upgrade-kube-agents SKILL.md skillB

upgrade-kube-agents from gke-labs/kube-agents is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add gke-labs/kube-agents/upgrade-kube-agents@git:20261101.e1ab9e5

Pins git:20261101.e1ab9e5 in mdr.lock. Pin the fingerprint instead.

Audit grade
B, 16 of 17 checks passed
Kind
SKILL.md skill
Repository
gke-labs/kube-agents
Path
.agents/skills/upgrade-kube-agents/SKILL.md
Versions recorded
14
Latest version
git:20261101.e1ab9e5, committed Nov 1, 2026
First version recorded
Aug 10, 2026
Size
16,049 bytes
Repository stars
124
License
Apache-2.0

Upgrade kube-agents (the Kubernetes Agentic Harness) and its operator on a GKE cluster, interactively or non-interactively. Use when asked to upgrade, update, or apply a Day-2 change to an existing kube-agents install.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Upgrade Kubernetes Agentic Harness (kube-agents)

Use this skill when asked to upgrade the `kube-agents` Platform Agent or operator on an active GKE cluster.

## Report confirmed upgrade bugs

- After an upgrade attempt, check its exit code and verify the affected workloads and preserved
  history/memory before declaring success. Check that any JSON report belongs to this attempt;
  an early refusal can leave a previous report behind. For `--plan`, exit 2 means changes, not a
  failed upgrade. For a healthy success, tell the user what was verified and file nothing.
- Diagnose failures before filing. Expired credentials, missing tools, quotas, network failures
  and invalid installation configuration need recovery guidance; file only when reproduction or
  source evidence confirms a defect in the official repository. A failed verification can reveal
  a defect even when the upgrade exited 0. Report observed availability/data impact and recovery
  options; do not automatically roll back, delete data, or change the selected installation.
- Prepare the report first and show the user what would be posted, whether or not an ask is
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add gke-labs/kube-agents/upgrade-kube-agents@sha256:cddab0f001057b66

The line at the top of this page pins the label git:20261101.e1ab9e5, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_trlmhlhlqun6jdrt.svg)](https://markdownregistry.com/a/art_trlmhlhlqun6jdrt)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 14 versions of this file, between Aug 10, 2026 and Nov 1, 2026, about one every 6 days.

versioncommittedcommitsizeaudit
git:20261101.e1ab9e5 latest2026-11-01 e1ab9e5 16,049 BB view · diff
git:20261020.1cca49f2026-10-20 1cca49f 8,755 BB view · diff
git:20261019.14640f02026-10-19 14640f0 8,190 BB view · diff
git:20261014.92f9cd42026-10-14 92f9cd4 7,840 BB view · diff
git:20260930.d61b43b2026-09-30 d61b43b 7,666 BB view · diff
git:20260929.ce9f3582026-09-29 ce9f358 7,224 BB view · diff
git:20260928.74b0b242026-09-28 74b0b24 6,775 BB view · diff
git:20260924.e1184132026-09-24 e118413 4,145 BB view · diff
git:20260922.51d3b152026-09-22 51d3b15 4,044 BB view · diff
git:20260922.daa299b2026-09-22 daa299b 3,738 BB view · diff
git:20260903.fa9c0462026-09-03 fa9c046 3,722 BB view · diff
git:20260902.f5354e62026-09-02 f5354e6 2,664 BB view · diff
git:20260820.1c06e1a2026-08-20 1c06e1a 2,502 BB view · diff
git:20260810.282ef122026-08-10 282ef12 1,875 BB view

Audit of the latest version

B  16 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • fail: No curl or wget piped into a shell (matched: curl -fsSL https://raw.githubusercontent.com/gke-labs/kube-agents/<RELEASE_VERSION>/upgrade.sh | bas)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (16049 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

gke-labs/kube-agents · 124 stars · license Apache-2.0 · pushed 2026-11-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_trlmhlhlqun6jdrt
GET https://markdownregistry.com/api/v1/resolve?ref=gke-labs/kube-agents/upgrade-kube-agents
GET https://markdownregistry.com/api/v1/blob/cddab0f001057b666bc715022efe42f60e4c8981c12891f7b16b2aaec75dec5d

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from gke-labs/kube-agents

edit-mirrored-skill SKILL.md skill
gke-labs/kube-agents · .agents/skills/edit-mirrored-skill/SKILL.md · Edit, sync or start mirroring a `gke-*` skill in `agents/platform/skills/` that is copied from google/skills. Use when…
git:20261016.ac3a849 · audit A · 124 stars
eval-fix-loop SKILL.md skill
gke-labs/kube-agents · .agents/skills/eval-fix-loop/SKILL.md · Take one failing eval case (or one root cause behind several), diagnose it from its recorded runs, classify the miss…
git:20261105.5fd8319 · audit A · 124 stars
install-kube-agents SKILL.md skill
gke-labs/kube-agents · .agents/skills/install-kube-agents/SKILL.md · Install, set up, or deploy kube-agents (the Kubernetes Agentic Harness) and its Platform Agent onto a GKE cluster in a…
git:20261105.ce5f74d · audit C · 124 stars
review-address-feedback SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-address-feedback/SKILL.md · Address review feedback on an open pull request: triage and fix findings, reply in every thread, resolve the addressed…
git:20261023.631dcf4 · audit A · 124 stars
review-adversarial SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-adversarial/SKILL.md · Reviews a change adversarially — establishes what it claims to do, hunts candidates from eleven angles, then re-derives…
git:20261023.b413863 · audit A · 124 stars
review-chat-ux SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-chat-ux/SKILL.md · Reviews a diff that changes what users read in Slack or Google Chat against the chat UX rules, and reports each…
git:20261105.db3b31b · audit A · 124 stars
review-docs-drift SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-docs-drift/SKILL.md · Reviews a pull request for documentation drift — finds which docs the change should have updated, verifies doc claims…
git:20261030.59401a3 · audit A · 124 stars
review-preflight SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-preflight/SKILL.md · Runs the pre-PR review passes — adversarial and docs-drift, required on every change, plus chat UX when chat output…
git:20261105.db3b31b · audit A · 124 stars
review-security-k8s-admission SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-admission/SKILL.md · Reviews Kubernetes Admission Control (Webhooks, VAP/MAP) for vulnerabilities.
git:20260522.4bbd4a0 · audit A · 124 stars
review-security-k8s-agents-audit-logs SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-audit-logs/SKILL.md · Reviews Kubernetes and application audit logging for AI agents, ensuring tamper-proof observability.
git:20260521.2bcbdef · audit A · 124 stars
review-security-k8s-agents-credentials SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-credentials/SKILL.md · Reviews AI agent Kubernetes configurations for credentials exposed to agents.
git:20260521.2bcbdef · audit A · 124 stars
review-security-k8s-agents-data-exfil SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-data-exfil/SKILL.md · Reviews Kubernetes configurations to prevent data exfiltration by AI agents.
git:20260521.2bcbdef · audit A · 124 stars

Every file in gke-labs/kube-agents

Browse by kind, by grade B, or by owner.