k8s-ownership

Included with Lifetime

$97 forever

Set up and manage resource ownership tracking with OPA Gatekeeper

Data & Analytics

What this skill does


## Your task

Help the user set up and manage resource ownership tracking using OPA Gatekeeper policies.

### Workflow

1. **Check Gatekeeper Status**
   - Use `check_gatekeeper` to verify OPA Gatekeeper is installed
   - If not installed, provide installation instructions

2. **Check/Install Ownership Policy**
   - Use `get_ownership_policy_status` to see if the ownership policy exists
   - If not installed, ask the user if they want to install it using `install_ownership_policy`
   - Default to `dryrun` mode for safety

3. **Show Violations**
   - Use `list_ownership_violations` to show resources missing ownership labels
   - Group by namespace and highlight the most problematic areas

4. **Recommend Next Steps**
   - If in dryrun mode with many violations, help users fix them before enforcing
   - Suggest switching to `warn` mode first, then `enforce`

### Available Tools

| Tool | Purpose |
|------|---------|
| `check_gatekeeper` | Check if Gatekeeper is installed |
| `get_ownership_policy_status` | Get current policy configuration |
| `list_ownership_violations` | List resources missing labels |
| `install_ownership_policy` | Install the policy (dryrun/warn/enforce) |
| `set_ownership_policy_mode` | Change enforcement mode |
| `uninstall_ownership_policy` | Remove the policy |
| `find_resource_owners` | Check who owns existing resources |

### Key Parameters

**install_ownership_policy:**
- `labels`: Required labels (default: ["owner", "team"])
- `mode`: dryrun (default), warn, or enforce
- `exclude_namespaces`: Namespaces to skip (auto-excludes system namespaces)

### Example Outputs

**Policy not installed:**
```
Gatekeeper is installed and healthy.
Ownership policy is not configured.

Would you like to install it? I recommend starting with dryrun mode
to see which resources would be affected before enforcing.
```

**Showing violations:**
```
Found 47 resources missing ownership labels:

By Namespace:
- default: 12 violations
- app-prod: 23 violations
- app-staging: 12 violations

Top violations:
| Namespace | Kind | Name | Missing |
|-----------|------|------|---------|
| app-prod | Deployment | api-server | owner, team |
...
```

### Safety Notes

- Always start with `dryrun` mode
- Show violation count before suggesting `enforce` mode
- Warn users that `enforce` mode will block deployments

Files: 1

Size: 2.5 KB

Complexity: 9/100

Category: Data & Analytics

Source: https://github.com/kubestellar/claude-plugins/tree/main/plugins/kubestellar-ops/skills/k8s-ownership

Related in Data & Analytics

clawarr-suite

Included

Comprehensive management for self-hosted media stacks (Sonarr, Radarr, Lidarr, Readarr, Prowlarr, Bazarr, Overseerr, Plex, Tautulli, SABnzbd, Recyclarr, Unpackerr, Notifiarr, Maintainerr, Kometa, FlareSolverr). Deep library exploration, analytics, dashboard generation, content management, request handling, subtitle management, indexer control, download monitoring, quality profile sync, library cleanup automation, notification routing, collection/overlay management, and media tracker integration (Trakt, Letterboxd, Simkl).

Data & Analyticsscripts

querying-soql

Included

SOQL query generation, optimization, and analysis with 100-point scoring. Use this skill when the user needs SOQL/SOSL authoring or optimization: natural-language-to-query generation, relationship queries, aggregates, query-plan analysis, and performance or safety improvements for Salesforce queries. TRIGGER when: user writes, optimizes, or debugs SOQL/SOSL queries, touches .soql files, or asks about relationship queries, aggregates, or query performance. DO NOT TRIGGER when: bulk data operations (use handling-sf-data), Apex DML logic (use generating-apex), or report/dashboard queries.

Data & Analyticsscripts

app-store-optimization

Included

App Store Optimization (ASO) toolkit for researching keywords, analyzing competitor rankings, generating metadata suggestions, and improving app visibility on Apple App Store and Google Play Store. Use when the user asks about ASO, app store rankings, app metadata, app titles and descriptions, app store listings, app visibility, or mobile app marketing on iOS or Android. Supports keyword research and scoring, competitor keyword analysis, metadata optimization, A/B test planning, launch checklists, and tracking ranking changes.

Data & Analyticsscripts

habit-flow

Included

AI-powered atomic habit tracker with natural language logging, streak tracking, smart reminders, and coaching. Use for creating habits, logging completions naturally ("I meditated today"), viewing progress, and getting personalized coaching.

Data & Analyticsscripts

app-store-optimization

Included

Data & Analyticsscripts

visualizing-data

Included

Builds dashboards, reports, and data-driven interfaces requiring charts, graphs, or visual analytics. Provides systematic framework for selecting appropriate visualizations based on data characteristics and analytical purpose. Includes 24+ visualization types organized by purpose (trends, comparisons, distributions, relationships, flows, hierarchies, geospatial), accessibility patterns (WCAG 2.1 AA compliance), colorblind-safe palettes, and performance optimization strategies. Use when creating visualizations, choosing chart types, displaying data graphically, or designing data interfaces.

Data & Analyticsscripts