markus41/helm-deploy
.claude/skills/helm-deploy/SKILL.md
Safe Helm deployment with image verification, cache busting, and rollback safety. Prevents deploying stale images.
$ install --global
skillsauthnpx skillsauth add markus41/claude helm-deployInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 7, 2026, 2:11 AM38.0s1 file scanned
SKILL.md
- name:
- helm-deploy
- description:
- Safe Helm deployment with image verification, cache busting, and rollback safety. Prevents deploying stale images.
- disable-model-invocation:
- true
Safe Helm Deploy
Deploy via Helm with image verification: $ARGUMENTS
Pre-Deploy Checklist
-
Verify the image exists in the registry
# ACR az acr repository show-tags --name <registry> --repository <image> --orderby time_desc --top 5 # Docker Hub docker manifest inspect <registry>/<image>:<tag> -
Check what's currently running
helm list -n <namespace> kubectl get pods -n <namespace> -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{range .spec.containers[*]}{.image}{"\n"}{end}{end}' -
Diff the changes before applying
helm diff upgrade <release> <chart> -n <namespace> \ --set image.tag=<new-tag> \ --set image.pullPolicy=Always \ -f values.yaml
Deploy Command Template
helm upgrade --install <release> <chart> \
--namespace <namespace> \
--set image.repository=<registry>/<image> \
--set image.tag=<specific-tag> \
--set image.pullPolicy=Always \
--atomic \
--wait \
--timeout 5m \
-f values.yaml
Post-Deploy Verification
# Verify new pods are running
kubectl rollout status deployment/<deployment> -n <namespace>
# Verify the correct image is running
kubectl get pods -n <namespace> -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{range .spec.containers[*]}{.image}{"\n"}{end}{end}'
# Check pod logs for startup errors
kubectl logs -l app=<app> -n <namespace> --tail=50
Rollback (if needed)
helm rollback <release> -n <namespace>
# Or to a specific revision:
helm history <release> -n <namespace>
helm rollback <release> <revision> -n <namespace>
Critical Rules
- ALWAYS use
--set image.tag=<specific>with a unique tag (git SHA, semver) - ALWAYS use
--set image.pullPolicy=Alwaysto force fresh pulls - ALWAYS use
--atomicfor automatic rollback on failure - ALWAYS use
--waitto confirm pods are healthy - NEVER deploy with
:latestas the only tag - ALWAYS verify the image exists in registry BEFORE deploying
Related Skills
markus41/plugins/microsoft-agents-expert/skills/teams-agents
tools
VerifiedTrustedCommunity
Build Teams-native agents with the Teams SDK (formerly Teams AI Library v2) — App class, activity routing, adaptive cards, streaming, AI-generated labels, feedback, message extensions, Teams-as-MCP-server, and the bring-your-own-AI pattern with Agent Framework.
18SKILL.mdUpdated Jul 12, 2026
markus41/plugins/microsoft-agents-expert/skills/microsoft-foundry
tools
VerifiedTrustedCommunity
Run agents on Microsoft Foundry (formerly Azure AI Foundry) Agent Service — prompt agents vs hosted agents, threads/runs and the Responses API, built-in tools (Bing grounding, code interpreter, file search, MCP, OpenAPI, A2A), connected agents, Entra agent identity, SDKs, and observability/evaluations.
18SKILL.mdUpdated Jul 12, 2026
markus41/plugins/microsoft-agents-expert/skills/m365-agents-sdk
tools
VerifiedTrustedCommunity
Build and host custom engine agents with the Microsoft 365 Agents SDK — AgentApplication, the Activity protocol, channel reach via Azure Bot Service, hosting Agent Framework or Semantic Kernel engines, and the Agents Toolkit/Playground workflow. Successor to the Bot Framework SDK.
18SKILL.mdUpdated Jul 12, 2026
markus41/plugins/microsoft-agents-expert/skills/copilot-studio
tools
VerifiedTrustedCommunity
Design, govern, and extend Microsoft Copilot Studio agents — topics, generative orchestration, knowledge, tools and MCP, agent flows, autonomous triggers, publishing channels, Copilot Credits pricing, and solution-based ALM on Power Platform.
18SKILL.mdUpdated Jul 12, 2026