fleet-upgrade-verification skillA
fleet-upgrade-verification is agent-read markdown (skill) from gke-labs/kube-agents: Reports every GKE cluster's control-plane and node-pool versions against a target version or each cluster's release-channel default, naming the members that lag and by how many minors; run again during a rollout, it shows which members started, completed or stalled since the previous run; with --readiness, it also grades each member on what would stop the upgrade, naming drain-blocking PodDisruptionBudgets, maintenance exclusions and windows, and node-pool version skew. Scans the linked GitOps r.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Fleet upgrade verification Answer "against version X, which clusters lag, by how much, and is it the control plane or a node pool" with a table read from the fleet, not from memory, and "which manifests in our GitOps repositories declare an API that version X removes" with a scan read from Git. Use it when a user asks whether an upgrade has reached every cluster, which members are behind a target, how far the fleet is from a release-channel default, or whether the repositories are ready for a target version. Run the version report again during a rollout and it also says, per member, what changed since the previous run and which members have stopped moving (see "Track a rollout across runs"). With `--readiness` it also says, per member, what would stop the upgrade: a PodDisruptionBudget that blocks every node drain, a maintenance exclusion or window, or node pools too far below the target (see "Check upgrade readiness"). For upgrade plans, runbooks and checklists, use the `gke-upgrades` skill; it links back here when the question is one these two scripts answer. "Version skew" here is the gap between a member's versions and the target. It is not …
Read the whole file at its exact version.
How to install
mdr add gke-labs/kube-agents/fleet-upgrade-verification@git:20260915.9ea6a67mdr add gke-labs/kube-agents/fleet-upgrade-verification@sha256:371ee4bb512d7b3fPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_mgoa2r5vz7xyylox)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260915.9ea6a67 latest | 2026-09-15 | 9ea6a67 | 19,951 B | A | view · diff |
| git:20260914.6499c9c | 2026-09-14 | 6499c9c | 15,675 B | A | view · diff |
| git:20260914.beee6a6 | 2026-09-14 | beee6a6 | 9,352 B | A | view · diff |
| git:20260911.d01f87e | 2026-09-11 | d01f87e | 4,670 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (19951 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
gke-labs/kube-agents · 64 stars · license Apache-2.0 · pushed 2026-09-23 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_mgoa2r5vz7xyylox GET https://markdownregistry.com/api/v1/resolve?ref=gke-labs/kube-agents/fleet-upgrade-verification GET https://markdownregistry.com/api/v1/blob/371ee4bb512d7b3f93d8b73a4767c7b727180a76d980050014d27ded1fd2b195
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.