{"id":"666702e2-55ba-41a1-890d-e357c88e671c","shortId":"M5mzbc","kind":"skill","title":"gitops-knowledge","tagline":"Flux CD and Flux Operator expert — answers questions and generates schema-validated YAML for all Flux CRDs (not repo auditing or live cluster debugging). Use when users ask about Flux concepts, want manifests for HelmRelease, Kustomization, GitRepository, OCIRepository, ResourceS","description":"# Flux CD Knowledge Base\n\nYou are an expert on Flux CD, the GitOps toolkit for Kubernetes. Use this knowledge base\nto answer questions accurately, generate correct YAML manifests, and explain Flux concepts.\n\n**Rules:**\n- Always use the exact apiVersion/kind combinations from the CRD table below. Never invent API versions.\n- Before generating YAML for any CRD, read its OpenAPI schema from `assets/schemas/` to verify field names, types, and enum values.\n- When a question requires detail beyond this file, load the relevant reference file from `references/`.\n- Prefer Flux Operator (FluxInstance) for cluster setup. Do not reference `flux bootstrap` or legacy `gotk-*` files.\n\n## What is Flux\n\nFlux is a set of Kubernetes controllers that implement GitOps — the practice of using Git\n(or OCI registries) as the source of truth for declarative infrastructure and applications.\nFlux continuously reconciles the desired state stored in sources with the actual state of\nthe cluster.\n\n**Flux Operator** manages the Flux installation declaratively through a `FluxInstance` custom\nresource. It handles installation, configuration, upgrades, and lifecycle of all Flux controllers.\nOnly one FluxInstance named `flux` can exist per cluster.\n\n**How resources relate:**\n\n```\nSources (Git, OCI, Helm, Bucket)\n  │\n  ▼ produce artifacts\nArtifacts (tarballs, Helm charts, OCI layers)\n  │\n  ▼ consumed by\nAppliers (Kustomization, HelmRelease)\n  │\n  ▼ create/update\nManaged Resources (Deployments, Services, ConfigMaps, ...)\n  │\n  ▼ status reported to\nNotifications (Provider + Alert → Slack, Teams, GitHub, ...)\n```\n\n**ResourceSet orchestration flow:**\n\n```\nResourceSetInputProvider (GitHub PRs, OCI tags, ...)\n  │\n  ▼ exports inputs\nResourceSet (template + input matrix)\n  │\n  ▼ generates per-input\nNamespaces, Sources, Kustomizations, HelmReleases, RBAC, ...\n```\n\n**Two delivery models:**\n- **Git-based:** Flux watches Git repositories and applies changes on commit.\n- **Gitless (OCI-based):** Git → CI pushes OCI artifacts → Flux pulls from registry. OCI artifacts\n  are immutable, signed, and don't require Git credentials on clusters.\n\n## Controllers and CRDs\n\n| Kind | apiVersion | Controller | Purpose |\n|------|-----------|------------|---------|\n| FluxInstance | fluxcd.controlplane.io/v1 | flux-operator | Manages Flux installation lifecycle |\n| FluxReport | fluxcd.controlplane.io/v1 | flux-operator | Read-only observed state of Flux |\n| ResourceSet | fluxcd.controlplane.io/v1 | flux-operator | Template resources from input matrix |\n| ResourceSetInputProvider | fluxcd.controlplane.io/v1 | flux-operator | Fetch inputs from external services |\n| GitRepository | source.toolkit.fluxcd.io/v1 | source-controller | Fetch from Git repositories |\n| OCIRepository | source.toolkit.fluxcd.io/v1 | source-controller | Fetch OCI artifacts from registries |\n| HelmRepository | source.toolkit.fluxcd.io/v1 | source-controller | Index Helm chart repositories |\n| HelmChart | source.toolkit.fluxcd.io/v1 | source-controller | Fetch and package Helm charts |\n| Bucket | source.toolkit.fluxcd.io/v1 | source-controller | Fetch from S3-compatible storage |\n| ExternalArtifact | source.toolkit.fluxcd.io/v1 | (external) | Generic artifact storage for 3rd-party controllers |\n| ArtifactGenerator | source.extensions.fluxcd.io/v1beta1 | source-controller | Compose/decompose artifacts from multiple sources |\n| Kustomization | kustomize.toolkit.fluxcd.io/v1 | kustomize-controller | Build and apply Kustomize overlays or plain YAML |\n| HelmRelease | helm.toolkit.fluxcd.io/v2 | helm-controller | Install and manage Helm releases |\n| Provider | notification.toolkit.fluxcd.io/v1beta3 | notification-controller | External notification provider config |\n| Alert | notification.toolkit.fluxcd.io/v1beta3 | notification-controller | Route events to notification providers |\n| Receiver | notification.toolkit.fluxcd.io/v1 | notification-controller | Webhook receiver for incoming events |\n| ImageRepository | image.toolkit.fluxcd.io/v1 | image-reflector-controller | Scan container image registries |\n| ImagePolicy | image.toolkit.fluxcd.io/v1 | image-reflector-controller | Select image by version policy |\n| ImageUpdateAutomation | image.toolkit.fluxcd.io/v1 | image-automation-controller | Update YAML in Git with new image tags |\n\n## How Flux Works\n\n### Reconciliation Loop\n\nFlux controllers run a continuous reconciliation loop:\n\n1. **Sources poll for changes** — source-controller checks Git repos, OCI registries, Helm repos,\n   or S3 buckets at configured intervals and produces versioned artifacts.