Kubernetes Failure-Mode Workflow (KubeShark)
A structured Kubernetes skill that diagnoses manifests, Helm charts and Kustomize overlays through six failure modes and enforces validation plus rollback planning.
Dev & CodingIntermediate★ 366⑂ 64AI score 8/10Last updated: Aug 2, 2026
What it does
- Forces capture of execution context first: cluster version, distribution (EKS/GKE/AKS/OpenShift/k3s), namespace criticality, workload type, policy enforcement, CNI, add-ons.
- Classifies the task into six failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, API drift.
- Loads only the relevant reference files, including conditional platform packs (EKS/IRSA, GKE Autopilot, AKS Entra Workload ID, OpenShift SCC, Argo CD/Flux, Prometheus Operator).
- Produces real artifacts: hardened manifests, NetworkPolicies, RBAC, PodDisruptionBudgets, Kyverno/OPA rules.
- Always attaches a validation plan (
kubectl diff,--dry-run=server,kubeconform, policy scan) and rollback notes, and refuses blind production applies.
Who it's for
- Backend and platform engineers writing or reviewing Kubernetes YAML regularly
- DevOps teams shipping Helm charts or Kustomize overlays to production
- SREs operating GitOps controllers and observability stacks
- Anyone tired of AI-generated manifests with wrong apiVersions or missing security context
Example uses
- "Review this Deployment for production readiness" → flags missing securityContext, mutable image tags and absent probes per failure mode, returns a fixed manifest plus dry-run commands.
- "Generate a manifest for a workload that reads from S3 on EKS" → pulls the EKS conditional reference (IRSA / Pod Identity) and emits an annotated ServiceAccount with least-privilege RBAC.
- "Audit our manifests before upgrading from 1.25 to 1.30" → API-drift pass on deprecated apiVersions with a kubeconform validation and rollback plan.
· · · Install guide · · ·
Try it now, no install
Paste this into Claude to use the skill without installing anything.
Read the instructions in this file and follow them to help me: https://raw.githubusercontent.com/LukasNiessen/kubernetes-skill/HEAD/SKILL.md What I want: (describe your task here)
If Claude can't open the link, open it yourself and paste the contents instead.
↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.
Install in the Claude app (no terminal)
- Download the ZIP with the button below.
- In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
- Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
Install in Claude Code
Let Claude do it — paste this into Claude Code
Install the skill I found on Claude Skill Mart. Copy the SKILL.m folder from the GitHub repo LukasNiessen/kubernetes-skill into my ~/.claude/skills/kubernetes-skill/. When it's done, tell me in one line what this skill can do.
Install with a command instead
git clone https://github.com/LukasNiessen/kubernetes-skill.git ~/.claude/skills/kubernetes-skill⚠ This is a third-party skill. Check the source repository before installing.
- Open a terminal and make sure the skills directory exists:
mkdir -p ~/.claude/skills - Clone the repository into it:
git clone https://github.com/LukasNiessen/kubernetes-skill.git ~/.claude/skills/kubernetes-skill - Confirm both
SKILL.mdand thereferences/folder came along:ls ~/.claude/skills/kubernetes-skill - Restart Claude Code so the skill is registered.
- Install
kubectl(and optionallykubeconform) locally so the suggested validation commands actually run. - Ask something like "review this Kubernetes manifest for failure modes" and the skill triggers automatically.
View source on GitHub ↗License: MIT