K8s 安全策略
io.github.wshobson/agents/k8s-security-policies
实施 Kubernetes 安全策略,包括 NetworkPolicy、PodSecurityPolicy 与 RBAC,达成生产级安全。在加固 Kubernetes 集群、实现网络隔离或强制 Pod 安全标准时使用。
“kubernetes” 共 351 个结果
io.github.wshobson/agents/k8s-security-policies
实施 Kubernetes 安全策略,包括 NetworkPolicy、PodSecurityPolicy 与 RBAC,达成生产级安全。在加固 Kubernetes 集群、实现网络隔离或强制 Pod 安全标准时使用。
io.github.curiositech/some_claude_skills/docker-containerization
编写生产级 Dockerfile、docker-compose 配置、多阶段构建以及容器优化。在提及 "Dockerfile"、"docker"、"docker-compose"、"container"、"multi-stage build"、"docker image"、"container optimization"、"docker security" 时激活。不适用于 Kubernetes 编排、云厂商容器服务(ECS、Cloud Run)或 CI/CD 流水线(应使用 github-actions-pipeline-builder)。
io.github.RightNow-AI/openfang/helm
面向 Kubernetes 包管理、模板与依赖管理的 Helm chart 专家。
io.github.aiskillstore/marketplace/docker-k8s
以安全优先的方式掌握容器化与编排。精通 Docker 多阶段构建、Kubernetes 零信任部署、安全加固、GitOps 工作流以及云原生应用的生产就绪模式,包含 CNCF 与主流云厂商的 2025 最佳实践。
io.github.davila7/claude-code-templates/devops-iac-engineer
使用 Terraform、Kubernetes 与云平台落地基础设施即代码。设计可扩展架构、CI/CD 流水线与可观测性方案,并提供安全优先的 DevOps 实践与站点可靠性工程建议。
io.github.mrgoonie/claudekit-skills/backend-development
使用现代技术(Node.js、Python、Go、Rust)、框架(NestJS、FastAPI、Django)、数据库(PostgreSQL、MongoDB、Redis)、API(REST、GraphQL、gRPC)、认证(OAuth 2.1、JWT)、测试策略、安全最佳实践(OWASP Top 10)、性能优化、可扩展性模式(微服务、缓存、分片)、DevOps 实践(Docker、Kubernetes、CI/CD)与监控构建稳健的后端系统。适用于设计 API、实现认证、优化数据库查询、搭建 CI/CD 流水线、处理安全漏洞、构建微服务或开发可投产的后端系统
io.github.ailabs-393/ai-labs-claude-skills/docker-containerization
在容器化应用、编写 Dockerfile、docker-compose 配置或将容器部署到各类平台时使用此技能。适用于需要容器化用于开发、生产或 CI/CD 流水线的 Next.js、React、Node.js 应用。当用户需要 Docker 配置、多阶段构建、容器编排或部署到 Kubernetes、ECS、Cloud Run 等时使用。
io.github.alirezarezvani/claude-skills/slo-architect
用于定义、评审或运维 SLO/SLI/错误预算。触发词包括「define an SLO」「what should our SLO be」「error budget」「burn rate」「SLI」「service level objective」「Google SRE workbook」「multi-window burn-rate alert」,或任何可靠性目标问题。附带 SLO 设计器、带多窗口燃烧率阈值的错误预算计算器,以及捕捉常见缺陷(目标过于激进、窗口过短、SLO 冲突、缺少 SLI 定义)的 SLO 评审器。4 份关于 SLO 原则+SLI 设计+错误预算数学+与 feature-flags-architect/chaos-engineering/kubernetes-operator 组合的参考文档。不是通用的可观测性技能——专注 SLO 这一学科。
io.github.alirezarezvani/claude-skills/chaos-engineering
用于规划、执行或从混沌工程实验中学习。触发词包括「chaos experiment」「fault injection」「gameday」「resilience test」「blast radius」「steady state」「abort criteria」「Chaos Toolkit」「Chaos Mesh」「Litmus」「Gremlin」「AWS FIS」,或任何刻意故障注入的问题。附带实验设计器、爆炸半径计算器与复盘生成器(均为 stdlib Python)、4 份关于混沌原则+实验设计+攻击分类法+工具生态的参考文档,以及 /chaos-experiment 斜杠命令。可与 feature-flags-architect(将 kill switch 作为中止触发器)及 kubernetes-operator(常见混沌目标)组合。
io.github.google/skills/gke-ai-troubleshooting-tpu-performance-degradation
