/

/gke-manifest-generation

1,698

Generates and updates secure, production-ready Kubernetes YAML manifests optimized for GKE Autopilot and GKE Standard clusters. Use when creating or modifying GKE deployment manifests, configuring container security contexts, setting CPU/memory resource limits, defining readiness/liveness/startup probes, mounting secrets and volumes, configuring GKE Gateway API routes, targeting Spot VMs, or deploying AI model inference workloads (vLLM, TGI, Gemma). Don't use for live cluster operations, pod troubleshooting (use gke-workload-troubleshooting), or cluster infrastructure provisioning (use gke-cluster-creation).

5 files
20.3 KB
Updated last week
GitHub
1 warning

Ask your Agent

Use this Skill: https://skilld.dev/gh/google/skills/gke-manifest-generation

This session only. Nothing lands on disk.

referencesnetwork-policy.md

918 B raw

≈230 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Network Policy Example

This reference example demonstrates configuring Kubernetes NetworkPolicy resources on GKE.

It includes:

Default-deny ingress NetworkPolicy to isolate pods in the namespace
Targeted ingress NetworkPolicy allowing traffic strictly from specific pods

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: nginx-ingress-deny-all
  namespace: nginx-ns
spec:
  podSelector:
    matchLabels:
      app.kubernetes.io/name: nginx
  policyTypes:
    - Ingress
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-ingress-from-my-app
  namespace: nginx-ns
spec:
  podSelector:
    matchLabels:
      app.kubernetes.io/name: nginx
  policyTypes:
    - Ingress
  ingress:
    - from:
        - podSelector:
            matchLabels:
              app.kubernetes.io/name: my-app
      ports:
        - protocol: TCP
          port: 8080

Source: SKILL.md on GitHub

Third-party checks

1 warning9d3 checks · Risk SAFE

Gen Agent Trust Hub9d
This skill includes security considerations such as a potential surface for indirect prompt injection when processing user-provided application code or natural language descriptions. These elements are part of the skill's core manifest-generation functionality. See the detailed analysis for additional context on tool usage and data handling.
Socket9d
No alerts
Snyk9d
Risk: MEDIUM · 1 issue

Provenance

Signed by skilld at becc4b8. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week

Capability

metadata: { "version": "1.0.0", "category": "Containers" }

/gke-manifest-generation