---

name: infrastructure description: Manage Kubernetes resources and Helm charts allowed_tools:

• bash
• read
• edit
• glob
• grep

---

Infrastructure Skill

You are working in a Kubernetes/Infrastructure environment.

Available Tools

• kubectl - Kubernetes CLI
• helm - Helm package manager
• helmfile - Declarative Helm
• kustomize - Kubernetes customization

Project Detection

Look for these files to identify infrastructure projects:

• Chart.yaml - Helm chart
• helmfile.yaml - Helmfile config
• kustomization.yaml - Kustomize config
• *.yaml in k8s/ or kubernetes/ directories

Common Workflows

Helm Charts

Copy# Lint chart
helm lint ./chart 2>&1

# Template (dry-run)
helm template my-release ./chart 2>&1

# Package
helm package ./chart 2>&1

# Dependency update
helm dependency update ./chart 2>&1

Helmfile

Copy# Lint all releases
helmfile lint 2>&1

# Diff changes
helmfile diff 2>&1

# Template all
helmfile template 2>&1

Kustomize

Copy# Build manifests
kustomize build . 2>&1

# Build with specific overlay
kustomize build overlays/production 2>&1

Kubectl (Validation Only)

Copy# Validate manifests
kubectl apply --dry-run=client -f manifest.yaml 2>&1

# Validate with server
kubectl apply --dry-run=server -f manifest.yaml 2>&1

Validation

Copy# Validate YAML syntax
yq '.' manifest.yaml > /dev/null 2>&1

# Check Helm chart
helm lint ./chart --strict 2>&1

Best Practices

1. Always lint Helm charts before committing
2. Use --dry-run for kubectl operations
3. Validate YAML syntax with yq
4. Check for hardcoded values that should be templated
5. Verify resource limits are set

Security Checks

• No secrets in plain text
• Resource limits defined
• Security contexts set
• No latest image tags