xxiaoxiong/dsh-kubernetes ↗★ 1
dsh-kubernetes
Safe Kubernetes capability for DeepSeek Harness: workload inspection, bounded logs/events, failure diagnosis, and approval-gated changes with dry-run by default.
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:xxiaoxiong/dsh-kubernetes说明文档
阅读完整 README ↗Configuration
The plugin resolves kubeconfig with standard priority: explicit kubeconfigPath → KUBECONFIG env → ~/.kube/config → in-cluster service account. Context is never switched silently.
| Option | Default | Description |
|---|---|---|
readOnly | true | Read-only mode. Disables real writes even if allowWrite is true. |
allowWrite | false | Master switch for write operations. Real applies additionally require approval. |
context | – | Explicit kubeconfig context override. |
namespace | context namespace / default | Default namespace override. |
kubeconfigPath | – | Explicit kubeconfig file path. |
maxLogChars | 8000 | Hard cap of characters per log excerpt (500–20000). |
maxLogTailLines | 200 | Hard cap of tail lines per log request (1–500). |
maxLogSinceSeconds | 3600 | Hard cap of the log time window in seconds (10–21600). |
Profile example — the plugin's bundled cordis.patch.yml inserts itself with safe defaults automatically; override by id in your own profile layer if needed:
- id: dsh-kubernetes
config:
readOnly: true
allowWrite: false