ksail

name ksail description Use the ksail CLI to spin up and manage Kubernetes clusters (Kind/K3d/Talos/vCluster/KWOK — local via Docker; EKS — cloud via AWS) and GitOps workloads declaratively. Triggers on requests involving Kubernetes clusters, Flux/ArgoCD GitOps bootstrapping, Kind/K3d/Talos/vCluster/KWOK/EKS, multi-tenancy onboarding, OIDC authentication, or the ksail CLI/MCP server. ksail KSail bundles common Kubernetes tooling (kubectl, helm, kind, k3d, vcluster, flux, argocd, …) into a single Go binary. Only Docker is required externally. Full docs: https://ksail.devantler.tech . Treat the docs site and ksail <command> --help as the source of truth; do not paraphrase flag semantics — link users to the relevant page instead. Prerequisites ksail on PATH (see https://ksail.devantler.tech/installation/ ) Docker daemon running (required for all local cluster providers) Cloud credentials only when using non-Docker providers ( HCLOUD_TOKEN for Hetzner, OMNI_SERVICE_ACCOUNT_KEY for Omni) When to use this skill Invoke when the user asks to: Create, start, stop, update, or delete a local Kubernetes cluster Scaffold a KSail project ( ksail.yaml , native distribution config, k8s/ kustomization) Bootstrap Flux or ArgoCD on a local cluster Back up or restore cluster resources Apply, generate, validate, or watch Kubernetes workloads Export/import container images for air-gapped clusters Manage SOPS-encrypted secrets via ksail workload cipher Work with the ksail MCP server or AI chat TUI Command groups (source of truth: ksail --help ) ksail cluster … — lifecycle: init , create , update , diff , delete , start , stop , info , list , connect , switch , backup , restore , oidc (OIDC authentication: get-token ) ksail workload … — apply , create , edit , get , describe , explain , delete , logs , exec , expose , gen , validate , install , scale , rollout , scan , wait , images , export , import , watch , push , reconcile , and cipher (SOPS-based secret management: encrypt , decrypt , edit , import , rotate ) ksail tenant … — multi-tenancy: create , delete ksail open … — interfaces: web (browser UI), desktop (native app), chat (AI chat TUI powered by GitHub Copilot), mcp (MCP server — already auto-registered by this plugin) Flag-level docs live under https://ksail.devantler.tech/cli-flags/ . Reference that page for any non-trivial flag question instead of answering from memory. Typical flows Scaffold + launch a local cluster: ksail project init --name my-app # writes ksail.yaml, native config, k8s/kustomization.yaml ksail cluster create # creates + starts the cluster (Docker required) ksail cluster connect # opens K9s against the cluster Distribution is chosen via --distribution ( Vanilla , K3s , Talos , VCluster , KWOK , EKS ). Provider defaults to Docker for local distributions; Talos also supports Hetzner and Omni ; EKS requires --provider AWS and ksail cluster create is not yet functional for EKS ( cluster init only — see https://ksail.devantler.tech/distributions/eks/ ). MCP server This plugin registers the ksail MCP server via .mcp.json ( command: ksail, args: [mcp] ). All ksail cluster and ksail workload commands (including the nested ksail workload cipher SOPS operations) are exposed as consolidated MCP tools ( cluster_read , cluster_write , workload_read , workload_write ). Prefer these tools for cluster/workload operations when running inside Copilot CLI. Safety ksail cluster delete destroys clusters and (with --delete-storage ) local volumes. Confirm intent before running non-interactively. ksail cluster update may recreate clusters when immutable fields change; use --dry-run first. ksail workload cipher encrypt / rotate mutate files in-place; ensure they are committed before rotation.