Skill UI

This skill provides step-by-step guidance for creating production-ready Kubernetes manifests. It covers essential resources including Deployments, Services, ConfigMaps, Secrets, and PersistentVolumeClaims. Use this skill when defining complete, robust containerized application architectures, managing network connectivity, stateful workloads, and ensuring adherence to Kubernetes best practices like resource limits and security contexts.

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

This specialized, end-to-end workflow guides the deployment of applications onto Kubernetes clusters. It systematically covers all critical production phases, including Docker container preparation, generating K8s manifests, structuring applications with Helm charts, configuring advanced service meshes (like Istio), enforcing robust security policies (RBAC, NetworkPolicy), and implementing full observability and GitOps pipelines for reliable, scalable deployments.

This comprehensive guide provides advanced troubleshooting workflows for complex, microservices-based environments running on Kubernetes. It covers diagnosing issues like CrashLoopBackOff, cascade failures, resource pressure (CPU/Memory), and detailed Redis state analysis, ensuring systematic root cause identification across multiple services.

This tool parses Kubernetes API server audit logs (JSON lines) to detect critical security events. It specifically targets unauthorized access, secret enumeration, RBAC escalation, privileged pod creation, and shell access (exec/attach). Use it for incident response, threat hunting, or building SIEM detection rules.

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

This skill provides a comprehensive framework to detect and prevent privilege escalation within Kubernetes pods. It merges preventative measures using admission controllers (like OPA Gatekeeper or Pod Security Admission) to enforce security policies, with runtime monitoring using tools like Falco. It detects dangerous capabilities, unauthorized host access, and suspicious syscall patterns, making it crucial for hardening K8s security posture.

Automate security scanning for Infrastructure as Code (IaC) using best-in-class tools like Checkov and tfsec. This method analyzes Terraform, CloudFormation, and Kubernetes manifests to detect misconfigurations, enforce policy-based governance, and prevent common security vulnerabilities (e.g., public S3 buckets) before deployment. Essential for establishing secure CI/CD pipelines and meeting compliance standards.

A professional-grade 'Living Pipeline' that integrates advanced AI reasoning into the SDLC. It provides autonomous guardrails for system security, cloud cost management (FinOps), and Kubernetes compliance. It audits Linux Kernel patches for memory vulnerabilities, detects cost drifts in Terraform plans, and generates hardened K8s manifests from natural language policies.

A comprehensive utility designed for managing CoreWeave cloud infrastructure migrations. It facilitates upgrading between GPU generations (e.g., A100 to H100), updating CUDA versions, and handling Kubernetes resource changes. The tool uses K8s APIs to audit deployments, detect deprecated instances, and execute controlled rollbacks.

This guide sets up a robust local development loop for integrated Kubernetes infrastructure using CAST AI. It allows developers to test autoscaler policies, validate Terraform modules, and measure potential cloud cost savings in a dev environment before deploying to production. This is essential for building cost-aware and efficient CI/CD pipelines.

A comprehensive guide and set of scripts to maximize cost savings in Kubernetes environments using CAST AI. Learn to implement aggressive spot instance strategies, perform workload right-sizing, utilize cluster hibernation for non-production environments, and analyze monthly savings reports to significantly reduce cloud compute expenditure.