xxiaoxiong/dsh-kubernetes ↗★ 1
dsh-kubernetes
Safe Kubernetes capability for DeepSeek Harness: workload inspection, bounded logs/events, failure diagnosis, and approval-gated changes with dry-run by default.
AI 分析
核心用途是让 AI 辅助运维和诊断 K8s 集群。适合需要安全检索集群状态、查看日志的运维人员。默认只读且 dry-run，写操作需要 allowWrite 开启及人工审批。
インストール
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:xxiaoxiong/dsh-kubernetesドキュメント
README 全文を読む ↗Configuration
The plugin resolves kubeconfig with standard priority: explicit kubeconfigPath → KUBECONFIG env → ~/.kube/config → in-cluster service account. Context is never switched silently.
| Option | Default | Description |
|---|---|---|
readOnly | true | Read-only mode. Disables real writes even if allowWrite is true. |
allowWrite | false | Master switch for write operations. Real applies additionally require approval. |
context | – | Explicit kubeconfig context override. |
namespace | context namespace / default | Default namespace override. |
kubeconfigPath | – | Explicit kubeconfig file path. |
maxLogChars | 8000 | Hard cap of characters per log excerpt (500–20000). |
maxLogTailLines | 200 | Hard cap of tail lines per log request (1–500). |
maxLogSinceSeconds | 3600 | Hard cap of the log time window in seconds (10–21600). |
Profile example — the plugin's bundled cordis.patch.yml inserts itself with safe defaults automatically; override by id in your own profile layer if needed:
- id: dsh-kubernetes
config:
readOnly: true
allowWrite: false