Skill UI

This skill provides a comprehensive guide to hardening managed Kubernetes clusters on major cloud platforms (EKS, AKS, GKE). It details implementing critical security layers, including Pod Security Standards, least-privilege network policies, workload identity (eliminating static cloud credentials), and runtime security monitoring. Essential for securing production environments and meeting compliance requirements.

AegisOps-AI is a professional-grade 'Living Pipeline' that integrates advanced AI reasoning directly into the SDLC. It acts as an intelligent gatekeeper, automating high-stakes audits across three domains: identifying memory vulnerabilities in Linux Kernel patches, detecting massive cost drifts in Terraform plans, and translating natural language security intent into hardened Kubernetes manifests.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.

This skill guides the management of CI/CD pipelines within KubeSphere DevOps. It utilizes Kubernetes Custom Resources (CRs) to define, trigger, and monitor complex build workflows, seamlessly integrating with Jenkins concepts in a cloud-native manner. Use it for automating build, test, and deployment processes for applications running on Kubernetes.

KubeSphere Core acts as the central operating system for cloud-native application management built on Kubernetes. It provides essential functions, including API aggregation, multi-cluster routing, and multi-tenant separation. It manages core resources and simplifies complex cloud-native deployment and operation tasks.

This comprehensive skill guides users through the entire lifecycle management of KubeSphere extensions. It covers extension discovery, dependency resolution, version verification, and executing controlled installations, upgrades, or uninstalls using the InstallPlan mechanism. It is essential for maintaining a stable and complex multi-component Kubernetes cluster environment.

This service provides a centralized, common API server backend for the entire KubeSphere WizTelemetry Observability Platform. It unifies backend functionalities for core observability components including Logging, Auditing, Events, Tracing, and Notifications, enabling global monitoring and streamlined platform management within Kubernetes environments. Use it when installing or configuring the core telemetry platform.

Automate the deployment of CAST AI across various multi-cloud Kubernetes clusters, including EKS, GKE, and AKS. This module uses Terraform Infrastructure as Code (IaC) patterns to reliably configure necessary components like IAM roles, node autoscaling policies, and cluster resources, ensuring standardized onboarding across different cloud environments.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

Automate the entire deployment lifecycle for ML inference services on CoreWeave GPU cloud. This workflow integrates unit testing, container image building (to GHCR), and rolling deployment to CoreWeave Kubernetes clusters via GitHub Actions. Ideal for ensuring stable, high-performance deployment of GPU-dependent models. Key features include validating GPU manifest requests and managing deployments using standard Kubernetes APIs.

A comprehensive guide to diagnose and resolve common CoreWeave infrastructure errors. It covers issues related to GPU scheduling, Pod status (e.g., Pending), CUDA Out of Memory errors, NCCL timeouts, and Kubernetes resource allocation within AI/ML deployment pipelines.

A comprehensive guide and set of tools for establishing a local development workflow tailored for CoreWeave GPU deployments. This includes steps for building Docker containers, validating Kubernetes YAML manifests using dry-run, and managing the full deployment lifecycle for AI inference services before pushing to the cloud.