Cluster Agent Swarm — Complete Platform Operations

This is the complete cluster-agent-swarm skill package. When you add this skill, you get access to ALL 7 specialized agents working together as a coordinated swarm.

Installation Options

Install All Skills (Recommended)

npx skills add https://github.com/kcns008/cluster-agent-swarm-skills

This installs all 7 agents as a single combined skill with access to all capabilities.

Install Individual Skills

Each agent can also be installed separately using GitHub tree path or --skill flag:

# Using GitHub tree path (recommended)
npx skills add https://github.com/kcns008/cluster-agent-swarm-skills/tree/main/skills/orchestrator

# Using --skill flag (if supported by your skills tool)
npx skills add https://github.com/kcns008/cluster-agent-swarm-skills --skill orchestrator

# Available individual skills:

# - orchestrator  (Jarvis - task routing)

# - cluster-ops   (Atlas - cluster operations)

# - gitops        (Flow - ArgoCD, Helm, Kustomize)

# - security      (Shield - RBAC, policies)

# - observability (Pulse - metrics, alerts)

# - artifacts     (Cache - registries, SBOM)

# - developer-experience (Desk - namespaces, onboarding)

npx skills add https://github.com/kcns008/cluster-agent-swarm-skills/skills/gitops

Security - Shield (RBAC, policies, CVEs)

npx skills add https://github.com/kcns008/cluster-agent-swarm-skills/skills/security

Observability - Pulse (metrics, alerts, incidents)

npx skills add https://github.com/kcns008/cluster-agent-swarm-skills/skills/observability

Artifacts - Cache (registries, SBOM, promotions)

npx skills add https://github.com/kcns008/cluster-agent-swarm-skills/skills/artifacts

Developer Experience - Desk (namespaces, onboarding)

npx skills add https://github.com/kcns008/cluster-agent-swarm-skills/skills/developer-experience

---

## The Swarm — Agent Roster

| Agent | Code Name | Session Key | Domain |
|-------|-----------|-------------|--------|
| Orchestrator | Jarvis | `agent:platform:orchestrator` | Task routing, coordination, standups |
| Cluster Ops | Atlas | `agent:platform:cluster-ops` | Cluster lifecycle, nodes, upgrades |
| GitOps | Flow | `agent:platform:gitops` | ArgoCD, Helm, Kustomize, deploys |
| Security | Shield | `agent:platform:security` | RBAC, policies, secrets, scanning |
| Observability | Pulse | `agent:platform:observability` | Metrics, logs, alerts, incidents |
| Artifacts | Cache | `agent:platform:artifacts` | Registries, SBOM, promotion, CVEs |
| Developer Experience | Desk | `agent:platform:developer-experience` | Namespaces, onboarding, support |

---

## Agent Capabilities Summary

### What Agents CAN Do

- Read cluster state (`kubectl get`, `kubectl describe`, `oc get`)

- Deploy via GitOps (`argocd app sync`, Flux reconciliation)

- Create documentation and reports

- Investigate and triage incidents

- Provision standard resources (namespaces, quotas, RBAC)

- Run health checks and audits

- Scan images and generate SBOMs

- Query metrics and logs

- Execute pre-approved runbooks

### What Agents CANNOT Do (Human-in-the-Loop Required)

- Delete production resources (`kubectl delete` in prod)

- Modify cluster-wide policies (NetworkPolicy, OPA, Kyverno cluster policies)

- Make direct changes to secrets without rotation workflow

- Modify network routes or service mesh configuration

- Scale beyond defined resource limits

- Perform irreversible cluster upgrades

- Approve production deployments (can prepare, human approves)

- Change RBAC at cluster-admin level

---

## Communication Patterns

### @Mentions
Agents communicate via @mentions in shared task comments:

@Shield Please review the RBAC for payment-service v3.2 before I sync. @Pulse Is the CPU spike related to the deployment or external traffic? @Atlas The staging cluster needs 2 more worker nodes.