Diagnose GKE Cloud TPU training throughput drops and step-time regressions (15%+ TPU duty-cycle drop) using ML Diagnostics Workload Monitoring (`gcloud alpha mldiagnostics monitored-events` / `hypercomputecluster.googleapis.com/v1alpha`) and 1-minute Cloud Monitoring system metrics (`kubernetes.io/node/accelerator/*`). Distinguishes hardware and network fabric throttling from workload resource bottlenecks (HBM capacity, host memory, or host CPU saturation). Use when TPU training throughput or duty cycle drops without crashing pods, when `PERFORMANCE_DEGRADATION` monitored events fire, or when triaging slow multi-slice training steps. Don't use for complete multi-slice XLA execution stalls with `HANG_DETECTED` logs (use gke-ai-troubleshooting-tpu-mxla-hang) or pod eviction/interruption restarts (use gke-ai-troubleshooting-jobset-interruption).
io.github.google/skills/gke-ai-troubleshooting-tpu-mxla-hang
Diagnose GKE Cloud TPU multi-slice training hangs (Megascale `HANG_DETECTED` logs and hang monitored events) using the ML Diagnostics `Megascale XLA (MXLA) Hang Analyzer` (`gcloud alpha mldiagnostics monitored-events`) and 1-minute Cloud Monitoring multi-slice latency metrics (`kubernetes.io/container/multislice/*`). Distinguishes XLA compiler/HLO launch divergence and host data-input stalls from TPU chip, SparseCore, ICI, or network fabric faults. Use when multi-slice TPU training jobs freeze without progressing steps, emit `HANG_DETECTED`, or stall in collective operations. Don't use for gradual step-time throughput drops without hangs (use gke-ai-troubleshooting-tpu-performance-degradation) or pod preemption/eviction restarts (use gke-ai-troubleshooting-jobset-interruption).
io.github.jeremylongshore/claude-code-plugins-plus-skills/maintainx-deploy-integration
将 MaintainX 集成部署到生产环境。用于部署到云平台、配置生产环境,或为 MaintainX 集成自动化部署流水线。触发语如 “deploy maintainx”、“maintainx deployment”、“maintainx cloud deploy”、“maintainx kubernetes”、“maintainx docker”。
io.github.jeremylongshore/claude-code-plugins-plus-skills/documenso-deploy-integration
在不同平台与环境部署 Documenso 集成。用于部署到云平台、应用容器化,或为 Documenso 集成搭建基础设施。触发语如 “deploy documenso”、“documenso docker”、“documenso kubernetes”、“documenso cloud deployment”。
io.github.SnailSploit/Claude-Red/offensive-toctou
Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web, and container layers. Covers symbolic-link races (open/access/stat split), file-descriptor races, fopen/realpath traversal races, /proc and procfs races, FUSE-backed slow-fs races to widen the window, ptrace and signal races, kernel double-fetch / userspace pointer races, container/runc/symlink escape primitives, kubernetes admission/authz TOCTOU, web auth-vs-authz TOCTOU, JWT-claim TOCTOU at gateway vs service, payment/idempotency races, and modern race-amplification techniques (single-packet attack, slow loris, FUSE pause, cgroup freeze, scheduler shaping). Use when you've identified a 'check then act' pattern in code, when fuzzing for race conditions, or when exploiting concurrency bugs in privileged binaries / kernel / orchestrators.
io.github.projectcalico/calico/implement-calico-api-resource
将新的 Calico API 资源贯通实现到代码库的各层。在 API 设计完成后使用(参见 design-kubernetes-api 技能)。