Add new skills for Kubernetes management, package updates, and EC2 operations by ytsssun · Pull Request #2 · cbgbt/bottlerocket-forest

ytsssun · 2025-12-17T22:22:44Z

This PR adds 8 new skills and updates the README index with improved organization.

New Skills

Skill	Description
analyze-kubernetes-release	Analyze Kubernetes release KEPs and CHANGELOG for SIG Node/Network changes affecting Bottlerocket with go/no-go recommendation
add-kubernetes-prerelease	Package beta/rc Kubernetes sources from EKS-D pre-release artifacts with build verification
promote-kubernetes-ga	Promote pre-release Kubernetes packages to GA by updating source URLs and hashes to official EKS-D release artifacts
add-kubernetes-variant	Add a new Kubernetes variant to the bottlerocket repository
update-package	Update a kit package to the latest upstream version with checksum verification and build testing
launch-bottlerocket-ec2	Launch Bottlerocket EC2 instances in standalone, ECS, or EKS modes
k8s-node-executor	Execute commands on Bottlerocket K8s nodes via a privileged pod with host namespace access
ssm-executor	Execute commands on any Bottlerocket EC2 instance via SSM (works with ECS, K8s, standalone)

README Updates

Reorganized skills into categories: Kubernetes Version Management, Research & Documentation, Package
Maintenance, Build & Test, Feature Development, Settings Development
Added all new skills to the index

cbgbt

This is great! I think these inherently add a lot of value. I have a few comments that I would like your thoughts on.

cbgbt · 2025-12-19T16:33:55Z

skills/add-kubernetes-variant/SKILL.md

@@ -0,0 +1,182 @@
+---
+name: add-kubernetes-variant


Does this need to create a settings plugin? Or do we just use the same one for new k8s variants?

We might - depending on if there are any breaking change in kubelet config or if there are new settings we want to opt-in upon the launch of the variant.

I tend to think the settings plugin change is more case by case and less "workflow-ish" if that makes sense?

cbgbt · 2025-12-19T16:36:12Z

skills/analyze-kubernetes-release/SKILL.md

@@ -0,0 +1,167 @@
+---
+name: analyze-kubernetes-release


I'm curious about the output of this, and wonder how it makes these go/no-go decisions. I might suggest finding a way to get this to lean on fact-find or research-document so that our outputs are based on citable facts. I worry about the risk of hallucination.

Good call. This is where I wonder if we should just use the research-document skill or create a new skill.

If we want to keep this, I think we can add extra phase to explicitly do fact check. Thoughts?

cbgbt · 2025-12-19T16:36:53Z

skills/launch-bottlerocket-ec2/SKILL.md

+On first use, collect infrastructure details and save to `launch-config.toml`:
+
+```bash
+cat > skills/launch-bottlerocket-ec2/launch-config.toml << 'EOF'


Might be cool to get this to use CDK one day.

#6 I created an issue for this - but let me know if you think otherwise.

cbgbt · 2025-12-19T16:38:43Z

skills/launch-bottlerocket-ec2/SKILL.md

+#### EKS Mode
+


This is fine for now, but we probably want some forest-wide sense of cluster management. In other words, there should be a brdev tool for cluster management and an easy way to see which clusters exist and their status (abstracted away in brdev) Then rather than needing to get the CAs, the tooling can manage it.

Can you cut an issue for this?

#7

Cut a issue here.

cbgbt · 2025-12-19T16:39:37Z

skills/promote-kubernetes-ga/SKILL.md

+```bash
+cd ../..  # Back to core-kit root
+
+# Build both packages


Let's make this a skill reference to keep things consistent.

cbgbt · 2025-12-19T16:44:09Z

skills/ssm-executor/SKILL.md

+**Access host rootfs via sheltie (full host access):**
+```bash
+CMD_ID=$(aws ssm send-command \
+  --instance-ids INSTANCE_ID \
+  --document-name "AWS-RunShellScript" \
+  --parameters '{"commands":["apiclient exec admin sheltie -- containerd --version"]}' \
+  --region REGION \
+  --query 'Command.CommandId' \
+  --output text) && \
+sleep 4 && \
+aws ssm get-command-invocation \
+  --command-id $CMD_ID \
+  --instance-id INSTANCE_ID \
+  --region REGION \
+  --query 'StandardOutputContent' \
+  --output text
+```


I've been doing some reading about skills, and one suggestion that I've been seeing that I think makes sense is that we can instead package commands like this as scripts that get shipped alongside the skill. Then in the SKILL.md we simply suggest that the agent call that script with the right arguments.

