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/marketplace.jsonasset26,190 bytes../../.claude-plugin/plugin.jsonasset399 bytes../../plugins/k8s-secret-guard/.claude-plugin/plugin.jsonasset543 bytes../../plugins/k8s-secret-guard/hooks/hooks.jsonasset349 bytes../../plugins/k8s-secret-guard/hooks/hooks.jsonasset349 bytes.claude-plugin/plugin.jsonasset1,225 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesSKILL.mdcore14,537 bytesreferences/addons-access.mddoc6,105 bytesreferences/load-balancers.mddoc6,158 bytesreferences/nodepools-upgrades.mddoc8,290 bytesreferences/storage-identity.mddoc8,880 bytes../k8s-api-troubleshooting/.claude-plugin/plugin.jsonasset1,255 bytes../k8s-api-troubleshooting/SKILL.mddoc14,671 bytes../k8s-api-troubleshooting/references/admission.mddoc5,748 bytes../k8s-api-troubleshooting/references/auth-load-storage.mddoc5,111 bytes../k8s-api-troubleshooting/references/discovery-crds-deletion.mddoc7,042 bytes../k8s-argocd-troubleshooting/.claude-plugin/plugin.jsonasset974 bytes../k8s-argocd-troubleshooting/SKILL.mddoc11,425 bytes../k8s-argocd-troubleshooting/references/comparison-errors.mddoc2,418 bytes../k8s-argocd-troubleshooting/references/health-and-appsets.mddoc2,228 bytes../k8s-argocd-troubleshooting/references/projects-and-destinations.mddoc2,291 bytes../k8s-argocd-troubleshooting/references/sync.mddoc3,118 bytes../k8s-autoscaling-troubleshooting/.claude-plugin/plugin.jsonasset1,048 bytes../k8s-autoscaling-troubleshooting/SKILL.mddoc10,896 bytes../k8s-autoscaling-troubleshooting/references/hpa.mddoc4,110 bytes../k8s-autoscaling-troubleshooting/references/metrics-keda-vpa.mddoc4,839 bytes../k8s-cert-manager-troubleshooting/.claude-plugin/plugin.jsonasset983 bytes../k8s-cert-manager-troubleshooting/SKILL.mddoc11,412 bytes../k8s-cert-manager-troubleshooting/references/acme.mddoc2,995 bytes../k8s-cert-manager-troubleshooting/references/issuers-and-requests.mddoc3,379 bytes../k8s-cert-manager-troubleshooting/references/renewal.mddoc2,554 bytes../k8s-cert-manager-troubleshooting/references/webhook.mddoc2,789 bytes../k8s-cilium-troubleshooting/.claude-plugin/plugin.jsonasset1,041 bytes../k8s-cilium-troubleshooting/SKILL.mddoc9,207 bytes../k8s-cilium-troubleshooting/references/agent-and-datapath.mddoc2,773 bytes../k8s-cilium-troubleshooting/references/policies.mddoc3,396 bytes../k8s-cloudnative-pg-troubleshooting/.claude-plugin/plugin.jsonasset1,198 bytes../k8s-cloudnative-pg-troubleshooting/SKILL.mddoc14,336 bytes../k8s-coredns-troubleshooting/.claude-plugin/plugin.jsonasset1,138 bytes../k8s-coredns-troubleshooting/SKILL.mddoc12,056 bytes../k8s-coredns-troubleshooting/references/clients-nodelocal-managed.mddoc4,830 bytes../k8s-coredns-troubleshooting/references/corefile-and-plugins.mddoc7,978 bytes../k8s-envoy-gateway-troubleshooting/.claude-plugin/plugin.jsonasset1,066 bytes../k8s-envoy-gateway-troubleshooting/SKILL.mddoc10,177 bytes../k8s-envoy-gateway-troubleshooting/references/gateways-and-policies.mddoc2,835 bytes../k8s-envoy-gateway-troubleshooting/references/routes.mddoc3,067 bytes../k8s-envoy-troubleshooting/.claude-plugin/plugin.jsonasset1,098 bytes../k8s-envoy-troubleshooting/SKILL.mddoc10,488 bytes../k8s-envoy-troubleshooting/references/bootstrap-and-admin.mddoc3,770 bytes../k8s-envoy-troubleshooting/references/responses-and-upstreams.mddoc4,292 bytes../k8s-external-secrets-troubleshooting/.claude-plugin/plugin.jsonasset1,086 bytes../k8s-external-secrets-troubleshooting/SKILL.mddoc9,579 bytes../k8s-external-secrets-troubleshooting/references/stores.mddoc2,365 bytes../k8s-external-secrets-troubleshooting/references/sync-errors.mddoc2,648 bytes../k8s-external-secrets-troubleshooting/references/target-and-refresh.mddoc3,217 bytes../k8s-fluent-bit-troubleshooting/.claude-plugin/plugin.jsonasset1,135 bytes../k8s-fluent-bit-troubleshooting/SKILL.mddoc10,320 bytes../k8s-fluent-bit-troubleshooting/references/config-and-operator.mddoc3,744 bytes../k8s-fluent-bit-troubleshooting/references/pipeline.mddoc3,934 bytes../k8s-flux-troubleshooting/.claude-plugin/plugin.jsonasset1,012 bytes../k8s-flux-troubleshooting/SKILL.mddoc11,733 bytes../k8s-flux-troubleshooting/references/helmreleases.mddoc3,035 bytes../k8s-flux-troubleshooting/references/kustomizations.mddoc2,807 bytes../k8s-flux-troubleshooting/references/sources.mddoc2,965 bytes../k8s-flux-troubleshooting/references/suspend-and-controllers.mddoc2,136 bytes../k8s-gatekeeper-troubleshooting/.claude-plugin/plugin.jsonasset1,041 bytes../k8s-gatekeeper-troubleshooting/SKILL.mddoc9,850 bytes../k8s-gatekeeper-troubleshooting/references/constraints.mddoc2,613 bytes../k8s-gatekeeper-troubleshooting/references/templates.mddoc2,506 bytes../k8s-gatekeeper-troubleshooting/references/webhook-sync-mutation.mddoc3,463 bytes../k8s-gateway-api-troubleshooting/.claude-plugin/plugin.jsonasset1,196 bytes../k8s-gateway-api-troubleshooting/SKILL.mddoc15,904 bytes../k8s-gateway-api-troubleshooting/references/gateways-and-listeners.mddoc7,135 bytes../k8s-gateway-api-troubleshooting/references/routes.mddoc5,485 bytes../k8s-grafana-troubleshooting/.claude-plugin/plugin.jsonasset1,133 bytes../k8s-grafana-troubleshooting/SKILL.mddoc10,080 bytes../k8s-grafana-troubleshooting/references/datasources-no-data.mddoc2,129 bytes../k8s-grafana-troubleshooting/references/provisioning.mddoc3,515 bytes../k8s-grafana-troubleshooting/references/runtime-and-operator.mddoc3,390 bytes../k8s-helm-troubleshooting/.claude-plugin/plugin.jsonasset1,070 bytes../k8s-helm-troubleshooting/SKILL.mddoc10,062 bytes../k8s-helm-troubleshooting/references/failed-upgrades.mddoc3,381 bytes../k8s-helm-troubleshooting/references/install-errors.mddoc3,161 bytes../k8s-helm-troubleshooting/references/stuck-releases.mddoc2,631 bytes../k8s-istio-troubleshooting/.claude-plugin/plugin.jsonasset1,116 bytes../k8s-istio-troubleshooting/SKILL.mddoc9,663 bytes../k8s-istio-troubleshooting/references/routing.mddoc2,708 bytes../k8s-istio-troubleshooting/references/security-and-injection.mddoc2,922 bytes../k8s-kyverno-troubleshooting/.claude-plugin/plugin.jsonasset1,065 bytes../k8s-kyverno-troubleshooting/SKILL.mddoc9,911 bytes../k8s-kyverno-troubleshooting/references/mutate-and-generate.mddoc2,392 bytes../k8s-kyverno-troubleshooting/references/validation.mddoc3,015 bytes../k8s-kyverno-troubleshooting/references/webhooks-and-controllers.mddoc3,216 bytes../k8s-loki-troubleshooting/.claude-plugin/plugin.jsonasset1,130 bytes../k8s-loki-troubleshooting/SKILL.mddoc10,577 bytes../k8s-loki-troubleshooting/references/ingestion.mddoc3,754 bytes../k8s-loki-troubleshooting/references/startup-storage-queries.mddoc3,865 bytes../k8s-network-troubleshooting/.claude-plugin/plugin.jsonasset851 bytes../k8s-network-troubleshooting/SKILL.mddoc11,021 bytes../k8s-network-troubleshooting/references/dns.mddoc2,811 bytes../k8s-network-troubleshooting/references/ingress-gateway.mddoc3,097 bytes../k8s-network-troubleshooting/references/networkpolicy.mddoc2,828 bytes../k8s-network-troubleshooting/references/services.mddoc2,820 bytes../k8s-node-troubleshooting/.claude-plugin/plugin.jsonasset836 bytes../k8s-node-troubleshooting/.claude-plugin/plugin.jsonasset836 bytes../k8s-node-troubleshooting/.claude-plugin/plugin.jsonasset836 bytes../k8s-node-troubleshooting/.claude-plugin/plugin.jsonasset836 bytes../k8s-node-troubleshooting/.claude-plugin/plugin.jsonasset836 bytes../k8s-node-troubleshooting/SKILL.mddoc11,842 bytes../k8s-node-troubleshooting/references/autoscaler.mddoc2,677 bytes../k8s-node-troubleshooting/references/capacity.mddoc2,462 bytes../k8s-node-troubleshooting/references/not-ready.mddoc3,331 bytes../k8s-node-troubleshooting/references/pressure.mddoc2,804 bytes../k8s-node-troubleshooting/references/taints.mddoc2,644 bytes../k8s-opentelemetry-collector-troubleshooting/.claude-plugin/plugin.jsonasset1,179 bytes../k8s-opentelemetry-collector-troubleshooting/SKILL.mddoc10,675 bytes../k8s-opentelemetry-collector-troubleshooting/references/config-and-receivers.mddoc3,686 bytes../k8s-opentelemetry-collector-troubleshooting/references/export-and-operator.mddoc5,000 bytes../k8s-prometheus-troubleshooting/.claude-plugin/plugin.jsonasset1,125 bytes../k8s-prometheus-troubleshooting/SKILL.mddoc11,043 bytes../k8s-prometheus-troubleshooting/references/discovery.mddoc3,521 bytes../k8s-prometheus-troubleshooting/references/prometheus-health.mddoc2,167 bytes../k8s-prometheus-troubleshooting/references/rules-and-alerts.mddoc3,387 bytes../k8s-prometheus-troubleshooting/references/targets-down.mddoc2,124 bytes../k8s-rbac-troubleshooting/.claude-plugin/plugin.jsonasset1,001 bytes../k8s-rbac-troubleshooting/SKILL.mddoc10,872 bytes../k8s-rbac-troubleshooting/references/authentication-and-admission.mddoc3,200 bytes../k8s-rbac-troubleshooting/references/bindings-and-roles.mddoc3,753 bytes../k8s-storage-troubleshooting/.claude-plugin/plugin.jsonasset883 bytes../k8s-storage-troubleshooting/SKILL.mddoc10,833 bytes../k8s-storage-troubleshooting/references/attach-mount.mddoc2,745 bytes../k8s-storage-troubleshooting/references/pending.mddoc3,335 bytes../k8s-storage-troubleshooting/references/space-and-expansion.mddoc2,653 bytes../k8s-triage/.claude-plugin/plugin.jsonasset820 bytes../k8s-triage/SKILL.mddoc14,122 bytes../k8s-upgrade-readiness/.claude-plugin/plugin.jsonasset1,079 bytes../k8s-upgrade-readiness/.claude-plugin/plugin.jsonasset1,079 bytes../k8s-upgrade-readiness/SKILL.mddoc13,099 bytes../k8s-upgrade-readiness/references/drains.mddoc4,609 bytes../k8s-upgrade-readiness/references/versions-and-apis.mddoc5,278 bytes../k8s-velero-troubleshooting/.claude-plugin/plugin.jsonasset1,237 bytes../k8s-velero-troubleshooting/SKILL.mddoc16,476 bytes../k8s-velero-troubleshooting/references/volume-data.mddoc5,367 bytes../k8s-workload-troubleshooting/.claude-plugin/plugin.jsonasset824 bytes../k8s-workload-troubleshooting/SKILL.mddoc12,561 bytes../k8s-workload-troubleshooting/references/crashloop.mddoc3,509 bytes../k8s-workload-troubleshooting/references/image-pull.mddoc3,101 bytes../k8s-workload-troubleshooting/references/jobs.mddoc4,187 bytes../k8s-workload-troubleshooting/references/oom-and-limits.mddoc3,258 bytes../k8s-workload-troubleshooting/references/pending.mddoc3,668 bytes../k8s-workload-troubleshooting/references/probes.mddoc5,050 bytes../k8s-workload-troubleshooting/references/rollouts.mddoc4,029 bytes
Read SKILL.md
# AKS troubleshooting
Find out why something that depends on Azure fails in an AKS cluster, and propose a fix.
**Read first, ask before changing.** Run the investigation commands freely: kubectl reads
and the read-only `az` commands below (`show`, `list`, `get`). Run a command under an "Ask
first" line only after the user approves that exact command; if your credentials do not
allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
Every `az` change (update, upgrade, role assignments, anything that writes) is a proposed
fix.
An AKS cluster lives in two places. Kubernetes objects are in the cluster; the cluster
itself, its **node pools** (virtual machine scale sets), load balancers, public IPs, disks
and identities are Azure resources. The cluster resource is in the user's resource group;
the resources AKS manages for it are in a separate **node resource group** (by defaultView the complete source on GitHubk8s-api-troubleshooting
When your agent uses it
Use when the Kubernetes API server itself refuses or fails a request, before any controller acts on it: "failed calling webhook", "admission webhook ... denied the request", "ValidatingAdmissionPolicy ... denied request", a ReplicaSet with FailedCreate and no pods, an APIService "False (ServiceNotFound)", "FailedDiscoveryCheck" or "MissingEndpoints", "unable to retrieve the complete list of server APIs", a namespace stuck in Terminating, "no matches for kind" or "ensure CRDs are installed first", "strict decoding error: unknown field", a conversion webhook failure, "You must be logged in to the server (Unauthorized)", 429 "too many requests", "etcdserver:" errors, "Request entity too large" or "metadata.annotations: Too long". Investigates with kubectl get, describe, events and the health endpoints, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
252 tokensAlways available to the agent
SKILL.md
3,677 tokensWhen the skill is activated
Reference documents
4,527 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,255 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesSKILL.mdcore14,671 bytesreferences/admission.mddoc5,748 bytesreferences/auth-load-storage.mddoc5,111 bytesreferences/discovery-crds-deletion.mddoc7,042 bytes
Read SKILL.md
# API server troubleshooting
Find out why the API server refuses or fails a request, and propose a fix. **Read first,
ask before changing.** Run the investigation commands freely. Run a command under an "Ask
first" line only after the user approves that exact command; if your credentials do not
allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
Every request goes through the same steps in the API server: **authentication** (who is
asking: a 401 if nobody), **authorization** (may they: a 403 from RBAC), **admission**
(mutating webhooks, schema validation, then ValidatingAdmissionPolicies and validating
webhooks), then **storage** in etcd. Requests for an **aggregated API** (an APIService
such as `v1beta1.metrics.k8s.io`) are sent on to another server instead, and
**discovery** lists every group and version, including those. A failure at any step comes
back to the caller, so the error message usually names the step: the webhook, theView the complete source on GitHubk8s-argocd-troubleshooting
When your agent uses it
Use when Argo CD does not deploy or update an application in Kubernetes: an Application that is OutOfSync, Unknown, Degraded, Missing or Progressing, a ComparisonError ("app path does not exist", "unable to resolve ... to a commit SHA"), an InvalidSpecError ("do not match any of the allowed destinations in project"), a sync that fails ("one or more objects failed to apply"), auto-sync that never runs, resources that stay OutOfSync after a sync, or ApplicationSets that generate nothing. Investigates with kubectl get, describe, events and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
202 tokensAlways available to the agent
SKILL.md
2,961 tokensWhen the skill is activated
Reference documents
2,582 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset974 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesSKILL.mdcore11,425 bytesreferences/comparison-errors.mddoc2,418 bytesreferences/health-and-appsets.mddoc2,228 bytesreferences/projects-and-destinations.mddoc2,291 bytesreferences/sync.mddoc3,118 bytes
Read SKILL.md
# Argo CD troubleshooting
Find out why Argo CD does not deploy or update an application, and propose a fix.
**Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
An **Application** says: render this path of this repository at this revision, and
apply it to this destination. Argo CD compares the rendered manifests with the cluster
and reports two things: **sync status** (does the cluster match Git: `Synced`,
`OutOfSync`, `Unknown`) and **health** (do the deployed objects work: `Healthy`,
`Progressing`, `Degraded`, `Missing`, `Suspended`). Conditions on the Application say
why it could not compare or sync. An **AppProject** limits which repositories,View the complete source on GitHubk8s-autoscaling-troubleshooting
When your agent uses it
Use when Kubernetes autoscaling does not scale as expected: a HorizontalPodAutoscaler whose TARGETS show "<unknown>", "missing request for cpu", "unable to get metrics for resource cpu" or "FailedGetResourceMetric", an HPA stuck at maxReplicas ("TooManyReplicas") or not scaling down, "Metrics API not available" from kubectl top, metrics-server not Ready, a KEDA ScaledObject that is not Ready ("ScaledObjectCheckFailed") or creates no HPA, KEDA scalers failing, two autoscalers on one workload, or a VerticalPodAutoscaler without recommendations. Investigates with kubectl get, describe, events, logs and top, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
232 tokensAlways available to the agent
SKILL.md
2,887 tokensWhen the skill is activated
Reference documents
2,360 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,048 bytesSKILL.mdcore10,896 bytesSKILL.mdcore10,896 bytesSKILL.mdcore10,896 bytesSKILL.mdcore10,896 bytesSKILL.mdcore10,896 bytesSKILL.mdcore10,896 bytesSKILL.mdcore10,896 bytesSKILL.mdcore10,896 bytesreferences/hpa.mddoc4,110 bytesreferences/metrics-keda-vpa.mddoc4,839 bytes
Read SKILL.md
# Autoscaling troubleshooting
Find out why a workload does not scale the way it should, and propose a fix. **Read
first, ask before changing.** Run the investigation commands freely. Run a command under
an "Ask first" line only after the user approves that exact command; if your credentials
do not allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the
user.
A **HorizontalPodAutoscaler** (HPA) sets the replica count of a Deployment or
StatefulSet every 15 seconds from metrics: CPU and memory from **metrics-server**
(`metrics.k8s.io`), or custom and external metrics from an adapter. **KEDA** turns a
**ScaledObject** into an HPA named `keda-hpa-<name>` and serves its triggers as external
metrics (`external.metrics.k8s.io`). A **VerticalPodAutoscaler** (VPA) changes requests
instead of replicas. The HPA writes what it decided, and why, into three statusView the complete source on GitHubk8s-cert-manager-troubleshooting
When your agent uses it
Use when cert-manager does not issue or renew a certificate in Kubernetes: a Certificate that stays READY False, a CertificateRequest that is Pending, Denied or Failed, an Issuer or ClusterIssuer that is not Ready ("Error getting keypair for CA issuer"), "Referenced \"Issuer\" not found", ACME Orders or Challenges stuck pending (HTTP-01, DNS-01, rate limits), a certificate that expired or did not renew, or "failed calling webhook \"webhook.cert-manager.io\"" when applying resources. Investigates with kubectl get, describe, events and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
199 tokensAlways available to the agent
SKILL.md
2,797 tokensWhen the skill is activated
Reference documents
2,900 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset983 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesSKILL.mdcore11,412 bytesreferences/acme.mddoc2,995 bytesreferences/issuers-and-requests.mddoc3,379 bytesreferences/renewal.mddoc2,554 bytesreferences/webhook.mddoc2,789 bytes
Read SKILL.md
# cert-manager troubleshooting
Find out why cert-manager does not issue or renew a certificate, and propose a fix.
**Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
cert-manager works in a chain. A **Certificate** says what is wanted. cert-manager
creates a **CertificateRequest** for each issuance, which an **Issuer** (one namespace)
or **ClusterIssuer** (whole cluster) signs. For ACME issuers (Let's Encrypt and others)
the request also gets an **Order** with one **Challenge** per domain. Follow the chain
from the Certificate and stop at the first object that is not Ready.
View the complete source on GitHubk8s-cilium-troubleshooting
When your agent uses it
Use when networking fails on a Kubernetes cluster that runs Cilium as its CNI: traffic between pods dropped or timing out after a CiliumNetworkPolicy or CiliumClusterwideNetworkPolicy, "Policy denied" drops in Hubble, DNS that stops resolving after an egress policy, HTTP 403 "Access denied" from an L7 rule, toFQDNs rules that do not match, pods stuck ContainerCreating with "unable to connect to Cilium agent", Cilium agent or operator pods not ready, CiliumEndpoints not ready, or IPAM exhaustion. Investigates with kubectl get, describe, events and logs, asks before running cilium-dbg or hubble inside the agent, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
227 tokensAlways available to the agent
SKILL.md
2,380 tokensWhen the skill is activated
Reference documents
1,644 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,041 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesSKILL.mdcore9,207 bytesreferences/agent-and-datapath.mddoc2,773 bytesreferences/policies.mddoc3,396 bytes
Read SKILL.md
# Cilium troubleshooting
Find out why traffic fails on a cluster that runs Cilium, and propose a fix. **Read
first, ask before changing.** Run the investigation commands freely. Run a command under
an "Ask first" line only after the user approves that exact command; if your
credentials do not allow it, give it to the user to run. Never run a "Proposed fix";
hand it to the user.
Cilium gives each pod a **CiliumEndpoint** with a security **identity** derived from its
labels, and enforces Kubernetes NetworkPolicies, **CiliumNetworkPolicies** (one
namespace) and **CiliumClusterwideNetworkPolicies** by identity. Once any policy selects
an endpoint for a direction (ingress or egress), only what some policy allows gets
through in that direction. L7 rules (HTTP, DNS) send the traffic through Cilium's Envoy
proxy. **Hubble** records each flow with its verdict.View the complete source on GitHubk8s-cloudnative-pg-troubleshooting
When your agent uses it
Use when a CloudNativePG (CNPG) PostgreSQL Cluster in Kubernetes is not healthy: a Cluster stuck in "Setting up primary", "Creating a new replica" or "Waiting for the instances to become active", fewer ready instances than requested, an initdb or join pod that is Pending or in CreateContainerConfigError, PVCs that stay Pending, a bootstrap Secret that is missing, a replica that cannot be scheduled (pod anti-affinity, nodeSelector, taints), "Not enough disk space", failing WAL archiving or backups (ContinuousArchiving, LastBackupSucceeded False), a failover or switchover that does not finish, "Invalid cluster definition" or "Cluster is unrecoverable", and operator errors. Investigates with kubectl get, describe, events and logs, never reading Secrets, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
257 tokensAlways available to the agent
SKILL.md
3,783 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,198 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytesSKILL.mdcore14,336 bytes
Read SKILL.md
# CloudNativePG troubleshooting
Find out why a CloudNativePG PostgreSQL cluster is not healthy, from the Cluster's
status, its pods, PVCs and events and the operator's log, and propose a fix. **Read
first, ask before changing.** Run the investigation commands freely. Run a command under
an "Ask first" line only after the user approves that exact command; if your
credentials do not allow it, give it to the user to run. Never run a "Proposed fix";
hand it to the user.
How CloudNativePG works, in the parts that fail:
- The **operator** (Deployment `cnpg-controller-manager`, usually in `cnpg-system`)
reconciles every `Cluster` (`clusters.postgresql.cnpg.io`). It creates the instance
pods and their PVCs directly, without a StatefulSet.View the complete source on GitHubk8s-coredns-troubleshooting
When your agent uses it
Use when cluster DNS itself misbehaves on Kubernetes: CoreDNS pods in CrashLoopBackOff ("Error during parsing: Unknown directive", "plugin/loop: Loop ... detected"), "reload failed" after a Corefile edit, external names failing while Service names resolve (";; connection timed out; no servers could be reached", SERVFAIL, "plugin/errors: 2 ... i/o timeout"), one domain or stub domain failing, rewrite or hosts entries that do not work, "Plugins not ready: \"kubernetes\"", REFUSED or "concurrent queries exceeded maximum", slow lookups (ndots, 5 s delays), NodeLocal DNSCache (169.254.20.10), or the AKS coredns-custom, EKS add-on and GKE kube-dns ConfigMaps. Investigates with kubectl get and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
257 tokensAlways available to the agent
SKILL.md
3,241 tokensWhen the skill is activated
Reference documents
3,504 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,138 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesSKILL.mdcore12,056 bytesreferences/clients-nodelocal-managed.mddoc4,830 bytesreferences/corefile-and-plugins.mddoc7,978 bytes
Read SKILL.md
# CoreDNS troubleshooting
Find out why CoreDNS does not answer a name the way it should, and propose a fix. **Read
first, ask before changing.** Run the investigation commands freely. Run a command under
an "Ask first" line only after the user approves that exact command; if your credentials
do not allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the
user.
CoreDNS runs in `kube-system` as the Deployment `coredns` (label `k8s-app=kube-dns`),
behind the Service `kube-dns`, and reads its configuration, the **Corefile**, from the
ConfigMap `coredns`. Each server block (`.:53 { ... }`, or `example.com:53 { ... }` for
one domain) lists plugins: `kubernetes` answers names under `cluster.local`, `forward`
sends everything else upstream (by default to the node's `/etc/resolv.conf`), `cache`,
`rewrite` and `hosts` change answers, `errors` logs failures, `loop` stops CoreDNS whenView the complete source on GitHubk8s-envoy-gateway-troubleshooting
When your agent uses it
Use when Envoy Gateway (the Gateway API implementation by the Envoy project) does not route traffic in Kubernetes: a Gateway that is not Programmed ("AddressNotAssigned"), an HTTPRoute that is not Accepted ("NoMatchingListenerHostname", "NotAllowedByListeners") or whose ResolvedRefs is False ("BackendNotFound", "RefNotPermitted" without a ReferenceGrant), clients getting 404, 500 or 503 "no healthy upstream" from the gateway, a GatewayClass that is not Accepted, or BackendTrafficPolicy, ClientTrafficPolicy, SecurityPolicy and EnvoyProxy resources that do not apply. Investigates with kubectl get, describe, events and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
229 tokensAlways available to the agent
SKILL.md
2,648 tokensWhen the skill is activated
Reference documents
1,524 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,066 bytesSKILL.mdcore10,177 bytesSKILL.mdcore10,177 bytesSKILL.mdcore10,177 bytesSKILL.mdcore10,177 bytesSKILL.mdcore10,177 bytesSKILL.mdcore10,177 bytesSKILL.mdcore10,177 bytesreferences/gateways-and-policies.mddoc2,835 bytesreferences/routes.mddoc3,067 bytes
Read SKILL.md
# Envoy Gateway troubleshooting
Find out why Envoy Gateway does not route a request, and propose a fix. **Read first,
ask before changing.** Run the investigation commands freely. Run a command under an
"Ask first" line only after the user approves that exact command; if your credentials
do not allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the
user.
