kubesphere-multi-tenant-management
KubeSphere multi-tenant management Skill. Use when user requests to create users, workspaces, projects, or assign roles/permissions. Supports user lifecycle management, workspace configuration, project creation, role binding. Do not perform any delete operations, do not create custom roles.
npx skills add kubesphere/kubesphere --skill kubesphere-multi-tenant-management --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# KubeSphere Multi-Tenant Management ## Security Guidelines 1. **Never use kubectl edit/delete** - Do NOT use `kubectl edit`, `kubectl delete`, or similar commands to modify or delete workspaces, projects, users, roles, or role bindings. These operations are sensitive and should be performed via KubeSphere Console with proper approval workflow. 2. **Never perform delete operations via API** - Do NOT delete users, workspaces, projects, roles, or role bindings via API. These operations must be performed manually via KubeSphere Console with proper approval workflow. Only use this skill for creating and querying resources. 3. **Never create custom roles** - Do NOT create custom roles (Role, WorkspaceRole, GlobalRole). Only use built-in roles provided by KubeSphere. If custom permissions are needed, instruct the user to configure them via KubeSphere Console. 4. **Default to least privilege** - When creating users or assigning permissions, always use the minimum required access level: - New user creation: default to `platform-regular` (not platform-admin) - Inviting user to workspace: default to `<workspace-name>-regular` (not admin) - Inviting user to project: default to `viewer` (not a
- Security Guidelines
- Core Concepts
- Workspace
- Project
- User & Role
- Step-by-Step Guide
- Prerequisites
- 1. Create Workspace
- 2. Create Project within Workspace
- 3. Create User
- 4. Invite User to Workspace/Project
- 5. Modify User Permissions
- 6. Query Resources
- Error Handling
Navigate to the skill's scripts directory Example path (replace with your actual kubesphere-skills location): cd ~/kubesphere-skills/core/kubesphere-core/scripts Install required Python package pip install requests Set host endpoint (optional, defaults to http://ks-apiserver.kubesphere-system) export KUBESPHERE_HOST="http://<kubesphere-host>" Login to get token (token will be cached) python ks_api.py --login --username admin --password <your-password> Token is cached in ~/.kubesphere_token and auto-refreshed
What does the kubesphere-multi-tenant-management skill do?
KubeSphere multi-tenant management Skill. Use when user requests to create users, workspaces, projects, or assign roles/permissions. Supports user lifecycle management, workspace configuration, project creation, role binding. Do not perform any delete operations, do not create custom roles.
How do I install it?
Run `npx skills add kubesphere/kubesphere --skill kubesphere-multi-tenant-management --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From kubesphere/kubesphere, a repository with 17,016 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.