技能 Kubernetes Architect
📦

Kubernetes Architect

安全

Design Kubernetes platforms with GitOps and cloud-native patterns

Building production Kubernetes infrastructure is complex and error-prone. This skill provides expert guidance on cluster architecture, GitOps workflows, and enterprise security patterns to accelerate your platform engineering.

支援: Claude Codex Code(CC)
🥉 72 青銅
1

下載技能 ZIP

2

在 Claude 中上傳

前往 設定 → 功能 → 技能 → 上傳技能

3

開啟並開始使用

測試它

正在使用「Kubernetes Architect」。 Design a multi-cluster Kubernetes architecture for a global e-commerce platform

預期結果:

  • Proposed architecture with regional clusters (us-east, eu-west, ap-south)
  • Global load balancing strategy using Route53 latency-based routing
  • GitOps repository structure with environment and cluster overlays
  • Data synchronization approach using distributed databases
  • Monitoring and alerting consolidation via centralized observability platform

正在使用「Kubernetes Architect」。 Implement pod security standards for a regulated industry workload

預期結果:

  • Namespace configuration with restricted pod security admission
  • Baseline policies for non-compliant legacy workloads
  • OPA Gatekeeper constraints for custom security requirements
  • Migration strategy from existing security policies
  • Validation and enforcement workflow with audit logging

安全審計

安全
v1 • 2/25/2026

This is a prompt-only skill containing no executable code. Static analysis scanned 1 file (SKILL.md) with 173 lines and found zero security risks. The skill provides Kubernetes architecture guidance through text-based prompts and instructions only. No network access, file operations, external commands, or code execution patterns detected.

1
已掃描檔案
173
分析行數
0
發現項
1
審計總數
未發現安全問題
審計者: claude

品質評分

38
架構
100
可維護性
87
內容
50
社群
100
安全
74
規範符合性

你能建構什麼

Enterprise Platform Design

Design a multi-tenant Kubernetes platform with namespace isolation, RBAC, and GitOps workflows for a mid-size technology company migrating from VMs to containers.

GitOps Implementation

Implement ArgoCD-based GitOps with progressive delivery, automated testing, and environment promotion strategies for microservices deployments.

Security Hardening

Implement comprehensive Kubernetes security including Pod Security Standards, network policies, image scanning, and admission controllers for compliance requirements.

試試這些提示

Basic Cluster Architecture
I need to deploy a Node.js microservices application to Kubernetes. Help me design a basic cluster architecture with appropriate namespaces, resource quotas, and deployment strategies for a development environment.
GitOps Workflow Setup
Design a GitOps workflow using ArgoCD for our organization. We have three environments (dev, staging, production) and need automated deployments with manual approval gates. Include repository structure, sync policies, and rollback procedures.
Service Mesh Configuration
We are experiencing intermittent service-to-service communication issues in our microservices architecture. Recommend a service mesh solution and provide configuration for traffic management, mutual TLS, and observability. Compare Istio and Linkerd for our use case.
Multi-Cluster Disaster Recovery
Design a disaster recovery strategy for our financial services Kubernetes platform. We require RTO of 15 minutes and RPO of 5 minutes across two regions. Include backup strategies, failover procedures, and testing recommendations using Velero and traffic management.

最佳實務

  • Always implement GitOps from project inception rather than retrofitting into existing workflows
  • Use namespace-based multi-tenancy with network policies for workload isolation
  • Configure resource requests and limits based on actual usage metrics, not estimates
  • Implement defense in depth with pod security standards, network policies, and admission controllers
  • Set up comprehensive observability before deploying production workloads

避免

  • Running containers as root or with privileged security contexts
  • Managing Kubernetes resources manually with kubectl instead of GitOps
  • Using latest tags for container images in production deployments
  • Skipping staging validation before applying changes to production clusters
  • Ignoring resource limits leading to noisy neighbor problems

常見問題

Which Kubernetes providers does this skill support?
This skill covers all major managed Kubernetes services including EKS (AWS), AKS (Azure), GKE (Google Cloud), as well as self-managed clusters using kubeadm, kops, Rancher, and OpenShift.
Can this skill apply configurations to my actual cluster?
No. This skill provides architecture guidance and configuration recommendations only. You must review and apply any configurations to your clusters manually after appropriate validation.
What GitOps tools are covered?
Primary coverage includes ArgoCD and Flux v2, with additional guidance on Jenkins X, Tekton pipelines, and integration with CI/CD systems like GitHub Actions and GitLab CI.
Does this skill help with cost optimization?
Yes. It covers resource right-sizing, spot instance strategies, cluster autoscaling, KubeCost/OpenCost implementation, and workload placement optimization for cost efficiency.
What security frameworks does this skill address?
Coverage includes Pod Security Standards, CIS Kubernetes Benchmarks, NIST container security guidelines, supply chain security with SLSA and Sigstore, and compliance automation patterns.
Can this skill help with service mesh selection?
Yes. It provides comparative analysis of Istio, Linkerd, Cilium, and Consul Connect with guidance on traffic management, security policies, observability integration, and operational complexity trade-offs.

開發者詳情

檔案結構

📄 SKILL.md