Agent Skills
› opskat/opskat
› k8s
k8s
GitHub提供通过 exec 运行 kubectl 命令的能力,自动处理 kubeconfig、默认上下文及 SSH 跳板机隧道。支持获取资源、描述详情和查看日志等操作,并定义了资产配置字段规范。
Trigger Scenarios
需要执行 Kubernetes 集群管理操作
查询 Pod、Node 状态或日志
调试容器应用问题
Install
npx skills add opskat/opskat --skill k8s -g -y
SKILL.md
Frontmatter
{
"name": "k8s",
"description": "Run kubectl commands against a Kubernetes asset via exec. Covers command syntax and the stored kubeconfig \/ jump-host behavior."
}
Kubernetes assets
Command syntax
Pass the kubectl command as command, with or without the leading kubectl:
get pods -Adescribe pod api-0 -n prodlogs deploy/api --tail 100kubectl get nodes -o wide
Notes
- The asset's stored kubeconfig is used automatically. Do not pass
--kubeconfig. - The asset's default context and namespace are applied when the command does not specify them.
- If the asset has an SSH jump host configured, kubectl runs on that host; otherwise it runs locally.
- The
scopeparameter is not used by Kubernetes assets.
Asset config (for put_asset)
| field | type | required | notes |
|---|---|---|---|
kubeconfig |
string | yes | Write-only. Full YAML encrypted directly in the asset config; it does not create a managed credential |
namespace |
string | no | Default namespace; must not contain whitespace or start with - |
context |
string | no | Kubeconfig context to use; same character restrictions as namespace |
ssh_asset_id |
number | no | SSH asset to tunnel through; 0 detaches |
password |
string | no | Reserved compatibility key; any non-empty value is rejected as inapplicable |
credential_id |
number | no | Reserved compatibility key; any non-zero value is rejected as inapplicable |
Never echo kubeconfig. It remains direct encrypted asset material. K8s accepts no credential fields.
Version History
-
b159e91
Current 2026-08-19 20:20
更新资产配置说明,明确 kubeconfig 为只写且直接加密存储;新增 password 和 credential_id 兼容字段说明(拒绝使用)。
- aeb4bc3 2026-07-24 16:28


