k8s-storage SKILL.md skillA

k8s-storage from hoangminhung/devops-ai-kit is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add hoangminhung/devops-ai-kit/k8s-storage@git:20261028.645512f

Pins git:20261028.645512f in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
hoangminhung/devops-ai-kit
Path
claude/skills/k8s-storage/SKILL.md
Versions recorded
1
Latest version
git:20261028.645512f, committed Oct 28, 2026
Size
3,356 bytes
Repository stars
5
License
MIT

Kubernetes storage standards — choosing CSI drivers and access modes, StorageClass settings (reclaim policy, binding mode, expansion), Longhorn operations (replicas, data locality, backups, recurring jobs, upgrades), snapshots vs backups, and avoiding double replication for apps that replicate themselves. Use whenever creating or changing StorageClasses, PVCs for databases or monitoring, Longhorn configuration, volume backups, or when planning stateful workloads on Kubernetes.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Kubernetes storage standards

<!-- devops-ai-kit · Last reviewed: 2026-10-28 -->

## Choose the storage type & access mode

- **MUST** Databases (PostgreSQL, MySQL…): block storage with `ReadWriteOnce` or `ReadWriteOncePod`. Do not use NFS / RWX for a database engine. This includes Longhorn RWX, which runs through an NFS share-manager.
- **SHOULD** Shared data (uploads, shared assets): prefer moving the app to object storage (S3 API). RWX through NFS CSI / CephFS / Longhorn RWX is **CONTEXT**, for when the app cannot be changed.
- **SHOULD** Apps that replicate their own data (PostgreSQL with replicas, Loki / Prometheus HA, Kafka, Elasticsearch): think about fewer replicas at the storage layer. Avoid "replication on top of replication": 3 Longhorn copies × 3 app replicas = 9 copies of the data, 3 times the disk cost and the write latency.

## StorageClass

- **MUST** Production uses `reclaimPolicy: Retain` for important data. The default `Delete` means deleting the PVC also deletes the data.
- **SHOULD** `allowVolumeExpansion: true`.
- **CONTEXT** `volumeBindingMode: WaitForFirstConsumer`:
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add hoangminhung/devops-ai-kit/k8s-storage@sha256:a1d4447727fcf34e

The line at the top of this page pins the label git:20261028.645512f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_wqxqeojuiuhbwqzg.svg)](https://markdownregistry.com/a/art_wqxqeojuiuhbwqzg)

0 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 28, 2026.

versioncommittedcommitsizeaudit
git:20261028.645512f latest2026-10-28 645512f 3,356 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3356 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

hoangminhung/devops-ai-kit · 5 stars · license MIT · pushed 2026-11-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_wqxqeojuiuhbwqzg
GET https://markdownregistry.com/api/v1/resolve?ref=hoangminhung/devops-ai-kit/k8s-storage
GET https://markdownregistry.com/api/v1/blob/a1d4447727fcf34e6d4eea4f358af97657a5540aeb36b96171a46d6854574267

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hoangminhung/devops-ai-kit

cloud-platforms SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/cloud-platforms/SKILL.md · Design standards for cloud and on-prem infrastructure — Azure, AWS, GCP, Hetzner, OVHcloud and bare-metal data centers…
git:20261028.645512f · audit A · 5 stars
container-supply-chain SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/container-supply-chain/SKILL.md · Container and software supply-chain security in CI/CD — vulnerability scanning gates with Trivy or Grype, SBOM…
git:20261028.645512f · audit A · 5 stars
db-reliability SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/db-reliability/SKILL.md · Database reliability engineering standards for PostgreSQL (and MySQL) on Kubernetes — zero-downtime schema changes with…
git:20261028.645512f · audit A · 5 stars
disaster-recovery SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/disaster-recovery/SKILL.md · Backup and disaster-recovery standards — defining RTO/RPO, 3-2-1 and offsite copies, immutable backups (S3 Object Lock…
git:20261028.645512f · audit A · 5 stars
finops SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/finops/SKILL.md · Cloud cost-control standards — cost estimation gates for Terraform changes (Infracost), NAT and data-transfer costs…
git:20261028.645512f · audit A · 5 stars
grill-me SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/grill-me/SKILL.md · Interview the user in short rounds to fill in missing context before acting — goal, scope, target environment…
git:20261028.34f57d4 · audit A · 5 stars
infra-docs SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-docs/SKILL.md · Write infrastructure documentation based on real evidence — change records of what was changed and why…
git:20261101.e2f12a4 · audit A · 5 stars
infra-rulebook SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-rulebook/SKILL.md · Map an infrastructure repo's files to the devops-ai-kit technology rules (Terraform, Ansible, Kubernetes, Helm, Argo…
git:20261031.84caac1 · audit A · 5 stars
infra-scout SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-scout/SKILL.md · Onboard an infrastructure repo — read its Terraform (folders, backends, workspaces, provider versions), Helm charts and…
git:20261103.8a00cbc · audit B · 5 stars
infra-task SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-task/SKILL.md · Run a risky infrastructure change end-to-end — recon of the live state, version research, a written plan, independent…
git:20261101.756f384 · audit A · 5 stars
k8s-networking SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-networking/SKILL.md · Kubernetes networking standards — Gateway API versus Ingress, migrating off the retired ingress-nginx controller…
git:20261028.645512f · audit A · 5 stars
pki-secrets SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/pki-secrets/SKILL.md · Certificate, secret and access-management standards — cert-manager with ACME (HTTP-01/DNS-01) or Vault PKI…
git:20261101.8158acd · audit A · 5 stars

Every file in hoangminhung/devops-ai-kit

Browse by kind, by grade A, or by owner.