kubernetes
覆盖零信任、服务网格与 eBPF 可观测等高级实操，适合运维与平台工程师。
操作可能需要集群管理员权限，误操作可导致服务中断或安全风险。
面向生产的 Kubernetes 部署、观察、服务网格与安全硬化指南与操作。
针对生产环境做 Kubernetes 的部署、观察、服务网格和安全硬化：能写 k8s manifest、配 Gateway/API、接入 Istio/Linkerd/Cilium、用 eBPF（如 Cilium Hubble）做可观测并配置 Pod Security、OPA/Kyverno、Falco 等运行时安全。需要写清单、调试 pod、设置 HPA 或做集群加固时用。重点是生产级实战经验与遵循硬化规范，覆盖故障排查和性能优化。
▸ 展开 SKILL.md 英文原文
Deploy, manage, and debug Kubernetes in production — Deployments, Services, Gateway API, Service Mesh (Istio/Linkerd/Cilium), eBPF observability (Cilium Hubble), security hardening (Pod Security Standards, OPA/Kyverno, seccomp, runtime security with Falco/Tetragon), Helm, HPA, PDB, topology spread, and debugging. Use when user asks to write K8s manifests, deploy to a cluster, debug pods, set up Gateway API, configure autoscaling, or harden cluster security. Do NOT use for Dockerfiles (use docker), CI/CD pipeline design (use ci-cd), or Terraform infrastructure (use terraform).
帮我安装这个 skill：https://raw.githubusercontent.com/EliasOulkadi/shokunin/master/.pack/skills/kubernetes/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/EliasOulkadi/shokunin/master/.pack/skills/kubernetes/SKILL.md"# Kubernetes Architect Production-grade Kubernetes: deployments, Gateway API, zero-trust networking, service mesh, eBPF observability, and debugging. Follows NSA/CISA hardening guidelines. ## Decision Framework Before deploying to Kubernetes, answer: - Does the app need horizontal scaling (3+ replicas)? → Kubernetes - Is it a single-instance app with simple needs? → Docker Compose or VPS - Is the team already familiar with Kubernetes? → Proceed. If not, consider managed (EKS, GKE, AKS) - Does the app need advanced networking (service mesh, ingress routing)? → Kubernetes + Gateway API - Is the infrastructure budget tight? → Single-node k3s or Docker Compose for dev - Multiple services with