talos-k8s

Access Talos Kubernetes clusters with per-environment kubeconfigs via kubectl and helm.

1|1|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/phuchoang2603/nixos --skill talos-k8s-phuchoang2603
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: talos-k8s
Source: https://github.com/phuchoang2603/nixos/tree/main/home/base/cli/skills/talos-k8s
Command: npx skills add https://github.com/phuchoang2603/nixos --skill talos-k8s-phuchoang2603

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Managing multiple Talos Kubernetes clusters (dev, prod, argocd) requires juggling separate kubeconfigs, and accidentally running commands against the wrong cluster—especially prod—can cause real damage. This Skill enforces explicit kubeconfig selection and provides the cluster inventory, safety rules, and secret-fetching workflow needed to operate the clusters correctly. ## Core Features & Use Cases - Per-environment kubeconfig routing: Maps dev, prod, and argocd clusters to their kubeconfig files, contexts, and API VIPs, defaulting to dev when unspecified and never touching prod unless asked. - Doppler-based secret retrieval: Fetches KUBECONFIG and TALOSCONFIG secrets from the Doppler talos-proxmox project with correct file permissions, or runs one-off commands via doppler run. - Cluster inventory and architecture reference: Documents node IPs, VIPs, Longhorn storage nodes, GPU operator setup, and the Argo CD app-of-apps layout so queries target the right cluster and namespace. - Use Case: Ask "why is the pod crashlooping in the monitoring namespace on prod" and the Skill routes kubectl to the prod kubeconfig, inspects logs read-only, and confirms before any mutating action. ## Quick Start Ask the assistant to list all pods across namespaces on the dev cluster using the talos-dev kubeconfig.

Frequently Asked Questions about talos-k8s

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I use kubectl with multiple kubeconfig files?▼

Pass the kubeconfig explicitly with kubectl --kubeconfig "$HOME/.kube/talos-dev.yaml" get nodes, or export KUBECONFIG to the desired file per shell session. This Skill keeps separate files for dev, prod, and argocd clusters and never relies on the default kubeconfig.

How do I fetch a kubeconfig from Doppler secrets?▼

Run doppler secrets get KUBECONFIG --plain --project talos-proxmox --config dev and redirect the output to $HOME/.kube/talos-dev.yaml with chmod 600. Repeat with configs prod and argocd for the other clusters, or use doppler run for one-off commands without saving.

Can talosctl use the Kubernetes API VIP address?▼

No, talosctl must target control-plane node IPs directly, not the Kubernetes API VIP. The VIP (for example 10.69.12.10) is only for kube-apiserver access; Talos API operations use node addresses like 10.69.12.11.

How do I manage Argo CD applications across multiple clusters?▼

Use the argocd cluster's kubeconfig ($HOME/.kube/talos-argocd.yaml) to manage applications, since the Argo CD instance there manages dev and prod as registered remote clusters. Only switch to a workload cluster's kubeconfig when inspecting resources inside that cluster.

What safety checks apply before changing a production cluster?▼

The Skill defaults to read-only commands like get, describe, logs, and helm list, and requires explicit confirmation before apply, delete, drain, or Helm upgrades. It never targets prod unless the user explicitly names the prod environment.