So I think here we'd have brief descriptions like:

**Simple command, control container context** ./scripts/control-container-command.sh <INSTANCE_ID> <command/script>

I haven't been doing a great job at that in the existing skills, but this would further reduce token utilization. It's basically an easy way to package additional tools that don't end up in the context window unless the skill is loaded.

Updated - I 100% agree with this. Having scripts are manifest would make the model behavior more predictable.

cbgbt · 2025-12-19T16:45:21Z

skills/ssm-executor/SKILL.md

+| Context | Access | How to Reach |
+|---------|--------|-------------|
+| Control container | SSM agent, apiclient | Direct SSM command |
+| Admin container | AL2023 userspace, /.bottlerocket/rootfs | `apiclient exec admin` |
+| Host namespace | Full rootfs, all binaries | `apiclient exec admin sheltie --` |


I think this implies we need something under $FOREST/docs to talk about these contexts. It's not clear to me if all agents working in the forest should just know it, or if we should make it dynamically discoverable. BUT this is very useful information that should be hoisted and shared.

skills/update-package/SKILL.md

…aking changes step Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Analyze Kubernetes release KEPs and CHANGELOG for SIG Node/Network changes affecting Bottlerocket with go/no-go recommendation. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Promote pre-release Kubernetes packages to GA by updating source URLs and hashes to official EKS-D release artifacts. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add a new Kubernetes variant to the bottlerocket repository. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Update a kit package to the latest upstream version with checksum verification and build testing. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Launch Bottlerocket EC2 instances in standalone, ECS, or EKS modes. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Execute commands on Bottlerocket K8s nodes via a privileged pod with host namespace access. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Execute commands on any Bottlerocket EC2 instance via SSM Session Manager. Works with all variants (ECS, K8s, standalone) without requiring Kubernetes access. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add Kubernetes Version Management, Package Maintenance, and Build & Test skills to the index with improved organization by category. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

ytsssun · 2026-02-25T00:42:27Z

Breaking down the PR into smaller PRs:

Add node access skills for K8s and SSM execution #17
feat: add launch-bottlerocket-ec2 skill #18
feat: add update-package skill #19
feat: add Kubernetes lifecycle skills #20
And hereby closing this PR in favor of the above PRs.

ytsssun force-pushed the add-multiple-skills branch from 7f83f57 to ed83b99 Compare December 17, 2025 23:36

cbgbt reviewed Dec 19, 2025

View reviewed changes

This was referenced Jan 9, 2026

launch-bottlerocket-ec2: Add CDK support #4

Closed

brdev: Add cluster management commands #5

Closed

launch-bottlerocket-ec2: Add CDK support #6

Open

brdev: Add cluster management commands #7

Open

ytsssun force-pushed the add-multiple-skills branch 2 times, most recently from 75e7a37 to 138d876 Compare January 12, 2026 22:12

ytsssun added 9 commits January 14, 2026 22:46

skills: add-kubernetes-prerelease: include build verification and bre…

3bf0ce3

…aking changes step Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add analyze-kubernetes-release skill

32e8da3

Analyze Kubernetes release KEPs and CHANGELOG for SIG Node/Network changes affecting Bottlerocket with go/no-go recommendation. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add promote-kubernetes-ga skill

8188bf3

Promote pre-release Kubernetes packages to GA by updating source URLs and hashes to official EKS-D release artifacts. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add add-kubernetes-variant skill

786958d

Add a new Kubernetes variant to the bottlerocket repository. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add update-package skill

b003da4

Update a kit package to the latest upstream version with checksum verification and build testing. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add launch-bottlerocket-ec2 skill

a5415d5

Launch Bottlerocket EC2 instances in standalone, ECS, or EKS modes. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add k8s-node-executor skill

980633e

Execute commands on Bottlerocket K8s nodes via a privileged pod with host namespace access. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Add ssm-executor skill

e9ef13a

Execute commands on any Bottlerocket EC2 instance via SSM Session Manager. Works with all variants (ECS, K8s, standalone) without requiring Kubernetes access. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

Update skills/README.md with new skills

dbe5344

Add Kubernetes Version Management, Package Maintenance, and Build & Test skills to the index with improved organization by category. Signed-off-by: Yutong Sun <yutongsu@amazon.com>

ytsssun force-pushed the add-multiple-skills branch from 138d876 to dbe5344 Compare January 14, 2026 22:52

ytsssun closed this Feb 25, 2026

Conversation

ytsssun commented Dec 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

New Skills

README Updates

Uh oh!

cbgbt left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

ytsssun commented Feb 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ytsssun commented Dec 17, 2025 •

edited

Loading

ytsssun commented Feb 25, 2026 •

edited

Loading