kubernetes-sigs/kueue - 第 2 页

security

Review a diff for security issues exploitable by a tenant, neighbouring controller, or malicious workload spec — input validation, injection, DoS, nil-safety, authz, info disclosure, supply chain, webhook safety.

原文语言：英语

supply-chain-hygiene

Flag supply-chain hygiene gaps — unpinned image refs, TLS bypass, unjustified go.mod replace directives, curl|sh, moving-tag GitHub Actions (CWE-295, CWE-494).

原文语言：英语

webhook-safety-regressions

Flag webhook safety regressions — loosened failurePolicy, shortened timeoutSeconds, TLS bypass paths, non-idempotent mutating webhooks.

原文语言：英语

kueue-release-notes

Write or review Kueue PR release notes. Use when a user asks to draft, refine, validate, or combine release notes for a Kueue pull request, especially when deciding whether the note should be framed as a bugfix, feature, observability improvement, or breaking…

原文语言：英语

algorithm-comments

Review that algorithm comments match the implementation. Use when a comment describes a formula or algorithm and you want to verify it matches what the code actually does.

原文语言：英语

api-field-comments

Review that new CRD fields have complete godoc comments with enum value descriptions.

原文语言：英语

encapsulate-paired-ops

Review that paired operations and fields that always appear together are encapsulated in a helper or nested struct.

原文语言：英语

extract-helpers

Review that local variables with unnecessarily wide scope are extracted into helper functions.

原文语言：英语

feature-gated-code

Review that new feature-gated behavior has explicit gate checks on all reachable code paths.

原文语言：英语

integration-tests-for-updates

Review that update/mutation logic has integration test coverage in test/integration/.

原文语言：英语

metrics-feature-gates

Review that new metrics are gated by the same feature flags as similar existing metrics.

原文语言：英语

metrics-label-sets

Review that new ClusterQueue metrics use the same label set as existing ClusterQueue metrics.

原文语言：英语

push-guards-to-callees

Review that repeated guards at multiple call sites are moved inside the callee instead.

原文语言：英语

race-conditions

Review concurrent Go code for races, preferring fixes at the mutation site over adding snapshot fields.

原文语言：英语

split-test-files

Review that new feature tests are split into their own file rather than added to an already large test file.

原文语言：英语

table-driven-tests

Review that tests covering multiple scenarios use table-driven style instead of inline sequential blocks.

原文语言：英语

terminology-semantics

Review that code and events use terminology whose semantics match the operation (e.g., not Preempted for migration).

原文语言：英语

visibility-exports

Review that newly exported functions have callers outside the package, lowercasing those that don't.

原文语言：英语

kueue-flake-debugger

Debug Kueue CI flakes. Use when a user asks to debug a flake, investigate a test failure, a test timeout, or a CI flake. Analyzes Prow build logs, kube-scheduler logs, kubelet logs, and test code to identify root causes.

原文语言：英语

kueue-lineage

Trace workload lineage to pods. Use when a user wants to trace lineage across any tier such as workload to pods, pod to workload, or job to workload. The user may provide a resource at any level (Workload, Job, Pod, JobSet, etc.) and this skill produces the…

原文语言：英语

kueue-who-preempted

Identify what preempted a workload. Use when a user asks why their workload was evicted or preempted, or wants to identify what preempted it. Investigates Kubernetes events, workload status conditions, and controller logs to trace preemption.

原文语言：英语