Why is 127.0.0.1 enforced for port forwarding?

Binding specifically to 127.0.0.1 is a critical security requirement to ensure local development services are not accidentally exposed to the wider network or the public internet.

Is OrbStack required to use these standards?

The standards are optimized for OrbStack (using the orbstack kubeContext), but the Skaffold patterns and security configurations are applicable to most local Kubernetes environments.

Does it support database migrations?

Yes, the standards include patterns for init containers and specific profiles like 'db-only' to handle database initialization and migration testing separately from application code.

How does it improve build performance?

It enables BuildKit, uses the Docker CLI for better caching, and sets concurrency to unlimited to maximize parallel building of container images.

How does this skill handle Kubernetes secrets?

It integrates with dotenvx to decrypt values from .env files and generate Kubernetes Secret manifests through automated pre-build and pre-deploy hooks.

Skaffold Standards for Kubernetes

Name: Skaffold Standards for Kubernetes
Author: laurigates

bylaurigates

•

部署与 DevOps

Standardizes local Kubernetes development workflows using Skaffold, OrbStack, and dotenvx for secure secret management.

This skill provides a standardized framework for configuring Skaffold in local Kubernetes development environments. It focuses on best practices for performance and security, including BuildKit-optimized builds, secure localhost-only port forwarding, and seamless integration with dotenvx for managing encrypted secrets. By offering pre-defined profiles for specific scenarios like database-only or service-only development, it allows developers to quickly spin up modular environments tailored to their current task while maintaining a consistent and compliant infrastructure-as-code baseline.

主要功能

01Optimized local Kubernetes build and deployment configurations

029 GitHub stars

03Automated Kubernetes secret generation via dotenvx integration

04Modular development profiles (db-only, services-only, e2e)

05Standardized OrbStack and kubectl context management

06Secure 127.0.0.1 port forwarding enforcement

使用场景

01Optimizing Skaffold build performance using BuildKit and local caching

02Implementing encrypted secret management for local dev workflows

03Configuring a new local Kubernetes development environment with OrbStack

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add laurigates/claude-plugins skaffold-standards

For use in Claude.ai and ChatGPT

Download Skill