A **GatewayClass** with controller `gateway.envoyproxy.io/gatewayclass-controller`
belongs to Envoy Gateway. For each **Gateway** of that class, Envoy Gateway runs an
Envoy Deployment and Service (by default in `envoy-gateway-system`, labelled
`gateway.envoyproxy.io/owning-gateway-name`). **HTTPRoutes** (and GRPC, TLS, TCP and UDP
routes) attach to a Gateway's listeners and send traffic to backends. Every object
reports what Envoy Gateway made of it in its status conditions, so the status usuallyView the complete source on GitHubk8s-envoy-troubleshooting
When your agent uses it
Use when an Envoy proxy on Kubernetes fails requests: clients get 503 "no healthy upstream", 503 "upstream connect error or disconnect/reset before headers. reset reason: remote connection failure", 404 with an empty body, or 504 "upstream request timeout", access logs show response flags (UH, UF, NR, NC, UT, UO, URX, UC), or Envoy crashes at start ("has unknown fields", "no such field", "route: unknown cluster"). Covers Envoy run directly (a Deployment with its own bootstrap, a front proxy, a sidecar) and the proxy under Contour, Emissary or Gloo; reads the access log, the bootstrap and Envoy's read-only admin endpoints. Investigates with kubectl get and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
245 tokensAlways available to the agent
SKILL.md
2,766 tokensWhen the skill is activated
Reference documents
2,116 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,098 bytesSKILL.mdcore10,488 bytesSKILL.mdcore10,488 bytesSKILL.mdcore10,488 bytesSKILL.mdcore10,488 bytesSKILL.mdcore10,488 bytesSKILL.mdcore10,488 bytesSKILL.mdcore10,488 bytesSKILL.mdcore10,488 bytesreferences/bootstrap-and-admin.mddoc3,770 bytesreferences/responses-and-upstreams.mddoc4,292 bytes
Read SKILL.md
# Envoy troubleshooting
Find out why Envoy does not pass a request on, and propose a fix. **Read first, ask
before changing.** Run the investigation commands freely. Run a command under an "Ask
first" line only after the user approves that exact command; if your credentials do not
allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
Envoy takes a request on a **listener**, matches a **route** by the Host header
(`domains`) and the path, and sends it to a **cluster**, whose **hosts** come from DNS
(`STRICT_DNS`, `LOGICAL_DNS`), a static list or a control plane (EDS). When it cannot,
it answers itself and records why: in the access log as a **response flag** (`UH`,
`UF`, `NR` ...) and `%RESPONSE_CODE_DETAILS%`, and in its stats. A standalone Envoy reads
its bootstrap once at start, so a config error stops it and an edited ConfigMap needs a
restart.View the complete source on GitHubk8s-external-secrets-troubleshooting
When your agent uses it
[Credential-related source omitted]
What it loads into context
Frontmatter
214 tokensAlways available to the agent
SKILL.md
2,347 tokensWhen the skill is activated
Reference documents
2,056 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,086 bytesSKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytesSKILL.mdcore9,579 bytesreferences/stores.mddoc2,365 bytesreferences/sync-errors.mddoc2,648 bytesreferences/target-and-refresh.mddoc3,217 bytes
Read SKILL.md
# External Secrets troubleshooting
Find out why External Secrets Operator (ESO) does not create or update a Secret, and
propose a fix. **Read first, ask before changing.** Run the investigation commands
freely. Run a command under an "Ask first" line only after the user approves that exact
command; if your credentials do not allow it, give it to the user to run. Never run a
"Proposed fix"; hand it to the user.
An **ExternalSecret** says which keys to fetch from an external store and which
Kubernetes Secret to write (`spec.target`). It uses a **SecretStore** (one namespace) or
**ClusterSecretStore** (any allowed namespace) that holds the provider configuration (a
cloud secret manager, Vault, and others). The ESO controller syncs on
`spec.refreshInterval` and reports the result on the ExternalSecret's `Ready` condition.
View the complete source on GitHubk8s-fluent-bit-troubleshooting
When your agent uses it
Use when Fluent Bit on Kubernetes does not deliver logs: the DaemonSet crashes on a config error ("tried to instance a plugin name that doesn't exist", "unknown configuration property", "configuration file contains errors"), an output fails ("failed to flush chunk", "cannot be retried", "no upstream connections available", "getaddrinfo", "Connection refused"), records arrive without Kubernetes metadata ("could not get meta for POD"), lines arrive unparsed or not at all (tail path, parser, CRI versus Docker format), or inputs pause ("paused (mem buf overlimit"). Covers the Helm chart and the Fluent Operator. Investigates with kubectl get, logs and Fluent Bit's read-only HTTP endpoints, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
229 tokensAlways available to the agent
SKILL.md
2,706 tokensWhen the skill is activated
Reference documents
2,072 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,135 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesSKILL.mdcore10,320 bytesreferences/config-and-operator.mddoc3,744 bytesreferences/pipeline.mddoc3,934 bytes
Read SKILL.md
# Fluent Bit troubleshooting
Find out why Fluent Bit does not ship logs, and propose a fix. **Read first, ask before
changing.** Run the investigation commands freely. Run a command under an "Ask first"
line only after the user approves that exact command; if your credentials do not allow
it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
Fluent Bit runs as a DaemonSet: on every node a **tail** input reads the container log
files under `/var/log/containers/`, the **kubernetes** filter adds pod metadata from the
API server, and **outputs** send the records to a backend (Elasticsearch, Loki, an HTTP
endpoint, a forwarder). Its own log names each part as `[input:tail:tail.0]`,
`[filter:kubernetes:kubernetes.0]`, `[output:http:http.0]`, so the log usually names the
cause. The Helm chart keeps the config in a ConfigMap (`fluent-bit.conf`); the **Fluent
Operator** builds it from custom resources into a Secret.View the complete source on GitHubk8s-flux-troubleshooting
When your agent uses it
Use when Flux does not deploy or update something in Kubernetes: a GitRepository, OCIRepository or HelmRepository that is not Ready ("couldn't find remote ref", "authentication required"), a Kustomization that is not Ready ("kustomization path not found", "kustomize build failed", "dependency ... is not ready", health check timeouts), a HelmRelease that is not Ready (HelmChart "invalid chart reference", InstallFailed, UpgradeFailed, RetriesExceeded), changes in Git that never reach the cluster, or suspended Flux objects. Investigates with kubectl get, describe, events and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
203 tokensAlways available to the agent
SKILL.md
3,025 tokensWhen the skill is activated
Reference documents
2,790 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,012 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesSKILL.mdcore11,733 bytesreferences/helmreleases.mddoc3,035 bytesreferences/kustomizations.mddoc2,807 bytesreferences/sources.mddoc2,965 bytesreferences/suspend-and-controllers.mddoc2,136 bytes
Read SKILL.md
# Flux troubleshooting
Find out why Flux does not deploy or update a workload, and propose a fix. **Read first,
ask before changing.** Run the investigation commands freely. Run a command under an
"Ask first" line only after the user approves that exact command; if your credentials do
not allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
Flux works in a chain. A **source** (GitRepository, OCIRepository, HelmRepository,
Bucket) fetches an artifact. A **Kustomization** builds and applies a path from that
artifact; a **HelmRelease** installs a chart, through a **HelmChart** that Flux creates
from the HelmRelease. Every object reports `Ready`, and the first object in the chain
that is not Ready holds the cause. Follow the chain from the object that deploys the
workload back to its source.
View the complete source on GitHubk8s-gatekeeper-troubleshooting
When your agent uses it
Use when OPA Gatekeeper blocks, warns about or fails to police resources in Kubernetes: "admission webhook \"validation.gatekeeper.sh\" denied the request: [constraint] message", warnings from constraints in warn mode, a constraint that should block but only shows violations in audit (dryrun), a ConstraintTemplate that does not compile (ingest_error, rego_parse_error), "no matches for kind" when applying a constraint, referential policies that never fire (sync), mutations that do not apply, or Gatekeeper that stopped enforcing because its webhook is down. Investigates with kubectl get, describe and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
210 tokensAlways available to the agent
SKILL.md
2,393 tokensWhen the skill is activated
Reference documents
2,144 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,041 bytesSKILL.mdcore9,850 bytesSKILL.mdcore9,850 bytesSKILL.mdcore9,850 bytesSKILL.mdcore9,850 bytesSKILL.mdcore9,850 bytesSKILL.mdcore9,850 bytesreferences/constraints.mddoc2,613 bytesreferences/templates.mddoc2,506 bytesreferences/webhook-sync-mutation.mddoc3,463 bytes
Read SKILL.md
# OPA Gatekeeper troubleshooting
Find out why Gatekeeper denies, warns about or does not police a resource, and propose
a fix. **Read first, ask before changing.** Run the investigation commands freely. Run
a command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
A **ConstraintTemplate** holds the policy code (Rego, or CEL under
`K8sNativeValidation`) and makes Gatekeeper create a new kind in
`constraints.gatekeeper.sh` (for example `K8sRequiredLabels`). A **constraint** of that
kind says where the policy applies (`spec.match`), with which parameters, and what
happens on a violation (`spec.enforcementAction`: `deny`, `dryrun`, `warn` or
`scoped`). The admission webhook checks new requests; the **audit** checks what alreadyView the complete source on GitHubk8s-gateway-api-troubleshooting
When your agent uses it
Use when Gateway API objects in Kubernetes do not route, whatever the implementation: a GatewayClass stuck "Waiting for controller" or not Accepted, a Gateway with no address or PROGRAMMED Unknown or False ("ListenersNotValid", "AddressNotAssigned"), a listener that is not Programmed ("InvalidCertificateRef", "ProtocolConflict", "InvalidRouteKinds", "RefNotPermitted"), an HTTPRoute, GRPCRoute or TLSRoute that is not Accepted ("NoMatchingParent", "NotAllowedByListeners", "NoMatchingListenerHostname") or has no status at all, ResolvedRefs False ("BackendNotFound", "RefNotPermitted" without a ReferenceGrant), ListenerSets, BackendTLSPolicy, and Gateway API CRD versions or channels that do not match. Investigates with kubectl get and describe, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
257 tokensAlways available to the agent
SKILL.md
4,102 tokensWhen the skill is activated
Reference documents
3,191 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,196 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesSKILL.mdcore15,904 bytesreferences/gateways-and-listeners.mddoc7,135 bytesreferences/routes.mddoc5,485 bytes
Read SKILL.md
# Gateway API troubleshooting
Find out why a Gateway API object does not route, from the objects' status, and propose
a fix. **Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed fix";
hand it to the user.
Gateway API splits routing across roles, and each object reports what its controller
made of it in `status.conditions`:
- A **GatewayClass** (cluster-scoped) names a `controllerName`. The implementation whose
controller claims that name accepts the class.
- A **Gateway** uses a class and has **listeners** (name, port, protocol, optionalView the complete source on GitHubk8s-grafana-troubleshooting
When your agent uses it
Use when Grafana on Kubernetes fails: the Grafana pod crash-loops after a change to its provisioning ("Datasource provisioning error", "Only one datasource per organization can be marked as default", "failed to parse"), a provisioned dashboard or datasource does not appear ("failed to load dashboard from", sidecar ConfigMap labels), panels show "No data" or the datasource returns "Bad Gateway" or "connection refused", "database is locked" with several replicas, permission errors on the data volume, admin login or sidecar "401 Unauthorized", or grafana-operator resources with "NoMatchingInstance". Investigates with kubectl get, describe, events and logs, never reading Grafana's Secrets, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
227 tokensAlways available to the agent
SKILL.md
2,544 tokensWhen the skill is activated
Reference documents
2,342 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,133 bytesSKILL.mdcore10,080 bytesSKILL.mdcore10,080 bytesSKILL.mdcore10,080 bytesSKILL.mdcore10,080 bytesSKILL.mdcore10,080 bytesSKILL.mdcore10,080 bytesreferences/datasources-no-data.mddoc2,129 bytesreferences/provisioning.mddoc3,515 bytesreferences/runtime-and-operator.mddoc3,390 bytes
Read SKILL.md
# Grafana troubleshooting
Find out why Grafana does not start, does not show a datasource or dashboard, or shows
no data, and propose a fix. **Read first, ask before changing.** Run the investigation
commands freely. Run a command under an "Ask first" line only after the user approves
that exact command; if your credentials do not allow it, give it to the user to run.
Never run a "Proposed fix"; hand it to the user.
On Kubernetes, Grafana is usually **provisioned**: datasources and dashboard providers
are YAML files under `/etc/grafana/provisioning/`, and dashboards are JSON files, all
mounted from ConfigMaps. With the Grafana Helm chart (also inside kube-prometheus-stack)
a **sidecar** container copies ConfigMaps labelled `grafana_dashboard` or
`grafana_datasource` into the pod. With the **grafana-operator**, `Grafana`,
`GrafanaDashboard` and `GrafanaDatasource` resources do the same.View the complete source on GitHubk8s-helm-troubleshooting
When your agent uses it
Use when a Helm install, upgrade or rollback fails or a release is stuck: "UPGRADE FAILED" or "INSTALLATION FAILED", "context deadline exceeded" or "resource ... not ready" after --wait, "another operation (install/upgrade/rollback) is in progress", a release in pending-install, pending-upgrade or failed state, "exists and cannot be imported into the current release: invalid ownership metadata", "cannot reuse a name that is still in use", "has no deployed releases", hook failures, "field is immutable", or "ensure CRDs are installed first". Investigates the release's objects with kubectl, gives helm commands to the user to run, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
221 tokensAlways available to the agent
SKILL.md
2,590 tokensWhen the skill is activated
Reference documents
2,259 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,070 bytesSKILL.mdcore10,062 bytesSKILL.mdcore10,062 bytesSKILL.mdcore10,062 bytesSKILL.mdcore10,062 bytesSKILL.mdcore10,062 bytesSKILL.mdcore10,062 bytesSKILL.mdcore10,062 bytesreferences/failed-upgrades.mddoc3,381 bytesreferences/install-errors.mddoc3,161 bytesreferences/stuck-releases.mddoc2,631 bytes
Read SKILL.md
# Helm troubleshooting
Find out why a Helm release fails or is stuck, and propose a fix. **Read first, ask
before changing.** Run the investigation commands freely. Run a command under an "Ask
first" line only after the user approves that exact command; if your credentials do not
allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
**Helm keeps every release in a Secret** (type `helm.sh/release.v1`, named
`sh.helm.release.v1.<release>.v<revision>`), with its values, which often hold
passwords. `helm status`, `helm history`, `helm list` and `helm get` all read those
Secrets, and you never read Secrets. So you investigate the release's **objects** with
kubectl, and you give the `helm` commands to the user to run and paste back. They are
under "Proposed fix" only because they read Secrets, not because they change anything;
say so when you hand them over. Never ask for `helm get values` output without warningView the complete source on GitHubk8s-istio-troubleshooting
When your agent uses it
Use when traffic fails in an Istio service mesh on Kubernetes: HTTP 403 "RBAC: access denied" from an AuthorizationPolicy, 503 "no healthy upstream" or "upstream connect error or disconnect/reset before headers", 404 from a route that does not match, "Connection reset by peer" after PeerAuthentication STRICT, sidecars that are not injected, VirtualService, DestinationRule, Gateway or ServiceEntry rules that do not apply, or istiod and proxy problems. Reads Envoy's access log and response flags (UH, NR, UF, URX, filter_chain_not_found), covers sidecar mode and ambient mode, and proposes fixes. Investigates with kubectl get, describe, events and logs, asks before reading Envoy's admin API inside a proxy. Reads first and asks before changing anything.
What it loads into context
Frontmatter
241 tokensAlways available to the agent
SKILL.md
2,478 tokensWhen the skill is activated
Reference documents
1,480 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,116 bytesSKILL.mdcore9,663 bytesSKILL.mdcore9,663 bytesSKILL.mdcore9,663 bytesSKILL.mdcore9,663 bytesSKILL.mdcore9,663 bytesSKILL.mdcore9,663 bytesSKILL.mdcore9,663 bytesreferences/routing.mddoc2,708 bytesreferences/security-and-injection.mddoc2,922 bytes
Read SKILL.md
# Istio troubleshooting
Find out why requests fail or behave unexpectedly in an Istio mesh, and propose a fix.
**Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
In **sidecar mode** every meshed pod has an Envoy container, `istio-proxy`, injected when
its namespace has `istio-injection=enabled` (or an `istio.io/rev` label). The client's
sidecar routes by **VirtualServices** and **DestinationRules** (subsets, load balancing,
TLS); the server's sidecar enforces **PeerAuthentication** (mTLS) and
**AuthorizationPolicies**. Each sidecar writes an access log line per request with a
**response flag** that says what Envoy did. In **ambient mode** the node's `ztunnel`View the complete source on GitHubk8s-kyverno-troubleshooting
When your agent uses it
Use when Kyverno blocks, changes or fails to police resources in Kubernetes: "admission webhook \"validate.kyverno.svc-fail\" denied the request", "resource ... was blocked due to the following policies", "Policy ... failed" from a ValidatingPolicy, a policy that should block but only reports (Audit), PolicyReports with failures, a policy that is not Ready, mutate or generate rules that do nothing, UpdateRequests stuck, or "failed calling webhook" for kyverno when its pods are down. Covers ClusterPolicy and Policy (kyverno.io) and the CEL policies (policies.kyverno.io). Investigates with kubectl get, describe, events and logs, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
226 tokensAlways available to the agent
SKILL.md
2,522 tokensWhen the skill is activated
Reference documents
2,119 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,065 bytesSKILL.mdcore9,911 bytesSKILL.mdcore9,911 bytesSKILL.mdcore9,911 bytesSKILL.mdcore9,911 bytesSKILL.mdcore9,911 bytesSKILL.mdcore9,911 bytesreferences/mutate-and-generate.mddoc2,392 bytesreferences/validation.mddoc3,015 bytesreferences/webhooks-and-controllers.mddoc3,216 bytes
Read SKILL.md
# Kyverno troubleshooting
Find out why Kyverno denies, changes or does not police a resource, and propose a fix.
**Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
Kyverno runs as admission webhooks plus background controllers. Two policy families
exist side by side:
- **ClusterPolicy and Policy** (`kyverno.io/v1`): rules with `validate`, `mutate`,
`generate` or `verifyImages`. Deprecated in Kyverno 1.19 and planned for removal in
1.20; the API server prints a deprecation warning for them.View the complete source on GitHubk8s-loki-troubleshooting
When your agent uses it
Use when Grafana Loki on Kubernetes rejects, drops or cannot query logs: clients getting 400, 401 or 429 from /loki/api/v1/push, "write operation failed", "has timestamp too old", "entry too far behind", "Per stream rate limit exceeded", "ingestion rate limit exceeded", "maximum active stream limit exceeded", "no org id" (missing X-Scope-OrgID tenant), Loki crashing at start with "validating config" or "invalid schema config", "failed to flush chunks", ring or memberlist errors ("empty ring", "too many unhealthy instances in the ring"), or queries failing with "the query time range exceeds the limit" or timing out. Investigates with kubectl get, logs and read-only Loki endpoints, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
244 tokensAlways available to the agent
SKILL.md
2,754 tokensWhen the skill is activated
Reference documents
2,071 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,130 bytesSKILL.mdcore10,577 bytesSKILL.mdcore10,577 bytesSKILL.mdcore10,577 bytesSKILL.mdcore10,577 bytesSKILL.mdcore10,577 bytesSKILL.mdcore10,577 bytesSKILL.mdcore10,577 bytesSKILL.mdcore10,577 bytesreferences/ingestion.mddoc3,754 bytesreferences/startup-storage-queries.mddoc3,865 bytes
Read SKILL.md
# Loki troubleshooting
Find out why Loki does not accept, keep or return logs, and propose a fix. **Read first,
ask before changing.** Run the investigation commands freely. Run a command under an "Ask
first" line only after the user approves that exact command; if your credentials do not
allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
Clients (Promtail, Grafana Alloy, Fluent Bit, the OpenTelemetry Collector) push log
lines to `/loki/api/v1/push`. The **distributor** validates each line (labels, size,
age) and applies the tenant's ingestion rate; the **ingester** applies per-stream limits
and writes chunks to storage; queriers answer LogQL queries. In monolithic mode one pod
(`-target=all`) runs every part; in microservices mode each part is its own workload.
Loki answers a refused push with **400** (invalid, not retried), **429** (rate limit,
retried) or **401** (no tenant), and logs refused pushes as `msg="write operationView the complete source on GitHubk8s-network-troubleshooting
When your agent uses it
Use when traffic does not reach a workload in Kubernetes although its pods are running: a Service with no endpoints, a wrong selector or targetPort, connection refused or time-outs between pods, DNS names that do not resolve (NXDOMAIN, "server can't find"), a NetworkPolicy blocking traffic, or an Ingress or Gateway API route that does not route. Investigates with kubectl get and describe, asks before checks inside a container, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
165 tokensAlways available to the agent
SKILL.md
2,763 tokensWhen the skill is activated
Reference documents
2,945 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset851 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesSKILL.mdcore11,021 bytesreferences/dns.mddoc2,811 bytesreferences/ingress-gateway.mddoc3,097 bytesreferences/networkpolicy.mddoc2,828 bytesreferences/services.mddoc2,820 bytes
Read SKILL.md
# Kubernetes network troubleshooting
Find out why traffic does not get from a client to a workload, and propose a fix.
**Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
Follow the path of a request: the client resolves the Service's name (DNS), connects
to the Service's port, the Service forwards to the `targetPort` of its ready endpoints,
and NetworkPolicies on both sides must allow it. Find the first step that fails.
The commands use placeholders: `my-namespace` and `my-app` (the target Service and its
workload), `my-other-namespace` and `my-web` (the client), and `my-pod`. Replace themView the complete source on GitHubk8s-node-troubleshooting
When your agent uses it
Use when a Kubernetes node is unhealthy or pods will not go onto it: a node NotReady or Unknown, MemoryPressure, DiskPressure or PIDPressure, pods Evicted, pods Pending with "untolerated taint(s)", "Insufficient cpu" or "Insufficient memory" while the node looks idle, a node cordoned (SchedulingDisabled), or the cluster autoscaler not adding or removing nodes. Investigates with kubectl get, describe and events, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
164 tokensAlways available to the agent
SKILL.md
2,997 tokensWhen the skill is activated
Reference documents
3,476 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset836 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesSKILL.mdcore11,842 bytesreferences/autoscaler.mddoc2,677 bytesreferences/capacity.mddoc2,462 bytesreferences/not-ready.mddoc3,331 bytesreferences/pressure.mddoc2,804 bytesreferences/taints.mddoc2,644 bytes
Read SKILL.md
# Kubernetes node troubleshooting
Find out why a node is unhealthy, or why pods will not be scheduled onto it, and propose
a fix. **Read first, ask before changing.** Run the investigation commands freely. Run
a command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
You see the node only through the Kubernetes API. Checks on the node itself (the
kubelet, the container runtime, the disk) need someone with access to the machine, so
they are always proposed fixes for a human.
The commands use placeholders: `my-node`, `my-namespace`, `my-app` and `my-pod`.
Replace them with the real names. Never read Secrets. If output contains passwords,View the complete source on GitHubk8s-opentelemetry-collector-troubleshooting
When your agent uses it
Use when telemetry (traces, metrics, logs) does not get through the OpenTelemetry Collector on Kubernetes: the collector crashes at start ("invalid configuration", "references receiver ... which is not configured", "unknown type"), applications get "connection refused" on 4317 or 4318 (a receiver listening on localhost, or not in a pipeline), exporters fail ("Exporting failed. Will retry the request after interval", "Exporting failed. Dropping data.", "sending queue is full", "no children to pick from"), the memory_limiter refuses data, k8s_attributes lacks RBAC, or the OpenTelemetry Operator does not create a collector or inject auto-instrumentation. Investigates with kubectl get, logs and the collector's own metrics, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
246 tokensAlways available to the agent
SKILL.md
2,698 tokensWhen the skill is activated
Reference documents
2,301 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,179 bytesSKILL.mdcore10,675 bytesSKILL.mdcore10,675 bytesSKILL.mdcore10,675 bytesSKILL.mdcore10,675 bytesSKILL.mdcore10,675 bytesSKILL.mdcore10,675 bytesSKILL.mdcore10,675 bytesreferences/config-and-receivers.mddoc3,686 bytesreferences/export-and-operator.mddoc5,000 bytes
Read SKILL.md
# OpenTelemetry Collector troubleshooting
Find out why telemetry does not pass through the OpenTelemetry Collector, and propose a
fix. **Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
A collector's config defines **receivers** (OTLP on 4317 for gRPC and 4318 for HTTP,
Prometheus, ...), **processors** (`memory_limiter`, `batch`, `k8s_attributes`, ...),
**exporters** (`otlp_grpc`, `otlp_http`, `debug`, ...) and **extensions**
(`health_check`, ...), and then the `service.pipelines` that connect them. A component
that no pipeline uses is not started at all, without a warning. The collector checks the
config at start and exits with `Error: ...` when it is invalid. At run time it logsView the complete source on GitHubk8s-prometheus-troubleshooting
When your agent uses it
Use when Prometheus on Kubernetes does not collect or alert as expected: a ServiceMonitor or PodMonitor whose targets never appear, targets that are down ("server returned HTTP status 404 Not Found", "connection refused", "context deadline exceeded"), a PrometheusRule that does not load or alerts that do not fire or reach Alertmanager, a Prometheus or Alertmanager custom resource that is not Available, "InvalidConfiguration" events from the Prometheus Operator, or Prometheus pods that are OOMKilled or out of disk. Covers the Prometheus Operator (kube-prometheus, kube-prometheus-stack). Investigates with kubectl get, describe, events, logs and Prometheus' HTTP API through the API server, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
238 tokensAlways available to the agent
SKILL.md
2,740 tokensWhen the skill is activated
Reference documents
2,871 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,125 bytesSKILL.mdcore11,043 bytesSKILL.mdcore11,043 bytesSKILL.mdcore11,043 bytesSKILL.mdcore11,043 bytesSKILL.mdcore11,043 bytesSKILL.mdcore11,043 bytesSKILL.mdcore11,043 bytesreferences/discovery.mddoc3,521 bytesreferences/prometheus-health.mddoc2,167 bytesreferences/rules-and-alerts.mddoc3,387 bytesreferences/targets-down.mddoc2,124 bytes
Read SKILL.md
# Prometheus troubleshooting
Find out why Prometheus does not scrape a target, does not load a rule, or does not
alert, and propose a fix. **Read first, ask before changing.** Run the investigation
commands freely. Run a command under an "Ask first" line only after the user approves
that exact command; if your credentials do not allow it, give it to the user to run.