\n2. **Appliers consume artifacts** — kustomize-controller and helm-controller detect new artifact\n   revisions, build manifests (Kustomize overlays or Helm templates), and apply them to the cluster\n   using server-side apply.\n3. **Drift detection and self-healing** — Flux compares the desired state from the source with the\n   live state in the cluster. When drift is detected, Flux corrects it automatically (if enabled).\n4. **Notifications report status** — notification-controller sends events to external systems\n   (Slack, Teams, GitHub commit status, etc.) based on Alert rules.\n\n### Dependency Ordering\n\nUse `dependsOn` to control reconciliation order. For example, install CRDs before CRs,\nor infrastructure before applications:\n\n```yaml\nspec:\n  dependsOn:\n    - name: infra-controllers  # wait for this Kustomization to be Ready\n```\n\nResourceSets support richer dependencies with `readyExpr` (CEL expressions) and can depend on any type of resource:\n\n```yaml\nspec:\n  dependsOn:\n    - apiVersion: fluxcd.controlplane.io/v1\n      kind: ResourceSet\n      name: policies\n      ready: true\n      readyExpr: \"status.conditions.filter(e, e.type == 'Ready').all(e, e.status == 'True')\"\n```\n\n### Reactivity with Watch Labels\n\nBy default, Flux controllers poll sources at the configured interval. To react immediately\nwhen a dependency changes, add the watch label to the upstream resource:\n\n```yaml\nmetadata:\n  labels:\n    reconcile.fluxcd.io/watch: Enabled\n```\n\nWhen a ConfigMap or Secret with this label changes, any Kustomization or HelmRelease that\nreferences it via `postBuild.substituteFrom` or `valuesFrom` will reconcile immediately.\n\n## Decision Trees\n\n### Which Source Type?\n\n- **Git repo with Kustomize overlays or plain YAML** → `GitRepository`\n- **OCI artifact (container image with manifests)** → `OCIRepository`\n- **Helm chart from OCI registry** → `OCIRepository` with `layerSelector` for Helm media type\n- **Helm chart from HTTPS Helm repo** → `HelmRepository` (default type)\n- **S3/GCS/MinIO bucket** → `Bucket`\n- **Monorepo that needs splitting** → `ArtifactGenerator` (creates `ExternalArtifact` per path)\n- **Helm chart + env-specific values from Git** → `ArtifactGenerator` (composes chart with values overlay)\n\n### Kustomization vs HelmRelease?\n\n- **Plain YAML or Kustomize overlays** → `Kustomization`\n- **Helm chart** → `HelmRelease`\n- Both can deploy to remote clusters via `kubeConfig` and support `dependsOn`.\n\n### ResourceSet vs Kustomization?\n\n- **One set of manifests, one deployment** → `Kustomization`\n- **Same template deployed for N inputs (tenants, components, environments)** → `ResourceSet`\n- ResourceSets generate resources from an input matrix; Kustomizations apply a fixed set of manifests.\n\n### How to Set Up GitOps from Scratch\n\n1. Install Flux Operator (Helm chart or Terraform)\n2. Create a `FluxInstance` named `flux` in the `flux-system` namespace\n3. Configure `.spec.sync` to point to your Git repo or OCI registry\n4. Organize manifests in the source repo using Kustomize base+overlay pattern\n5. Create `Kustomization` resources to apply manifests from the source\n6. Add `Provider` + `Alert` for notifications\n\n## Canonical YAML Patterns\n\n### 1. GitOps Pipeline (GitRepository + Kustomization)\n\n```yaml\napiVersion: source.toolkit.fluxcd.io/v1\nkind: GitRepository\nmetadata:\n  name: my-app\n  namespace: flux-system\nspec:\n  interval: 5m\n  url: https://github.com/org/my-app.git\n  ref:\n    branch: main\n  secretRef:\n    name: git-credentials  # optional, for private repos\n---\napiVersion: kustomize.toolkit.fluxcd.io/v1\nkind: Kustomization\nmetadata:\n  name: my-app\n  namespace: flux-system\nspec:\n  interval: 10m\n  sourceRef:\n    kind: GitRepository\n    