Skaffold for Kubernetes: port forwarding, dotenvx hooks, API version. Use when fixing 0.0.0.0 binding, adding secret generation hooks, or creating skaffold.yaml.
Skaffold for Kubernetes: port forwarding, dotenvx hooks, API version. Use when fixing 0.0.0.0 binding, adding secret generation hooks, or creating skaffold.yaml.
Use WebSearch or WebFetch to verify current Skaffold version and API version.
Execution
Execute this Skaffold compliance check:
Step 1: Check applicability
Check for k8s/ or helm/ directories. If neither is found, report "SKIP: Skaffold not applicable (no Kubernetes manifests)" and stop. If found, proceed to check for skaffold.yaml.
Step 2: Parse configuration
Read skaffold.yaml and extract:
API version
Build configuration (local.push, useBuildkit)
Deploy configuration (kubeContext, statusCheck)
Port forwarding (addresses)
Profiles defined
Hooks (dotenvx integration)
Step 3: Analyze compliance
Check each setting against these standards:
Check
Standard
Severity
API version
skaffold/v4beta13
WARN if older
local.push
false
FAIL if true
portForward.address
127.0.0.1
FAIL if missing/0.0.0.0
useBuildkit
true
WARN if false
kubeContext
orbstack
INFO (recommended for local dev)
dotenvx hooks
Build or deploy hooks
INFO (recommended for secrets)
Security-critical: Port forwarding MUST bind to localhost only (127.0.0.1). Never allow 0.0.0.0 or missing address.
Recommended settings:
db-only or services-only profile for local dev workflow
statusCheck: true with reasonable deadline (180s for init containers)
tolerateFailuresUntilDeadline: true for graceful pod initialization
JSON log parsing for structured application logs
dotenvx hooks for secrets generation from .env files
Step 4: Report results
Print a compliance report with:
Skaffold file location and API version
Each configuration check result (PASS/WARN/FAIL)
Profiles found
Scripts status (generate-secrets.sh)
Overall compliance status
If --check-only, stop here.
Step 5: Apply fixes (if --fix or user confirms)
Missing skaffold.yaml: Create from standard template in REFERENCE.md
Security issues: Fix port forwarding addresses to 127.0.0.1