Never run a "Proposed fix"; hand it to the user.
With the **Prometheus Operator**, a `Prometheus` custom resource selects
**ServiceMonitors**, **PodMonitors**, **Probes**, **ScrapeConfigs** and
**PrometheusRules** by label and namespace, and the operator turns them into
Prometheus' configuration. A ServiceMonitor selects Services by label and names one of
their ports. Something can go wrong at each step: the selection, the Service, the port,
the scrape itself.View the complete source on GitHubk8s-rbac-troubleshooting
When your agent uses it
Use when a Kubernetes request is refused by RBAC: "Error from server (Forbidden)", "User ... cannot list resource ... in the namespace" or "at the cluster scope", a ServiceAccount, controller, CI job or person getting 403, a RoleBinding that does not seem to apply (wrong namespace, wrong subject, a ClusterRole bound with a RoleBinding), "is attempting to grant RBAC permissions not currently held", "roleRef ... field is immutable", 401 Unauthorized versus 403 Forbidden, or a custom resource that `view` cannot read. Investigates with kubectl auth can-i, get and describe, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
200 tokensAlways available to the agent
SKILL.md
2,716 tokensWhen the skill is activated
Reference documents
1,755 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,001 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesSKILL.mdcore10,872 bytesreferences/authentication-and-admission.mddoc3,200 bytesreferences/bindings-and-roles.mddoc3,753 bytes
Read SKILL.md
# RBAC troubleshooting
Find out why Kubernetes refuses a request, and propose the smallest grant that fixes it.
**Read first, ask before changing.** Run the investigation commands freely. Run a
command under an "Ask first" line only after the user approves that exact command; if
your credentials do not allow it, give it to the user to run. Never run a "Proposed
fix"; hand it to the user.
Every request is made by a **subject**: a user, a group, or a ServiceAccount, which
authenticates as `system:serviceaccount:<namespace>:<name>`. RBAC allows a request only
when a **binding** gives the subject a **role** whose rules cover the verb, the API group,
the resource and the namespace. There are no deny rules: a 403 means that no binding
allowed it. A **RoleBinding** grants its role in its own namespace only; a
**ClusterRoleBinding** grants a ClusterRole everywhere, including cluster-scopedView the complete source on GitHubk8s-storage-troubleshooting
When your agent uses it
Use when Kubernetes storage blocks a workload: a PersistentVolumeClaim stuck in Pending, ProvisioningFailed events, a StorageClass that does not exist or a provisioner that cannot provide the access mode, pods Pending with "unbound immediate PersistentVolumeClaims", FailedAttachVolume, FailedMount or Multi-Attach errors, a PVC or PV stuck Terminating or Released, or a volume that is full or will not expand. Investigates with kubectl get, describe and events, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
167 tokensAlways available to the agent
SKILL.md
2,685 tokensWhen the skill is activated
Reference documents
2,203 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset883 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesSKILL.mdcore10,833 bytesreferences/attach-mount.mddoc2,745 bytesreferences/pending.mddoc3,335 bytesreferences/space-and-expansion.mddoc2,653 bytes
Read SKILL.md
# Kubernetes storage troubleshooting
Find out why a volume does not get to a pod, or why it does not work once it is there,
and propose a fix. **Read first, ask before changing.** Run the investigation commands
freely. Run a command under an "Ask first" line only after the user approves that exact
command; if your credentials do not allow it, give it to the user to run. Never run a
"Proposed fix"; hand it to the user.
Volumes hold data, and many storage changes cannot be undone: a volume cannot shrink, a
deleted claim can take its data with it, and most of a claim's spec cannot change after
it is created. So most fixes here are proposed fixes, with the reason said.
The commands use placeholders: `my-namespace`, `my-app`, `my-pod`, `my-data` (the PVC),
`my-pv`, `my-class` and `my-node`. Replace them with the real names. Never read SecretsView the complete source on GitHubk8s-triage
When your agent uses it
Use when something is wrong in a cluster and it is not yet clear where: "the cluster is broken", "a lot of pods are failing", "users say the app is down", "something is off after the upgrade", or any problem report that names no workload. Sweeps nodes, pods in every namespace, recent Warning events and CPU and memory use, ranks what it finds by severity, proposes a first fix for each issue and names the skill that goes deeper. Reads first and asks before changing anything.
What it loads into context
Frontmatter
160 tokensAlways available to the agent
SKILL.md
3,560 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset820 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytesSKILL.mdcore14,122 bytes
Read SKILL.md
# Kubernetes triage
Find out where a cluster is unhealthy when nobody knows yet, rank the problems, and hand
each one to the right place. **Read first, ask before changing.** Run the investigation
commands freely. Run a command under an "Ask first" line only after the user approves
that exact command; if your credentials do not allow it, give it to the user to run.
Never run a "Proposed fix"; hand it to the user.
Triage is a first look, not a root-cause analysis. For each problem, report it, show the
evidence, propose a first fix, and name the skill that investigates it fully. Do not
dig deeper than the short first look this skill describes.
The commands use placeholders: `my-namespace`, `my-app`, `my-pod` and `my-node`. Replace
them with the real names. Never read Secrets. If output contains passwords, tokens orView the complete source on GitHubk8s-upgrade-readiness
When your agent uses it
Use when a Kubernetes cluster is about to be upgraded to its next minor version, or someone asks "is the cluster ready to upgrade?", "what will break when we upgrade?" or why a node drain hangs during an upgrade: PodDisruptionBudgets with ALLOWED DISRUPTIONS 0, pods with no controller ("cannot delete Pods that declare no controller"), admission webhooks with failurePolicy Fail and no endpoints, deprecated or removed APIs still in use (apiserver_requested_deprecated_apis, CRD versions marked deprecated), kubelet and control plane version skew, nodes on cgroup v1 or containerd 1.x, and add-ons that do not support the target version. Reports what to fix first. Read-only: never upgrades, drains or changes anything itself.
What it loads into context
Frontmatter
222 tokensAlways available to the agent
SKILL.md
3,340 tokensWhen the skill is activated
Reference documents
2,529 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,079 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesSKILL.mdcore13,099 bytesreferences/drains.mddoc4,609 bytesreferences/versions-and-apis.mddoc5,278 bytes
Read SKILL.md
# Upgrade readiness
Check a cluster before a Kubernetes minor version upgrade, and report what has to be
fixed first. **Read only.** Run the investigation commands freely. Never upgrade,
drain, cordon or evict anything, and never change a workload, a PodDisruptionBudget or a
webhook yourself: everything here is a proposed fix for the user and the owners of each
object. Never read Secrets.
An upgrade replaces the control plane first, one minor version at a time, and then
every node: each node is cordoned and drained (its pods are evicted and recreated
elsewhere), then replaced or upgraded. Managed clusters (AKS, EKS, GKE) do both for you,
but they drain nodes the same way. So most of what breaks an upgrade is in the cluster:
pods that cannot be evicted, pods that cannot be recreated, and clients or add-ons that
use an API or a node setup the new version no longer supports.View the complete source on GitHubk8s-velero-troubleshooting
When your agent uses it
Use when Velero backups or restores in Kubernetes fail or do not happen: a BackupStorageLocation that is Unavailable ("is unavailable", NoSuchBucket, AccessDenied, a wrong endpoint or region), a Backup in FailedValidation, Failed or PartiallyFailed, or stuck in New, Queued or InProgress, a Schedule in FailedValidation ("invalid schedule") or that makes no backups, a Restore that is Completed with warnings but did not bring objects back ("already exists", "the in-cluster version is different than the backed-up version"), a PartiallyFailed restore, volume data from File System Backup (PodVolumeBackup, node-agent) or the CSI data mover (DataUpload) that fails, and backups missing from a cluster. Investigates with kubectl get, describe and the Velero server logs, never reading Secrets or backup contents, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
268 tokensAlways available to the agent
SKILL.md
4,322 tokensWhen the skill is activated
Reference documents
1,415 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset1,237 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesSKILL.mdcore16,476 bytesreferences/volume-data.mddoc5,367 bytes
Read SKILL.md
# Velero troubleshooting
Find out why a Velero backup, schedule or restore did not do what the user expected,
from Velero's own objects and its server log, and propose a fix. **Read first, ask
before changing.** Run the investigation commands freely. Run a command under an "Ask
first" line only after the user approves that exact command; if your credentials do not
allow it, give it to the user to run. Never run a "Proposed fix"; hand it to the user.
How Velero works, in the parts that fail:
- The **Velero server** (Deployment `velero`, usually in the namespace `velero`) runs
every controller. Provider plugins (`velero-plugin-for-aws`, `-gcp`,
`-microsoft-azure`) are init containers that copy themselves into it.
- A **BackupStorageLocation** (BSL) is the bucket and prefix where backups go. TheView the complete source on GitHubk8s-workload-troubleshooting
When your agent uses it
Use when a pod or workload is unhealthy in Kubernetes: pods stuck in Pending, CrashLoopBackOff, ImagePullBackOff or ErrImagePull, containers OOMKilled (exit code 137), failing liveness, readiness or startup probes, pods Running but not Ready, a Deployment rollout that does not progress (ProgressDeadlineExceeded), or a Job or CronJob that fails. Investigates with kubectl get, describe, logs and events, and proposes fixes. Reads first and asks before changing anything.
What it loads into context
Frontmatter
160 tokensAlways available to the agent
SKILL.md
3,189 tokensWhen the skill is activated
Reference documents
6,715 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Investigate
- Read the results
- Proposed fix
- Sources
Files
.claude-plugin/plugin.jsonasset824 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesSKILL.mdcore12,561 bytesreferences/crashloop.mddoc3,509 bytesreferences/image-pull.mddoc3,101 bytesreferences/jobs.mddoc4,187 bytesreferences/oom-and-limits.mddoc3,258 bytesreferences/pending.mddoc3,668 bytesreferences/probes.mddoc5,050 bytesreferences/rollouts.mddoc4,029 bytes
Read SKILL.md
# Kubernetes workload troubleshooting
Find out why a pod, Deployment, StatefulSet, DaemonSet, Job or CronJob is unhealthy, and
propose a fix. **Read first, ask before changing.** Run the investigation commands
freely. Run a command under an "Ask first" line only after the user approves that exact
command; if your credentials do not allow it, give it to the user to run. Never run a
"Proposed fix"; hand it to the user.
The commands use placeholders: `my-namespace`, `my-app` (the workload) and `my-pod`
(one of its pods). Replace them with the real names. Never read Secrets. If logs or
output contain passwords, tokens or keys, do not repeat them.
## When to use
View the complete source on GitHubSkills included
- k8s-aks-troubleshooting
- k8s-api-troubleshooting
- k8s-argocd-troubleshooting
- k8s-autoscaling-troubleshooting
- k8s-cert-manager-troubleshooting
- k8s-cilium-troubleshooting
- k8s-cloudnative-pg-troubleshooting
- k8s-coredns-troubleshooting
- k8s-envoy-gateway-troubleshooting
- k8s-envoy-troubleshooting
- k8s-external-secrets-troubleshooting
- k8s-fluent-bit-troubleshooting
- k8s-flux-troubleshooting
- k8s-gatekeeper-troubleshooting
- k8s-gateway-api-troubleshooting
- k8s-grafana-troubleshooting
- k8s-helm-troubleshooting
- k8s-istio-troubleshooting
- k8s-kyverno-troubleshooting
- k8s-loki-troubleshooting
- k8s-network-troubleshooting
- k8s-node-troubleshooting
- k8s-opentelemetry-collector-troubleshooting
- k8s-prometheus-troubleshooting
- k8s-rbac-troubleshooting
- k8s-storage-troubleshooting
- k8s-triage
- k8s-upgrade-readiness
- k8s-velero-troubleshooting
- k8s-workload-troubleshooting
Repository facts
- License
- Apache-2.0
- Created
- Oct 23, 2026
- Last pushed
- Nov 6, 2026
- Forks
- 7
- Open issues
- 5
- Project activity
- Active
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 346 notes
.claude-plugin/marketplace.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.claude-plugin/marketplace.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.claude-plugin/marketplace.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.claude-plugin/marketplace.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.claude-plugin/marketplace.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.claude-plugin/marketplace.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.claude-plugin/marketplace.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/k8s-secret-guard/hooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/k8s-aks-troubleshooting/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 6 dangerous shell commandsin 3 files: skills/k8s-node-troubleshooting/SKILL.md:185 skills/k8s-node-troubleshooting/references/not-ready.md:55 skills/k8s-node-troubleshooting/references/pressure.md:63
- 1,458 network referencesin 69 files: skills/k8s-node-troubleshooting/SKILL.md:203 skills/k8s-gateway-api-troubleshooting/SKILL.md:250 skills/k8s-api-troubleshooting/SKILL.md:220 and 66 more
- No hidden or obfuscated text
- No instruction overrides
- No executable scripts
- 2 references to secretsin 1 file: skills/k8s-fluent-bit-troubleshooting/SKILL.md:40
- No requests to vote in Hot
Show all 1,466 signals by file
.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
plugins/k8s-secret-guard/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-aks-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-aks-troubleshooting/SKILL.md
- Network accessline 193
- [Troubleshoot AKS upgrade, scaling and failed-state errors](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/availability-performance/cluster-node-virtual-machine-failed-state), - Network accessline 194
[PodDrainFailure](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/create-upgrade-delete/error-code-poddrainfailure), - Network accessline 195
[QuotaExceeded](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/error-codes/quota-exceeded-error) - Network accessline 196
and [ZonalAllocationFailed and AllocationFailed](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/error-codes/zonalallocation-allocationfailed-error). - Network accessline 197
- [Supported Kubernetes versions](https://learn.microsoft.com/azure/aks/supported-kubernetes-versions), - Network accessline 198
[upgrade options](https://learn.microsoft.com/azure/aks/upgrade-options), - Network accessline 199
[upgrade rules and version skew](https://learn.microsoft.com/azure/aks/upgrade-aks-control-plane#kubernetes-version-upgrade-rules), - Network accessline 200
[node auto-repair](https://learn.microsoft.com/azure/aks/node-auto-repair) and - Network accessline 201
[cluster autoscaler](https://learn.microsoft.com/azure/aks/cluster-autoscaler). - Network accessline 202
- [Standard load balancer](https://learn.microsoft.com/azure/aks/configure-load-balancer-standard), - Network accessline 203
[internal load balancer](https://learn.microsoft.com/azure/aks/internal-lb), - Network accessline 204
[static public IP](https://learn.microsoft.com/azure/aks/static-ip) and - Network accessline 205
[SNAT](https://learn.microsoft.com/azure/aks/troubleshoot-source-network-address-translation). - Network accessline 206
- [Storage concepts](https://learn.microsoft.com/azure/aks/concepts-storage), - Network accessline 207
[Azure Disk mount failures](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/storage/fail-to-mount-azure-disk-volume) - Network accessline 208
and [Azure Files mount failures](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/storage/fail-to-mount-azure-file-share). - Network accessline 209
- [Workload identity](https://learn.microsoft.com/azure/aks/workload-identity-overview). - Network accessline 210
- [CoreDNS customization](https://learn.microsoft.com/azure/aks/coredns-custom), - Network accessline 211
[tunnel connectivity](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/connectivity/tunnel-connectivity-issues), - Network accessline 212
[API server connection issues](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/connectivity/troubleshoot-cluster-connection-issues-api-server), - Network accessline 213
[kubelogin](https://learn.microsoft.com/azure/aks/kubelogin-authentication) and - Network accessline 214
[Azure RBAC for Kubernetes](https://learn.microsoft.com/azure/aks/manage-azure-rbac).
skills/k8s-api-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-api-troubleshooting/SKILL.md
- Network accessline 220
- [Dynamic admission control](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/), - Network accessline 220
- [Dynamic admission control](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/), - Network accessline 221
[admission webhook good practices](https://kubernetes.io/docs/concepts/cluster-administration/admission-webhooks-good-practices/), - Network accessline 221
[admission webhook good practices](https://kubernetes.io/docs/concepts/cluster-administration/admission-webhooks-good-practices/), - Network accessline 222
[ValidatingAdmissionPolicy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/) - Network accessline 222
[ValidatingAdmissionPolicy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/) - Network accessline 223
and [manifest-based admission control](https://kubernetes.io/docs/reference/access-authn-authz/manifest-admission-control/). - Network accessline 223
and [manifest-based admission control](https://kubernetes.io/docs/reference/access-authn-authz/manifest-admission-control/). - Network accessline 224
- [The aggregation layer](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) - Network accessline 224
- [The aggregation layer](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) - Network accessline 225
and [configuring it](https://kubernetes.io/docs/tasks/extend-kubernetes/configure-aggregation-layer/). - Network accessline 225
and [configuring it](https://kubernetes.io/docs/tasks/extend-kubernetes/configure-aggregation-layer/). - Network accessline 226
- [CustomResourceDefinitions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/), - Network accessline 226
- [CustomResourceDefinitions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/), - Network accessline 227
[CRD versions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/), - Network accessline 227
[CRD versions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/), - Network accessline 228
[field validation](https://kubernetes.io/docs/reference/using-api/api-concepts/#field-validation) - Network accessline 228
[field validation](https://kubernetes.io/docs/reference/using-api/api-concepts/#field-validation) - Network accessline 229
and the [deprecated API migration guide](https://kubernetes.io/docs/reference/using-api/deprecation-guide/). - Network accessline 229
and the [deprecated API migration guide](https://kubernetes.io/docs/reference/using-api/deprecation-guide/). - Network accessline 230
- [Finalizers](https://kubernetes.io/docs/concepts/overview/working-with-objects/finalizers/), - Network accessline 230
- [Finalizers](https://kubernetes.io/docs/concepts/overview/working-with-objects/finalizers/), - Network accessline 231
[namespaces](https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/) - Network accessline 231
[namespaces](https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/) - Network accessline 232
and [garbage collection](https://kubernetes.io/docs/concepts/architecture/garbage-collection/). - Network accessline 232
and [garbage collection](https://kubernetes.io/docs/concepts/architecture/garbage-collection/). - Network accessline 233
- [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/), - Network accessline 233
- [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/), - Network accessline 234
[API Priority and Fairness](https://kubernetes.io/docs/concepts/cluster-administration/flow-control/), - Network accessline 234
[API Priority and Fairness](https://kubernetes.io/docs/concepts/cluster-administration/flow-control/), - Network accessline 235
[debugging it](https://kubernetes.io/docs/reference/debug-cluster/flow-control/), - Network accessline 235
[debugging it](https://kubernetes.io/docs/reference/debug-cluster/flow-control/), - Network accessline 236
[health endpoints](https://kubernetes.io/docs/reference/using-api/health-checks/) and - Network accessline 236
[health endpoints](https://kubernetes.io/docs/reference/using-api/health-checks/) and - Network accessline 237
[operating etcd](https://kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/). - Network accessline 237
[operating etcd](https://kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/). - Network accessline 238
- Messages from the source: [webhook dispatcher](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/validating/dispatcher.go), [APIService availability](https://github.com/kub - Network accessline 238
- Messages from the source: [webhook dispatcher](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/validating/dispatcher.go), [APIService availability](https://github.com/kub - Network accessline 239
[webhook dispatcher](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/validating/dispatcher.go), - Network accessline 239
[webhook dispatcher](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/validating/dispatcher.go), - Network accessline 240
[APIService availability](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/kube-aggregator/pkg/controllers/status/remote/remote_available_controller.go), - Network accessline 240
[APIService availability](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/kube-aggregator/pkg/controllers/status/remote/remote_available_controller.go), - Network accessline 241
[namespace deletion conditions](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/namespace/deletion/status_condition_utils.go) - Network accessline 241
[namespace deletion conditions](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/namespace/deletion/status_condition_utils.go) - Network accessline 242
and [default roles](https://github.com/kubernetes/kubernetes/blob/v1.37.1/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go) - Network accessline 242
and [default roles](https://github.com/kubernetes/kubernetes/blob/v1.37.1/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go)
skills/k8s-api-troubleshooting/references/discovery-crds-deletion.md
- Network accessline 46
- **`False (ServicePortError)`**: the Service has no such port. - **`False (FailedDiscoveryCheck)`**: the backend answered badly: `bad status from https://...: 503`, `failing or missing response from ...: <x509 or connection error>`, - Network accessline 46
- **`False (ServicePortError)`**: the Service has no such port. - **`False (FailedDiscoveryCheck)`**: the backend answered badly: `bad status from https://...: 503`, `failing or missing response from ...: <x509 or connection error>`, - Network accessline 47
- **`False (FailedDiscoveryCheck)`**: the backend answered badly: `bad status from https://...: 503`, `failing or missing response from ...: <x509 or connection error>`, or `timed out waiting for ...`. Its logs say more. - Network accessline 47
- **`False (FailedDiscoveryCheck)`**: the backend answered badly: `bad status from https://...: 503`, `failing or missing response from ...: <x509 or connection error>`, or `timed out waiting for ...`. Its logs say more. - Network accessline 48
https://...: 503`, `failing or missing response from ...: <x509 or connection error>`, - Network accessline 48
https://...: 503`, `failing or missing response from ...: <x509 or connection error>`,
skills/k8s-argocd-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-argocd-troubleshooting/SKILL.md
- Network accessline 194
- [Troubleshooting](https://argo-cd.readthedocs.io/en/stable/operator-manual/troubleshooting/) - Network accessline 194
- [Troubleshooting](https://argo-cd.readthedocs.io/en/stable/operator-manual/troubleshooting/) - Network accessline 195
and the [FAQ](https://argo-cd.readthedocs.io/en/stable/faq/). - Network accessline 195
and the [FAQ](https://argo-cd.readthedocs.io/en/stable/faq/). - Network accessline 196
- [Sync with kubectl](https://argo-cd.readthedocs.io/en/stable/user-guide/sync-kubectl/) - Network accessline 196
- [Sync with kubectl](https://argo-cd.readthedocs.io/en/stable/user-guide/sync-kubectl/) - Network accessline 197
and [annotations and labels](https://argo-cd.readthedocs.io/en/stable/user-guide/annotations-and-labels/): - Network accessline 197
and [annotations and labels](https://argo-cd.readthedocs.io/en/stable/user-guide/annotations-and-labels/): - Network accessline 198
the `operation` field and the refresh annotation. - [Diffing customization](https://argo-cd.readthedocs.io/en/stable/user-guide/diffing/) and [resource tracking](https://argo-cd.readthedocs.io/en/stable/user-guide/resource_tracking/). - Network accessline 198
the `operation` field and the refresh annotation. - [Diffing customization](https://argo-cd.readthedocs.io/en/stable/user-guide/diffing/) and [resource tracking](https://argo-cd.readthedocs.io/en/stable/user-guide/resource_tracking/). - Network accessline 199
- [Diffing customization](https://argo-cd.readthedocs.io/en/stable/user-guide/diffing/) - Network accessline 199
- [Diffing customization](https://argo-cd.readthedocs.io/en/stable/user-guide/diffing/) - Network accessline 200
and [resource tracking](https://argo-cd.readthedocs.io/en/stable/user-guide/resource_tracking/). - Network accessline 200
and [resource tracking](https://argo-cd.readthedocs.io/en/stable/user-guide/resource_tracking/). - Network accessline 201
- [Projects](https://argo-cd.readthedocs.io/en/stable/user-guide/projects/) and - Network accessline 201
- [Projects](https://argo-cd.readthedocs.io/en/stable/user-guide/projects/) and - Network accessline 202
[automated sync](https://argo-cd.readthedocs.io/en/stable/user-guide/auto_sync/). - Network accessline 202
[automated sync](https://argo-cd.readthedocs.io/en/stable/user-guide/auto_sync/). - Network accessline 203
- [Installation](https://argo-cd.readthedocs.io/en/stable/getting_started/) and the - Network accessline 203
- [Installation](https://argo-cd.readthedocs.io/en/stable/getting_started/) and the - Network accessline 204
[upgrade notes](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) - Network accessline 204
[upgrade notes](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) - Network accessline 205
for 3.x. - Status types and messages from the source: [types.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/pkg/apis/application/v1alpha1/types.go), - Network accessline 205
for 3.x. - Status types and messages from the source: [types.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/pkg/apis/application/v1alpha1/types.go), - Network accessline 206
- Status types and messages from the source: [types.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/pkg/apis/application/v1alpha1/types.go), [path.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/util/app/path/path.go), - Network accessline 206
- Status types and messages from the source: [types.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/pkg/apis/application/v1alpha1/types.go), [path.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/util/app/path/path.go), - Network accessline 207
[types.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/pkg/apis/application/v1alpha1/types.go), - Network accessline 207
[types.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/pkg/apis/application/v1alpha1/types.go), - Network accessline 208
[path.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/util/app/path/path.go), - Network accessline 208
[path.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/util/app/path/path.go), - Network accessline 209
[argo.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/util/argo/argo.go), - Network accessline 209
[argo.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/util/argo/argo.go), - Network accessline 210
[appcontroller.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/controller/appcontroller.go). - Network accessline 210
[appcontroller.go](https://github.com/argoproj/argo-cd/blob/v3.5.6/controller/appcontroller.go).