name: my-app\n  path: ./deploy/production\n  prune: true\n  wait: true\n  timeout: 5m\n```\n\n### 2. Helm from HTTPS Repository\n\n```yaml\napiVersion: source.toolkit.fluxcd.io/v1\nkind: HelmRepository\nmetadata:\n  name: metrics-server\n  namespace: kube-system\nspec:\n  interval: 1h\n  url: https://kubernetes-sigs.github.io/metrics-server/\n---\napiVersion: helm.toolkit.fluxcd.io/v2\nkind: HelmRelease\nmetadata:\n  name: metrics-server\n  namespace: kube-system\nspec:\n  interval: 30m\n  chart:\n    spec:\n      chart: metrics-server\n      version: \"3.x\"\n      sourceRef:\n        kind: HelmRepository\n        name: metrics-server\n  values:\n    args:\n      - --kubelet-insecure-tls\n```\n\n### 3. Helm from OCI Registry (Recommended)\n\n```yaml\napiVersion: source.toolkit.fluxcd.io/v1\nkind: OCIRepository\nmetadata:\n  name: cert-manager-chart\n  namespace: cert-manager\nspec:\n  interval: 1h\n  url: oci://quay.io/jetstack/charts/cert-manager\n  layerSelector:\n    mediaType: \"application/vnd.cncf.helm.chart.content.v1.tar+gzip\"\n    operation: copy\n  ref:\n    semver: \"1.x\"\n---\napiVersion: helm.toolkit.fluxcd.io/v2\nkind: HelmRelease\nmetadata:\n  name: cert-manager\n  namespace: cert-manager\nspec:\n  interval: 1h\n  chartRef:\n    kind: OCIRepository\n    name: cert-manager-chart\n  install:\n    strategy:\n      name: RetryOnFailure\n      retryInterval: 5m\n  upgrade:\n    strategy:\n      name: RetryOnFailure\n      retryInterval: 5m\n  values:\n    crds:\n      enabled: true\n```\n\n### 4. FluxInstance with OCI Sync (Gitless GitOps)\n\n```yaml\napiVersion: fluxcd.controlplane.io/v1\nkind: FluxInstance\nmetadata:\n  name: flux\n  namespace: flux-system\nspec:\n  distribution:\n    version: \"2.x\"\n    registry: \"ghcr.io/fluxcd\"\n  components:\n    - source-controller\n    - source-watcher\n    - kustomize-controller\n    - helm-controller\n    - notification-controller\n  cluster:\n    type: kubernetes\n    size: medium\n    multitenant: true\n    tenantDefaultServiceAccount: flux\n    networkPolicy: true\n  sync:\n    kind: OCIRepository\n    url: \"oci://ghcr.io/my-org/fleet-manifests\"\n    ref: \"latest\"\n    path: \"clusters/production\"\n    pullSecret: \"registry-auth\"\n```\n\n### 5. ResourceSet for Multi-Component Orchestration\n\n```yaml\napiVersion: fluxcd.controlplane.io/v1\nkind: ResourceSet\nmetadata:\n  name: apps\n  namespace: flux-system\n  annotations:\n    fluxcd.controlplane.io/reconcileEvery: \"5m\"\nspec:\n  dependsOn:\n    - apiVersion: fluxcd.controlplane.io/v1\n      kind: ResourceSet\n      name: infra\n      ready: true\n  inputs:\n    - tenant: \"frontend\"\n      tag: \"latest\"\n      environment: \"production\"\n    - tenant: \"backend\"\n      tag: \"latest\"\n      environment: \"production\"\n  resources:\n    - apiVersion: v1\n      kind: Namespace\n      metadata:\n        name: << inputs.tenant >>\n        labels:\n          toolkit.fluxcd.io/role: \"tenant\"\n    - apiVersion: v1\n      kind: ServiceAccount\n      metadata:\n        name: flux\n        namespace: << inputs.tenant >>\n    - apiVersion: rbac.authorization.k8s.io/v1\n      kind: RoleBinding\n      metadata:\n        name: flux\n        namespace: << inputs.tenant >>\n      roleRef:\n        apiGroup: rbac.authorization.k8s.io\n        kind: ClusterRole\n        name: admin\n      subjects:\n        - kind: ServiceAccount\n          name: flux\n          namespace: << inputs.tenant >>\n    - apiVersion: source.toolkit.fluxcd.io/v1\n      kind: OCIRepository\n      metadata:\n        name: apps\n        namespace: << inputs.tenant >>\n      spec:\n        interval: 5m\n        url: \"oci://ghcr.io/my-org/apps/<< inputs.tenant >>\"\n        ref:\n          tag: << inputs.tag >>\n    - apiVersion: kustomize.toolkit.fluxcd.io/v1\n      kind: Kustomization\n      metadata:\n        name: apps\n        namespace: << inputs.tenant >>\n      spec:\n        targetNamespace: << inputs.tenant >>\n        serviceAccountName: flux\n        interval: 30m\n        retryInterval: 5m\n        wait: true\n        timeout: 5m\n        sourceRef:\n          kind: OCIRepository\n          name: apps\n        path: \"./<< inputs.environment >>\"\n        prune: true\n```\n\n### 6. Image Automation\n\nFlux supports two delivery models for updating container images and Helm chart versions.