[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-7415a1be-da31-4e43-b541-71848f893835":3,"$fHtDq_AeIsjXg01pstUMZ6BSpxNfFQXNHWS3QhoXIOLw":43},{"id":4,"title":5,"description":6,"categoryId":7,"moduleId":8,"tags":9,"prompt":10,"icon":11,"source":12,"sourceUrl":13,"authorId":14,"authorName":15,"isPublic":16,"stars":17,"runs":18,"createdAt":19,"updatedAt":19,"module":20,"category":27,"packages":34},"7415a1be-da31-4e43-b541-71848f893835","kubestellar-console","多集群Kubernetes仪表板，通过MCP服务器和10+内置代理技能实现AI驱动的操作","cat_coding_devops","mod_coding","sickn33,coding","---\nname: kubestellar-console\ndescription: \"Multi-cluster Kubernetes dashboard with AI-powered operations via MCP server and 10+ built-in agent skills\"\ncategory: devops\nrisk: critical\nsource: community\nsource_repo: kubestellar\u002Fconsole\nsource_type: community\ndate_added: \"2026-04-27\"\nauthor: kubestellar\ntags: [kubernetes, multi-cluster, mcp, dashboard, cncf, devops, observability]\ntools: [claude, cursor, gemini, codex]\nlicense: \"Apache-2.0\"\nlicense_source: \"https:\u002F\u002Fgithub.com\u002Fkubestellar\u002Fconsole\u002Fblob\u002Fmain\u002FLICENSE\"\nplugin:\n  setup:\n    type: manual\n    summary: \"Requires kc-agent binary (brew tap kubestellar\u002Ftap && brew install kc-agent)\"\n    docs: \"https:\u002F\u002Fgithub.com\u002Fkubestellar\u002Fconsole#quick-start\"\n---\n\n# KubeStellar Console\n\n## Overview\n\nKubeStellar Console is an open-source multi-cluster Kubernetes dashboard (CNCF project) with AI-powered operations. It ships with `kc-agent`, an MCP server that bridges coding agents to kubeconfig and Kubernetes APIs, plus 10+ built-in agent skills for development, testing, and operations.\n\n## When to Use This Skill\n\n- Use when managing multiple Kubernetes clusters across edge and cloud\n- Use when you need AI-assisted Kubernetes troubleshooting and debugging\n- Use when running performance tests, cache compliance checks, or CI debugging on a Kubernetes dashboard\n- Use when integrating with CNCF projects (Argo, Kyverno, Istio, and 20+ others)\n\n## How It Works\n\n### Step 1: Install kc-agent\n\n```bash\nbrew tap kubestellar\u002Ftap && brew install kc-agent\n```\n\n### Step 2: Start the MCP server\n\n```bash\nkc-agent\n```\n\nThis bridges the active kubeconfig context to any MCP-compatible coding agent. Do not start it from a cluster-admin or write-capable context unless the user explicitly accepts that risk.\n\n### Step 3: Use built-in agent skills\n\nThe project ships with agent skills accessible via `CLAUDE.md` and `AGENTS.md`:\n\n- **@perf-test** — Dashboard performance testing and TTFI analysis\n- **@cache-test** — Card cache compliance testing (IndexedDB warm return)\n- **@nav-test** — Navigation performance testing\n- **@ui-compliance-test** — Card loading compliance (8 criteria, 150+ cards)\n- **@ci-status** — CI pipeline monitoring and status checks\n- **@rca** — Root cause analysis for CI\u002Ftest failures\n- **@tdd** — Test-driven development workflow\n- **@k8s-debug** — Kubernetes debugging and troubleshooting\n\n## Key Features\n\n- Multi-cluster management across edge and cloud\n- Real-time streaming observability\n- 20+ CNCF project integrations (Argo, Kyverno, Istio, etc.)\n- GitHub OAuth authentication\n- Supply chain security (SBOM, SLSA)\n- SQLite WASM caching with stale-while-revalidate pattern\n- 15+ themes with dark\u002Flight mode\n\n## Security & Safety Notes\n\n- **Critical risk:** `kc-agent` bridges your active kubeconfig context to MCP-compatible agents. If that context carries cluster-admin, write permissions, or secret read access, agents inherit those capabilities.