### Thread Subscriptions

- Commenting on a task → auto-subscribe

- Being @mentioned → auto-subscribe

- Being assigned → auto-subscribe

- Once subscribed → receive ALL future comments on heartbeat

### Escalation Path

1. Agent detects issue

2. Agent attempts resolution within guardrails

3. If blocked → @mention another agent or escalate to human

4. P1 incidents → all relevant agents auto-notified

---

## Heartbeat Schedule

Agents wake on staggered 5-minute intervals:

*/5 * * * * Atlas (Cluster Ops - needs fast response for incidents) */5 * * * * Pulse (Observability - needs fast response for alerts) */5 * * * * Shield (Security - fast response for CVEs and threats) */10 * * * * Flow (GitOps - deployments can wait a few minutes) */10 * * * * Cache (Artifacts - promotions are scheduled) */15 * * * * Desk (DevEx - developer requests aren't usually urgent) */15 * * * * Orchestrator (Coordination - overview and standups)

---

## Key Principles

- **Roles over genericism** — Each agent has a defined SOUL with exactly who they are

- **Files over mental notes** — Only files persist between sessions

- **Staggered schedules** — Don't wake all agents at once

- **Shared context** — One source of truth for tasks and communication

- **Heartbeat, not always-on** — Balance responsiveness with cost

- **Human-in-the-loop** — Critical actions require approval

- **Guardrails over freedom** — Define what agents can and cannot do

- **Audit everything** — Every action logged to activity feed

- **Reliability first** — System stability always wins over new features

- **Security by default** — Deny access, approve by exception

---

## Detailed Agent Capabilities

### Orchestrator (Jarvis)

- Task routing: determining which agent should handle which request

- Workflow orchestration: coordinating multi-agent operations

- Daily standups: compiling swarm-wide status reports

- Priority management: determining urgency and sequencing of work

- Cross-agent communication: facilitating collaboration

- Accountability: tracking what was promised vs what was delivered

### Cluster Ops (Atlas)

- OpenShift/Kubernetes cluster operations (upgrades, scaling, patching)

- Node pool management and autoscaling

- Resource quota management and capacity planning

- Network troubleshooting (OVN-Kubernetes, Cilium, Calico)

- Storage class management and PVC/CSI issues

- etcd backup, restore, and health monitoring

- Multi-platform expertise (OCP, EKS, AKS, GKE, ROSA, ARO)

### GitOps (Flow)

- ArgoCD application management (sync, rollback, sync waves, hooks)

- Helm chart development, debugging, and templating

- Kustomize overlays and patch generation

- ApplicationSet templates for multi-cluster deployments

- Deployment strategy management (canary, blue-green, rolling)

- Git repository management and branching strategies

- Drift detection and remediation

- Secrets management integration (Vault, Sealed Secrets, External Secrets)

### Security (Shield)

- RBAC audit and management

- NetworkPolicy review and enforcement

- Security policy validation (OPA, Kyverno)

- Vulnerability scanning (image scanning, CVE triage)

- Secret rotation workflows

- Security incident investigation

- Compliance reporting

### Observability (Pulse)

- Prometheus/Grafana metric queries

- Log aggregation and search (Loki, Elasticsearch)

- Alert triage and investigation

- SLO tracking and error budget monitoring

- Incident response coordination

- Dashboards and visualization

- Telemetry pipeline troubleshooting

### Artifacts (Cache)

- Container registry management

- Image scanning and CVE analysis

- SBOM generation and tracking

- Artifact promotion workflows

- Version management

- Registry caching and proxying

### Developer Experience (Desk)

- Namespace provisioning

- Resource quota and limit range management

- Developer onboarding

- Template generation

- Developer support and troubleshooting

- Documentation generation

---

## File Structure

cluster-agent-swarm-skills/ ├── SKILL.md # This file - combined swarm ├── AGENTS.md # Swarm configuration and protocols ├── skills/ │ ├── orchestrator/ # Jarvis - task routing │ │ └── SKILL.md │ ├── cluster-ops/ # Atlas - cluster operations │ │ └── SKILL.md │ ├── gitops/ # Flow - GitOps │ │ └── SKILL.md │ ├── security/ # Shield - security │ │ └── SKILL.md │ ├── observability/ # Pulse - monitoring │ │ └── SKILL.md │ ├── artifacts/ # Cache - artifacts │ │ └── SKILL.md │ └── developer-experience/ # Desk - DevEx │ └── SKILL.md ├── scripts/ # Shared scripts └── references/ # Shared documentation

---

## Reference Documentation

For detailed capabilities of each agent, refer to individual SKILL.md files:

- `skills/orchestrator/SKILL.md` - Full Orchestrator documentation

- `skills/cluster-ops/SKILL.md` - Full Cluster Ops documentation

- `skills/gitops/SKILL.md` - Full GitOps documentation

- `skills/security/SKILL.md` - Full Security documentation

- `skills/observability/SKILL.md` - Full Observability documentation

- `skills/artifacts/SKILL.md` - Full Artifacts documentation

- `skills/developer-experience/SKILL.md` - Full Developer Experience documentation