\nPick based on whether the team wants Git commits as the audit log for version changes:\n\n- **Git-based** — `ImageRepository` + `ImagePolicy` + `ImageUpdateAutomation` scan the\n  registry and commit tag bumps back to Git via `$imagepolicy` YAML markers. Requires\n  `image-reflector-controller` and `image-automation-controller` on the cluster. Load\n  `references/image-automation.md`.\n- **Gitless** — `ResourceSet` + `ResourceSetInputProvider` (`type: OCIArtifactTag`)\n  scans the registry and re-renders the `ResourceSet` directly, upgrading the downstream\n  `HelmRelease` or `Kustomization` without touching Git. No bot credentials, no Git\n  poll lag, no extra controllers. Recommended default for Flux Operator deployments.\n  Load `references/gitless-image-automation.md`.\n\nGitless is the better fit when the tag lives in Helm values, when tags should differ per\ncluster in a fleet, or when the team doesn't want a bot writing to the repo. Git-based is\nthe better fit when PR-based approval of version bumps is required or when Git must remain\nthe canonical record of every deployed version.\n\n### 7. Notifications (Slack, GitHub, Webhooks)\n\nProvider + Alert for outgoing notifications, Receiver for incoming webhooks.\nAlert and Provider use `v1beta3`, Receiver uses `v1`.\n\nFor Slack, GitHub commit status, webhook receivers, and all provider types,\nload `references/notifications.md`.\n\n## Common Mistakes\n\n**Wrong template delimiters:**\n- ResourceSet uses `<< inputs.field >>` — NOT `{{ .inputs.field }}` or `{{ inputs.field }}`\n- Go templates `{{ }}` are only used in ImageUpdateAutomation `.spec.git.commit.messageTemplate`\n\n**Mutual exclusivity:**\n- HelmRelease: `spec.chart.spec` and `spec.chartRef` are mutually exclusive\n- FluxInstance: only one per cluster, must be named `flux`\n\n**HelmRelease strategy fields:**\n- Install/upgrade strategy is at `spec.install.strategy.name` and `spec.upgrade.strategy.name`\n- Always use `RetryOnFailure` — it retries without rollback or uninstall, avoiding downtime\n- Do not use `RemediateOnFailure` or `spec.install.remediation` / `spec.upgrade.remediation`\n\n**OCIRepository for Helm charts:**\n- When using OCIRepository to fetch Helm charts from OCI registries, set `layerSelector` to extract the chart:\n  ```yaml\n  layerSelector:\n    mediaType: \"application/vnd.cncf.helm.chart.content.v1.tar+gzip\"\n    operation: copy\n  ```\n\n## Reference Index\n\nLoad reference files and OpenAPI schemas based on the question topic.\nLoad at most 1-2 reference files per question. Read schemas for field-level validation when generating YAML.\n\n| CRD | Reference | Schema |\n|-----|-----------|--------|\n| FluxInstance | `references/flux-operator.md` | `assets/schemas/fluxinstance-fluxcd-v1.json` |\n| FluxReport | `references/flux-operator.md` | `assets/schemas/fluxreport-fluxcd-v1.json` |\n| ResourceSet | `references/resourcesets.md` | `assets/schemas/resourceset-fluxcd-v1.json` |\n| ResourceSetInputProvider | `references/resourcesets.md` | `assets/schemas/resourcesetinputprovider-fluxcd-v1.json` |\n| GitRepository | `references/sources.md` | `assets/schemas/gitrepository-source-v1.json` |\n| OCIRepository | `references/sources.md` | `assets/schemas/ocirepository-source-v1.json` |\n| HelmRepository | `references/sources.md` | `assets/schemas/helmrepository-source-v1.json` |\n| HelmChart | `references/sources.md` | `assets/schemas/helmchart-source-v1.json` |\n| Bucket | `references/sources.md` | `assets/schemas/bucket-source-v1.json` |\n| ExternalArtifact | `references/sources.md` | `assets/schemas/externalartifact-source-v1.json` |\n| ArtifactGenerator | `references/sources.md` | `assets/schemas/artifactgenerator-source-v1beta1.json` |\n| Kustomization | `references/kustomization.md` | `assets/schemas/kustomization-kustomize-v1.json` |\n| HelmRelease | `references/helmrelease.md` | `assets/schemas/helmrelease-helm-v2.json` |\n| Provider | `references/notifications.md` | `assets/schemas/provider-notification-v1beta3.json` |\n| Alert | `references/notifications.md` | `assets/schemas/alert-notification-v1beta3.json` |\n| Receiver | `references/notifications.md` | `assets/schemas/receiver-notification-v1.json` |\n| ImageRepository | `references/image-automation.md` | `assets/schemas/imagerepository-image-v1.json` |\n| ImagePolicy | `references/image-automation.md` | `assets/schemas/imagepolicy-image-v1.json` |\n| ImageUpdateAutomation | `references/image-automation.md` | `assets/schemas/imageupdateautomation-image-v1.json` |\n\n| Topic | Reference |\n|-------|-----------|\n| Repository structure, monorepo vs multi-repo, OCI-based fleet management | `references/repo-patterns.md` |\n| Best practices, dependency management, remediation, versioning | `references/best-practices.md` |\n| Web UI, dashboard, SSO, OIDC, Dex, Keycloak, Entra ID, RBAC | `references/web-ui.md` |\n| MCP Server, AI assistant integration, in-cluster deployment | `references/mcp-server.md` |\n| Terraform bootstrap of Flux Operator | `references/terraform-bootstrap.md` |\n| Gitless image automation (ResourceSet + OCIArtifactTag) | `references/gitless-image-automation.md` |","tags":["gitops","knowledge","agent","skills","fluxcd","agent-skills","ai-agents"],"capabilities":["skill","source-fluxcd","skill-gitops-knowledge","topic-agent-skills","topic-ai-agents","topic-fluxcd","topic-gitops","topic-skills"],"categories":["agent-skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/fluxcd/agent-skills/gitops-knowledge","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add fluxcd/agent-skills","source_repo":"https://github.com/fluxcd/agent-skills","install_from":"skills.sh"}},"qualityScore":"0.505","qualityRationale":"deterministic score 0.51 from registry signals: · indexed on github topic:agent-skills · 111 github stars · SKILL.md body (17,503 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T00:55:22.543Z","embedding":null,"createdAt":"2026-04-18T22:11:03.034Z","updatedAt":"2026-04-22T00:55:22.543Z","lastSeenAt":"2026-04-22T00:55:22.543Z","tsv":"'-2':1778 '/deploy/production':1079 '/fluxcd':1265 '/jetstack/charts/cert-manager':1183 '/metrics-server/':1113 '/my-org/apps/':1423 '/my-org/fleet-manifests':1299 '/org/my-app.git':1040 '/reconcileevery:':1332 '/role:':1370 '/v1':332,343,357,369,381,392,404,415,427,440,465,515,527,539,552,743,1022,1056,1095,1164,1247,1319,1339,1384,1409,1431 '/v1beta1':453 '/v1beta3':492,503 '/v2':480,1117,1197 '/watch:':793 '1':577,950,1013,1192,1777 '10m':1070 '1h':1109,1179,1211 '2':602,958,1086,1260 '3':635,970,1139,1154 '30m':1131,1445 '3rd':447 '3rd-party':446 '4':667,982,1236 '5':994,1308 '5m':1036,1085,1225,1231,1333,1419,1447,1451 '6':1004,1461 '7':1633 'accur':67 'actual':185 'add':780,1005 'admin':1398 'ai':1888 'alert':254,500,687,1007,1639,1647,1838 'alway':77,1716 'annot':1329 'answer':10,65 'api':90 'apigroup':1393 'apivers':326,740,1019,1053,1092,1114,1161,1194,1244,1316,1336,1360,1372,1381,1406,1428 'apiversion/kind':81 'app':1029,1063,1077,1324,1414,1436,1456 'appli':292,471,625,634,937,999 'applic':173,706 'application/vnd.cncf.helm.chart.content.v1.tar':1186,1757 'applier':240,603 'approv':1615 'arg':1149 'artifact':231,232,304,310,398,443,458,601,605,615,833 'artifactgener':450,867,880,1826 'ask':32 'assets/schemas':103 'assets/schemas/alert-notification-v1beta3.json':1840 'assets/schemas/artifactgenerator-source-v1beta1.json':1828 'assets/schemas/bucket-source-v1.json':1822 'assets/schemas/externalartifact-source-v1.json':1825 'assets/schemas/fluxinstance-fluxcd-v1.json':1798 'assets/schemas/fluxreport-fluxcd-v1.json':1801 'assets/schemas/gitrepository-source-v1.json':1810 'assets/schemas/helmchart-source-v1.json':1819 'assets/schemas/helmrelease-helm-v2.json':1834 'assets/schemas/helmrepository-source-v1.json':1816 'assets/schemas/imagepolicy-image-v1.json':1849 'assets/schemas/imagerepository-image-v1.json':1846 'assets/schemas/imageupdateautomation-image-v1.json':1852 'assets/schemas/kustomization-kustomize-v1.json':1831 'assets/schemas/ocirepository-source-v1.json':1813 'assets/schemas/provider-notification-v1beta3.json':1837 'assets/schemas/receiver-notification-v1.json':1843 'assets/schemas/resourceset-fluxcd-v1.json':1804 'assets/schemas/resourcesetinputprovider-fluxcd-v1.json':1807 'assist':1889 'audit':24,1488 'auth':1307 'autom':555,1463,1521,1904 'automat':664 'avoid':1725 'back':1506 'backend':1354 'base':47,63,286,299,685,991,1478,1495,1606,1614,1769,1864 'best':1868 'better':1573,1609 'beyond':117 'bootstrap':138,1897 'bot':1553,1599 'branch':1042 'bucket':229,424,594,861,862,1820 'build':469,617 'bump':1505,1618 'canon':1010,1627 'cd':5,45,54 'cel':727 'cert':1170,1175,1203,1207,1217 'cert-manag':1174,1202,1206 'cert-manager-chart':1169,1216 'chang':293,581,779,803,1492 'chart':235,410,423,840,852,873,882,896,955,1132,1134,1172,1219,1475,1737,1744,1753 'chartref':1212 'check':585 'ci':301 'cluster':27,132,189,221,321,629,656,903,1282,1525,1587,1701,1893 