# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Tagged `containers`, `kubernetes`: 11 items.

- [Kubernetes Operations](https://hebbmind.com/ko/plugin/kubernetes-operations.md): [Plugin] Kubernetes operations plugin from the wshobson/agents marketplace: a kubernetes-architect subagent plus four skills for manifest generation, Helm chart scaffolding, GitOps workflows and security policies. Community-maintained.
- [Trivy](https://hebbmind.com/ko/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.
- [Helm](https://hebbmind.com/ko/cli/helm.md): [CLI] Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.
- [GKE Basics & Critical Gotchas](https://hebbmind.com/ko/skill/gke-basics.md): [Skill] Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project.
- [Sealos](https://hebbmind.com/ko/cli/sealos.md): [CLI] Sealos's Kubernetes lifecycle CLI: one sealos run deploys a highly available cluster across multiple servers, and cluster images install databases, middleware and other apps, with offline delivery support. Linux only.
- [Amazon EKS MCP Server](https://hebbmind.com/ko/mcp/eks-mcp-server.md): [MCP] Official AWS MCP to create and manage EKS clusters, deploy apps, manage Kubernetes resources, and read pod logs and events for troubleshooting. Read-only by default; writes need --allow-write and reading logs needs --allow-sensitive-data-access.
- [kubectl-ai](https://hebbmind.com/ko/cli/kubectl-ai.md): [CLI] Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud.
- [kubectl](https://hebbmind.com/ko/cli/kubectl.md): [CLI] Kubernetes' official CLI for inspecting and managing Pods, Deployments, Services and other cluster resources, reading logs, executing commands in containers and applying YAML manifests. Requires a working kubeconfig for cluster access.
- [Kubernetes MCP Server](https://hebbmind.com/ko/mcp/kubernetes-mcp-server.md): [MCP] A native Go MCP server for Kubernetes and OpenShift: talks to the API server directly to create, read, update and delete any resource, view pod logs, exec commands and install Helm charts, without needing kubectl. Supports multiple clusters.
- [Argo CD MCP Server](https://hebbmind.com/ko/mcp/mcp-for-argocd.md): [MCP] Manage Argo CD in natural language: list and inspect applications, create, update and delete them and trigger syncs, and view resource trees, workload logs and events. Maintained by Argo Project Labs; needs your Argo CD URL and an API token, with an optional read-only mode.
- [Alibaba Cloud ACK MCP Server](https://hebbmind.com/ko/mcp/alibabacloud-ack-mcp-server.md): [MCP] Lets agents inspect Alibaba Cloud ACK clusters, run kubectl operations, query Prometheus metrics, control-plane and audit logs, and run resource diagnostics and health checks. Maintained by Alibaba Cloud; needs an AccessKey and cluster RBAC permissions.