skills/k8s-argocd-troubleshooting/references/projects-and-destinations.md
- Network accessline 26
| `namespace <ns> is not permitted in project '<project>'` (on sync) | A manifest puts an object into a namespace the project does not allow. | | `resource <group>:<kind> is not permitted in project <project>` (on sync) | A kind (often a cl - Network accessline 26
| `namespace <ns> is not permitted in project '<project>'` (on sync) | A manifest puts an object into a namespace the project does not allow. | | `resource <group>:<kind> is not permitted in project <project>` (on sync) | A kind (often a cl - Network accessline 28
| `Unable to get cluster: ...`, `there are no clusters with this name: <name>` | `spec.destination.server` or `name` does not match a registered cluster. `https://kubernetes.default.svc` is the cluster Argo CD runs in. | - Network accessline 28
| `Unable to get cluster: ...`, `there are no clusters with this name: <name>` | `spec.destination.server` or `name` does not match a registered cluster. `https://kubernetes.default.svc` is the cluster Argo CD runs in. |
skills/k8s-autoscaling-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-autoscaling-troubleshooting/SKILL.md
- Network accessline 180
- [Horizontal Pod Autoscaling](https://kubernetes.io/docs/concepts/workloads/autoscaling/horizontal-pod-autoscale/): the algorithm, tolerance, behavior and stabilization, missing requests. - Network accessline 180
- [Horizontal Pod Autoscaling](https://kubernetes.io/docs/concepts/workloads/autoscaling/horizontal-pod-autoscale/): the algorithm, tolerance, behavior and stabilization, missing requests. - Network accessline 181
the algorithm, tolerance, behavior and stabilization, missing requests. - HPA conditions and messages from the source: [horizontal.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/horizontal.go) - Network accessline 181
the algorithm, tolerance, behavior and stabilization, missing requests. - HPA conditions and messages from the source: [horizontal.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/horizontal.go) - Network accessline 182
- HPA conditions and messages from the source: [horizontal.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/horizontal.go) and [replica_calculator.go](https://github.com/kubernetes/kubernetes/blob/v - Network accessline 182
- HPA conditions and messages from the source: [horizontal.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/horizontal.go) and [replica_calculator.go](https://github.com/kubernetes/kubernetes/blob/v - Network accessline 183
[horizontal.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/horizontal.go) - Network accessline 183
[horizontal.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/horizontal.go) - Network accessline 184
and [replica_calculator.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/replica_calculator.go). - Network accessline 184
and [replica_calculator.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/controller/podautoscaler/replica_calculator.go). - Network accessline 185
The walkthrough's appendix still shows older condition messages. - [metrics-server README](https://github.com/kubernetes-sigs/metrics-server/blob/v0.9.0/README.md) and [known issues](https://github.com/kubernetes-sigs/metrics-server/blob/ - Network accessline 185
The walkthrough's appendix still shows older condition messages. - [metrics-server README](https://github.com/kubernetes-sigs/metrics-server/blob/v0.9.0/README.md) and [known issues](https://github.com/kubernetes-sigs/metrics-server/blob/ - Network accessline 186
- [metrics-server README](https://github.com/kubernetes-sigs/metrics-server/blob/v0.9.0/README.md) - Network accessline 186
- [metrics-server README](https://github.com/kubernetes-sigs/metrics-server/blob/v0.9.0/README.md) - Network accessline 187
and [known issues](https://github.com/kubernetes-sigs/metrics-server/blob/v0.9.0/KNOWN_ISSUES.md). - Network accessline 187
and [known issues](https://github.com/kubernetes-sigs/metrics-server/blob/v0.9.0/KNOWN_ISSUES.md). - Network accessline 188
- KEDA [scaling deployments](https://keda.sh/docs/2.21/concepts/scaling-deployments/), - Network accessline 188
- KEDA [scaling deployments](https://keda.sh/docs/2.21/concepts/scaling-deployments/), - Network accessline 189
[admission webhooks](https://keda.sh/docs/2.21/concepts/admission-webhooks/), - Network accessline 189
[admission webhooks](https://keda.sh/docs/2.21/concepts/admission-webhooks/), - Network accessline 190
[troubleshooting](https://keda.sh/docs/2.21/concepts/troubleshooting/), - Network accessline 190
[troubleshooting](https://keda.sh/docs/2.21/concepts/troubleshooting/), - Network accessline 191
[cron scaler](https://keda.sh/docs/2.21/scalers/cron/) and - Network accessline 191
[cron scaler](https://keda.sh/docs/2.21/scalers/cron/) and - Network accessline 192
[Kubernetes compatibility](https://keda.sh/docs/2.21/operate/cluster/#kubernetes-compatibility): - Network accessline 192
[Kubernetes compatibility](https://keda.sh/docs/2.21/operate/cluster/#kubernetes-compatibility): - Network accessline 193
2.21 lists Kubernetes 1.34 to 1.36; it ran fine on 1.37 here. - [VPA known limitations](https://github.com/kubernetes/autoscaler/blob/vertical-pod-autoscaler-1.8.1/vertical-pod-autoscaler/docs/known-limitations.md). - The conditions and eve - Network accessline 193
2.21 lists Kubernetes 1.34 to 1.36; it ran fine on 1.37 here. - [VPA known limitations](https://github.com/kubernetes/autoscaler/blob/vertical-pod-autoscaler-1.8.1/vertical-pod-autoscaler/docs/known-limitations.md). - The conditions and eve - Network accessline 194
- [VPA known limitations](https://github.com/kubernetes/autoscaler/blob/vertical-pod-autoscaler-1.8.1/vertical-pod-autoscaler/docs/known-limitations.md). - Network accessline 194
- [VPA known limitations](https://github.com/kubernetes/autoscaler/blob/vertical-pod-autoscaler-1.8.1/vertical-pod-autoscaler/docs/known-limitations.md).
skills/k8s-cert-manager-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-cert-manager-troubleshooting/SKILL.md
- Network accessline 197
- [Troubleshooting](https://cert-manager.io/docs/troubleshooting/) and - Network accessline 197
- [Troubleshooting](https://cert-manager.io/docs/troubleshooting/) and - Network accessline 198
[Troubleshooting ACME](https://cert-manager.io/docs/troubleshooting/acme/): the - Network accessline 198
[Troubleshooting ACME](https://cert-manager.io/docs/troubleshooting/acme/): the - Network accessline 199
resource chain and the commands to follow it. - [Troubleshooting the webhook](https://cert-manager.io/docs/troubleshooting/webhook/): the `failed calling webhook` errors and their causes. - Network accessline 199
resource chain and the commands to follow it. - [Troubleshooting the webhook](https://cert-manager.io/docs/troubleshooting/webhook/): the `failed calling webhook` errors and their causes. - Network accessline 200
- [Troubleshooting the webhook](https://cert-manager.io/docs/troubleshooting/webhook/): - Network accessline 200
- [Troubleshooting the webhook](https://cert-manager.io/docs/troubleshooting/webhook/): - Network accessline 201
the `failed calling webhook` errors and their causes. - [Certificate resource](https://cert-manager.io/docs/usage/certificate/), [CertificateRequest](https://cert-manager.io/docs/usage/certificaterequest/) and - Network accessline 201
the `failed calling webhook` errors and their causes. - [Certificate resource](https://cert-manager.io/docs/usage/certificate/), [CertificateRequest](https://cert-manager.io/docs/usage/certificaterequest/) and - Network accessline 202
- [Certificate resource](https://cert-manager.io/docs/usage/certificate/), - Network accessline 202
- [Certificate resource](https://cert-manager.io/docs/usage/certificate/), - Network accessline 203
[CertificateRequest](https://cert-manager.io/docs/usage/certificaterequest/) and - Network accessline 203
[CertificateRequest](https://cert-manager.io/docs/usage/certificaterequest/) and - Network accessline 204
[Issuer configuration](https://cert-manager.io/docs/configuration/): `issuerRef`, - Network accessline 204
[Issuer configuration](https://cert-manager.io/docs/configuration/): `issuerRef`, - Network accessline 205
conditions, approval, renewal. - [CA issuer](https://cert-manager.io/docs/configuration/ca/): `spec.ca.secretName` and the cluster resource namespace. - Network accessline 205
conditions, approval, renewal. - [CA issuer](https://cert-manager.io/docs/configuration/ca/): `spec.ca.secretName` and the cluster resource namespace. - Network accessline 206
- [CA issuer](https://cert-manager.io/docs/configuration/ca/): `spec.ca.secretName` and - Network accessline 206
- [CA issuer](https://cert-manager.io/docs/configuration/ca/): `spec.ca.secretName` and - Network accessline 207
the cluster resource namespace. - [Release notes 1.18 to 1.21](https://cert-manager.io/docs/releases/): renewal policy, HTTP-01 path type, retry backoff. - Network accessline 207
the cluster resource namespace. - [Release notes 1.18 to 1.21](https://cert-manager.io/docs/releases/): renewal policy, HTTP-01 path type, retry backoff. - Network accessline 208
- [Release notes 1.18 to 1.21](https://cert-manager.io/docs/releases/): renewal policy, - Network accessline 208
- [Release notes 1.18 to 1.21](https://cert-manager.io/docs/releases/): renewal policy, - Network accessline 209
HTTP-01 path type, retry backoff. - Condition reasons and messages from the source: [certificaterequests/sync.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/controller/certificaterequests/sync.go), - Network accessline 209
HTTP-01 path type, retry backoff. - Condition reasons and messages from the source: [certificaterequests/sync.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/controller/certificaterequests/sync.go), - Network accessline 210
- Condition reasons and messages from the source: [certificaterequests/sync.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/controller/certificaterequests/sync.go), [issuer/ca/setup.go](https://github.com/cert-manager/ - Network accessline 210
- Condition reasons and messages from the source: [certificaterequests/sync.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/controller/certificaterequests/sync.go), [issuer/ca/setup.go](https://github.com/cert-manager/ - Network accessline 211
[certificaterequests/sync.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/controller/certificaterequests/sync.go), - Network accessline 211
[certificaterequests/sync.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/controller/certificaterequests/sync.go), - Network accessline 212
[issuer/ca/setup.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/issuer/ca/setup.go), - Network accessline 212
[issuer/ca/setup.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/pkg/issuer/ca/setup.go), - Network accessline 213
[policies/checks.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/internal/controller/certificates/policies/checks.go). - Network accessline 213
[policies/checks.go](https://github.com/cert-manager/cert-manager/blob/v1.21.3/internal/controller/certificates/policies/checks.go). - Network accessline 215
cert-manager 1.21.3. - `cmctl status certificate` reads the certificate's Secret ([certificate.go](https://github.com/cert-manager/cmctl/blob/v2.6.1/pkg/status/certificate/certificate.go)), - Network accessline 215
cert-manager 1.21.3. - `cmctl status certificate` reads the certificate's Secret ([certificate.go](https://github.com/cert-manager/cmctl/blob/v2.6.1/pkg/status/certificate/certificate.go)), - Network accessline 216
- `cmctl status certificate` reads the certificate's Secret ([certificate.go](https://github.com/cert-manager/cmctl/blob/v2.6.1/pkg/status/certificate/certificate.go)), which is why this skill does not use it. - Network accessline 216
- `cmctl status certificate` reads the certificate's Secret ([certificate.go](https://github.com/cert-manager/cmctl/blob/v2.6.1/pkg/status/certificate/certificate.go)), which is why this skill does not use it. - Network accessline 217
([certificate.go](https://github.com/cert-manager/cmctl/blob/v2.6.1/pkg/status/certificate/certificate.go)), - Network accessline 217
([certificate.go](https://github.com/cert-manager/cmctl/blob/v2.6.1/pkg/status/certificate/certificate.go)),
skills/k8s-cilium-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-cilium-troubleshooting/SKILL.md
- Network accessline 171
- [Troubleshooting](https://docs.cilium.io/en/stable/operations/troubleshooting/) and - Network accessline 171
- [Troubleshooting](https://docs.cilium.io/en/stable/operations/troubleshooting/) and - Network accessline 172
[policy troubleshooting](https://docs.cilium.io/en/stable/security/policy/troubleshooting/). - Network accessline 172
[policy troubleshooting](https://docs.cilium.io/en/stable/security/policy/troubleshooting/). - Network accessline 173
- [Policy enforcement and default deny](https://docs.cilium.io/en/stable/security/policy/intro/) - Network accessline 173
- [Policy enforcement and default deny](https://docs.cilium.io/en/stable/security/policy/intro/) - Network accessline 174
and the [policy language](https://docs.cilium.io/en/stable/security/policy/language/): - Network accessline 174
and the [policy language](https://docs.cilium.io/en/stable/security/policy/language/): - Network accessline 175
selectors, L7 rules, DNS and toFQDNs. - [DNS-based policies](https://docs.cilium.io/en/stable/security/dns/) and [Hubble](https://docs.cilium.io/en/stable/observability/hubble/). - Network accessline 175
selectors, L7 rules, DNS and toFQDNs. - [DNS-based policies](https://docs.cilium.io/en/stable/security/dns/) and [Hubble](https://docs.cilium.io/en/stable/observability/hubble/). - Network accessline 176
- [DNS-based policies](https://docs.cilium.io/en/stable/security/dns/) and - Network accessline 176
- [DNS-based policies](https://docs.cilium.io/en/stable/security/dns/) and - Network accessline 177
[Hubble](https://docs.cilium.io/en/stable/observability/hubble/). - Network accessline 177
[Hubble](https://docs.cilium.io/en/stable/observability/hubble/). - Network accessline 178
- [Installation on kind](https://docs.cilium.io/en/stable/installation/kind/) and the - Network accessline 178
- [Installation on kind](https://docs.cilium.io/en/stable/installation/kind/) and the - Network accessline 179
[upgrade notes](https://docs.cilium.io/en/stable/operations/upgrade/). - Network accessline 179
[upgrade notes](https://docs.cilium.io/en/stable/operations/upgrade/). - Network accessline 180
- Drop reasons and endpoint states from the source: [drop.go](https://github.com/cilium/cilium/blob/v1.20.4/pkg/monitor/api/drop.go), [endpoint_state.go](https://github.com/cilium/cilium/blob/v1.20.4/api/v1/models/endpoint_state.go). - Network accessline 180
- Drop reasons and endpoint states from the source: [drop.go](https://github.com/cilium/cilium/blob/v1.20.4/pkg/monitor/api/drop.go), [endpoint_state.go](https://github.com/cilium/cilium/blob/v1.20.4/api/v1/models/endpoint_state.go). - Network accessline 181
[drop.go](https://github.com/cilium/cilium/blob/v1.20.4/pkg/monitor/api/drop.go), - Network accessline 181
[drop.go](https://github.com/cilium/cilium/blob/v1.20.4/pkg/monitor/api/drop.go), - Network accessline 182
[endpoint_state.go](https://github.com/cilium/cilium/blob/v1.20.4/api/v1/models/endpoint_state.go). - Network accessline 182
[endpoint_state.go](https://github.com/cilium/cilium/blob/v1.20.4/api/v1/models/endpoint_state.go).
skills/k8s-cloudnative-pg-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-cloudnative-pg-troubleshooting/SKILL.md
- Network accessline 239
- [Troubleshooting](https://cloudnative-pg.io/docs/1.30/troubleshooting/) (known - Network accessline 239
- [Troubleshooting](https://cloudnative-pg.io/docs/1.30/troubleshooting/) (known - Network accessline 240
issues: storage full, Pending pods, replicas out of sync, network policies, bootstrap job hangs). - [Bootstrap](https://cloudnative-pg.io/docs/1.30/bootstrap/) (initdb, the owner's - Network accessline 240
issues: storage full, Pending pods, replicas out of sync, network policies, bootstrap job hangs). - [Bootstrap](https://cloudnative-pg.io/docs/1.30/bootstrap/) (initdb, the owner's - Network accessline 241
job hangs). - [Bootstrap](https://cloudnative-pg.io/docs/1.30/bootstrap/) (initdb, the owner's basic-auth Secret). - Network accessline 241
job hangs). - [Bootstrap](https://cloudnative-pg.io/docs/1.30/bootstrap/) (initdb, the owner's basic-auth Secret). - Network accessline 242
- [Bootstrap](https://cloudnative-pg.io/docs/1.30/bootstrap/) (initdb, the owner's - Network accessline 242
- [Bootstrap](https://cloudnative-pg.io/docs/1.30/bootstrap/) (initdb, the owner's - Network accessline 243
basic-auth Secret). - [Storage](https://cloudnative-pg.io/docs/1.30/storage/) and [scheduling](https://cloudnative-pg.io/docs/1.30/scheduling/) (anti-affinity defaults, - Network accessline 243
basic-auth Secret). - [Storage](https://cloudnative-pg.io/docs/1.30/storage/) and [scheduling](https://cloudnative-pg.io/docs/1.30/scheduling/) (anti-affinity defaults, - Network accessline 244
- [Storage](https://cloudnative-pg.io/docs/1.30/storage/) and - Network accessline 244
- [Storage](https://cloudnative-pg.io/docs/1.30/storage/) and - Network accessline 245
[scheduling](https://cloudnative-pg.io/docs/1.30/scheduling/) (anti-affinity defaults, - Network accessline 245
[scheduling](https://cloudnative-pg.io/docs/1.30/scheduling/) (anti-affinity defaults, - Network accessline 246
`podAntiAffinityType: required`). - [Replication](https://cloudnative-pg.io/docs/1.30/replication/), [failover](https://cloudnative-pg.io/docs/1.30/failover/) and - Network accessline 246
`podAntiAffinityType: required`). - [Replication](https://cloudnative-pg.io/docs/1.30/replication/), [failover](https://cloudnative-pg.io/docs/1.30/failover/) and - Network accessline 247
- [Replication](https://cloudnative-pg.io/docs/1.30/replication/), - Network accessline 247
- [Replication](https://cloudnative-pg.io/docs/1.30/replication/), - Network accessline 248
[failover](https://cloudnative-pg.io/docs/1.30/failover/) and - Network accessline 248
[failover](https://cloudnative-pg.io/docs/1.30/failover/) and - Network accessline 249
[WAL archiving](https://cloudnative-pg.io/docs/1.30/wal_archiving/). - Network accessline 249
[WAL archiving](https://cloudnative-pg.io/docs/1.30/wal_archiving/). - Network accessline 250
- [API reference](https://cloudnative-pg.io/docs/1.30/cloudnative-pg.v1/) and the - Network accessline 250
- [API reference](https://cloudnative-pg.io/docs/1.30/cloudnative-pg.v1/) and the - Network accessline 251
phase and condition names in [cluster_types.go](https://github.com/cloudnative-pg/cloudnative-pg/blob/v1.30.1/api/v1/cluster_types.go). - Messages seen on kind with CloudNativePG 1.30.1 and PostgreSQL 18. - Network accessline 251
phase and condition names in [cluster_types.go](https://github.com/cloudnative-pg/cloudnative-pg/blob/v1.30.1/api/v1/cluster_types.go). - Messages seen on kind with CloudNativePG 1.30.1 and PostgreSQL 18. - Network accessline 252
[cluster_types.go](https://github.com/cloudnative-pg/cloudnative-pg/blob/v1.30.1/api/v1/cluster_types.go). - Network accessline 252
[cluster_types.go](https://github.com/cloudnative-pg/cloudnative-pg/blob/v1.30.1/api/v1/cluster_types.go).
skills/k8s-coredns-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-coredns-troubleshooting/SKILL.md
- Network accessline 204
- CoreDNS plugins: [kubernetes](https://coredns.io/plugins/kubernetes/), - Network accessline 204
- CoreDNS plugins: [kubernetes](https://coredns.io/plugins/kubernetes/), - Network accessline 205
[forward](https://coredns.io/plugins/forward/), [reload](https://coredns.io/plugins/reload/), - Network accessline 205
[forward](https://coredns.io/plugins/forward/), [reload](https://coredns.io/plugins/reload/), - Network accessline 206
[loop](https://coredns.io/plugins/loop/), [errors](https://coredns.io/plugins/errors/), - Network accessline 206
[loop](https://coredns.io/plugins/loop/), [errors](https://coredns.io/plugins/errors/), - Network accessline 207
[log](https://coredns.io/plugins/log/), [cache](https://coredns.io/plugins/cache/), - Network accessline 207
[log](https://coredns.io/plugins/log/), [cache](https://coredns.io/plugins/cache/), - Network accessline 208
[rewrite](https://coredns.io/plugins/rewrite/), [hosts](https://coredns.io/plugins/hosts/), - Network accessline 208
[rewrite](https://coredns.io/plugins/rewrite/), [hosts](https://coredns.io/plugins/hosts/), - Network accessline 209
[ready](https://coredns.io/plugins/ready/), [health](https://coredns.io/plugins/health/) and - Network accessline 209
[ready](https://coredns.io/plugins/ready/), [health](https://coredns.io/plugins/health/) and - Network accessline 210
[metrics](https://coredns.io/plugins/metrics/). - Network accessline 210
[metrics](https://coredns.io/plugins/metrics/). - Network accessline 211
- Kubernetes: [Debugging DNS resolution](https://kubernetes.io/docs/tasks/administer-cluster/dns-debugging-resolution/), - Network accessline 211
- Kubernetes: [Debugging DNS resolution](https://kubernetes.io/docs/tasks/administer-cluster/dns-debugging-resolution/), - Network accessline 212
[Customizing DNS](https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/), - Network accessline 212
[Customizing DNS](https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/), - Network accessline 213
[DNS for Services and Pods](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/), - Network accessline 213
[DNS for Services and Pods](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/), - Network accessline 214
[NodeLocal DNSCache](https://kubernetes.io/docs/tasks/administer-cluster/nodelocaldns/) and - Network accessline 214
[NodeLocal DNSCache](https://kubernetes.io/docs/tasks/administer-cluster/nodelocaldns/) and - Network accessline 215
[autoscaling DNS](https://kubernetes.io/docs/tasks/administer-cluster/dns-horizontal-autoscaling/). - Network accessline 215
[autoscaling DNS](https://kubernetes.io/docs/tasks/administer-cluster/dns-horizontal-autoscaling/). - Network accessline 216
- Managed clusters: [AKS CoreDNS customization](https://learn.microsoft.com/en-us/azure/aks/coredns-custom), - Network accessline 216
- Managed clusters: [AKS CoreDNS customization](https://learn.microsoft.com/en-us/azure/aks/coredns-custom), - Network accessline 217
[EKS CoreDNS add-on](https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html) - Network accessline 217
[EKS CoreDNS add-on](https://docs.aws.amazon.com/eks/latest/userguide/managing-coredns.html) - Network accessline 218
and [GKE kube-dns](https://docs.cloud.google.com/kubernetes-engine/docs/concepts/kube-dns). - Network accessline 218
and [GKE kube-dns](https://docs.cloud.google.com/kubernetes-engine/docs/concepts/kube-dns). - Network accessline 219
- Messages from the source: [kubeadm's Corefile](https://github.com/kubernetes/kubernetes/blob/v1.37.1/cmd/kubeadm/app/phases/addons/dns/manifests.go), [reload](https://github.com/coredns/coredns/blob/v1.14.6/plugin/reload/reload.go), - Network accessline 219
- Messages from the source: [kubeadm's Corefile](https://github.com/kubernetes/kubernetes/blob/v1.37.1/cmd/kubeadm/app/phases/addons/dns/manifests.go), [reload](https://github.com/coredns/coredns/blob/v1.14.6/plugin/reload/reload.go), - Network accessline 220
[kubeadm's Corefile](https://github.com/kubernetes/kubernetes/blob/v1.37.1/cmd/kubeadm/app/phases/addons/dns/manifests.go), - Network accessline 220
[kubeadm's Corefile](https://github.com/kubernetes/kubernetes/blob/v1.37.1/cmd/kubeadm/app/phases/addons/dns/manifests.go), - Network accessline 221
[reload](https://github.com/coredns/coredns/blob/v1.14.6/plugin/reload/reload.go), - Network accessline 221
[reload](https://github.com/coredns/coredns/blob/v1.14.6/plugin/reload/reload.go), - Network accessline 222
[loop](https://github.com/coredns/coredns/blob/v1.14.6/plugin/loop/loop.go) and - Network accessline 222
[loop](https://github.com/coredns/coredns/blob/v1.14.6/plugin/loop/loop.go) and - Network accessline 223
[forward](https://github.com/coredns/coredns/blob/v1.14.6/plugin/forward/forward.go). The - Network accessline 223
[forward](https://github.com/coredns/coredns/blob/v1.14.6/plugin/forward/forward.go). The
skills/k8s-coredns-troubleshooting/references/corefile-and-plugins.md
- Network accessline 80
Without the `reload` plugin, only a restart reads the change. - **`[FATAL] plugin/loop: Loop (127.0.0.1:<port> -> :53) detected for zone ".", see https://coredns.io/plugins/loop#troubleshooting. Query: "HINFO ..."`**: queries come - Network accessline 80
Without the `reload` plugin, only a restart reads the change. - **`[FATAL] plugin/loop: Loop (127.0.0.1:<port> -> :53) detected for zone ".", see https://coredns.io/plugins/loop#troubleshooting. Query: "HINFO ..."`**: queries come - Network accessline 81
- **`[FATAL] plugin/loop: Loop (127.0.0.1:<port> -> :53) detected for zone ".", see https://coredns.io/plugins/loop#troubleshooting. Query: "HINFO ..."`**: queries come back to CoreDNS. Usually `forward . /etc/resolv.conf` on nodes whos - Network accessline 81
- **`[FATAL] plugin/loop: Loop (127.0.0.1:<port> -> :53) detected for zone ".", see https://coredns.io/plugins/loop#troubleshooting. Query: "HINFO ..."`**: queries come back to CoreDNS. Usually `forward . /etc/resolv.conf` on nodes whos - Network accessline 82
https://coredns.io/plugins/loop#troubleshooting. Query: "HINFO ..."`**: queries come - Network accessline 82
https://coredns.io/plugins/loop#troubleshooting. Query: "HINFO ..."`**: queries come
skills/k8s-envoy-gateway-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-envoy-gateway-troubleshooting/SKILL.md
- Network accessline 172
- [Envoy Gateway troubleshooting](https://gateway.envoyproxy.io/docs/troubleshooting/) - Network accessline 172
- [Envoy Gateway troubleshooting](https://gateway.envoyproxy.io/docs/troubleshooting/) - Network accessline 173
and the [quickstart](https://gateway.envoyproxy.io/docs/tasks/quickstart/). - Network accessline 173
and the [quickstart](https://gateway.envoyproxy.io/docs/tasks/quickstart/). - Network accessline 174
- [Customize EnvoyProxy](https://gateway.envoyproxy.io/docs/tasks/operations/customize-envoyproxy/): - Network accessline 174
- [Customize EnvoyProxy](https://gateway.envoyproxy.io/docs/tasks/operations/customize-envoyproxy/): - Network accessline 175
the Service type and other proxy settings. - [egctl](https://gateway.envoyproxy.io/docs/tasks/operations/egctl/). - The v1.9.2 `install.yaml` release asset: it carries the Gateway API CRDs with the - Network accessline 175
the Service type and other proxy settings. - [egctl](https://gateway.envoyproxy.io/docs/tasks/operations/egctl/). - The v1.9.2 `install.yaml` release asset: it carries the Gateway API CRDs with the - Network accessline 176
- [egctl](https://gateway.envoyproxy.io/docs/tasks/operations/egctl/). - Network accessline 176
- [egctl](https://gateway.envoyproxy.io/docs/tasks/operations/egctl/). - Network accessline 178
annotations `gateway.networking.k8s.io/bundle-version: v1.6.1` and `gateway.networking.k8s.io/channel: experimental`. - Gateway API [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 178
annotations `gateway.networking.k8s.io/bundle-version: v1.6.1` and `gateway.networking.k8s.io/channel: experimental`. - Gateway API [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 179
`gateway.networking.k8s.io/channel: experimental`. - Gateway API [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), [ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) and the - Network accessline 179
`gateway.networking.k8s.io/channel: experimental`. - Gateway API [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), [ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) and the - Network accessline 180
- Gateway API [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 180
- Gateway API [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 181
[ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) and the - Network accessline 181
[ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) and the - Network accessline 182
[API specification](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/): - Network accessline 182
[API specification](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/): - Network accessline 183
conditions and reasons. - Status messages from the source: [route.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/route.go) - Network accessline 183
conditions and reasons. - Status messages from the source: [route.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/route.go) - Network accessline 184
- Status messages from the source: [route.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/route.go) and [validate.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/validate.go). - Network accessline 184
- Status messages from the source: [route.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/route.go) and [validate.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/validate.go). - Network accessline 185
[route.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/route.go) - Network accessline 185
[route.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/route.go) - Network accessline 186
and [validate.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/validate.go). - Network accessline 186
and [validate.go](https://github.com/envoyproxy/gateway/blob/v1.9.2/internal/gatewayapi/validate.go).
