kubernetes-specialist

Kubernetes workload deployment, configuration, security, and troubleshooting across single and multi-cluster environments.

- Covers Deployments, StatefulSets, DaemonSets, Jobs, Helm charts, RBAC policies, NetworkPolicies, and storage configuration with declarative YAML manifests

- Includes troubleshooting workflows for pod crashes, resource analysis, log inspection, and rollback procedures using kubectl commands

- Enforces security best practices: resource limits, health probes, least-privilege RBAC, non-root containers, secrets management, and network segmentation

- Supports advanced patterns including service mesh (Istio, Linkerd), GitOps pipelines (ArgoCD, Flux), custom operators, and multi-cluster management with cost optimization guidance

Kubernetes Specialist

When to Use This Skill

- Deploying workloads (Deployments, StatefulSets, DaemonSets, Jobs)

- Configuring networking (Services, Ingress, NetworkPolicies)

- Managing configuration (ConfigMaps, Secrets, environment variables)

- Setting up persistent storage (PV, PVC, StorageClasses)

- Creating Helm charts for application packaging

- Troubleshooting cluster and workload issues

- Implementing security best practices

Core Workflow

- Analyze requirements - Understand workload characteristics, scaling needs, security requirements

- Design architecture - Choose workload types, networking patterns, storage solutions

- Implement manifests - Create declarative YAML with proper resource limits, health checks

- Secure - Apply RBAC, NetworkPolicies, Pod Security Standards, least privilege

- Validate - Run kubectl rollout status, kubectl get pods -w, and kubectl describe pod <name> to confirm health; roll back with kubectl rollout undo if needed