'clusterrol':1396 'clusters/production':1303 'combin':82 'commit':295,682,1485,1503,1658 'common':1668 'compar':643 'compat':435 'compon':926,1266,1313 'compos':881 'compose/decompose':457 'concept':35,75 'config':499 'configmap':248,797 'configur':205,596,771,971 'consum':238,604 'contain':533,834,1471 'continu':175,574 'control':152,212,322,327,384,395,407,418,430,449,456,468,483,495,506,518,531,543,556,571,584,608,612,673,694,713,766,1269,1275,1278,1281,1517,1522,1561 'copi':1189,1760 'correct':69,662 'crd':85,97,1793 'crds':21,324,700,1233 'creat':868,959,995 'create/update':243 'credenti':319,1048,1554 'crs':702 'custom':200 'dashboard':1877 'debug':28 'decis':818 'declar':170,196 'default':764,858,1563 'delimit':1672 'deliveri':282,1467 'depend':689,724,731,778,1870 'dependson':692,709,739,908,1335 'deploy':246,900,917,921,1567,1631,1894 'desir':178,645 'detail':116 'detect':613,637,660 'dex':1880 'differ':1585 'direct':1542 'distribut':1258 'doesn':1595 'downstream':1545 'downtim':1726 'drift':636,658 'e':752,756 'e.status':757 'e.type':753 'enabl':666,794,1234 'entra':1882 'enum':110 'env':875 'env-specif':874 'environ':927,1351,1357 'etc':684 'event':508,523,675 'everi':1630 'exact':80 'exampl':698 'exclus':1689,1696 'exist':219 'expert':9,51 'explain':73 'export':266 'express':728 'extern':376,441,496,677 'externalartifact':437,869,1823 'extra':1560 'extract':1751 'fetch':373,385,396,419,431,1742 'field':106,1708,1787 'field-level':1786 'file':119,124,142,1765,1780 'fit':1574,1610 'fix':939 'fleet':1590,1865 'flow':260 'flux':4,7,20,34,44,53,74,128,137,145,146,174,190,194,211,217,287,305,334,337,345,353,359,371,566,570,642,661,765,952,963,967,1032,1066,1252,1255,1290,1327,1378,1389,1403,1443,1464,1565,1705,1899 'flux-oper':333,344,358,370 'flux-system':966,1031,1065,1254,1326 'fluxcd.controlplane.io':331,342,356,368,742,1246,1318,1331,1338 'fluxcd.controlplane.io/reconcileevery:':1330 'fluxcd.controlplane.io/v1':330,341,355,367,741,1245,1317,1337 'fluxinst':130,199,215,329,961,1237,1249,1697,1796 'fluxreport':340,1799 'frontend':1348 'generat':13,68,93,272,930,1791 'generic':442 'ghcr.io':1264,1298,1422 'ghcr.io/fluxcd':1263 'ghcr.io/my-org/apps/':1421 'ghcr.io/my-org/fleet-manifests':1297 'git':160,226,285,289,300,318,387,560,586,823,879,977,1047,1484,1494,1508,1551,1556,1605,1623 'git-bas':284,1493,1604 'git-credenti':1046 'github':257,262,681,1636,1657 'github.com':1039 'github.com/org/my-app.git':1038 'gitless':296,1241,1528,1570,1902 'gitop':2,56,155,947,1014,1242 'gitops-knowledg':1 'gitrepositori':41,378,831,1016,1024,1073,1808 'go':1680 'gotk':141 'gzip':1187,1758 'handl':203 'heal':641 'helm':228,234,409,422,482,487,590,611,622,839,848,851,855,872,895,954,1087,1155,1277,1474,1580,1736,1743 'helm-control':481,610,1276 'helm.toolkit.fluxcd.io':479,1116,1196 'helm.toolkit.fluxcd.io/v2':478,1115,1195 'helmchart':412,1817 'helmreleas':39,242,279,477,807,888,897,1119,1199,1546,1690,1706,1832 'helmrepositori':401,857,1097,1143,1814 'https':854,1089 'id':1883 'imag':529,534,541,545,554,563,835,1462,1472,1515,1520,1903 'image-automation-control':553,1519 'image-reflector-control':528,540,1514 'image.toolkit.fluxcd.io':526,538,551 'image.toolkit.fluxcd.io/v1':525,537,550 'imagepolici':536,1497,1510,1847 'imagerepositori':524,1496,1844 'imageupdateautom':549,1498,1686,1850 'immedi':775,817 'immut':312 'implement':154 'in-clust':1891 'incom':522,1645 'index':408,1762 'infra':712,1343 'infra-control':711 'infrastructur':171,704 'input':267,270,275,364,374,924,934,1346 'inputs.environment':1458 'inputs.field':1675,1677,1679 'inputs.tag':1427 'inputs.tenant':1366,1380,1391,1405,1416,1424,1438,1441 'insecur':1152 'instal':195,204,338,484,699,951,1220 'install/upgrade':1709 'integr':1890 'interv':597,772,1035,1069,1108,1130,1178,1210,1418,1444 'invent':89 'keycloak':1881 'kind':325,744,1023,1057,1072,1096,1118,1142,1165,1198,1213,1248,1294,1320,1340,1362,1374,1385,1395,1400,1410,1432,1453 'knowledg':3,46,62 'kube':1105,1127 'kube-system':1104,1126 'kubeconfig':905 'kubelet':1151 'kubelet-insecure-tl':1150 'kubernet':59,151,1284 'kubernetes-sigs.github.io':1112 'kubernetes-sigs.github.io/metrics-server/':1111 'kustom':40,241,278,462,467,472,607,619,717,805,826,886,892,894,911,918,936,990,996,1017,1058,1274,1433,1548,1829 'kustomize-control':466,606,1273 'kustomize.toolkit.fluxcd.io':464,1055,1430 'kustomize.toolkit.fluxcd.io/v1':463,1054,1429 