skills/k8s-envoy-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-envoy-troubleshooting/SKILL.md
- Network accessline 171
- [Admin interface](https://www.envoyproxy.io/docs/envoy/v1.40.1/operations/admin) - Network accessline 171
- [Admin interface](https://www.envoyproxy.io/docs/envoy/v1.40.1/operations/admin) - Network accessline 172
and [command line options](https://www.envoyproxy.io/docs/envoy/v1.40.1/operations/cli). - Network accessline 172
and [command line options](https://www.envoyproxy.io/docs/envoy/v1.40.1/operations/cli). - Network accessline 173
- [Access logging](https://www.envoyproxy.io/docs/envoy/v1.40.1/configuration/observability/access_log/usage) - Network accessline 173
- [Access logging](https://www.envoyproxy.io/docs/envoy/v1.40.1/configuration/observability/access_log/usage) - Network accessline 174
and [response flags](https://www.envoyproxy.io/docs/envoy/v1.40.1/configuration/advanced/substitution_formatter). - Network accessline 174
and [response flags](https://www.envoyproxy.io/docs/envoy/v1.40.1/configuration/advanced/substitution_formatter). - Network accessline 175
- [Service discovery](https://www.envoyproxy.io/docs/envoy/v1.40.1/intro/arch_overview/upstream/service_discovery), - Network accessline 175
- [Service discovery](https://www.envoyproxy.io/docs/envoy/v1.40.1/intro/arch_overview/upstream/service_discovery), - Network accessline 176
[circuit breaking](https://www.envoyproxy.io/docs/envoy/v1.40.1/intro/arch_overview/upstream/circuit_breaking), - Network accessline 176
[circuit breaking](https://www.envoyproxy.io/docs/envoy/v1.40.1/intro/arch_overview/upstream/circuit_breaking), - Network accessline 177
[outlier detection](https://www.envoyproxy.io/docs/envoy/v1.40.1/intro/arch_overview/upstream/outlier), - Network accessline 177
[outlier detection](https://www.envoyproxy.io/docs/envoy/v1.40.1/intro/arch_overview/upstream/outlier), - Network accessline 178
[cluster statistics](https://www.envoyproxy.io/docs/envoy/v1.40.1/configuration/upstream/cluster_manager/cluster_stats) - Network accessline 178
[cluster statistics](https://www.envoyproxy.io/docs/envoy/v1.40.1/configuration/upstream/cluster_manager/cluster_stats) - Network accessline 179
and [timeouts](https://www.envoyproxy.io/docs/envoy/v1.40.1/faq/configuration/timeouts). - Network accessline 179
and [timeouts](https://www.envoyproxy.io/docs/envoy/v1.40.1/faq/configuration/timeouts). - Network accessline 180
- [Installing Envoy](https://www.envoyproxy.io/docs/envoy/v1.40.1/start/install): image - Network accessline 180
- [Installing Envoy](https://www.envoyproxy.io/docs/envoy/v1.40.1/start/install): image - Network accessline 181
variants. - Messages from the source: [router.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/common/router/router.cc), - Network accessline 181
variants. - Messages from the source: [router.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/common/router/router.cc), - Network accessline 182
- Messages from the source: [router.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/common/router/router.cc), [admin.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/server/admin/admin.cc) - Network accessline 182
- Messages from the source: [router.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/common/router/router.cc), [admin.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/server/admin/admin.cc) - Network accessline 183
[router.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/common/router/router.cc), - Network accessline 183
[router.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/common/router/router.cc), - Network accessline 184
[admin.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/server/admin/admin.cc) - Network accessline 184
[admin.cc](https://github.com/envoyproxy/envoy/blob/v1.40.1/source/server/admin/admin.cc) - Network accessline 185
and the [1.39 changelog](https://github.com/envoyproxy/envoy/blob/v1.40.1/changelogs/1.39.0.yaml) - Network accessline 185
and the [1.39 changelog](https://github.com/envoyproxy/envoy/blob/v1.40.1/changelogs/1.39.0.yaml) - Network accessline 186
(transport failure reason out of the body). The docs say a GET to a mutating admin endpoint gets 400; the source returns 405. - Contour [fundamentals](https://projectcontour.io/docs/main/config/fundamentals/), - Network accessline 186
(transport failure reason out of the body). The docs say a GET to a mutating admin endpoint gets 400; the source returns 405. - Contour [fundamentals](https://projectcontour.io/docs/main/config/fundamentals/), - Network accessline 187
endpoint gets 400; the source returns 405. - Contour [fundamentals](https://projectcontour.io/docs/main/config/fundamentals/), Emissary [debugging](https://emissary-ingress.dev/docs/4.0/topics/running/debugging/) and - Network accessline 187
endpoint gets 400; the source returns 405. - Contour [fundamentals](https://projectcontour.io/docs/main/config/fundamentals/), Emissary [debugging](https://emissary-ingress.dev/docs/4.0/topics/running/debugging/) and - Network accessline 188
- Contour [fundamentals](https://projectcontour.io/docs/main/config/fundamentals/), - Network accessline 188
- Contour [fundamentals](https://projectcontour.io/docs/main/config/fundamentals/), - Network accessline 189
Emissary [debugging](https://emissary-ingress.dev/docs/4.0/topics/running/debugging/) and - Network accessline 189
Emissary [debugging](https://emissary-ingress.dev/docs/4.0/topics/running/debugging/) and - Network accessline 190
Gloo [debugging](https://docs.solo.io/gloo-edge/latest/operations/debugging_gloo/). - Network accessline 190
Gloo [debugging](https://docs.solo.io/gloo-edge/latest/operations/debugging_gloo/).
skills/k8s-envoy-troubleshooting/references/bootstrap-and-admin.md
- Network accessline 51
kubectl exec -n my-namespace deployment/my-web -- wget -q -O - http://my-envoy-admin.my-namespace:9901/clusters - Network accessline 51
kubectl exec -n my-namespace deployment/my-web -- wget -q -O - http://my-envoy-admin.my-namespace:9901/clusters - Network accessline 56
`envoyproxy/envoy:<version>` is Ubuntu with only the Envoy binary (`sh`, `cat`, no curl or wget); `distroless-<version>` has no shell; `debug-<version>` means debug symbols, - Network accessline 56
`envoyproxy/envoy:<version>` is Ubuntu with only the Envoy binary (`sh`, `cat`, no curl or wget); `distroless-<version>` has no shell; `debug-<version>` means debug symbols,
skills/k8s-external-secrets-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-external-secrets-troubleshooting/SKILL.md
- Network accessline 162
- [Getting started](https://external-secrets.io/latest/introduction/getting-started/) - Network accessline 162
- [Getting started](https://external-secrets.io/latest/introduction/getting-started/) - Network accessline 163
and the [FAQ](https://external-secrets.io/latest/introduction/faq/), whose last debug - Network accessline 163
and the [FAQ](https://external-secrets.io/latest/introduction/faq/), whose last debug - Network accessline 164
step reads the created Secret, which this skill leaves to the user. - [ExternalSecret](https://external-secrets.io/latest/api/externalsecret/), [SecretStore](https://external-secrets.io/latest/api/secretstore/), - Network accessline 164
step reads the created Secret, which this skill leaves to the user. - [ExternalSecret](https://external-secrets.io/latest/api/externalsecret/), [SecretStore](https://external-secrets.io/latest/api/secretstore/), - Network accessline 165
- [ExternalSecret](https://external-secrets.io/latest/api/externalsecret/), - Network accessline 165
- [ExternalSecret](https://external-secrets.io/latest/api/externalsecret/), - Network accessline 166
[SecretStore](https://external-secrets.io/latest/api/secretstore/), - Network accessline 166
[SecretStore](https://external-secrets.io/latest/api/secretstore/), - Network accessline 167
[ClusterSecretStore](https://external-secrets.io/latest/api/clustersecretstore/) and - Network accessline 167
[ClusterSecretStore](https://external-secrets.io/latest/api/clustersecretstore/) and - Network accessline 168
[ClusterExternalSecret](https://external-secrets.io/latest/api/clusterexternalsecret/): - Network accessline 168
[ClusterExternalSecret](https://external-secrets.io/latest/api/clusterexternalsecret/): - Network accessline 169
fields, policies, refresh and force-sync. - [Lifecycle](https://external-secrets.io/latest/guides/ownership-deletion-policy/): creation and deletion policies, ownership. - Network accessline 169
fields, policies, refresh and force-sync. - [Lifecycle](https://external-secrets.io/latest/guides/ownership-deletion-policy/): creation and deletion policies, ownership. - Network accessline 170
- [Lifecycle](https://external-secrets.io/latest/guides/ownership-deletion-policy/): - Network accessline 170
- [Lifecycle](https://external-secrets.io/latest/guides/ownership-deletion-policy/): - Network accessline 171
creation and deletion policies, ownership. - [Fake provider](https://external-secrets.io/latest/provider/fake/). - [v0.17.0 release notes](https://github.com/external-secrets/external-secrets/releases/tag/v0.17.0): - Network accessline 171
creation and deletion policies, ownership. - [Fake provider](https://external-secrets.io/latest/provider/fake/). - [v0.17.0 release notes](https://github.com/external-secrets/external-secrets/releases/tag/v0.17.0): - Network accessline 172
- [Fake provider](https://external-secrets.io/latest/provider/fake/). - Network accessline 172
- [Fake provider](https://external-secrets.io/latest/provider/fake/). - Network accessline 173
- [v0.17.0 release notes](https://github.com/external-secrets/external-secrets/releases/tag/v0.17.0): - Network accessline 173
- [v0.17.0 release notes](https://github.com/external-secrets/external-secrets/releases/tag/v0.17.0): - Network accessline 175
- Conditions, messages and the 2.14 change that keeps provider errors out of status (PR #7149), from the source: [externalsecret_types.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/apis/externalsecrets/v1/externa - Network accessline 175
- Conditions, messages and the 2.14 change that keeps provider errors out of status (PR #7149), from the source: [externalsecret_types.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/apis/externalsecrets/v1/externa - Network accessline 176
(PR #7149), from the source: [externalsecret_types.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/apis/externalsecrets/v1/externalsecret_types.go), [externalsecret_controller.go](https://github.com/external-secret - Network accessline 176
(PR #7149), from the source: [externalsecret_types.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/apis/externalsecrets/v1/externalsecret_types.go), [externalsecret_controller.go](https://github.com/external-secret - Network accessline 177
[externalsecret_types.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/apis/externalsecrets/v1/externalsecret_types.go), - Network accessline 177
[externalsecret_types.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/apis/externalsecrets/v1/externalsecret_types.go), - Network accessline 178
[externalsecret_controller.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/pkg/controllers/externalsecret/externalsecret_controller.go), - Network accessline 178
[externalsecret_controller.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/pkg/controllers/externalsecret/externalsecret_controller.go), - Network accessline 179
[statuserr.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/pkg/controllers/util/statuserr.go). - Network accessline 179
[statuserr.go](https://github.com/external-secrets/external-secrets/blob/v2.14.0/pkg/controllers/util/statuserr.go).
skills/k8s-fluent-bit-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-fluent-bit-troubleshooting/SKILL.md
- Access to secretsline 40
[Credential-related source omitted] - Access to secretsline 40
[Credential-related source omitted] - Network accessline 186
- [Kubernetes installation](https://docs.fluentbit.io/manual/installation/downloads/kubernetes) - Network accessline 186
- [Kubernetes installation](https://docs.fluentbit.io/manual/installation/downloads/kubernetes) - Network accessline 187
and the [Kubernetes filter](https://docs.fluentbit.io/manual/data-pipeline/filters/kubernetes), - Network accessline 187
and the [Kubernetes filter](https://docs.fluentbit.io/manual/data-pipeline/filters/kubernetes), - Network accessline 188
including its troubleshooting section. - [Tail input](https://docs.fluentbit.io/manual/data-pipeline/inputs/tail), [HTTP output](https://docs.fluentbit.io/manual/data-pipeline/outputs/http), - Network accessline 188
including its troubleshooting section. - [Tail input](https://docs.fluentbit.io/manual/data-pipeline/inputs/tail), [HTTP output](https://docs.fluentbit.io/manual/data-pipeline/outputs/http), - Network accessline 189
- [Tail input](https://docs.fluentbit.io/manual/data-pipeline/inputs/tail), - Network accessline 189
- [Tail input](https://docs.fluentbit.io/manual/data-pipeline/inputs/tail), - Network accessline 190
[HTTP output](https://docs.fluentbit.io/manual/data-pipeline/outputs/http), - Network accessline 190
[HTTP output](https://docs.fluentbit.io/manual/data-pipeline/outputs/http), - Network accessline 191
[scheduling and retries](https://docs.fluentbit.io/manual/administration/scheduling-and-retries), - Network accessline 191
[scheduling and retries](https://docs.fluentbit.io/manual/administration/scheduling-and-retries), - Network accessline 192
[backpressure](https://docs.fluentbit.io/manual/administration/backpressure), - Network accessline 192
[backpressure](https://docs.fluentbit.io/manual/administration/backpressure), - Network accessline 193
[monitoring](https://docs.fluentbit.io/manual/administration/monitoring) and - Network accessline 193
[monitoring](https://docs.fluentbit.io/manual/administration/monitoring) and - Network accessline 194
[hot reload](https://docs.fluentbit.io/manual/administration/hot-reload). - Network accessline 194
[hot reload](https://docs.fluentbit.io/manual/administration/hot-reload). - Network accessline 195
- The [Helm chart](https://github.com/fluent/helm-charts/tree/fluent-bit-0.58.3/charts/fluent-bit) - Network accessline 195
- The [Helm chart](https://github.com/fluent/helm-charts/tree/fluent-bit-0.58.3/charts/fluent-bit) - Network accessline 196
and the [Fluent Operator](https://github.com/fluent/fluent-operator/blob/v3.10.1/README.md). - Network accessline 196
and the [Fluent Operator](https://github.com/fluent/fluent-operator/blob/v3.10.1/README.md). - Network accessline 197
- Messages from the source: [flb_config.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_config.c), [flb_engine.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_engine.c) and - Network accessline 197
- Messages from the source: [flb_config.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_config.c), [flb_engine.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_engine.c) and - Network accessline 198
[flb_config.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_config.c), - Network accessline 198
[flb_config.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_config.c), - Network accessline 199
[flb_engine.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_engine.c) and - Network accessline 199
[flb_engine.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/src/flb_engine.c) and - Network accessline 200
[kube_meta.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/plugins/filter_kubernetes/kube_meta.c). - Network accessline 200
[kube_meta.c](https://github.com/fluent/fluent-bit/blob/v5.1.5/plugins/filter_kubernetes/kube_meta.c).
skills/k8s-flux-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-flux-troubleshooting/SKILL.md
- Network accessline 195
- [Troubleshooting cheatsheet](https://fluxcd.io/flux/cheatsheets/troubleshooting/). - Network accessline 195
- [Troubleshooting cheatsheet](https://fluxcd.io/flux/cheatsheets/troubleshooting/). - Network accessline 196
- [GitRepositories](https://fluxcd.io/flux/components/source/gitrepositories/), - Network accessline 196
- [GitRepositories](https://fluxcd.io/flux/components/source/gitrepositories/), - Network accessline 197
[HelmCharts](https://fluxcd.io/flux/components/source/helmcharts/), - Network accessline 197
[HelmCharts](https://fluxcd.io/flux/components/source/helmcharts/), - Network accessline 198
[Kustomizations](https://fluxcd.io/flux/components/kustomize/kustomizations/) and - Network accessline 198
[Kustomizations](https://fluxcd.io/flux/components/kustomize/kustomizations/) and - Network accessline 199
[HelmReleases](https://fluxcd.io/flux/components/helm/helmreleases/): specs, - Network accessline 199
[HelmReleases](https://fluxcd.io/flux/components/helm/helmreleases/): specs, - Network accessline 200
conditions and reasons. - [flux reconcile](https://fluxcd.io/flux/cmd/flux_reconcile/) and [flux suspend](https://fluxcd.io/flux/cmd/flux_suspend/): the annotation and the - Network accessline 200
conditions and reasons. - [flux reconcile](https://fluxcd.io/flux/cmd/flux_reconcile/) and [flux suspend](https://fluxcd.io/flux/cmd/flux_suspend/): the annotation and the - Network accessline 201
- [flux reconcile](https://fluxcd.io/flux/cmd/flux_reconcile/) and - Network accessline 201
- [flux reconcile](https://fluxcd.io/flux/cmd/flux_reconcile/) and - Network accessline 202
[flux suspend](https://fluxcd.io/flux/cmd/flux_suspend/): the annotation and the - Network accessline 202
[flux suspend](https://fluxcd.io/flux/cmd/flux_suspend/): the annotation and the - Network accessline 203
`spec.suspend` field they set. - [flux debug](https://fluxcd.io/flux/cmd/flux_debug/): it can print values from Secrets, which is why this skill does not use it. - Network accessline 203
`spec.suspend` field they set. - [flux debug](https://fluxcd.io/flux/cmd/flux_debug/): it can print values from Secrets, which is why this skill does not use it. - Network accessline 204
- [flux debug](https://fluxcd.io/flux/cmd/flux_debug/): it can print values from - Network accessline 204
- [flux debug](https://fluxcd.io/flux/cmd/flux_debug/): it can print values from - Network accessline 205
Secrets, which is why this skill does not use it. - [Events](https://fluxcd.io/flux/monitoring/events/) and [Security](https://fluxcd.io/flux/security/): the aggregated `flux-view` role. - Network accessline 205
Secrets, which is why this skill does not use it. - [Events](https://fluxcd.io/flux/monitoring/events/) and [Security](https://fluxcd.io/flux/security/): the aggregated `flux-view` role. - Network accessline 206
- [Events](https://fluxcd.io/flux/monitoring/events/) and - Network accessline 206
- [Events](https://fluxcd.io/flux/monitoring/events/) and - Network accessline 207
[Security](https://fluxcd.io/flux/security/): the aggregated `flux-view` role. - Network accessline 207
[Security](https://fluxcd.io/flux/security/): the aggregated `flux-view` role. - Network accessline 208
- [flux2 v2.7.0](https://github.com/fluxcd/flux2/releases/tag/v2.7.0), - Network accessline 208
- [flux2 v2.7.0](https://github.com/fluxcd/flux2/releases/tag/v2.7.0), - Network accessline 209
[v2.8.0](https://github.com/fluxcd/flux2/releases/tag/v2.8.0) and - Network accessline 209
[v2.8.0](https://github.com/fluxcd/flux2/releases/tag/v2.8.0) and - Network accessline 210
[v2.9.0](https://github.com/fluxcd/flux2/releases/tag/v2.9.0) release notes: removed - Network accessline 210
[v2.9.0](https://github.com/fluxcd/flux2/releases/tag/v2.9.0) release notes: removed - Network accessline 211
beta APIs. - Condition messages from the source: [gitrepository_controller.go](https://github.com/fluxcd/source-controller/blob/v1.9.6/internal/controller/gitrepository_controller.go), - Network accessline 211
beta APIs. - Condition messages from the source: [gitrepository_controller.go](https://github.com/fluxcd/source-controller/blob/v1.9.6/internal/controller/gitrepository_controller.go), - Network accessline 212
- Condition messages from the source: [gitrepository_controller.go](https://github.com/fluxcd/source-controller/blob/v1.9.6/internal/controller/gitrepository_controller.go), [kustomization_controller.go](https://github.com/fluxcd/kustom - Network accessline 212
- Condition messages from the source: [gitrepository_controller.go](https://github.com/fluxcd/source-controller/blob/v1.9.6/internal/controller/gitrepository_controller.go), [kustomization_controller.go](https://github.com/fluxcd/kustom - Network accessline 213
[gitrepository_controller.go](https://github.com/fluxcd/source-controller/blob/v1.9.6/internal/controller/gitrepository_controller.go), - Network accessline 213
[gitrepository_controller.go](https://github.com/fluxcd/source-controller/blob/v1.9.6/internal/controller/gitrepository_controller.go), - Network accessline 214
[kustomization_controller.go](https://github.com/fluxcd/kustomize-controller/blob/v1.9.6/internal/controller/kustomization_controller.go), - Network accessline 214
[kustomization_controller.go](https://github.com/fluxcd/kustomize-controller/blob/v1.9.6/internal/controller/kustomization_controller.go), - Network accessline 215
[helmrelease_controller.go](https://github.com/fluxcd/helm-controller/blob/v1.6.5/internal/controller/helmrelease_controller.go). - Network accessline 215
[helmrelease_controller.go](https://github.com/fluxcd/helm-controller/blob/v1.6.5/internal/controller/helmrelease_controller.go).
skills/k8s-gatekeeper-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-gatekeeper-troubleshooting/SKILL.md
- Network accessline 165
- [How to use Gatekeeper](https://open-policy-agent.github.io/gatekeeper/website/docs/howto), - Network accessline 165
- [How to use Gatekeeper](https://open-policy-agent.github.io/gatekeeper/website/docs/howto), - Network accessline 166
[ConstraintTemplates](https://open-policy-agent.github.io/gatekeeper/website/docs/constrainttemplates) - Network accessline 166
[ConstraintTemplates](https://open-policy-agent.github.io/gatekeeper/website/docs/constrainttemplates) - Network accessline 167
and [handling violations](https://open-policy-agent.github.io/gatekeeper/website/docs/violations): - Network accessline 167
and [handling violations](https://open-policy-agent.github.io/gatekeeper/website/docs/violations): - Network accessline 168
enforcement actions, the denial and warning format. - [Audit](https://open-policy-agent.github.io/gatekeeper/website/docs/audit) and [debugging](https://open-policy-agent.github.io/gatekeeper/website/docs/debug). - Network accessline 168
enforcement actions, the denial and warning format. - [Audit](https://open-policy-agent.github.io/gatekeeper/website/docs/audit) and [debugging](https://open-policy-agent.github.io/gatekeeper/website/docs/debug). - Network accessline 169
- [Audit](https://open-policy-agent.github.io/gatekeeper/website/docs/audit) and - Network accessline 169
- [Audit](https://open-policy-agent.github.io/gatekeeper/website/docs/audit) and - Network accessline 170
[debugging](https://open-policy-agent.github.io/gatekeeper/website/docs/debug). - Network accessline 170
[debugging](https://open-policy-agent.github.io/gatekeeper/website/docs/debug). - Network accessline 171
- [Exempting namespaces](https://open-policy-agent.github.io/gatekeeper/website/docs/exempt-namespaces), - Network accessline 171
- [Exempting namespaces](https://open-policy-agent.github.io/gatekeeper/website/docs/exempt-namespaces), - Network accessline 172
[replicating data](https://open-policy-agent.github.io/gatekeeper/website/docs/sync), - Network accessline 172
[replicating data](https://open-policy-agent.github.io/gatekeeper/website/docs/sync), - Network accessline 173
[mutation](https://open-policy-agent.github.io/gatekeeper/website/docs/mutation), - Network accessline 173
[mutation](https://open-policy-agent.github.io/gatekeeper/website/docs/mutation), - Network accessline 174
[failing closed](https://open-policy-agent.github.io/gatekeeper/website/docs/failing-closed) - Network accessline 174
[failing closed](https://open-policy-agent.github.io/gatekeeper/website/docs/failing-closed) - Network accessline 175
and [emergency recovery](https://open-policy-agent.github.io/gatekeeper/website/docs/emergency). - Network accessline 175
and [emergency recovery](https://open-policy-agent.github.io/gatekeeper/website/docs/emergency). - Network accessline 176
- [Integration with Kubernetes validating admission policy](https://open-policy-agent.github.io/gatekeeper/website/docs/validating-admission-policy). - Network accessline 176
- [Integration with Kubernetes validating admission policy](https://open-policy-agent.github.io/gatekeeper/website/docs/validating-admission-policy). - Network accessline 177
- Message formats and status codes from the source: [policy.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/webhook/policy.go) and [constants.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/cont - Network accessline 177
- Message formats and status codes from the source: [policy.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/webhook/policy.go) and [constants.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/cont - Network accessline 178
[policy.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/webhook/policy.go) - Network accessline 178
[policy.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/webhook/policy.go) - Network accessline 179
and [constants.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/controller/constrainttemplate/constants.go). - Network accessline 179
and [constants.go](https://github.com/open-policy-agent/gatekeeper/blob/v3.23.1/pkg/controller/constrainttemplate/constants.go).
