xxiaoxiong/dsh-kubernetes1

dsh-kubernetes

Safe Kubernetes capability for DeepSeek Harness: workload inspection, bounded logs/events, failure diagnosis, and approval-gated changes with dry-run by default.

包名
dsh-kubernetes
版本
0.1.0
许可证
MIT
最近更新
2026年8月16日

安装

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:xxiaoxiong/dsh-kubernetes

Configuration

The plugin resolves kubeconfig with standard priority: explicit kubeconfigPathKUBECONFIG env → ~/.kube/config → in-cluster service account. Context is never switched silently.

OptionDefaultDescription
readOnlytrueRead-only mode. Disables real writes even if allowWrite is true.
allowWritefalseMaster switch for write operations. Real applies additionally require approval.
contextExplicit kubeconfig context override.
namespacecontext namespace / defaultDefault namespace override.
kubeconfigPathExplicit kubeconfig file path.
maxLogChars8000Hard cap of characters per log excerpt (500–20000).
maxLogTailLines200Hard cap of tail lines per log request (1–500).
maxLogSinceSeconds3600Hard cap of the log time window in seconds (10–21600).

Profile example — the plugin's bundled cordis.patch.yml inserts itself with safe defaults automatically; override by id in your own profile layer if needed:

- id: dsh-kubernetes
  config:
    readOnly: true
    allowWrite: false