Agent skill · software engineering · alirezarezvani
kubernetes-operator
Use when building a Kubernetes operator or CRD (controller-runtime, kubebuilder, operator-sdk, KOPF), before writing the controller. Validates CRDs with crd_validator.py, lints reconcile loops with reconcile_lint.py and scores OperatorHub capability level.
Why this skill is useful
Adds 3 executable Python scripts for validating CRD designs, linting reconcile functions, and auditing operator capabilities that are not commonly found in public documentation.
What it needs
Requires python installed locally. About 6k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
Kubernetes Operator Build operators that reconcile correctly. Most operator bugs are not Kubernetes bugs — they are reconcile-loop bugs: missing finalizers, blocking calls, no requeue on transient errors, status drift, RBAC over-grants. This skill catches them deterministically before they reach a cluster. When to use Building a new Kubernetes Operator (controller for a CRD) Reviewing an existing operator for capability-level gaps Auditing a CRD spec for status/conditions/finalizer correctness Choosing a framework (controller-runtime / kubebuilder / operator-sdk / metacontroller / KOPF) Designing the API surface of a Custom Resource Hardening RBAC, leader election, or webhook validation When NOT to use Plain Helm chart packaging → use helm-chart-builder Standard kubectl operations / blue-green deploys → use senior-devops General k8s security posture → use cloud-security "I want to run a workload" — that's a Deployment / Job, not an operator Core principle: an operator is a reconcile loop, not a script Operators that fail are the ones that: 1. Treat reconcile as imperative (do this, then this, then this) instead of declarative (make actual=desired, idempotently) 2. Don't requeue transient failures 3. Don't use finalizers, leaving orphan resources 4. Mutate spec instead of status 5. Don't use the status subresource (status updates trigger spec reconciles → loop) 6. Block in reconcile (long HTTP calls, locks) 7. Forget leader election → split-brain on multi-replica deploys The 3 tools below catch each of these. Quick start The 3 Python tools All stdlib-only. Run with --help. crdvalidator.py Validates a CRD YAML against operator-pattern best practices. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/kubernetes-operator--6ad692