skills/k8s-gateway-api-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-gateway-api-troubleshooting/SKILL.md
- Network accessline 250
- [API specification 1.6](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/): - Network accessline 250
- [API specification 1.6](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/): - Network accessline 251
the condition types and reasons. - Their definitions in the source: [shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/shared_types.go) - Network accessline 251
the condition types and reasons. - Their definitions in the source: [shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/shared_types.go) - Network accessline 252
- Their definitions in the source: [shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/shared_types.go) (route conditions), - Network accessline 252
- Their definitions in the source: [shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/shared_types.go) (route conditions), - Network accessline 253
[shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/shared_types.go) - Network accessline 253
[shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/shared_types.go) - Network accessline 254
(route conditions), [gateway_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gateway_types.go) (Gateway and listener conditions) and - Network accessline 254
(route conditions), [gateway_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gateway_types.go) (Gateway and listener conditions) and - Network accessline 255
[gateway_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gateway_types.go) - Network accessline 255
[gateway_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gateway_types.go) - Network accessline 256
(Gateway and listener conditions) and [gatewayclass_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gatewayclass_types.go) (GatewayClass conditions, `SupportedVersion`). - Network accessline 256
(Gateway and listener conditions) and [gatewayclass_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gatewayclass_types.go) (GatewayClass conditions, `SupportedVersion`). - Network accessline 257
[gatewayclass_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gatewayclass_types.go) - Network accessline 257
[gatewayclass_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/v1.6.3/apis/v1/gatewayclass_types.go) - Network accessline 258
(GatewayClass conditions, `SupportedVersion`). - [Gateway](https://gateway-api.sigs.k8s.io/reference/api-types/gateway/), [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 258
(GatewayClass conditions, `SupportedVersion`). - [Gateway](https://gateway-api.sigs.k8s.io/reference/api-types/gateway/), [HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 259
- [Gateway](https://gateway-api.sigs.k8s.io/reference/api-types/gateway/), - Network accessline 259
- [Gateway](https://gateway-api.sigs.k8s.io/reference/api-types/gateway/), - Network accessline 260
[HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 260
[HTTPRoute](https://gateway-api.sigs.k8s.io/reference/api-types/httproute/), - Network accessline 261
[ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/), - Network accessline 261
[ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/), - Network accessline 262
[ListenerSet](https://gateway-api.sigs.k8s.io/reference/api-types/listenerset/) and - Network accessline 262
[ListenerSet](https://gateway-api.sigs.k8s.io/reference/api-types/listenerset/) and - Network accessline 263
[BackendTLSPolicy](https://gateway-api.sigs.k8s.io/reference/api-types/policy/backendtlspolicy/). - Network accessline 263
[BackendTLSPolicy](https://gateway-api.sigs.k8s.io/reference/api-types/policy/backendtlspolicy/). - Network accessline 264
- [Cross-namespace routing](https://gateway-api.sigs.k8s.io/guides/multiple-ns/) and - Network accessline 264
- [Cross-namespace routing](https://gateway-api.sigs.k8s.io/guides/multiple-ns/) and - Network accessline 265
[Security model](https://gateway-api.sigs.k8s.io/concepts/security-model/): the roles, - Network accessline 265
[Security model](https://gateway-api.sigs.k8s.io/concepts/security-model/): the roles, - Network accessline 266
`allowedRoutes` and ReferenceGrants. - [Versioning](https://gateway-api.sigs.k8s.io/docs/concepts/versioning/) and the [v1.6.3 release](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.6.3): - Network accessline 266
`allowedRoutes` and ReferenceGrants. - [Versioning](https://gateway-api.sigs.k8s.io/docs/concepts/versioning/) and the [v1.6.3 release](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.6.3): - Network accessline 267
- [Versioning](https://gateway-api.sigs.k8s.io/docs/concepts/versioning/) and the - Network accessline 267
- [Versioning](https://gateway-api.sigs.k8s.io/docs/concepts/versioning/) and the - Network accessline 268
[v1.6.3 release](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.6.3): - Network accessline 268
[v1.6.3 release](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.6.3): - Network accessline 269
channels, the `bundle-version` and `channel` CRD annotations, the `safe-upgrades.gateway.networking.k8s.io` admission policy in the install files. - The [v1.7.0 release notes](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1 - Network accessline 269
channels, the `bundle-version` and `channel` CRD annotations, the `safe-upgrades.gateway.networking.k8s.io` admission policy in the install files. - The [v1.7.0 release notes](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1 - Network accessline 270
`safe-upgrades.gateway.networking.k8s.io` admission policy in the install files. - The [v1.7.0 release notes](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.7.0): HTTPRoute retries move to the Standard channel; nothing her - Network accessline 270
`safe-upgrades.gateway.networking.k8s.io` admission policy in the install files. - The [v1.7.0 release notes](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.7.0): HTTPRoute retries move to the Standard channel; nothing her - Network accessline 271
- The [v1.7.0 release notes](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.7.0): - Network accessline 271
- The [v1.7.0 release notes](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v1.7.0): - Network accessline 272
HTTPRoute retries move to the Standard channel; nothing here changes. - The messages quoted are Envoy Gateway 1.9.2's, seen on the kind cluster; its [source](https://github.com/envoyproxy/gateway/tree/v1.9.2/internal/gatewayapi) has - Network accessline 272
HTTPRoute retries move to the Standard channel; nothing here changes. - The messages quoted are Envoy Gateway 1.9.2's, seen on the kind cluster; its [source](https://github.com/envoyproxy/gateway/tree/v1.9.2/internal/gatewayapi) has - Network accessline 273
- The messages quoted are Envoy Gateway 1.9.2's, seen on the kind cluster; its [source](https://github.com/envoyproxy/gateway/tree/v1.9.2/internal/gatewayapi) has them too. - Network accessline 273
- The messages quoted are Envoy Gateway 1.9.2's, seen on the kind cluster; its [source](https://github.com/envoyproxy/gateway/tree/v1.9.2/internal/gatewayapi) has them too. - Network accessline 274
[source](https://github.com/envoyproxy/gateway/tree/v1.9.2/internal/gatewayapi) has - Network accessline 274
[source](https://github.com/envoyproxy/gateway/tree/v1.9.2/internal/gatewayapi) has
skills/k8s-grafana-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-grafana-troubleshooting/SKILL.md
- Network accessline 171
- [Troubleshooting](https://grafana.com/docs/grafana/latest/troubleshooting/) and - Network accessline 171
- [Troubleshooting](https://grafana.com/docs/grafana/latest/troubleshooting/) and - Network accessline 172
[Grafana on Kubernetes](https://grafana.com/docs/grafana/latest/setup-grafana/installation/kubernetes/). - Network accessline 172
[Grafana on Kubernetes](https://grafana.com/docs/grafana/latest/setup-grafana/installation/kubernetes/). - Network accessline 173
- [Provisioning](https://grafana.com/docs/grafana/latest/administration/provisioning/): - Network accessline 173
- [Provisioning](https://grafana.com/docs/grafana/latest/administration/provisioning/): - Network accessline 174
datasource and dashboard files, `isDefault`, providers. - [Prometheus datasource troubleshooting](https://grafana.com/docs/grafana/latest/datasources/prometheus/troubleshooting/). - [High availability](https://grafana.com/docs/grafana/lates - Network accessline 174
datasource and dashboard files, `isDefault`, providers. - [Prometheus datasource troubleshooting](https://grafana.com/docs/grafana/latest/datasources/prometheus/troubleshooting/). - [High availability](https://grafana.com/docs/grafana/lates - Network accessline 175
- [Prometheus datasource troubleshooting](https://grafana.com/docs/grafana/latest/datasources/prometheus/troubleshooting/). - Network accessline 175
- [Prometheus datasource troubleshooting](https://grafana.com/docs/grafana/latest/datasources/prometheus/troubleshooting/). - Network accessline 176
- [High availability](https://grafana.com/docs/grafana/latest/setup-grafana/set-up-for-high-availability/): - Network accessline 176
- [High availability](https://grafana.com/docs/grafana/latest/setup-grafana/set-up-for-high-availability/): - Network accessline 177
a shared database for several replicas. - [Upgrade to Grafana 13](https://grafana.com/docs/grafana/latest/upgrade-guide/upgrade-v13.0/). - The [Grafana Helm chart](https://github.com/grafana-community/helm-charts/tree/main/charts/grafana) - Network accessline 177
a shared database for several replicas. - [Upgrade to Grafana 13](https://grafana.com/docs/grafana/latest/upgrade-guide/upgrade-v13.0/). - The [Grafana Helm chart](https://github.com/grafana-community/helm-charts/tree/main/charts/grafana) - Network accessline 178
- [Upgrade to Grafana 13](https://grafana.com/docs/grafana/latest/upgrade-guide/upgrade-v13.0/). - Network accessline 178
- [Upgrade to Grafana 13](https://grafana.com/docs/grafana/latest/upgrade-guide/upgrade-v13.0/). - Network accessline 179
- The [Grafana Helm chart](https://github.com/grafana-community/helm-charts/tree/main/charts/grafana) - Network accessline 179
- The [Grafana Helm chart](https://github.com/grafana-community/helm-charts/tree/main/charts/grafana) - Network accessline 180
(sidecar labels, image, admin password) and the [grafana-operator documentation](https://grafana.github.io/grafana-operator/docs/). - Messages from the source: - Network accessline 180
(sidecar labels, image, admin password) and the [grafana-operator documentation](https://grafana.github.io/grafana-operator/docs/). - Messages from the source: - Network accessline 181
[grafana-operator documentation](https://grafana.github.io/grafana-operator/docs/). - Network accessline 181
[grafana-operator documentation](https://grafana.github.io/grafana-operator/docs/). - Network accessline 182
- Messages from the source: [provisioning.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/provisioning.go), [datasources config_reader.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provis - Network accessline 182
- Messages from the source: [provisioning.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/provisioning.go), [datasources config_reader.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provis - Network accessline 183
[provisioning.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/provisioning.go), - Network accessline 183
[provisioning.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/provisioning.go), - Network accessline 184
[datasources config_reader.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/datasources/config_reader.go), - Network accessline 184
[datasources config_reader.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/datasources/config_reader.go), - Network accessline 185
[dashboards file_reader.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/dashboards/file_reader.go). - Network accessline 185
[dashboards file_reader.go](https://github.com/grafana/grafana/blob/v13.2.4/pkg/services/provisioning/dashboards/file_reader.go).
skills/k8s-grafana-troubleshooting/references/datasources-no-data.md
- Network accessline 3
Grafana's backend calls the datasource's URL from inside the Grafana pod. In a cluster that URL is usually a Service DNS name such as `http://prometheus-operated.monitoring.svc:9090`; `localhost` there means the Grafana - Network accessline 3
Grafana's backend calls the datasource's URL from inside the Grafana pod. In a cluster that URL is usually a Service DNS name such as `http://prometheus-operated.monitoring.svc:9090`; `localhost` there means the Grafana - Network accessline 4
that URL is usually a Service DNS name such as `http://prometheus-operated.monitoring.svc:9090`; `localhost` there means the Grafana pod itself. - Network accessline 4
that URL is usually a Service DNS name such as `http://prometheus-operated.monitoring.svc:9090`; `localhost` there means the Grafana pod itself. - Network accessline 5
`http://prometheus-operated.monitoring.svc:9090`; `localhost` there means the Grafana - Network accessline 5
`http://prometheus-operated.monitoring.svc:9090`; `localhost` there means the Grafana
skills/k8s-helm-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-helm-troubleshooting/SKILL.md
- Network accessline 178
- [Helm 4 overview](https://helm.sh/docs/overview): server-side apply, `--wait` - Network accessline 178
- [Helm 4 overview](https://helm.sh/docs/overview): server-side apply, `--wait` - Network accessline 179
strategies, `--rollback-on-failure`, `helm list` showing every status. - [Troubleshooting](https://helm.sh/docs/v3/faq/troubleshooting) (Helm 3). - [helm rollback](https://helm.sh/docs/helm/helm_rollback), - Network accessline 179
strategies, `--rollback-on-failure`, `helm list` showing every status. - [Troubleshooting](https://helm.sh/docs/v3/faq/troubleshooting) (Helm 3). - [helm rollback](https://helm.sh/docs/helm/helm_rollback), - Network accessline 180
- [Troubleshooting](https://helm.sh/docs/v3/faq/troubleshooting) (Helm 3). - Network accessline 180
- [Troubleshooting](https://helm.sh/docs/v3/faq/troubleshooting) (Helm 3). - Network accessline 181
- [helm rollback](https://helm.sh/docs/helm/helm_rollback), - Network accessline 181
- [helm rollback](https://helm.sh/docs/helm/helm_rollback), - Network accessline 182
[helm status](https://helm.sh/docs/helm/helm_status) and - Network accessline 182
[helm status](https://helm.sh/docs/helm/helm_status) and - Network accessline 183
[helm history](https://helm.sh/docs/helm/helm_history). - Network accessline 183
[helm history](https://helm.sh/docs/helm/helm_history). - Network accessline 184
- [Chart hooks](https://helm.sh/docs/topics/charts_hooks), - Network accessline 184
- [Chart hooks](https://helm.sh/docs/topics/charts_hooks), - Network accessline 185
[deprecated Kubernetes APIs](https://helm.sh/docs/topics/kubernetes_apis) and - Network accessline 185
[deprecated Kubernetes APIs](https://helm.sh/docs/topics/kubernetes_apis) and - Network accessline 186
[labels and annotations](https://helm.sh/docs/chart_best_practices/labels). - Network accessline 186
[labels and annotations](https://helm.sh/docs/chart_best_practices/labels). - Network accessline 187
- Error strings and ownership checks from the source: [action.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/action.go), [install.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/install.go), - Network accessline 187
- Error strings and ownership checks from the source: [action.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/action.go), [install.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/install.go), - Network accessline 188
[action.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/action.go), - Network accessline 188
[action.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/action.go), - Network accessline 189
[install.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/install.go), - Network accessline 189
[install.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/install.go), - Network accessline 190
[validate.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/validate.go), - Network accessline 190
[validate.go](https://github.com/helm/helm/blob/v4.3.1/pkg/action/validate.go), - Network accessline 191
[statuswait.go](https://github.com/helm/helm/blob/v4.3.1/pkg/kube/statuswait.go), - Network accessline 191
[statuswait.go](https://github.com/helm/helm/blob/v4.3.1/pkg/kube/statuswait.go), - Network accessline 192
[secrets.go](https://github.com/helm/helm/blob/v4.3.1/pkg/storage/driver/secrets.go). - Network accessline 192
[secrets.go](https://github.com/helm/helm/blob/v4.3.1/pkg/storage/driver/secrets.go).
skills/k8s-istio-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-istio-troubleshooting/SKILL.md
- Network accessline 168
- [Common problems](https://istio.io/latest/docs/ops/common-problems/network-issues/), - Network accessline 168
- [Common problems](https://istio.io/latest/docs/ops/common-problems/network-issues/), - Network accessline 169
[security problems](https://istio.io/latest/docs/ops/common-problems/security-issues/) - Network accessline 169
[security problems](https://istio.io/latest/docs/ops/common-problems/security-issues/) - Network accessline 170
and [injection problems](https://istio.io/latest/docs/ops/common-problems/injection/). - Network accessline 170
and [injection problems](https://istio.io/latest/docs/ops/common-problems/injection/). - Network accessline 171
- [Diagnostic tools](https://istio.io/latest/docs/ops/diagnostic-tools/) and - Network accessline 171
- [Diagnostic tools](https://istio.io/latest/docs/ops/diagnostic-tools/) and - Network accessline 172
[Envoy access logs](https://istio.io/latest/docs/tasks/observability/logs/access-log/). - Network accessline 172
[Envoy access logs](https://istio.io/latest/docs/tasks/observability/logs/access-log/). - Network accessline 173
- [Traffic management](https://istio.io/latest/docs/concepts/traffic-management/), - Network accessline 173
- [Traffic management](https://istio.io/latest/docs/concepts/traffic-management/), - Network accessline 174
[security](https://istio.io/latest/docs/concepts/security/) and - Network accessline 174
[security](https://istio.io/latest/docs/concepts/security/) and - Network accessline 175
[authorization policy](https://istio.io/latest/docs/reference/config/security/authorization-policy/). - Network accessline 175
[authorization policy](https://istio.io/latest/docs/reference/config/security/authorization-policy/). - Network accessline 176
- [Protocol selection](https://istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/) - Network accessline 176
- [Protocol selection](https://istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/) - Network accessline 177
and [ambient mode](https://istio.io/latest/docs/ambient/overview/). - Network accessline 177
and [ambient mode](https://istio.io/latest/docs/ambient/overview/). - Network accessline 178
- [Helm installation](https://istio.io/latest/docs/setup/install/helm/). - Network accessline 178
- [Helm installation](https://istio.io/latest/docs/setup/install/helm/). - Network accessline 179
- Envoy's [response flags](https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage#command-operators) - Network accessline 179
- Envoy's [response flags](https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage#command-operators) - Network accessline 180
and [admin interface](https://www.envoyproxy.io/docs/envoy/latest/operations/admin). - Network accessline 180
and [admin interface](https://www.envoyproxy.io/docs/envoy/latest/operations/admin). - Network accessline 181
- `istioctl analyze` reads Secrets (its gateway analyzer: [secret.go](https://github.com/istio/istio/blob/1.31.3/pkg/config/analysis/analyzers/gateway/secret.go)), which is why this skill does not run it. The log lines quoted here were - Network accessline 181
- `istioctl analyze` reads Secrets (its gateway analyzer: [secret.go](https://github.com/istio/istio/blob/1.31.3/pkg/config/analysis/analyzers/gateway/secret.go)), which is why this skill does not run it. The log lines quoted here were - Network accessline 182
[secret.go](https://github.com/istio/istio/blob/1.31.3/pkg/config/analysis/analyzers/gateway/secret.go)), - Network accessline 182
[secret.go](https://github.com/istio/istio/blob/1.31.3/pkg/config/analysis/analyzers/gateway/secret.go)),
skills/k8s-kyverno-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-kyverno-troubleshooting/SKILL.md
- Network accessline 174
- [Troubleshooting](https://kyverno.io/docs/guides/troubleshooting/). - Network accessline 174
- [Troubleshooting](https://kyverno.io/docs/guides/troubleshooting/). - Network accessline 175
- [Policy types](https://kyverno.io/docs/policy-types/overview/) and - Network accessline 175
- [Policy types](https://kyverno.io/docs/policy-types/overview/) and - Network accessline 176
[ValidatingPolicy](https://kyverno.io/docs/policy-types/validating-policy/). - Network accessline 176
[ValidatingPolicy](https://kyverno.io/docs/policy-types/validating-policy/). - Network accessline 177
- [Validate rules](https://kyverno.io/docs/policy-types/cluster-policy/validate/), - Network accessline 177
- [Validate rules](https://kyverno.io/docs/policy-types/cluster-policy/validate/), - Network accessline 178
[mutate rules](https://kyverno.io/docs/policy-types/cluster-policy/mutate/) and - Network accessline 178
[mutate rules](https://kyverno.io/docs/policy-types/cluster-policy/mutate/) and - Network accessline 179
[generate rules](https://kyverno.io/docs/policy-types/cluster-policy/generate/). - Network accessline 179
[generate rules](https://kyverno.io/docs/policy-types/cluster-policy/generate/). - Network accessline 180
- [Policy reports](https://kyverno.io/docs/guides/reports/) and - Network accessline 180
- [Policy reports](https://kyverno.io/docs/guides/reports/) and - Network accessline 181
[policy exceptions](https://kyverno.io/docs/guides/exceptions/). - Network accessline 181
[policy exceptions](https://kyverno.io/docs/guides/exceptions/). - Network accessline 182
- [Upgrading to 1.19](https://kyverno.io/docs/installation/upgrading/) (ClusterPolicy - Network accessline 182
- [Upgrading to 1.19](https://kyverno.io/docs/installation/upgrading/) (ClusterPolicy - Network accessline 183
deprecated) and [releases](https://kyverno.io/docs/installation/releases/): 1.19 is - Network accessline 183
deprecated) and [releases](https://kyverno.io/docs/installation/releases/): 1.19 is - Network accessline 184
tested with Kubernetes 1.33 to 1.35; these steps were also seen working on 1.37. - [Customization](https://kyverno.io/docs/installation/customization/): container flags and the `resourceFilters` ConfigMap key. - Network accessline 184
tested with Kubernetes 1.33 to 1.35; these steps were also seen working on 1.37. - [Customization](https://kyverno.io/docs/installation/customization/): container flags and the `resourceFilters` ConfigMap key. - Network accessline 185
- [Customization](https://kyverno.io/docs/installation/customization/): container - Network accessline 185
- [Customization](https://kyverno.io/docs/installation/customization/): container - Network accessline 186
flags and the `resourceFilters` ConfigMap key. - Denial formats from the source: [block.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/utils/block.go), - Network accessline 186
flags and the `resourceFilters` ConfigMap key. - Denial formats from the source: [block.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/utils/block.go), - Network accessline 187
- Denial formats from the source: [block.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/utils/block.go), [vpol/handler.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/resource/vpol/handler.go), - Network accessline 187
- Denial formats from the source: [block.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/utils/block.go), [vpol/handler.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/resource/vpol/handler.go), - Network accessline 188
[block.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/utils/block.go), - Network accessline 188
[block.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/utils/block.go), - Network accessline 189
[vpol/handler.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/resource/vpol/handler.go), - Network accessline 189
[vpol/handler.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/webhooks/resource/vpol/handler.go), - Network accessline 190
[autogen rule.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/autogen/v1/rule.go). - Network accessline 190
[autogen rule.go](https://github.com/kyverno/kyverno/blob/v1.19.2/pkg/autogen/v1/rule.go).
skills/k8s-loki-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-loki-troubleshooting/SKILL.md
- Network accessline 175
- [Troubleshoot log ingestion](https://grafana.com/docs/loki/latest/operations/troubleshooting/troubleshoot-ingest/) - Network accessline 175
- [Troubleshoot log ingestion](https://grafana.com/docs/loki/latest/operations/troubleshooting/troubleshoot-ingest/) - Network accessline 176
and [request validation and rate limits](https://grafana.com/docs/loki/latest/operations/request-validation-rate-limits/). - Network accessline 176
and [request validation and rate limits](https://grafana.com/docs/loki/latest/operations/request-validation-rate-limits/). - Network accessline 177
- [Troubleshoot operations](https://grafana.com/docs/loki/latest/operations/troubleshooting/troubleshoot-operations/): - Network accessline 177
- [Troubleshoot operations](https://grafana.com/docs/loki/latest/operations/troubleshooting/troubleshoot-operations/): - Network accessline 178
rings, memberlist, `-verify-config`. - [Multi-tenancy](https://grafana.com/docs/loki/latest/operations/multi-tenancy/), [HTTP API](https://grafana.com/docs/loki/latest/reference/loki-http-api/), - Network accessline 178
rings, memberlist, `-verify-config`. - [Multi-tenancy](https://grafana.com/docs/loki/latest/operations/multi-tenancy/), [HTTP API](https://grafana.com/docs/loki/latest/reference/loki-http-api/), - Network accessline 179
- [Multi-tenancy](https://grafana.com/docs/loki/latest/operations/multi-tenancy/), - Network accessline 179
- [Multi-tenancy](https://grafana.com/docs/loki/latest/operations/multi-tenancy/), - Network accessline 180
[HTTP API](https://grafana.com/docs/loki/latest/reference/loki-http-api/), - Network accessline 180
[HTTP API](https://grafana.com/docs/loki/latest/reference/loki-http-api/), - Network accessline 181
[deployment modes](https://grafana.com/docs/loki/latest/get-started/deployment-modes/), - Network accessline 181
[deployment modes](https://grafana.com/docs/loki/latest/get-started/deployment-modes/), - Network accessline 182
[schema](https://grafana.com/docs/loki/latest/operations/storage/schema/) and - Network accessline 182
[schema](https://grafana.com/docs/loki/latest/operations/storage/schema/) and - Network accessline 183
[retention](https://grafana.com/docs/loki/latest/operations/storage/retention/). - Network accessline 183
[retention](https://grafana.com/docs/loki/latest/operations/storage/retention/). - Network accessline 184
- [Helm install](https://grafana.com/docs/loki/latest/setup/install/helm/): the OSS chart - Network accessline 184
- [Helm install](https://grafana.com/docs/loki/latest/setup/install/helm/): the OSS chart - Network accessline 185
is now in [grafana-community/helm-charts](https://github.com/grafana-community/helm-charts/tree/main/charts/loki). - Network accessline 185
is now in [grafana-community/helm-charts](https://github.com/grafana-community/helm-charts/tree/main/charts/loki). - Network accessline 186
- Messages from the source: [validation/validate.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/validation/validate.go), [ingester/flush.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/ingester/flush.go) - Network accessline 186
- Messages from the source: [validation/validate.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/validation/validate.go), [ingester/flush.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/ingester/flush.go) - Network accessline 187
[validation/validate.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/validation/validate.go), - Network accessline 187
[validation/validate.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/validation/validate.go), - Network accessline 188
[ingester/flush.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/ingester/flush.go) - Network accessline 188
[ingester/flush.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/ingester/flush.go) - Network accessline 189
and [storage/config/schema_config.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/storage/config/schema_config.go). - Network accessline 189
and [storage/config/schema_config.go](https://github.com/grafana/loki/blob/v3.7.9/pkg/storage/config/schema_config.go).
