plugins/build/skills/common-operations/SKILL.md
Implement idiomatic Kubernetes operations with label selectors, strategic merge patches, and proper error handling for production-grade CLI tooling.
npx skillsauth add adaptive-enforcement-lab/claude-skills common-operationsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
A well-designed Kubernetes CLI provides idiomatic operations that work consistently across resource types. This section covers:
See the full implementation guide in the source documentation.
| Practice | Description |
| ---------- | ------------- |
| Use label selectors | Filter resources server-side, not client-side |
| Prefer patches over updates | Patches are safer for concurrent modifications |
| Use strategic merge patches | Kubernetes-native patch format for resources |
| Handle not found errors | Check apierrors.IsNotFound(err) before creating |
| Respect resource versions | Use optimistic concurrency for updates |
Use the Kubernetes API idiomatically: label selectors, patches, and proper error handling.
graph TB
CLI[CLI Command] --> List[List Resources]
CLI --> Mutate[Mutate Resources]
CLI --> Watch[Watch Changes]
List --> Filter[Label Selectors]
Mutate --> Patch[Strategic Merge Patch]
Mutate --> Create[Get-or-Create]
Watch --> Events[Event Stream]
%% Ghostty Hardcore Theme
style CLI fill:#65d9ef,color:#1b1d1e
style List fill:#a7e22e,color:#1b1d1e
style Mutate fill:#fd971e,color:#1b1d1e
style Watch fill:#9e6ffe,color:#1b1d1e
style Filter fill:#5e7175,color:#f8f8f3
style Patch fill:#5e7175,color:#f8f8f3
style Create fill:#5e7175,color:#f8f8f3
style Events fill:#5e7175,color:#f8f8f3
documentation
Workload Identity Federation implementation guide. GKE setup, IAM bindings, ServiceAccount configuration, migration from service account keys, and troubleshooting patterns.
development
Secure GitHub Actions trigger patterns for pull requests, forks, and reusable workflows. Preventing privilege escalation and code injection through trigger misconfiguration.
development
Structured framework for evaluating GitHub Actions security before adoption. Trust tiers, risk assessment checklist, and decision tree for action evaluation.
testing
Securely store GitHub App credentials across different environments. GitHub Actions secrets, external CI, Kubernetes, and automated rotation patterns.