kubernetes-deployment – skill DevOps & Hạ tầng cho agent AI

Kubernetes Deployment Workflow

Overview

Specialized workflow for deploying applications to Kubernetes including container orchestration, Helm charts, service mesh configuration, and production-ready K8s patterns.

When to Use This Workflow

Use this workflow when:

• Deploying to Kubernetes
• Creating Helm charts
• Configuring service mesh
• Setting up K8s networking
• Implementing K8s security

Target and evidence

Select only phases needed for the requested change. Confirm cluster/context, namespace, ownership, API/CRD versions and deployment/cost authorization before registry pushes or cluster writes. Prepare a reviewed immutable image and rendered manifests, validate schema/policy and diff the exact target, then use a tested rollout and rollback strategy. A valid manifest is not a healthy deployment; verify readiness, application flows, metrics and data-migration compatibility. Store secrets through the actual protected platform mechanism, not committed plaintext YAML.

Workflow Phases

Phase 1: Container Preparation

Skills to Invoke

• docker-expert - Docker containerization
• k8s-manifest-generator - K8s manifests

Actions

1. Create Dockerfile

2. Build container image

3. Optimize image size

4. Push to registry

5. Test container

Copy-Paste Prompts

Use @docker-expert to containerize application for K8s

Phase 2: K8s Manifests

Skills to Invoke

• k8s-manifest-generator - Manifest generation
• kubernetes-architect - K8s architecture

Actions

1. Create Deployment

2. Configure Service

3. Set up ConfigMap

4. Create Secrets

5. Add Ingress

Copy-Paste Prompts

Use @k8s-manifest-generator to create K8s manifests

Phase 3: Helm Chart

Skills to Invoke

• helm-chart-scaffolding - Helm charts

Actions

1. Create chart structure

2. Define values.yaml

3. Add templates

4. Configure dependencies

5. Test chart

Copy-Paste Prompts

Use @helm-chart-scaffolding to create Helm chart

Phase 4: Service Mesh

Skills to Invoke

• istio-traffic-management - Istio
• linkerd-patterns - Linkerd
• service-mesh-expert - Service mesh

Actions

1. Choose service mesh

2. Install mesh

3. Configure traffic management

4. Set up mTLS

5. Add observability

Copy-Paste Prompts

Use @istio-traffic-management to configure Istio

Phase 5: Security

Skills to Invoke

• k8s-security-policies - K8s security
• mtls-configuration - mTLS

Actions

1. Configure RBAC

2. Set up NetworkPolicy

3. Enable PodSecurity

4. Configure secrets

5. Implement mTLS

Copy-Paste Prompts

Use @k8s-security-policies to secure Kubernetes cluster

Phase 6: Observability

Skills to Invoke

• grafana-dashboards - Grafana
• prometheus-configuration - Prometheus

Actions

1. Install monitoring stack

2. Configure Prometheus

3. Create Grafana dashboards

4. Set up alerts

5. Add distributed tracing

Copy-Paste Prompts

Use @prometheus-configuration to set up K8s monitoring

Phase 7: Deployment

Skills to Invoke

• deployment-engineer - Deployment
• gitops-workflow - GitOps

Actions

1. Configure CI/CD

2. Set up GitOps

3. Deploy to cluster

4. Verify deployment

5. Monitor rollout

Copy-Paste Prompts

Use @gitops-workflow to implement GitOps deployment

Quality Gates

• [ ] Containers working
• [ ] Manifests valid
• [ ] Helm chart installs
• [ ] Security configured
• [ ] Monitoring active
• [ ] Deployment successful

Related Workflow Bundles

• cloud-devops - Cloud/DevOps
• terraform-infrastructure - Infrastructure
• docker-containerization - Containers

Limitations

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.