\n- **Do not rely on RBAC objects alone:** creating a ServiceAccount or ClusterRoleBinding does not change the credentials `kc-agent` uses. Start `kc-agent` only after switching `KUBECONFIG`\u002Fcontext to dedicated least-privilege credentials and verifying them.\n- **Recommended read-only scope:** avoid `resources='*'`, because it includes sensitive objects such as Secrets. Prefer an explicit non-secret resource list and verify access before starting the MCP server:\n  ```bash\n  kubectl create serviceaccount kc-agent -n default\n  kubectl create clusterrole kc-agent-readonly \\\n    --verb=get,list,watch \\\n    --resource=pods,services,deployments.apps,replicasets.apps,statefulsets.apps,daemonsets.apps,namespaces,nodes,events,configmaps\n  kubectl create clusterrolebinding kc-agent-readonly \\\n    --clusterrole=kc-agent-readonly \\\n    --serviceaccount=default:kc-agent\n  kubectl auth can-i get secrets --as=system:serviceaccount:default:kc-agent\n  kubectl auth can-i list pods --as=system:serviceaccount:default:kc-agent\n  ```\n- The first `can-i` command must return `no`; the second should return `yes`. Then create or select a kubeconfig that actually authenticates as that ServiceAccount before running `kc-agent`.\n- Do not expose `kc-agent` on a public network without authentication.\n- Review [SECURITY-AI.md](https:\u002F\u002Fgithub.com\u002Fkubestellar\u002Fconsole\u002Fblob\u002Fmain\u002Fdocs\u002Fsecurity\u002FSECURITY-AI.md) for prompt injection and agent drift mitigations.\n\n## Limitations\n\n- This skill requires an external binary (`kc-agent`) installed separately via Homebrew.\n- Do not treat agent output as a substitute for environment-specific validation or expert review.\n- Stop and ask for clarification if required permissions or safety boundaries are unclear.\n\n## Links\n\n- [GitHub](https:\u002F\u002Fgithub.com\u002Fkubestellar\u002Fconsole)\n- [Website](https:\u002F\u002Fconsole.kubestellar.io)\n- [CLAUDE.md](https:\u002F\u002Fgithub.com\u002Fkubestellar\u002Fconsole\u002Fblob\u002Fmain\u002FCLAUDE.md)\n- [AGENTS.md](https:\u002F\u002Fgithub.com\u002Fkubestellar\u002Fconsole\u002Fblob\u002Fmain\u002FAGENTS.md)\n","","imported","https:\u002F\u002Fgithub.com\u002Fsickn33\u002Fantigravity-awesome-skills","user_system_seed","SkillOPIC",true,82,681,"2026-05-16 13:25:11",{"id":8,"name":21,"slug":22,"icon":23,"description":24,"sort":25,"createdAt":26},"编程开发","coding","mdi-code-braces","代码生成、调试、审查，提升开发效率",2,"2026-05-16 12:53:40",{"id":7,"name":28,"slug":29,"icon":30,"description":31,"moduleId":8,"sort":32,"skillCount":33,"createdAt":26},"DevOps","devops","mdi-cog-outline","CI\u002FCD、容器化、部署运维",3,162,[35],{"id":36,"skillId":4,"version":37,"fileName":38,"fileSize":39,"filePath":40,"fileHash":41,"manifest":42,"createdAt":19},"bf0537e4-83ef-4076-bdd7-fc7761afa641","1.0.0","kubestellar-console.zip",2220,"uploads\u002Fskills\u002F7415a1be-da31-4e43-b541-71848f893835\u002Fkubestellar-console.zip","6e02a206d6a480118c30c79b1b98000c1697ed2d11fe52bb437a758a6e0eebb5","[{\"path\":\"SKILL.md\",\"isDirectory\":false,\"size\":4932}]",{"code":44,"message":45,"data":46},200,"success",{"items":47,"stats":48,"page":51},[],{"averageRating":49,"totalRatings":49,"ratingCounts":50},0,[49,49,49,49,49],{"limit":52,"offset":49,"hasMore":53,"nextOffset":52,"ratedOnly":16},15,false]