← 返回 Skill 列表

extension

分类: 开发与工程无需 API Key

kubernetes-review

审查Kubernetes清单以遵循最佳实践、安全性和家庭实验室标准。在审查YAML文件、K8s清单、Helm值或ArgoCD应用程序时使用。

Kubernetes Manifest Review

Review Kubernetes manifests against homelab standards.

Checklist

Resource Management

[ ] CPU/Memory requests set
[ ] CPU/Memory limits set
[ ] Requests < Limits

resources:
  requests:
    cpu: 100m
    memory: 128Mi
  limits:
    cpu: 1000m
    memory: 1Gi

Health Checks

[ ] Liveness probe configured
[ ] Readiness probe configured
[ ] Appropriate initialDelaySeconds

livenessProbe:
  httpGet:
    path: /health
    port: 8080
  initialDelaySeconds: 10
  periodSeconds: 10

readinessProbe:
  httpGet:
    path: /ready
    port: 8080
  initialDelaySeconds: 5
  periodSeconds: 5

Security Context

[ ] runAsNonRoot: true
[ ] readOnlyRootFilesystem: true
[ ] allowPrivilegeEscalation: false

securityContext:
  runAsNonRoot: true
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false

Labels

[ ] app.kubernetes.io/name
[ ] app.kubernetes.io/instance
[ ] app.kubernetes.io/version
[ ] app.kubernetes.io/managed-by: argocd

Secrets

[ ] No hardcoded secrets in values
[ ] Uses Infisical or external secrets
[ ] No .env files committed

GPU Workloads

For GPU workloads, also check:

[ ] nvidia.com/gpu resource set
[ ] GPU tolerations present
[ ] nodeSelector for GPU nodes

Reference

See @.claude/rules/kubernetes.md for complete guidelines.