Kubernetes Deployment Workflow

Overview

Specialized workflow for deploying applications to Kubernetes including container orchestration, Helm charts, service mesh configuration, and production-ready K8s patterns.

When to Use This Workflow

Use this workflow when:

• Deploying to Kubernetes
• Creating Helm charts
• Configuring service mesh
• Setting up K8s networking
• Implementing K8s security

Target and evidence

Select only phases needed for the requested change. Confirm cluster/context, namespace, ownership, API/CRD versions and deployment/cost authorization before registry pushes or cluster writes. Prepare a reviewed immutable image and rendered manifests, validate schema/policy and diff the exact target, then use a tested rollout and rollback strategy. A valid manifest is not a healthy deployment; verify readiness, application flows, metrics and data-migration compatibility. Store secrets through the actual protected platform mechanism, not committed plaintext YAML.

Workflow Phases

Phase 1: Container Preparation

Skills to Invoke

• docker-expert - Docker containerization
• k8s-manifest-generator - K8s manifests

Actions

1. Create Dockerfile
2. Build container image
3. Optimize image size
4. Push to registry
5. Test container

Copy-Paste Prompts

Use @docker-expert to containerize application for K8s

Phase 2: K8s Manifests

Skills to Invoke

• k8s-manifest-generator - Manifest generation
• kubernetes-architect - K8s architecture

Actions

1. Create Deployment
2. Configure Service
3. Set up ConfigMap
4. Create Secrets
5. Add Ingress

Copy-Paste Prompts

Use @k8s-manifest-generator to create K8s manifests

Phase 3: Helm Chart

Skills to Invoke

• helm-chart-scaffolding - Helm charts

Actions

1. Create chart structure
2. Define values.yaml
3. Add templates
4. Configure dependencies
5. Test chart

Copy-Paste Prompts

Use @helm-chart-scaffolding to create Helm chart

Phase 4: Service Mesh

Skills to Invoke

• istio-traffic-management - Istio
• linkerd-patterns - Linkerd
• service-mesh-expert - Service mesh

Actions

1. Choose service mesh
2. Install mesh
3. Configure traffic management
4. Set up mTLS
5. Add observability

Copy-Paste Prompts

Use @istio-traffic-management to configure Istio

Phase 5: Security

Skills to Invoke

• k8s-security-policies - K8s security
• mtls-configuration - mTLS

Actions

1. Configure RBAC
2. Set up NetworkPolicy
3. Enable PodSecurity
4. Configure secrets
5. Implement mTLS

Copy-Paste Prompts

Use @k8s-security-policies to secure Kubernetes cluster

Phase 6: Observability

Skills to Invoke

• grafana-dashboards - Grafana
• prometheus-configuration - Prometheus

Actions

1. Install monitoring stack
2. Configure Prometheus
3. Create Grafana dashboards
4. Set up alerts
5. Add distributed tracing

Copy-Paste Prompts

Use @prometheus-configuration to set up K8s monitoring

Phase 7: Deployment

Skills to Invoke

• deployment-engineer - Deployment
• gitops-workflow - GitOps

Actions

1. Configure CI/CD
2. Set up GitOps
3. Deploy to cluster
4. Verify deployment
5. Monitor rollout

Copy-Paste Prompts

Use @gitops-workflow to implement GitOps deployment

Quality Gates

• Containers working
• Manifests valid
• Helm chart installs
• Security configured
• Monitoring active
• Deployment successful

Related Workflow Bundles

• cloud-devops - Cloud/DevOps
• terraform-infrastructure - Infrastructure
• docker-containerization - Containers

Limitations

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.