k8s-rbac-troubleshooting

95 / 100 · Low risk

Fine to try. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By k8s-servant/k8s-skills (GitHub) · devops · 38 stars · scanned at commit 74d5a21

Use when a Kubernetes request is refused by RBAC: "Error from server (Forbidden)", "User ... cannot list resource ... in the namespace" or "at the cluster scope", a ServiceAccount, controller, CI job or person getting 403, a RoleBinding that does not seem to apply (wrong namespace, wrong subject, a ClusterRole bound with a RoleBinding), "is attempting to grant RBAC permissions not currently held", "roleRef ... field is immutable", 401 Unauthorized versus 403 Forbidden, or a custom resource that…

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a devops skill.

Found in 10 places.

skills/k8s-rbac-troubleshooting/SKILL.md, line 66kubectl logs -n my-namespace deployment/my-app --tail=50
skills/k8s-rbac-troubleshooting/SKILL.md, line 75kubectl get pods -n my-namespace -l app=my-app -o jsonpath='{range .items[*]}{.metadata.name}{" sa="}{.spec.serviceAccountName}{" automount="}{.spec.automountSe
skills/k8s-rbac-troubleshooting/SKILL.md, line 84kubectl auth can-i list configmaps -n my-namespace --as=system:serviceaccount:my-namespace:my-app

Show 7 more

skills/k8s-rbac-troubleshooting/SKILL.md, line 93kubectl get rolebindings -n my-namespace -o wide
skills/k8s-rbac-troubleshooting/SKILL.md, line 104kubectl get role my-role -n my-namespace -o yaml
skills/k8s-rbac-troubleshooting/SKILL.md, line 160kubectl apply -f my-app-role.yaml
skills/k8s-rbac-troubleshooting/SKILL.md, line 171kubectl create clusterrolebinding my-app-node-reader --clusterrole=my-app-node-reader --serviceaccount=my-namespace:my-app
skills/k8s-rbac-troubleshooting/SKILL.md, line 180kubectl get rolebinding my-binding -n my-namespace -o yaml
skills/k8s-rbac-troubleshooting/SKILL.md, line 186kubectl delete rolebinding my-binding -n my-namespace
skills/k8s-rbac-troubleshooting/SKILL.md, line 197kubectl rollout restart deployment/my-app -n my-namespace

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'k8s-rbac-troubleshooting' ] || [ -L ~/.agents/skills/'k8s-rbac-troubleshooting' ]; then echo 'A skill folder named k8s-rbac-troubleshooting already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/k8s-servant/k8s-skills' "$d" && git -C "$d" checkout --quiet '74d5a211e1bf7cd3696b4a5ba2110d24a49f3ae7' -- 'skills/k8s-rbac-troubleshooting' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/k8s-rbac-troubleshooting' ~/.agents/skills/'k8s-rbac-troubleshooting' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'k8s-rbac-troubleshooting' ~/.claude/skills/'k8s-rbac-troubleshooting' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for k8s-servant/k8s-skills shows the score of its lowest-scoring skill.

SkillTrust badge for k8s-servant/k8s-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/k8s-servant/k8s-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/k8s-servant/k8s-skills/)

Score history

Date	Version	Score
2026-11-13	`74d5a21`	95
2026-11-09	`de23b57`	95
2026-11-07	`bfaba9c`	100