Understand KubeSphere architecture and call its APIs with a script that handles authentication. This skill also directs cluster, user, workspace, and extension management requests to the relevant specialist skills.
KubeSphere central controller Skill. Routes to specific Skills based on user requests: multi-cluster management (kubesphere-cluster-management), multi-tenant management (kubesphere-multi-tenant-management), extension management (kubesphere-extension-management). Also provides core architecture, API routing, and API utilities.
Review the instructions the agent will receive before you install.
KubeSphere is a distributed operating system for cloud-native application management built on Kubernetes. Version 4.x adopts a microkernel + extension architecture (codename LuBan) where the core provides essential functions and independent functional modules are delivered as extensions.
┌─────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐
│ KubeSphere Console │
│ (React-based Web UI + Extension Framework) │
└────────────────────────────────────────────────────────────┬────────────────────────────────────────────────────┘
│
┌────────────────────────────────────────────────────────────▼────────────────────────────────────────────────────┐
│ KubeSphere Core (LuBan) │
│ ┌───────────────────┐ ┌───────────────────┐ ┌───────────────────┐ ┌───────────────────┐ ┌───────────────────┐ │
│ │ Multi-Cluster │ │ Multi-Tenant │ │ K8s Resource │ │ Extension │ │ Application │ │
│ │ Management │ │ Management │ │ Management │ │ Management │ │ Management │ │
│ └───────────────────┘ └───────────────────┘ └───────────────────┘ └───────────────────┘ └───────────────────┘ │
└────────────────────────────────────────────────────────────┬────────────────────────────────────────────────────┘
│
┌────────────────────────────────────────────────────────────▼────────────────────────────────────────────────────┐
│ Underlying Kubernetes Clusters │
└─────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘
| Component | Description |
|---|---|
| ks-apiserver | API aggregation layer. Acts as the central API entry point for KubeSphere, aggregating APIs from core services and extensions. Handles authentication, authorization, and multi-cluster API routing. |
| ks-controller-manager | Resource controllers. Manages the lifecycle of KubeSphere custom resources (workspaces, projects, users, etc.). Reconciles desired state and handles event-driven operations. |
| ks-console | Web UI. React-based console providing visual management interface for all KubeSphere capabilities. Supports extension framework for custom UI components. |
KubeSphere provides two main API path prefixes with different routing behaviors:
| Path Prefix | Routed To | Use Case |
|---|---|---|
/apis/ | kube-apiserver on target cluster | Direct Kubernetes CRUD operations |
/kapis/ | KubeSphere API server | KubeSphere-specific APIs, workspace-scoped operations |
Use the /clusters/{cluster-name}/ prefix to forward requests to specific member clusters:
# Access member-1 cluster
/clusters/member-1/kapis/tenant.kubesphere.io/v1beta1/workspaces/demo/namespaces
Use the ks_api.py script to make API calls. The script handles authentication automatically.
Prerequisites:
pip install requests
export KUBESPHERE_HOST="http://<kubesphere-host>"
python scripts/ks_api.py --login --username admin --password <password>
Usage:
# Get token info
python scripts/ks_api.py
# List resources (GET)
python scripts/ks_api.py GET /kapis/tenant.kubesphere.io/v1beta1/workspacetemplates
# Query specific cluster
python scripts/ks_api.py GET /clusters/member-1/kapis/tenant.kubesphere.io/v1beta1/namespaces
# Clear cached token
python scripts/ks_api.py --clear-cache
kubesphere-core routes to specific Skills based on user requests.
| Skill | Capabilities | Restrictions |
|---|---|---|
kubesphere-core | Architecture, API routing, API utilities | No management operations |
kubesphere-cluster-management | Multi-cluster management | Cluster operations |
kubesphere-multi-tenant-management | Create user/workspace/project, assign roles | No delete, No custom roles |
kubesphere-extension-management | Extension install/upgrade/uninstall | Extension-related only |
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Manage FrontendExtension resources in frontend-forge, from creation and package generation to downloading, publishing, and unpublishing. Inspect generated files, Kubernetes jobs, and status information to diagnose packaging or publishing failures.
Operate FrontendIntegration resources from existing YAML definitions using kubectl, the Kubernetes command-line tool. Manage updates and enabled state, inspect build output, troubleshoot failures, and install or manage the frontend-forge extension.
Generate FrontendIntegration YAML for frontend-forge from a simplified configuration containing one menu and one or more pages. Define resource tables or embedded iframe pages, with the bundled generator expanding menu placements into the required YAML structure.
Set up KubeEye in KubeSphere to inspect Kubernetes clusters. Define checks for configurations, nodes, and services, schedule recurring or one-time inspections, and retrieve findings as HTML or spreadsheet reports.
Inspect KubeSphere clusters with read-only commands. List clusters, view detailed configuration, identify host and member roles, and review connection types, readiness indicators, and KubeSphere and Kubernetes versions without changing cluster resources.
Configure ArgoCD in KubeSphere DevOps for GitOps, which keeps deployed applications aligned with configuration stored in Git. Covers application management, repository credentials, shared sign-in, multiple clusters, and troubleshooting synchronization problems.