Skill UI

This skill provides a comprehensive guide to hardening managed Kubernetes clusters on major cloud platforms (EKS, AKS, GKE). It details implementing critical security layers, including Pod Security Standards, least-privilege network policies, workload identity (eliminating static cloud credentials), and runtime security monitoring. Essential for securing production environments and meeting compliance requirements.

KubeSphere Core acts as the central operating system for cloud-native application management built on Kubernetes. It provides essential functions, including API aggregation, multi-cluster routing, and multi-tenant separation. It manages core resources and simplifies complex cloud-native deployment and operation tasks.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

This script generates a comprehensive diagnostic bundle for CAST AI deployed on a Kubernetes cluster. It automatically collects crucial data including component logs, pod statuses, Helm releases, node inventories, and cluster events into a single archive. Use this tool when preparing a detailed support ticket or performing deep technical troubleshooting.

This skill provides comprehensive API calls using `curl` to interact with the CAST AI platform. It allows users to list connected Kubernetes clusters, retrieve detailed cost savings reports, and inspect the inventory of managed nodes. It is essential for verifying connectivity, auditing cloud spending, and monitoring resource allocation after onboarding.

A comprehensive guide to connecting any Kubernetes cluster (EKS, GKE, AKS) to CAST AI for cost optimization, autoscaling, and security monitoring. This skill covers the entire setup process, including generating API keys, installing the CAST AI agent via Helm charts, and integrating the provider using Terraform.

A comprehensive reference architecture guide for deploying and managing CAST AI across multiple Kubernetes clusters (Dev, Staging, Prod). It details best practices for infrastructure provisioning using Terraform, focusing heavily on cost optimization techniques such as autoscaling, spot instance management, and environment-specific resource policies. Ideal for setting up team standards and ensuring reliable, cost-effective deployments.

A comprehensive, multi-phase checklist for deploying and validating CAST AI cost optimization and autoscaling features on a production Kubernetes cluster. It guides users through prerequisites, initial monitoring setup (Phase 1), full autoscaling enablement (Phase 2), security hardening (RBAC, secrets), and critical validation commands for safe go-live deployment.

This skill provides comprehensive guidance for deploying and managing GPU-accelerated AI inference services on CoreWeave Kubernetes (CKS). It covers best practices including containerization using NVIDIA CUDA base images, configuring specific GPU resource limits (A100/H100), setting up robust health checks, and executing controlled rolling updates. Ideal for managing multi-model inference and scaling demanding AI workloads in a cloud environment.

This runbook provides structured steps for responding to critical production incidents on the CoreWeave platform. Use it when dealing with GPU workload failures, inference service outages, or general Kubernetes resource issues. It guides users through checking pod status, node health, and diagnosing common model loading errors to ensure rapid service recovery.

This guide details how to manage and structure credentials within KubeSphere DevOps using Kubernetes Secrets. It covers various types (SSH keys, basic auth, API tokens, kubeconfig) and emphasizes the critical resource structure, specific labels, and API endpoints required for integrating credentials into automated CI/CD pipelines (e.g., Jenkins, ArgoCD).

Provides a comprehensive, production-ready deployment solution for OneNote integrations in containerized environments. This skill addresses critical issues like MSAL token persistence (supporting both file and Redis caches), implementing deep health/readiness checks that validate actual Graph API connectivity, and managing graceful shutdowns. Ideal for containerizing OneNote services for robust, scalable production use with Docker and Kubernetes.