skills/k8s-network-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-network-troubleshooting/SKILL.md
- Network accessline 117
kubectl exec deployment/my-web -n my-other-namespace -- nslookup my-app.my-namespace kubectl exec deployment/my-web -n my-other-namespace -- wget -qO- -T 2 http://my-app.my-namespace:80/ - Network accessline 117
kubectl exec deployment/my-web -n my-other-namespace -- nslookup my-app.my-namespace kubectl exec deployment/my-web -n my-other-namespace -- wget -qO- -T 2 http://my-app.my-namespace:80/ - Network accessline 118
kubectl exec deployment/my-web -n my-other-namespace -- wget -qO- -T 2 http://my-app.my-namespace:80/ - Network accessline 118
kubectl exec deployment/my-web -n my-other-namespace -- wget -qO- -T 2 http://my-app.my-namespace:80/ - Network accessline 197
- [Service](https://kubernetes.io/docs/concepts/services-networking/service/): selectors, - Network accessline 197
- [Service](https://kubernetes.io/docs/concepts/services-networking/service/): selectors, - Network accessline 198
`port` and `targetPort`, named ports, Services without selectors. - [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): the `kubernetes.io/service-name` label, the `ready`, `serving` and `terminatin - Network accessline 198
`port` and `targetPort`, named ports, Services without selectors. - [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): the `kubernetes.io/service-name` label, the `ready`, `serving` and `terminatin - Network accessline 199
- [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): - Network accessline 199
- [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): - Network accessline 200
the `kubernetes.io/service-name` label, the `ready`, `serving` and `terminating` conditions, `publishNotReadyAddresses`. - [Connecting Applications with Services](https://kubernetes.io/docs/tutorials/services/connect-applications-service/ - Network accessline 200
the `kubernetes.io/service-name` label, the `ready`, `serving` and `terminating` conditions, `publishNotReadyAddresses`. - [Connecting Applications with Services](https://kubernetes.io/docs/tutorials/services/connect-applications-service/ - Network accessline 201
conditions, `publishNotReadyAddresses`. - [Connecting Applications with Services](https://kubernetes.io/docs/tutorials/services/connect-applications-service/): `describe service` output. - Network accessline 201
conditions, `publishNotReadyAddresses`. - [Connecting Applications with Services](https://kubernetes.io/docs/tutorials/services/connect-applications-service/): `describe service` output. - Network accessline 202
- [Connecting Applications with Services](https://kubernetes.io/docs/tutorials/services/connect-applications-service/): - Network accessline 202
- [Connecting Applications with Services](https://kubernetes.io/docs/tutorials/services/connect-applications-service/): - Network accessline 203
`describe service` output. - [Debug Services](https://kubernetes.io/docs/tasks/debug/debug-application/debug-service/): the order of checks, testing from inside a pod. - Network accessline 203
`describe service` output. - [Debug Services](https://kubernetes.io/docs/tasks/debug/debug-application/debug-service/): the order of checks, testing from inside a pod. - Network accessline 204
- [Debug Services](https://kubernetes.io/docs/tasks/debug/debug-application/debug-service/): - Network accessline 204
- [Debug Services](https://kubernetes.io/docs/tasks/debug/debug-application/debug-service/): - Network accessline 205
the order of checks, testing from inside a pod. - [DNS for Services and Pods](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/) and [Debugging DNS Resolution](https://kubernetes.io/docs/tasks/administer-cluster/dns - Network accessline 205
the order of checks, testing from inside a pod. - [DNS for Services and Pods](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/) and [Debugging DNS Resolution](https://kubernetes.io/docs/tasks/administer-cluster/dns - Network accessline 206
- [DNS for Services and Pods](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/) - Network accessline 206
- [DNS for Services and Pods](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/) - Network accessline 207
and [Debugging DNS Resolution](https://kubernetes.io/docs/tasks/administer-cluster/dns-debugging-resolution/): - Network accessline 207
and [Debugging DNS Resolution](https://kubernetes.io/docs/tasks/administer-cluster/dns-debugging-resolution/): - Network accessline 208
names, the search list, CoreDNS checks. - [Network Policies](https://kubernetes.io/docs/concepts/services-networking/network-policies/): isolation, additive rules, both directions, DNS with egress policies, - Network accessline 208
names, the search list, CoreDNS checks. - [Network Policies](https://kubernetes.io/docs/concepts/services-networking/network-policies/): isolation, additive rules, both directions, DNS with egress policies, - Network accessline 209
- [Network Policies](https://kubernetes.io/docs/concepts/services-networking/network-policies/): - Network accessline 209
- [Network Policies](https://kubernetes.io/docs/concepts/services-networking/network-policies/): - Network accessline 210
isolation, additive rules, both directions, DNS with egress policies, `kubernetes.io/metadata.name`. - [Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/): controllers, - Network accessline 210
isolation, additive rules, both directions, DNS with egress policies, `kubernetes.io/metadata.name`. - [Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/): controllers, - Network accessline 211
`kubernetes.io/metadata.name`. - [Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/): controllers, IngressClass and the default class, backends. - Network accessline 211
`kubernetes.io/metadata.name`. - [Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/): controllers, IngressClass and the default class, backends. - Network accessline 212
- [Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/): controllers, - Network accessline 212
- [Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/): controllers, - Network accessline 213
IngressClass and the default class, backends. - [Gateway API specification](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/), [ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) - Network accessline 213
IngressClass and the default class, backends. - [Gateway API specification](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/), [ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) - Network accessline 214
- [Gateway API specification](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/), - Network accessline 214
- [Gateway API specification](https://gateway-api.sigs.k8s.io/reference/api-spec/1.6/spec/), - Network accessline 215
[ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) - Network accessline 215
[ReferenceGrant](https://gateway-api.sigs.k8s.io/reference/api-types/referencegrant/) - Network accessline 217
[shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/main/apis/v1/shared_types.go). - Network accessline 217
[shared_types.go](https://github.com/kubernetes-sigs/gateway-api/blob/main/apis/v1/shared_types.go).
skills/k8s-node-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-node-troubleshooting/SKILL.md
- Dangerous shell operationline 185
sudo systemctl restart kubelet - Dangerous shell operationline 185
sudo systemctl restart kubelet - Network accessline 203
- [Node Status](https://kubernetes.io/docs/reference/node/node-status/): conditions, the - Network accessline 203
- [Node Status](https://kubernetes.io/docs/reference/node/node-status/): conditions, the - Network accessline 204
50-second `node-monitor-grace-period`, Leases in `kube-node-lease` and their 10-second renewal. - [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/): cordon and - Network accessline 204
50-second `node-monitor-grace-period`, Leases in `kube-node-lease` and their 10-second renewal. - [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/): cordon and - Network accessline 205
renewal. - [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/): cordon and `spec.unschedulable`. - Network accessline 205
renewal. - [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/): cordon and `spec.unschedulable`. - Network accessline 206
- [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/): cordon and - Network accessline 206
- [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/): cordon and - Network accessline 207
`spec.unschedulable`. - [Force Delete StatefulSet Pods](https://kubernetes.io/docs/tasks/run-application/force-delete-stateful-set-pod/): StatefulSet pods on an unreachable node are not replaced on their own. - Network accessline 207
`spec.unschedulable`. - [Force Delete StatefulSet Pods](https://kubernetes.io/docs/tasks/run-application/force-delete-stateful-set-pod/): StatefulSet pods on an unreachable node are not replaced on their own. - Network accessline 208
- [Force Delete StatefulSet Pods](https://kubernetes.io/docs/tasks/run-application/force-delete-stateful-set-pod/): - Network accessline 208
- [Force Delete StatefulSet Pods](https://kubernetes.io/docs/tasks/run-application/force-delete-stateful-set-pod/): - Network accessline 209
StatefulSet pods on an unreachable node are not replaced on their own. - [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) and [Well-Known Labels, Annotations and Taints](https://kuber - Network accessline 209
StatefulSet pods on an unreachable node are not replaced on their own. - [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) and [Well-Known Labels, Annotations and Taints](https://kuber - Network accessline 210
- [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) - Network accessline 210
- [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) - Network accessline 211
and [Well-Known Labels, Annotations and Taints](https://kubernetes.io/docs/reference/labels-annotations-taints/): - Network accessline 211
and [Well-Known Labels, Annotations and Taints](https://kubernetes.io/docs/reference/labels-annotations-taints/): - Network accessline 212
taint effects, the `node.kubernetes.io/*` taints, taint removal. - [Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/): DefaultTolerationSeconds and the 300-second default. - Network accessline 212
taint effects, the `node.kubernetes.io/*` taints, taint removal. - [Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/): DefaultTolerationSeconds and the 300-second default. - Network accessline 213
- [Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/): - Network accessline 213
- [Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/): - Network accessline 214
DefaultTolerationSeconds and the 300-second default. - [DaemonSet](https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/): tolerations DaemonSet pods get. - Network accessline 214
DefaultTolerationSeconds and the 300-second default. - [DaemonSet](https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/): tolerations DaemonSet pods get. - Network accessline 215
- [DaemonSet](https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/): - Network accessline 215
- [DaemonSet](https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/): - Network accessline 216
tolerations DaemonSet pods get. - [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): signals, default thresholds, reclaim order, no PDBs. - Network accessline 216
tolerations DaemonSet pods get. - [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): signals, default thresholds, reclaim order, no PDBs. - Network accessline 217
- [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): - Network accessline 217
- [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): - Network accessline 218
signals, default thresholds, reclaim order, no PDBs. - [Reserve Compute Resources for System Daemons](https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/) and [Resource Management for Pods and Containers](https: - Network accessline 218
signals, default thresholds, reclaim order, no PDBs. - [Reserve Compute Resources for System Daemons](https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/) and [Resource Management for Pods and Containers](https: - Network accessline 219
- [Reserve Compute Resources for System Daemons](https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/) and [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-re - Network accessline 219
- [Reserve Compute Resources for System Daemons](https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/) and [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-re - Network accessline 220
and [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/): Allocatable, scheduling by requests. - [kubectl drain](https://kubernetes.io/docs/reference/kubectl/generat - Network accessline 220
and [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/): Allocatable, scheduling by requests. - [kubectl drain](https://kubernetes.io/docs/reference/kubectl/generat - Network accessline 221
Allocatable, scheduling by requests. - [kubectl drain](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_drain/), [kubectl cordon](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_cordon/), - Network accessline 221
Allocatable, scheduling by requests. - [kubectl drain](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_drain/), [kubectl cordon](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_cordon/), - Network accessline 222
- [kubectl drain](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_drain/), - Network accessline 222
- [kubectl drain](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_drain/), - Network accessline 223
[kubectl cordon](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_cordon/), - Network accessline 223
[kubectl cordon](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_cordon/), - Network accessline 224
[kubectl taint](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_taint/) - Network accessline 224
[kubectl taint](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_taint/) - Network accessline 225
and [kubectl top node](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_top/kubectl_top_node/). - Network accessline 225
and [kubectl top node](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_top/kubectl_top_node/). - Network accessline 226
- [Resource metrics pipeline](https://kubernetes.io/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/) - Network accessline 226
- [Resource metrics pipeline](https://kubernetes.io/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/) - Network accessline 227
and [Troubleshooting Clusters](https://kubernetes.io/docs/tasks/debug/debug-cluster/): - Network accessline 227
and [Troubleshooting Clusters](https://kubernetes.io/docs/tasks/debug/debug-cluster/): - Network accessline 228
metrics-server, `describe node` output. - [Cluster Autoscaler FAQ](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/FAQ.md): scale-up and scale-down rules, events, the status ConfigMap, annotations. - Network accessline 228
metrics-server, `describe node` output. - [Cluster Autoscaler FAQ](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/FAQ.md): scale-up and scale-down rules, events, the status ConfigMap, annotations. - Network accessline 229
- [Cluster Autoscaler FAQ](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/FAQ.md): - Network accessline 229
- [Cluster Autoscaler FAQ](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/FAQ.md): - Network accessline 230
scale-up and scale-down rules, events, the status ConfigMap, annotations. - The `FailedScheduling` reason texts are from the Kubernetes 1.37 scheduler source ([tainttoleration plugin](https://github.com/kubernetes/kubernetes/blob/release- - Network accessline 230
scale-up and scale-down rules, events, the status ConfigMap, annotations. - The `FailedScheduling` reason texts are from the Kubernetes 1.37 scheduler source ([tainttoleration plugin](https://github.com/kubernetes/kubernetes/blob/release- - Network accessline 231
- The `FailedScheduling` reason texts are from the Kubernetes 1.37 scheduler source ([tainttoleration plugin](https://github.com/kubernetes/kubernetes/blob/release-1.37/pkg/scheduler/framework/plugins/tainttoleration/taint_toleration.go)) - Network accessline 231
- The `FailedScheduling` reason texts are from the Kubernetes 1.37 scheduler source ([tainttoleration plugin](https://github.com/kubernetes/kubernetes/blob/release-1.37/pkg/scheduler/framework/plugins/tainttoleration/taint_toleration.go)) - Network accessline 232
([tainttoleration plugin](https://github.com/kubernetes/kubernetes/blob/release-1.37/pkg/scheduler/framework/plugins/tainttoleration/taint_toleration.go)), - Network accessline 232
([tainttoleration plugin](https://github.com/kubernetes/kubernetes/blob/release-1.37/pkg/scheduler/framework/plugins/tainttoleration/taint_toleration.go)),
skills/k8s-node-troubleshooting/references/not-ready.md
skills/k8s-node-troubleshooting/references/pressure.md
skills/k8s-opentelemetry-collector-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-opentelemetry-collector-troubleshooting/SKILL.md
- Network accessline 176
- [Collector configuration](https://opentelemetry.io/docs/collector/configuration/) - Network accessline 176
- [Collector configuration](https://opentelemetry.io/docs/collector/configuration/) - Network accessline 177
and [troubleshooting](https://opentelemetry.io/docs/collector/troubleshooting/). - Network accessline 177
and [troubleshooting](https://opentelemetry.io/docs/collector/troubleshooting/). - Network accessline 178
- [Internal telemetry](https://opentelemetry.io/docs/collector/internal-telemetry/): - Network accessline 178
- [Internal telemetry](https://opentelemetry.io/docs/collector/internal-telemetry/): - Network accessline 179
metrics on 8888 and their names. - The `localhost` default: [core CHANGELOG v0.104.0](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/CHANGELOG.md) - Network accessline 179
metrics on 8888 and their names. - The `localhost` default: [core CHANGELOG v0.104.0](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/CHANGELOG.md) - Network accessline 180
- The `localhost` default: [core CHANGELOG v0.104.0](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/CHANGELOG.md) and [otlpreceiver factory.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.1 - Network accessline 180
- The `localhost` default: [core CHANGELOG v0.104.0](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/CHANGELOG.md) and [otlpreceiver factory.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.1 - Network accessline 181
[core CHANGELOG v0.104.0](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/CHANGELOG.md) - Network accessline 181
[core CHANGELOG v0.104.0](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/CHANGELOG.md) - Network accessline 182
and [otlpreceiver factory.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/receiver/otlpreceiver/factory.go). - Network accessline 182
and [otlpreceiver factory.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/receiver/otlpreceiver/factory.go). - Network accessline 183
- Messages from the source: [otelcol/config.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/otelcol/config.go) and [exporterhelper](https://github.com/open-telemetry/opentelemetry-collector/tree/v0.163.0/expo - Network accessline 183
- Messages from the source: [otelcol/config.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/otelcol/config.go) and [exporterhelper](https://github.com/open-telemetry/opentelemetry-collector/tree/v0.163.0/expo - Network accessline 184
[otelcol/config.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/otelcol/config.go) - Network accessline 184
[otelcol/config.go](https://github.com/open-telemetry/opentelemetry-collector/blob/v0.163.0/otelcol/config.go) - Network accessline 185
and [exporterhelper](https://github.com/open-telemetry/opentelemetry-collector/tree/v0.163.0/exporter/exporterhelper). - Network accessline 185
and [exporterhelper](https://github.com/open-telemetry/opentelemetry-collector/tree/v0.163.0/exporter/exporterhelper). - Network accessline 186
"Dropping data because sending_queue is full" no longer exists in 0.163. - [Operator](https://github.com/open-telemetry/opentelemetry-operator/blob/v0.162.0/README.md), its [compatibility table](https://github.com/open-telemetry/opentelem - Network accessline 186
"Dropping data because sending_queue is full" no longer exists in 0.163. - [Operator](https://github.com/open-telemetry/opentelemetry-operator/blob/v0.162.0/README.md), its [compatibility table](https://github.com/open-telemetry/opentelem - Network accessline 187
- [Operator](https://github.com/open-telemetry/opentelemetry-operator/blob/v0.162.0/README.md), - Network accessline 187
- [Operator](https://github.com/open-telemetry/opentelemetry-operator/blob/v0.162.0/README.md), - Network accessline 188
its [compatibility table](https://github.com/open-telemetry/opentelemetry-operator/blob/v0.162.0/docs/getting-started/compatibility.md) - Network accessline 188
its [compatibility table](https://github.com/open-telemetry/opentelemetry-operator/blob/v0.162.0/docs/getting-started/compatibility.md) - Network accessline 189
and [auto-instrumentation troubleshooting](https://opentelemetry.io/docs/platforms/kubernetes/operator/troubleshooting/automatic/). - Network accessline 189
and [auto-instrumentation troubleshooting](https://opentelemetry.io/docs/platforms/kubernetes/operator/troubleshooting/automatic/).
skills/k8s-prometheus-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-prometheus-troubleshooting/SKILL.md
- Network accessline 178
- [Prometheus Operator troubleshooting](https://prometheus-operator.dev/docs/platform/troubleshooting/): - Network accessline 178
- [Prometheus Operator troubleshooting](https://prometheus-operator.dev/docs/platform/troubleshooting/): - Network accessline 179
selection, port names, events; its step that decodes the configuration Secret is left out here. - [API reference](https://prometheus-operator.dev/docs/api-reference/api/): selector - Network accessline 179
selection, port names, events; its step that decodes the configuration Secret is left out here. - [API reference](https://prometheus-operator.dev/docs/api-reference/api/): selector - Network accessline 180
left out here. - [API reference](https://prometheus-operator.dev/docs/api-reference/api/): selector semantics (empty versus null), ServiceMonitor endpoints. - Network accessline 180
left out here. - [API reference](https://prometheus-operator.dev/docs/api-reference/api/): selector semantics (empty versus null), ServiceMonitor endpoints. - Network accessline 181
- [API reference](https://prometheus-operator.dev/docs/api-reference/api/): selector - Network accessline 181
- [API reference](https://prometheus-operator.dev/docs/api-reference/api/): selector - Network accessline 182
semantics (empty versus null), ServiceMonitor endpoints. - [RBAC for the CRDs](https://prometheus-operator.dev/docs/platform/rbac-crd/) and [storage](https://prometheus-operator.dev/docs/platform/storage/). - Network accessline 182
semantics (empty versus null), ServiceMonitor endpoints. - [RBAC for the CRDs](https://prometheus-operator.dev/docs/platform/rbac-crd/) and [storage](https://prometheus-operator.dev/docs/platform/storage/). - Network accessline 183
- [RBAC for the CRDs](https://prometheus-operator.dev/docs/platform/rbac-crd/) and - Network accessline 183
- [RBAC for the CRDs](https://prometheus-operator.dev/docs/platform/rbac-crd/) and - Network accessline 184
[storage](https://prometheus-operator.dev/docs/platform/storage/). - Network accessline 184
[storage](https://prometheus-operator.dev/docs/platform/storage/). - Network accessline 185
- Prometheus [HTTP API](https://prometheus.io/docs/prometheus/latest/querying/api/) - Network accessline 185
- Prometheus [HTTP API](https://prometheus.io/docs/prometheus/latest/querying/api/) - Network accessline 186
(targets, scrape pools, rules, alerts, TSDB status), [storage](https://prometheus.io/docs/prometheus/latest/storage/) and the [3.0 migration guide](https://prometheus.io/docs/prometheus/latest/migration/). - Network accessline 186
(targets, scrape pools, rules, alerts, TSDB status), [storage](https://prometheus.io/docs/prometheus/latest/storage/) and the [3.0 migration guide](https://prometheus.io/docs/prometheus/latest/migration/). - Network accessline 187
[storage](https://prometheus.io/docs/prometheus/latest/storage/) and the - Network accessline 187
[storage](https://prometheus.io/docs/prometheus/latest/storage/) and the - Network accessline 188
[3.0 migration guide](https://prometheus.io/docs/prometheus/latest/migration/). - Network accessline 188
[3.0 migration guide](https://prometheus.io/docs/prometheus/latest/migration/). - Network accessline 189
- [Manually constructing API server proxy URLs](https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster-services/#manually-constructing-apiserver-proxy-urls). - Network accessline 189
- [Manually constructing API server proxy URLs](https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster-services/#manually-constructing-apiserver-proxy-urls). - Network accessline 190
- Messages from the source: [resource_selector.go](https://github.com/prometheus-operator/prometheus-operator/blob/v0.94.2/pkg/prometheus/resource_selector.go), [operator.go](https://github.com/prometheus-operator/prometheus-operator/bl - Network accessline 190
- Messages from the source: [resource_selector.go](https://github.com/prometheus-operator/prometheus-operator/blob/v0.94.2/pkg/prometheus/resource_selector.go), [operator.go](https://github.com/prometheus-operator/prometheus-operator/bl - Network accessline 191
[resource_selector.go](https://github.com/prometheus-operator/prometheus-operator/blob/v0.94.2/pkg/prometheus/resource_selector.go), - Network accessline 191
[resource_selector.go](https://github.com/prometheus-operator/prometheus-operator/blob/v0.94.2/pkg/prometheus/resource_selector.go), - Network accessline 192
[operator.go](https://github.com/prometheus-operator/prometheus-operator/blob/v0.94.2/pkg/operator/operator.go), - Network accessline 192
[operator.go](https://github.com/prometheus-operator/prometheus-operator/blob/v0.94.2/pkg/operator/operator.go), - Network accessline 193
[scrape.go](https://github.com/prometheus/prometheus/blob/v3.14.0/scrape/scrape.go). - Network accessline 193
[scrape.go](https://github.com/prometheus/prometheus/blob/v3.14.0/scrape/scrape.go).
skills/k8s-rbac-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-rbac-troubleshooting/SKILL.md
- Network accessline 205
- [Using RBAC Authorization](https://kubernetes.io/docs/reference/access-authn-authz/rbac/): - Network accessline 205
- [Using RBAC Authorization](https://kubernetes.io/docs/reference/access-authn-authz/rbac/): - Network accessline 206
roles, bindings, `roleRef`, subjects, default and aggregated roles, escalation. - [Authorization](https://kubernetes.io/docs/reference/access-authn-authz/authorization/): verbs per request, `kubectl auth can-i`, authorizer verdicts, admis - Network accessline 206
roles, bindings, `roleRef`, subjects, default and aggregated roles, escalation. - [Authorization](https://kubernetes.io/docs/reference/access-authn-authz/authorization/): verbs per request, `kubectl auth can-i`, authorizer verdicts, admis - Network accessline 207
- [Authorization](https://kubernetes.io/docs/reference/access-authn-authz/authorization/): - Network accessline 207
- [Authorization](https://kubernetes.io/docs/reference/access-authn-authz/authorization/): - Network accessline 208
verbs per request, `kubectl auth can-i`, authorizer verdicts, admission after authorization. - [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/) - Network accessline 208
verbs per request, `kubectl auth can-i`, authorizer verdicts, admission after authorization. - [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/) - Network accessline 209
authorization. - [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/) and [User impersonation](https://kubernetes.io/docs/reference/access-authn-authz/user-impersonation/): - Network accessline 209
authorization. - [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/) and [User impersonation](https://kubernetes.io/docs/reference/access-authn-authz/user-impersonation/): - Network accessline 210
- [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/) and [User impersonation](https://kubernetes.io/docs/reference/access-authn-authz/user-impersonation/): ServiceAccount usernames and groups, 401 - Network accessline 210
- [Authenticating](https://kubernetes.io/docs/reference/access-authn-authz/authentication/) and [User impersonation](https://kubernetes.io/docs/reference/access-authn-authz/user-impersonation/): ServiceAccount usernames and groups, 401 - Network accessline 211
and [User impersonation](https://kubernetes.io/docs/reference/access-authn-authz/user-impersonation/): ServiceAccount usernames and groups, 401 and anonymous requests, `--as`. - [Service accounts](https://kubernetes.io/docs/concepts/secur - Network accessline 211
and [User impersonation](https://kubernetes.io/docs/reference/access-authn-authz/user-impersonation/): ServiceAccount usernames and groups, 401 and anonymous requests, `--as`. - [Service accounts](https://kubernetes.io/docs/concepts/secur - Network accessline 212
ServiceAccount usernames and groups, 401 and anonymous requests, `--as`. - [Service accounts](https://kubernetes.io/docs/concepts/security/service-accounts/): default permissions, token checks and rotation. - Network accessline 212
ServiceAccount usernames and groups, 401 and anonymous requests, `--as`. - [Service accounts](https://kubernetes.io/docs/concepts/security/service-accounts/): default permissions, token checks and rotation. - Network accessline 213
- [Service accounts](https://kubernetes.io/docs/concepts/security/service-accounts/): - Network accessline 213
- [Service accounts](https://kubernetes.io/docs/concepts/security/service-accounts/): - Network accessline 214
default permissions, token checks and rotation. - Messages from the source: [responsewriters/errors.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go) - Network accessline 214
default permissions, token checks and rotation. - Messages from the source: [responsewriters/errors.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go) - Network accessline 215
- Messages from the source: [responsewriters/errors.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go) (the Forbidden text) and - Network accessline 215
- Messages from the source: [responsewriters/errors.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go) (the Forbidden text) and - Network accessline 216
[responsewriters/errors.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go) - Network accessline 216
[responsewriters/errors.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go) - Network accessline 217
(the Forbidden text) and [rbac/validation/rule.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/registry/rbac/validation/rule.go) (escalation and subject matching). The refusals quoted here were seen on a - Network accessline 217
(the Forbidden text) and [rbac/validation/rule.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/registry/rbac/validation/rule.go) (escalation and subject matching). The refusals quoted here were seen on a - Network accessline 218
[rbac/validation/rule.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/registry/rbac/validation/rule.go) - Network accessline 218
[rbac/validation/rule.go](https://github.com/kubernetes/kubernetes/blob/v1.37.1/pkg/registry/rbac/validation/rule.go)
skills/k8s-storage-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-storage-troubleshooting/SKILL.md
- Network accessline 191
- [Persistent Volumes](https://kubernetes.io/docs/concepts/storage/persistent-volumes/): - Network accessline 191
- [Persistent Volumes](https://kubernetes.io/docs/concepts/storage/persistent-volumes/): - Network accessline 193
phases, reclaim policies, in-use protection, expansion and recovery from failed expansion. - [Storage Classes](https://kubernetes.io/docs/concepts/storage/storage-classes/): - Network accessline 193
phases, reclaim policies, in-use protection, expansion and recovery from failed expansion. - [Storage Classes](https://kubernetes.io/docs/concepts/storage/storage-classes/): - Network accessline 194
expansion. - [Storage Classes](https://kubernetes.io/docs/concepts/storage/storage-classes/): provisioners, the default class, `volumeBindingMode`, `allowVolumeExpansion`. - Network accessline 194
expansion. - [Storage Classes](https://kubernetes.io/docs/concepts/storage/storage-classes/): provisioners, the default class, `volumeBindingMode`, `allowVolumeExpansion`. - Network accessline 195
- [Storage Classes](https://kubernetes.io/docs/concepts/storage/storage-classes/): - Network accessline 195
- [Storage Classes](https://kubernetes.io/docs/concepts/storage/storage-classes/): - Network accessline 196
provisioners, the default class, `volumeBindingMode`, `allowVolumeExpansion`. - [PersistentVolumeClaim API](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1/): which fields can ch - Network accessline 196
provisioners, the default class, `volumeBindingMode`, `allowVolumeExpansion`. - [PersistentVolumeClaim API](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1/): which fields can ch - Network accessline 197
- [PersistentVolumeClaim API](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1/): - Network accessline 197
- [PersistentVolumeClaim API](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1/): - Network accessline 198
which fields can change, `allocatedResourceStatuses`. - [Volume Attributes Classes](https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/). - [VolumeAttachment](https://kubernetes.io/docs/reference/kubernetes-api/config-and - Network accessline 198
which fields can change, `allocatedResourceStatuses`. - [Volume Attributes Classes](https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/). - [VolumeAttachment](https://kubernetes.io/docs/reference/kubernetes-api/config-and - Network accessline 199
- [Volume Attributes Classes](https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/). - Network accessline 199
- [Volume Attributes Classes](https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/). - Network accessline 200
- [VolumeAttachment](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1/), - Network accessline 200
- [VolumeAttachment](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1/), - Network accessline 201
[CSIDriver](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1/), - Network accessline 201
[CSIDriver](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1/), - Network accessline 202
[CSINode](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1/) - Network accessline 202
[CSINode](https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1/) - Network accessline 203
and [Deploying a CSI driver](https://kubernetes-csi.github.io/docs/deploying.html): - Network accessline 203
and [Deploying a CSI driver](https://kubernetes-csi.github.io/docs/deploying.html): - Network accessline 204
the controller and node parts of a driver. - [Volumes](https://kubernetes.io/docs/concepts/storage/volumes/) and [Ephemeral Storage](https://kubernetes.io/docs/concepts/storage/ephemeral-storage/): - Network accessline 204
the controller and node parts of a driver. - [Volumes](https://kubernetes.io/docs/concepts/storage/volumes/) and [Ephemeral Storage](https://kubernetes.io/docs/concepts/storage/ephemeral-storage/): - Network accessline 205
- [Volumes](https://kubernetes.io/docs/concepts/storage/volumes/) and - Network accessline 205
- [Volumes](https://kubernetes.io/docs/concepts/storage/volumes/) and - Network accessline 206
[Ephemeral Storage](https://kubernetes.io/docs/concepts/storage/ephemeral-storage/): - Network accessline 206
[Ephemeral Storage](https://kubernetes.io/docs/concepts/storage/ephemeral-storage/): - Network accessline 207
`emptyDir` `sizeLimit`, ephemeral storage limits and eviction. - [Kubernetes Metrics Reference](https://kubernetes.io/docs/reference/instrumentation/metrics/): `kubelet_volume_stats_*`. - Network accessline 207
`emptyDir` `sizeLimit`, ephemeral storage limits and eviction. - [Kubernetes Metrics Reference](https://kubernetes.io/docs/reference/instrumentation/metrics/): `kubelet_volume_stats_*`. - Network accessline 208
- [Kubernetes Metrics Reference](https://kubernetes.io/docs/reference/instrumentation/metrics/): - Network accessline 208
- [Kubernetes Metrics Reference](https://kubernetes.io/docs/reference/instrumentation/metrics/): - Network accessline 209
`kubelet_volume_stats_*`. - kind's default StorageClass is defined in [const_storage.go](https://github.com/kubernetes-sigs/kind/blob/main/pkg/build/nodeimage/const_storage.go); - Network accessline 209
`kubelet_volume_stats_*`. - kind's default StorageClass is defined in [const_storage.go](https://github.com/kubernetes-sigs/kind/blob/main/pkg/build/nodeimage/const_storage.go); - Network accessline 210
- kind's default StorageClass is defined in [const_storage.go](https://github.com/kubernetes-sigs/kind/blob/main/pkg/build/nodeimage/const_storage.go); the local-path provisioner's limits are in its - Network accessline 210
- kind's default StorageClass is defined in [const_storage.go](https://github.com/kubernetes-sigs/kind/blob/main/pkg/build/nodeimage/const_storage.go); the local-path provisioner's limits are in its - Network accessline 211
[const_storage.go](https://github.com/kubernetes-sigs/kind/blob/main/pkg/build/nodeimage/const_storage.go); - Network accessline 211
[const_storage.go](https://github.com/kubernetes-sigs/kind/blob/main/pkg/build/nodeimage/const_storage.go); - Network accessline 212
the local-path provisioner's limits are in its [README](https://github.com/rancher/local-path-provisioner/blob/master/README.md). Event and scheduler messages quoted here were seen on a Kubernetes 1.37 kind cluster; - Network accessline 212
the local-path provisioner's limits are in its [README](https://github.com/rancher/local-path-provisioner/blob/master/README.md). Event and scheduler messages quoted here were seen on a Kubernetes 1.37 kind cluster; - Network accessline 213
[README](https://github.com/rancher/local-path-provisioner/blob/master/README.md). - Network accessline 213
[README](https://github.com/rancher/local-path-provisioner/blob/master/README.md).
