Validate and Deploy Kubernetes

Implement kubernetes.md as a manifest and rollout workflow.

Parameters

• manifestPath: default k8s/ or manifests/.
• clusterContext: required for apply and rollback; current kubectl context may be used only for read-only validation and diff operations.
• namespace: default default.
• mode: validate, diff, apply, or rollback; default validate.
• checkPolicy, checkSecurity, checkResources: default true.
• waitForHealth: default true for apply.
• rolloutTimeout: default 10m.
• format: summary or json; default summary.

Workflow

1. Parse YAML and validate Kubernetes schemas and kinds.
2. Check labels, requests and limits, probes, security contexts, service accounts, secrets, network exposure, and policy rules.
3. Run client-side and server-side dry runs when available.
4. Produce a diff before apply.
5. For apply, require an explicit context and confirmation, apply the reviewed manifests, wait for rollout, and run health checks.
6. For rollback, identify the target revision, confirm scope, roll back, and verify health.

Safety

• Never apply to a cluster without naming the context and namespace.
• Never delete resources implicitly.
• Never print secret values.
• Stop on failed rollout or degraded health unless rollback was explicitly enabled.

Output

Return cluster target, resources checked, policy findings, diff summary, rollout status, health checks, rollback status, and remaining risks.