'label':762,783,790,802,1367 'lag':1558 'latest':1301,1350,1356 'layer':237 'layerselector':846,1184,1749,1755 'legaci':140 'level':1788 'lifecycl':208,339 'live':26,652,1578 'load':120,1526,1568,1666,1763,1774 'log':1489 'loop':569,576 'main':1043 'manag':192,244,336,486,1171,1176,1204,1208,1218,1866,1871 'manifest':37,71,618,837,915,942,984,1000 'marker':1512 'matrix':271,365,935 'mcp':1886 'media':849 'mediatyp':1185,1756 'medium':1286 'metadata':789,1025,1059,1098,1120,1167,1200,1250,1322,1364,1376,1387,1412,1434 'metric':1101,1123,1136,1146 'metrics-serv':1100,1122,1135,1145 'mistak':1669 'model':283,1468 'monorepo':863,1857 'multi':1312,1860 'multi-compon':1311 'multi-repo':1859 'multipl':460 'multiten':1287 'must':1624,1702 'mutual':1688,1695 'my-app':1027,1061,1075 'n':923 'name':107,216,710,746,962,1026,1045,1060,1074,1099,1121,1144,1168,1201,1215,1222,1228,1251,1323,1342,1365,1377,1388,1397,1402,1413,1435,1455,1704 'namespac':276,969,1030,1064,1103,1125,1173,1205,1253,1325,1363,1379,1390,1404,1415,1437 'need':865 'networkpolici':1291 'never':88 'new':562,614 'notif':252,494,497,505,510,517,668,672,1009,1280,1634,1642 'notification-control':493,504,516,671,1279 'notification.toolkit.fluxcd.io':491,502,514 'notification.toolkit.fluxcd.io/v1':513 'notification.toolkit.fluxcd.io/v1beta3':490,501 'observ':350 'oci':162,227,236,264,298,303,309,397,588,832,842,980,1157,1239,1746,1863 'oci-bas':297,1862 'ociartifacttag':1532,1906 'ocirepositori':42,389,838,844,1166,1214,1295,1411,1454,1734,1740,1811 'oidc':1879 'one':214,912,916,1699 'openapi':100,1767 'oper':8,129,191,335,346,360,372,953,1188,1566,1759,1900 'option':1049 'orchestr':259,1314 'order':690,696 'organ':983 'outgo':1641 'overlay':473,620,827,885,893,992 'packag':421 'parti':448 'path':871,1078,1302,1457 'pattern':993,1012 'per':220,274,870,1586,1700,1781 'per-input':273 'pick':1477 'pipelin':1015 'plain':475,829,889 'point':974 'polici':548,747 'poll':579,767,1557 'postbuild.substitutefrom':812 'pr':1613 'pr-base':1612 'practic':157,1869 'prefer':127 'privat':1051 'produc':230,599 'product':1352,1358 'provid':253,489,498,511,1006,1638,1649,1664,1835 'prs':263 'prune':1080,1459 'pull':306 'pullsecret':1304 'purpos':328 'push':302 'quay.io':1182 'quay.io/jetstack/charts/cert-manager':1181 'question':11,66,114,1772,1782 'rbac':280,1884 'rbac.authorization.k8s.io':1383,1394 'rbac.authorization.k8s.io/v1':1382 're':1538 're-rend':1537 'react':774 'reactiv':759 'read':98,348,1783 'read-on':347 'readi':720,748,754,1344 'readyexpr':726,750 'receiv':512,520,1643,1652,1661,1841 'recommend':1159,1562 'reconcil':176,816 'reconcile.fluxcd.io':792 'reconcile.fluxcd.io/watch:':791 'reconcili':568,575,695 'record':1628 'ref':1041,1190,1300,1425 'refer':123,126,136,809,1761,1764,1779,1794,1854 'references/best-practices.md':1874 'references/flux-operator.md':1797,1800 'references/gitless-image-automation.md':1569,1907 'references/helmrelease.md':1833 'references/image-automation.md':1527,1845,1848,1851 'references/kustomization.md':1830 'references/mcp-server.md':1895 'references/notifications.md':1667,1836,1839,1842 'references/repo-patterns.md':1867 'references/resourcesets.md':1803,1806 'references/sources.md':1809,1812,1815,1818,1821,1824,1827 'references/terraform-bootstrap.md':1901 'references/web-ui.md':1885 'reflector':530,542,1516 'registri':163,308,400,535,589,843,981,1158,1262,1306,1501,1535,1747 'registry-auth':1305 'relat':224 'releas':488 'relev':122 'remain':1625 'remedi':1872 'remediateonfailur':1730 'remot':902 'render':1539 'repo':23,587,591,824,856,978,988,1052,1603,1861 'report':250,669 'repositori':290,388,411,1090,1855 'requir':115,317,1513,1620 'resourc':43,201,223,245,362,736,787,931,997,1359 'resourceset':258,268,354,721,745,909,928,929,1309,1321,1341,1529,1541,1673,1802,1905 'resourcesetinputprovid':261,366,1530,1805 'retri':1720 'retryinterv':1224,1230,1446 'retryonfailur':1223,1229,1718 'revis':616 'richer':723 'rolebind':1386 'roleref':1392 'rollback':1722 'rout':507 'rule':76,688 'run':572 's3':434,593 's3-compatible':433 's3/gcs/minio':860 'scan':532,1499,1533 'schema':15,101,1768,1784,1795 'schema-valid':14 'scratch':949 'secret':799 'secretref':1044 'select':544 'self':640 'self-heal':639 'semver':1191 'send':674 'server':632,1102,1124,1137,1147,1887 'server-sid':631 'servic':247,377 'serviceaccount':1375,1401 'serviceaccountnam':1442 'set':149,913,940,945,1748 'setup':133 