skills/k8s-triage/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-triage/SKILL.md
- Network accessline 269
- [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/) and - Network accessline 269
- [Nodes](https://kubernetes.io/docs/concepts/architecture/nodes/) and - Network accessline 270
[Node Status](https://kubernetes.io/docs/reference/node/node-status/): conditions, - Network accessline 270
[Node Status](https://kubernetes.io/docs/reference/node/node-status/): conditions, - Network accessline 271
the 50-second grace period before `Unknown`, cordoned nodes shown as `SchedulingDisabled`, eviction five minutes after `Unknown`. - [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): - Network accessline 271
the 50-second grace period before `Unknown`, cordoned nodes shown as `SchedulingDisabled`, eviction five minutes after `Unknown`. - [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): - Network accessline 272
`SchedulingDisabled`, eviction five minutes after `Unknown`. - [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): pressure conditions and eviction signals. - Network accessline 272
`SchedulingDisabled`, eviction five minutes after `Unknown`. - [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): pressure conditions and eviction signals. - Network accessline 273
- [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): - Network accessline 273
- [Node-pressure Eviction](https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/): - Network accessline 274
pressure conditions and eviction signals. - [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/): the `node.kubernetes.io/*` taints, the default 300-second tolerations, pods still - Network accessline 274
pressure conditions and eviction signals. - [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/): the `node.kubernetes.io/*` taints, the default 300-second tolerations, pods still - Network accessline 275
- [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/): - Network accessline 275
- [Taints and Tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/): - Network accessline 276
the `node.kubernetes.io/*` taints, the default 300-second tolerations, pods still running on a partitioned node. - [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): - Network accessline 276
the `node.kubernetes.io/*` taints, the default 300-second tolerations, pods still running on a partitioned node. - [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): - Network accessline 277
running on a partitioned node. - [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): pod phases (`Unknown` when the node cannot be reached), `Terminating`, - Network accessline 277
running on a partitioned node. - [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): pod phases (`Unknown` when the node cannot be reached), `Terminating`, - Network accessline 278
- [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): - Network accessline 278
- [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): - Network accessline 279
pod phases (`Unknown` when the node cannot be reached), `Terminating`, `CrashLoopBackOff`. - [Field Selectors](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/): - Network accessline 279
pod phases (`Unknown` when the node cannot be reached), `Terminating`, `CrashLoopBackOff`. - [Field Selectors](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/): - Network accessline 280
`CrashLoopBackOff`. - [Field Selectors](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/): `status.phase` and `spec.nodeName` for pods. - Network accessline 280
`CrashLoopBackOff`. - [Field Selectors](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/): `status.phase` and `spec.nodeName` for pods. - Network accessline 281
- [Field Selectors](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/): - Network accessline 281
- [Field Selectors](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/): - Network accessline 282
`status.phase` and `spec.nodeName` for pods. - [kubectl events](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_events/): `--types`, `-A`. - Network accessline 282
`status.phase` and `spec.nodeName` for pods. - [kubectl events](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_events/): `--types`, `-A`. - Network accessline 283
- [kubectl events](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_events/): - Network accessline 283
- [kubectl events](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_events/): - Network accessline 284
`--types`, `-A`. - [Resource metrics pipeline](https://kubernetes.io/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/) and [kubectl top](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_top/): - Network accessline 284
`--types`, `-A`. - [Resource metrics pipeline](https://kubernetes.io/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/) and [kubectl top](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_top/): - Network accessline 285
- [Resource metrics pipeline](https://kubernetes.io/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/) - Network accessline 285
- [Resource metrics pipeline](https://kubernetes.io/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/) - Network accessline 286
and [kubectl top](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_top/): - Network accessline 286
and [kubectl top](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_top/): - Network accessline 287
`kubectl top` needs metrics-server. - [Troubleshooting Clusters](https://kubernetes.io/docs/tasks/debug/debug-cluster/): listing and describing nodes. - Network accessline 287
`kubectl top` needs metrics-server. - [Troubleshooting Clusters](https://kubernetes.io/docs/tasks/debug/debug-cluster/): listing and describing nodes. - Network accessline 288
- [Troubleshooting Clusters](https://kubernetes.io/docs/tasks/debug/debug-cluster/): - Network accessline 288
- [Troubleshooting Clusters](https://kubernetes.io/docs/tasks/debug/debug-cluster/): - Network accessline 289
listing and describing nodes. - [Using RBAC Authorization](https://kubernetes.io/docs/reference/access-authn-authz/rbac/): the `view` role and `kubectl auth can-i`. - Network accessline 289
listing and describing nodes. - [Using RBAC Authorization](https://kubernetes.io/docs/reference/access-authn-authz/rbac/): the `view` role and `kubectl auth can-i`. - Network accessline 290
- [Using RBAC Authorization](https://kubernetes.io/docs/reference/access-authn-authz/rbac/): - Network accessline 290
- [Using RBAC Authorization](https://kubernetes.io/docs/reference/access-authn-authz/rbac/):
skills/k8s-upgrade-readiness/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-upgrade-readiness/SKILL.md
- Network accessline 207
- [Version Skew Policy](https://kubernetes.io/releases/version-skew-policy/): the - Network accessline 207
- [Version Skew Policy](https://kubernetes.io/releases/version-skew-policy/): the - Network accessline 208
skew for each component and the upgrade order. - [Deprecated API Migration Guide](https://kubernetes.io/docs/reference/using-api/deprecation-guide/) and [Kubernetes Deprecation Policy](https://kubernetes.io/docs/reference/using-api/deprec - Network accessline 208
skew for each component and the upgrade order. - [Deprecated API Migration Guide](https://kubernetes.io/docs/reference/using-api/deprecation-guide/) and [Kubernetes Deprecation Policy](https://kubernetes.io/docs/reference/using-api/deprec - Network accessline 209
- [Deprecated API Migration Guide](https://kubernetes.io/docs/reference/using-api/deprecation-guide/) - Network accessline 209
- [Deprecated API Migration Guide](https://kubernetes.io/docs/reference/using-api/deprecation-guide/) - Network accessline 210
and [Kubernetes Deprecation Policy](https://kubernetes.io/docs/reference/using-api/deprecation-policy/). - Network accessline 210
and [Kubernetes Deprecation Policy](https://kubernetes.io/docs/reference/using-api/deprecation-policy/). - Network accessline 211
- [Warning: Helpful Warnings Ahead](https://kubernetes.io/blog/2020/09/03/warnings/): - Network accessline 211
- [Warning: Helpful Warnings Ahead](https://kubernetes.io/blog/2020/09/03/warnings/): - Network accessline 212
deprecation warnings and the `apiserver_requested_deprecated_apis` metric. - [Safely Drain a Node](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/), [Disruptions](https://kubernetes.io/docs/concepts/workloads/pods/d - Network accessline 212
deprecation warnings and the `apiserver_requested_deprecated_apis` metric. - [Safely Drain a Node](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/), [Disruptions](https://kubernetes.io/docs/concepts/workloads/pods/d - Network accessline 213
- [Safely Drain a Node](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/), - Network accessline 213
- [Safely Drain a Node](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/), - Network accessline 214
[Disruptions](https://kubernetes.io/docs/concepts/workloads/pods/disruptions/) and - Network accessline 214
[Disruptions](https://kubernetes.io/docs/concepts/workloads/pods/disruptions/) and - Network accessline 215
[Specifying a Disruption Budget](https://kubernetes.io/docs/tasks/run-application/configure-pdb/): - Network accessline 215
[Specifying a Disruption Budget](https://kubernetes.io/docs/tasks/run-application/configure-pdb/): - Network accessline 216
evictions, PDBs, `unhealthyPodEvictionPolicy`. - [About cgroup v2](https://kubernetes.io/docs/concepts/architecture/cgroups/): cgroup v1 deprecated in 1.35, the kubelet's `failCgroupV1`, the kernel 5.8 requirement. - Network accessline 216
evictions, PDBs, `unhealthyPodEvictionPolicy`. - [About cgroup v2](https://kubernetes.io/docs/concepts/architecture/cgroups/): cgroup v1 deprecated in 1.35, the kubelet's `failCgroupV1`, the kernel 5.8 requirement. - Network accessline 217
- [About cgroup v2](https://kubernetes.io/docs/concepts/architecture/cgroups/): cgroup - Network accessline 217
- [About cgroup v2](https://kubernetes.io/docs/concepts/architecture/cgroups/): cgroup - Network accessline 218
v1 deprecated in 1.35, the kubelet's `failCgroupV1`, the kernel 5.8 requirement. - [Kubernetes v1.34: Autoconfiguration for Node Cgroup Driver Goes GA](https://kubernetes.io/blog/2025/09/12/kubernetes-v1-34-cri-cgroup-driver-lookup-now-GA/) - Network accessline 218
v1 deprecated in 1.35, the kubelet's `failCgroupV1`, the kernel 5.8 requirement. - [Kubernetes v1.34: Autoconfiguration for Node Cgroup Driver Goes GA](https://kubernetes.io/blog/2025/09/12/kubernetes-v1-34-cri-cgroup-driver-lookup-now-GA/) - Network accessline 219
- [Kubernetes v1.34: Autoconfiguration for Node Cgroup Driver Goes GA](https://kubernetes.io/blog/2025/09/12/kubernetes-v1-34-cri-cgroup-driver-lookup-now-GA/): - Network accessline 219
- [Kubernetes v1.34: Autoconfiguration for Node Cgroup Driver Goes GA](https://kubernetes.io/blog/2025/09/12/kubernetes-v1-34-cri-cgroup-driver-lookup-now-GA/): - Network accessline 220
containerd 1.x supported until 1.35, the `kubelet_cri_losing_support` metric. - [Dynamic Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/): `failurePolicy` and `matchPolicy`. - Network accessline 220
containerd 1.x supported until 1.35, the `kubelet_cri_losing_support` metric. - [Dynamic Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/): `failurePolicy` and `matchPolicy`. - Network accessline 221
- [Dynamic Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/): - Network accessline 221
- [Dynamic Admission Control](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/): - Network accessline 222
`failurePolicy` and `matchPolicy`. - [Versions in CustomResourceDefinitions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/): deprecated versions and `storedVersions`. - Network accessline 222
`failurePolicy` and `matchPolicy`. - [Versions in CustomResourceDefinitions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/): deprecated versions and `storedVersions`. - Network accessline 223
- [Versions in CustomResourceDefinitions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/): - Network accessline 223
- [Versions in CustomResourceDefinitions](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/):
skills/k8s-velero-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-velero-troubleshooting/SKILL.md
- Network accessline 276
- [Troubleshooting](https://velero.io/docs/v1.18/troubleshooting/), - Network accessline 276
- [Troubleshooting](https://velero.io/docs/v1.18/troubleshooting/), - Network accessline 277
[debugging restores](https://velero.io/docs/v1.18/debugging-restores/) and - Network accessline 277
[debugging restores](https://velero.io/docs/v1.18/debugging-restores/) and - Network accessline 278
[how Velero works](https://velero.io/docs/v1.18/how-velero-works/). - Network accessline 278
[how Velero works](https://velero.io/docs/v1.18/how-velero-works/). - Network accessline 279
- [Backup storage locations](https://velero.io/docs/v1.18/locations/) and the - Network accessline 279
- [Backup storage locations](https://velero.io/docs/v1.18/locations/) and the - Network accessline 280
[BackupStorageLocation API](https://velero.io/docs/v1.18/api-types/backupstoragelocation/). - Network accessline 280
[BackupStorageLocation API](https://velero.io/docs/v1.18/api-types/backupstoragelocation/). - Network accessline 281
- [Backup reference](https://velero.io/docs/v1.18/backup-reference/), the - Network accessline 281
- [Backup reference](https://velero.io/docs/v1.18/backup-reference/), the - Network accessline 282
[Backup API](https://velero.io/docs/v1.18/api-types/backup/) and the - Network accessline 282
[Backup API](https://velero.io/docs/v1.18/api-types/backup/) and the - Network accessline 283
[Schedule API](https://velero.io/docs/v1.18/api-types/schedule/). - Network accessline 283
[Schedule API](https://velero.io/docs/v1.18/api-types/schedule/). - Network accessline 284
- [Restore reference](https://velero.io/docs/v1.18/restore-reference/) (existing - Network accessline 284
- [Restore reference](https://velero.io/docs/v1.18/restore-reference/) (existing - Network accessline 285
resource policy, namespace mapping) and the [Restore API](https://velero.io/docs/v1.18/api-types/restore/). - [File System Backup](https://velero.io/docs/v1.18/file-system-backup/), - Network accessline 285
resource policy, namespace mapping) and the [Restore API](https://velero.io/docs/v1.18/api-types/restore/). - [File System Backup](https://velero.io/docs/v1.18/file-system-backup/), - Network accessline 286
[Restore API](https://velero.io/docs/v1.18/api-types/restore/). - Network accessline 286
[Restore API](https://velero.io/docs/v1.18/api-types/restore/). - Network accessline 287
- [File System Backup](https://velero.io/docs/v1.18/file-system-backup/), - Network accessline 287
- [File System Backup](https://velero.io/docs/v1.18/file-system-backup/), - Network accessline 288
[CSI snapshots](https://velero.io/docs/v1.18/csi/) and - Network accessline 288
[CSI snapshots](https://velero.io/docs/v1.18/csi/) and - Network accessline 289
[CSI snapshot data movement](https://velero.io/docs/v1.18/csi-snapshot-data-movement/). - Network accessline 289
[CSI snapshot data movement](https://velero.io/docs/v1.18/csi-snapshot-data-movement/).
skills/k8s-velero-troubleshooting/references/volume-data.md
- Network accessline 86
- [File System Backup](https://velero.io/docs/v1.18/file-system-backup/) (opt-in and - Network accessline 86
- [File System Backup](https://velero.io/docs/v1.18/file-system-backup/) (opt-in and - Network accessline 87
opt-out, node-agent, limitations). - [CSI snapshots](https://velero.io/docs/v1.18/csi/) (EnableCSI, choosing the VolumeSnapshotClass). - Network accessline 87
opt-out, node-agent, limitations). - [CSI snapshots](https://velero.io/docs/v1.18/csi/) (EnableCSI, choosing the VolumeSnapshotClass). - Network accessline 88
- [CSI snapshots](https://velero.io/docs/v1.18/csi/) (EnableCSI, choosing the - Network accessline 88
- [CSI snapshots](https://velero.io/docs/v1.18/csi/) (EnableCSI, choosing the - Network accessline 89
VolumeSnapshotClass). - [CSI snapshot data movement](https://velero.io/docs/v1.18/csi-snapshot-data-movement/) (DataUpload and DataDownload phases, data mover pods). - Network accessline 89
VolumeSnapshotClass). - [CSI snapshot data movement](https://velero.io/docs/v1.18/csi-snapshot-data-movement/) (DataUpload and DataDownload phases, data mover pods). - Network accessline 90
- [CSI snapshot data movement](https://velero.io/docs/v1.18/csi-snapshot-data-movement/) - Network accessline 90
- [CSI snapshot data movement](https://velero.io/docs/v1.18/csi-snapshot-data-movement/)
skills/k8s-workload-troubleshooting/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 5
"author": { "name": "k8s-servant", "url": "https://github.com/k8s-servant" - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 6
"name": "k8s-servant", "url": "https://github.com/k8s-servant" }, - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 7
"url": "https://github.com/k8s-servant" - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 8
}, "homepage": "https://github.com/k8s-servant/k8s-skills", "repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 9
"homepage": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills", - Network accessline 10
"repository": "https://github.com/k8s-servant/k8s-skills",
skills/k8s-workload-troubleshooting/SKILL.md
- Network accessline 225
- [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): - Network accessline 225
- [Pod Lifecycle](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/): - Network accessline 226
phases, container states, restart backoff, CrashLoopBackOff, pod conditions, probes. - [Liveness, Readiness, and Startup Probes](https://kubernetes.io/docs/concepts/configuration/liveness-readiness-startup-probes/) and [Configure Liveness - Network accessline 226
phases, container states, restart backoff, CrashLoopBackOff, pod conditions, probes. - [Liveness, Readiness, and Startup Probes](https://kubernetes.io/docs/concepts/configuration/liveness-readiness-startup-probes/) and [Configure Liveness - Network accessline 227
- [Liveness, Readiness, and Startup Probes](https://kubernetes.io/docs/concepts/configuration/liveness-readiness-startup-probes/) - Network accessline 227
- [Liveness, Readiness, and Startup Probes](https://kubernetes.io/docs/concepts/configuration/liveness-readiness-startup-probes/) - Network accessline 228
and [Configure Liveness, Readiness and Startup Probes](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/): - Network accessline 228
and [Configure Liveness, Readiness and Startup Probes](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/): - Network accessline 229
probe fields, defaults, HTTP success range. - [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/): OOM kills, CPU throttling, `FailedScheduling`, `OOMKilled` with e - Network accessline 229
probe fields, defaults, HTTP success range. - [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/): OOM kills, CPU throttling, `FailedScheduling`, `OOMKilled` with e - Network accessline 230
- [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/): - Network accessline 230
- [Resource Management for Pods and Containers](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/): - Network accessline 231
OOM kills, CPU throttling, `FailedScheduling`, `OOMKilled` with exit code 137. - [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): endpoint `ready` condition, `publishNotReadyAddresses`. - Network accessline 231
OOM kills, CPU throttling, `FailedScheduling`, `OOMKilled` with exit code 137. - [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): endpoint `ready` condition, `publishNotReadyAddresses`. - Network accessline 232
- [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): - Network accessline 232
- [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/): - Network accessline 233
endpoint `ready` condition, `publishNotReadyAddresses`. - [Images](https://kubernetes.io/docs/concepts/containers/images/): `ImagePullBackOff`, pull back-off, image pull policy. - Network accessline 233
endpoint `ready` condition, `publishNotReadyAddresses`. - [Images](https://kubernetes.io/docs/concepts/containers/images/): `ImagePullBackOff`, pull back-off, image pull policy. - Network accessline 234
- [Images](https://kubernetes.io/docs/concepts/containers/images/): `ImagePullBackOff`, - Network accessline 234
- [Images](https://kubernetes.io/docs/concepts/containers/images/): `ImagePullBackOff`, - Network accessline 235
pull back-off, image pull policy. - [Deployments](https://kubernetes.io/docs/concepts/workloads/controllers/deployment/): `progressDeadlineSeconds`, `ProgressDeadlineExceeded`, rollout history and undo. - Network accessline 235
pull back-off, image pull policy. - [Deployments](https://kubernetes.io/docs/concepts/workloads/controllers/deployment/): `progressDeadlineSeconds`, `ProgressDeadlineExceeded`, rollout history and undo. - Network accessline 236
- [Deployments](https://kubernetes.io/docs/concepts/workloads/controllers/deployment/): - Network accessline 236
- [Deployments](https://kubernetes.io/docs/concepts/workloads/controllers/deployment/): - Network accessline 237
`progressDeadlineSeconds`, `ProgressDeadlineExceeded`, rollout history and undo. - [Jobs](https://kubernetes.io/docs/concepts/workloads/controllers/job/) and [CronJob](https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/): - Network accessline 237
`progressDeadlineSeconds`, `ProgressDeadlineExceeded`, rollout history and undo. - [Jobs](https://kubernetes.io/docs/concepts/workloads/controllers/job/) and [CronJob](https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/): - Network accessline 238
- [Jobs](https://kubernetes.io/docs/concepts/workloads/controllers/job/) and - Network accessline 238
- [Jobs](https://kubernetes.io/docs/concepts/workloads/controllers/job/) and - Network accessline 239
[CronJob](https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/): - Network accessline 239
[CronJob](https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/): - Network accessline 240
`backoffLimit`, pod failure back-off, `activeDeadlineSeconds`, CronJob policies. - [Debug Pods](https://kubernetes.io/docs/tasks/debug/debug-application/debug-pods/) and [Debug Running Pods](https://kubernetes.io/docs/tasks/debug/debug-ap - Network accessline 240
`backoffLimit`, pod failure back-off, `activeDeadlineSeconds`, CronJob policies. - [Debug Pods](https://kubernetes.io/docs/tasks/debug/debug-application/debug-pods/) and [Debug Running Pods](https://kubernetes.io/docs/tasks/debug/debug-ap - Network accessline 241
- [Debug Pods](https://kubernetes.io/docs/tasks/debug/debug-application/debug-pods/) and - Network accessline 241
- [Debug Pods](https://kubernetes.io/docs/tasks/debug/debug-application/debug-pods/) and - Network accessline 242
[Debug Running Pods](https://kubernetes.io/docs/tasks/debug/debug-application/debug-running-pod/): - Network accessline 242
[Debug Running Pods](https://kubernetes.io/docs/tasks/debug/debug-application/debug-running-pod/):
skills/k8s-workload-troubleshooting/references/probes.md
- Network accessline 36
`describe` prints each probe on one line, for example `Readiness: http-get http://:80/healthz delay=0s timeout=1s period=5s #success=1 #failure=3`. - Network accessline 36
`describe` prints each probe on one line, for example `Readiness: http-get http://:80/healthz delay=0s timeout=1s period=5s #success=1 #failure=3`. - Network accessline 37
`Readiness: http-get http://:80/healthz delay=0s timeout=1s period=5s #success=1 #failure=3`. - Network accessline 37
`Readiness: http-get http://:80/healthz delay=0s timeout=1s period=5s #success=1 #failure=3`. - Network accessline 46
kubectl exec my-pod -n my-namespace -- wget -qO- -T 2 http://localhost:80/healthz - Network accessline 46
kubectl exec my-pod -n my-namespace -- wget -qO- -T 2 http://localhost:80/healthz
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 500 facts
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:193Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:194Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:195Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:196Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:197Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:198Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:199Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:200Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:201Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:202Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:203Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:204Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:205Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:206Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:207Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:208Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:209Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:210Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:211Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:212Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:213Low confidence
- Network access in prose of the SKILL.mdk8s-aks-troubleshooting/SKILL.md:214Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:220Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:220Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:221Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:221Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:222Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:222Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:223Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:223Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:224Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:224Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:225Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:225Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:226Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:226Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:227Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:227Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:228Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:228Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:229Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:229Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:230Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:230Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:231Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:231Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:232Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:232Low confidence
- Network access in prose of the SKILL.mdskills/k8s-api-troubleshooting/SKILL.md:233Low confidence
- Network access in prose of the SKILL.mdk8s-api-troubleshooting/SKILL.md:233Low confidence
and 450 more
Only the first 500 facts are listed.
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/k8s-aks-troubleshooting/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Native | Manifest gemini-extension.json | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/k8s-aks-troubleshooting/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/k8s-aks-troubleshooting/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.