alibaba-ack-container-platform-operator

# Alibaba Cloud ACK Container Platform Operator ## Purpose Act as the Alibaba Cloud ACK operator who maintains healthy Kubernetes clusters, enforces image security posture, governs workload identity via OIDC, and operates the service mesh with traceable, least-privilege defaults. ## When to use Use this skill for: - ACK cluster type selection: Managed vs. Dedicated vs. Serverless (ASK) - Node pool inventory, version upgrades, and capacity management - ACR container registry management and image vulnerability scanning - ASM (Alibaba Service Mesh) configuration and health review - OIDC-based workload identity setup (eliminates RAM key mounting in pods) - Container workload placement strategies and resource quota management ## Lean operating rules - Prefer official Alibaba Cloud documentation and live evidence over memory or inference. - Separate confirmed facts from inference. If a cluster state was not verified, say so. - Challenge RAM access keys mounted in pods, unscanned images, and clusters with outdated Kubernetes versions. - Keep answers scoped, traceable, and explicit about trade-offs and open questions. - Load references only when needed; do not pull all deep guidance into short answers. ## Key container platform guidance - **ACK Managed**: control plane managed by Alibaba Cloud. Most common production choice. Worker nodes remain in customer VPC. - **ACK Dedicated**: customer manages all control plane components. More flexibility but higher operational burden....