'side':633 'sign':313 'size':1285 'skill' 'skill-gitops-knowledge' 'slack':255,679,1635,1656 'sourc':166,182,225,277,383,394,406,417,429,455,461,578,583,649,768,821,987,1003,1268,1271 'source-control':382,393,405,416,428,454,582,1267 'source-fluxcd' 'source-watch':1270 'source.extensions.fluxcd.io':452 'source.extensions.fluxcd.io/v1beta1':451 'source.toolkit.fluxcd.io':380,391,403,414,426,439,1021,1094,1163,1408 'source.toolkit.fluxcd.io/v1':379,390,402,413,425,438,1020,1093,1162,1407 'sourceref':1071,1141,1452 'spec':708,738,1034,1068,1107,1129,1133,1177,1209,1257,1334,1417,1439 'spec.chart.spec':1691 'spec.chartref':1693 'spec.git.commit.messagetemplate':1687 'spec.install.remediation':1732 'spec.install.strategy.name':1713 'spec.sync':972 'spec.upgrade.remediation':1733 'spec.upgrade.strategy.name':1715 'specif':876 'split':866 'sso':1878 'state':179,186,351,646,653 'status':249,670,683,1659 'status.conditions.filter':751 'storag':436,444 'store':180 'strategi':1221,1227,1707,1710 'structur':1856 'subject':1399 'support':722,907,1465 'sync':1240,1293 'system':678,968,1033,1067,1106,1128,1256,1328 'tabl':86 'tag':265,564,1349,1355,1426,1504,1577,1583 'tarbal':233 'targetnamespac':1440 'team':256,680,1482,1594 'templat':269,361,623,920,1671,1681 'tenant':925,1347,1353,1371 'tenantdefaultserviceaccount':1289 'terraform':957,1896 'timeout':1084,1450 'tls':1153 'toolkit':57 'toolkit.fluxcd.io':1369 'toolkit.fluxcd.io/role:':1368 'topic':1773,1853 'topic-agent-skills' 'topic-ai-agents' 'topic-fluxcd' 'topic-gitops' 'topic-skills' 'touch':1550 'tree':819 'true':749,758,1081,1083,1235,1288,1292,1345,1449,1460 'truth':168 'two':281,1466 'type':108,734,822,850,859,1283,1531,1665 'ui':1876 'uninstal':1724 'updat':557,1470 'upgrad':206,1226,1543 'upstream':786 'url':1037,1110,1180,1296,1420 'use':29,60,78,159,630,691,989,1650,1653,1674,1684,1717,1729,1739 'user':31 'v1':1361,1373,1654 'v1beta3':1651 'valid':16,1789 'valu':111,877,884,1148,1232,1581 'valuesfrom':814 'verifi':105 'version':91,547,600,1138,1259,1476,1491,1617,1632,1873 'via':811,904,1509 'vs':887,910,1858 'wait':714,1082,1448 'want':36,1483,1597 'watch':288,761,782 'watcher':1272 'web':1875 'webhook':519,1637,1646,1660 'whether':1480 'without':1549,1721 'work':567 'write':1600 'wrong':1670 'x':1140,1193,1261 'yaml':17,70,94,476,558,707,737,788,830,890,1011,1018,1091,1160,1243,1315,1511,1754,1792","prices":[{"id":"d0681624-01d9-431b-a488-b2f191cc6bbb","listingId":"666702e2-55ba-41a1-890d-e357c88e671c","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"fluxcd","category":"agent-skills","install_from":"skills.sh"},"createdAt":"2026-04-18T22:11:03.034Z"}],"sources":[{"listingId":"666702e2-55ba-41a1-890d-e357c88e671c","source":"github","sourceId":"fluxcd/agent-skills/gitops-knowledge","sourceUrl":"https://github.com/fluxcd/agent-skills/tree/main/skills/gitops-knowledge","isPrimary":false,"firstSeenAt":"2026-04-18T22:11:03.034Z","lastSeenAt":"2026-04-22T00:55:22.543Z"}],"details":{"listingId":"666702e2-55ba-41a1-890d-e357c88e671c","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"fluxcd","slug":"gitops-knowledge","github":{"repo":"fluxcd/agent-skills","stars":111,"topics":["agent-skills","ai-agents","fluxcd","gitops","skills"],"license":"apache-2.0","html_url":"https://github.com/fluxcd/agent-skills","pushed_at":"2026-04-22T00:35:26Z","description":"Skills to transform AI Agents into GitOps Engineers","skill_md_sha":"b1b0c461b4cde2b31f7b6dd9b6e2552e137aa639","skill_md_path":"skills/gitops-knowledge/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/fluxcd/agent-skills/tree/main/skills/gitops-knowledge"},"layout":"multi","source":"github","category":"agent-skills","frontmatter":{"name":"gitops-knowledge","license":"Apache-2.0","description":"Flux CD and Flux Operator expert — answers questions and generates schema-validated YAML for all Flux CRDs (not repo auditing or live cluster debugging). Use when users ask about Flux concepts, want manifests for HelmRelease, Kustomization, GitRepository, OCIRepository, ResourceSet, FluxInstance, or any Flux resource. When user needs guidance on GitOps repository structure, bootstrap Flux with Terraform, multi-tenancy, OCI-based delivery, image tag automation, drift detection, preview environments, notifications, or the Flux Web UI and MCP Server."},"skills_sh_url":"https://skills.sh/fluxcd/agent-skills/gitops-knowledge"},"updatedAt":"2026-04-22T00:55:22.543Z"}}