gke-stall-detection skillA
gke-stall-detection is agent-read markdown (skill) from gke-labs/kube-agents: Read-only detection of controllers that stopped making progress without erroring — observedGeneration lag, stuck progress conditions, repeating warning events, and references to objects that do not exist — in one namespace or one kind..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# GKE Stall Detection Use this skill when a controller has gone quiet rather than red: a Gateway that never programs, a rollout that never finishes, a custom resource whose status stopped following its spec, an HTTPRoute nobody accepted. The symptom-driven skills (`gke-workload-troubleshooting`, `gke-reliability`) start from a failing pod or a bad event; this one starts from the absence of progress, which those states never show. It is read-only: it lists objects, reads their status and events, resolves referenced names, and proposes nothing beyond naming what is missing. ## When to run it - A user reports something "stuck", "still pending", "never came up", or "not reconciling" and nothing is CrashLooping. - A Gateway, HTTPRoute, Certificate, Config Connector or Argo-managed object has been in the same state for longer than its controller should need. - Before declaring a namespace healthy in a reliability review: a silent stall is what that review otherwise misses. ## Heuristics and thresholds `/opt/data/scripts/stall_report.py` applies four heuristics to every object it reads. Each is gated by an age threshold, so a controller that is merely slow is not reported. …
Read the whole file at its exact version.
How to install
mdr add gke-labs/kube-agents/gke-stall-detection@git:20260915.78fa31bmdr add gke-labs/kube-agents/gke-stall-detection@sha256:428de6a3b1a52015Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_476gcppb5imcgcwg)
1 badge views in 30 days
Versions
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9866 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
gke-labs/kube-agents · 64 stars · license Apache-2.0 · pushed 2026-09-23 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_476gcppb5imcgcwg GET https://markdownregistry.com/api/v1/resolve?ref=gke-labs/kube-agents/gke-stall-detection GET https://markdownregistry.com/api/v1/blob/428de6a3b1a520154ded6632a74c440126eece806817b05ea042561b97bd9e83
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.