Review a diff for security issues exploitable by a tenant, neighbouring controller, or malicious workload spec — input validation, injection, DoS, nil-safety, authz, info disclosure, supply chain, webhook safety.
Skills in this repository
kubernetes-sigs/kueue - Page 2
SkillsMP has collected 61 skills from kubernetes-sigs/kueue. Open a skill to review its source and details.
kubernetes-sigs/kueueShowing 21 of 61 collected skills.
Flag supply-chain hygiene gaps — unpinned image refs, TLS bypass, unjustified go.mod replace directives, curl|sh, moving-tag GitHub Actions (CWE-295, CWE-494).
Flag webhook safety regressions — loosened failurePolicy, shortened timeoutSeconds, TLS bypass paths, non-idempotent mutating webhooks.
Write or review Kueue PR release notes. Use when a user asks to draft, refine, validate, or combine release notes for a Kueue pull request, especially when deciding whether the note should be framed as a bugfix, feature, observability improvement, or breaking…
Review that algorithm comments match the implementation. Use when a comment describes a formula or algorithm and you want to verify it matches what the code actually does.
Review that new CRD fields have complete godoc comments with enum value descriptions.
Review that paired operations and fields that always appear together are encapsulated in a helper or nested struct.
Review that local variables with unnecessarily wide scope are extracted into helper functions.
Review that new feature-gated behavior has explicit gate checks on all reachable code paths.
Review that update/mutation logic has integration test coverage in test/integration/.
Review that new metrics are gated by the same feature flags as similar existing metrics.
Review that new ClusterQueue metrics use the same label set as existing ClusterQueue metrics.
Review that repeated guards at multiple call sites are moved inside the callee instead.
Review concurrent Go code for races, preferring fixes at the mutation site over adding snapshot fields.
Review that new feature tests are split into their own file rather than added to an already large test file.
Review that tests covering multiple scenarios use table-driven style instead of inline sequential blocks.
Review that code and events use terminology whose semantics match the operation (e.g., not Preempted for migration).
Review that newly exported functions have callers outside the package, lowercasing those that don't.
Debug Kueue CI flakes. Use when a user asks to debug a flake, investigate a test failure, a test timeout, or a CI flake. Analyzes Prow build logs, kube-scheduler logs, kubelet logs, and test code to identify root causes.
Trace workload lineage to pods. Use when a user wants to trace lineage across any tier such as workload to pods, pod to workload, or job to workload. The user may provide a resource at any level (Workload, Job, Pod, JobSet, etc.) and this skill produces the…
Identify what preempted a workload. Use when a user asks why their workload was evicted or preempted, or wants to identify what preempted it. Investigates Kubernetes events, workload status conditions, and controller logs to trace preemption.