xxiaoxiong/dsh-kubernetes ↗★ 1
dsh-kubernetes
为 DeepSeek Harness 提供安全的 Kubernetes 能力：工作负载检查、日志/事件限制、故障诊断及审批保护
AI 分析
核心用途是让 AI 辅助运维和诊断 K8s 集群。适合需要安全检索集群状态、查看日志的运维人员。默认只读且 dry-run，写操作需要 allowWrite 开启及人工审批。
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:xxiaoxiong/dsh-kubernetes说明文档
阅读完整 README ↗Configuration
The plugin resolves kubeconfig with standard priority: explicit kubeconfigPath → KUBECONFIG env → ~/.kube/config → in-cluster service account. Context is never switched silently.
| Option | Default | Description |
|---|---|---|
readOnly | true | Read-only mode. Disables real writes even if allowWrite is true. |
allowWrite | false | Master switch for write operations. Real applies additionally require approval. |
context | – | Explicit kubeconfig context override. |
namespace | context namespace / default | Default namespace override. |
kubeconfigPath | – | Explicit kubeconfig file path. |
maxLogChars | 8000 | Hard cap of characters per log excerpt (500–20000). |
maxLogTailLines | 200 | Hard cap of tail lines per log request (1–500). |
maxLogSinceSeconds | 3600 | Hard cap of the log time window in seconds (10–21600). |
Profile example — the plugin's bundled cordis.patch.yml inserts itself with safe defaults automatically; override by id in your own profile layer if needed:
- id: dsh-kubernetes
config:
readOnly: true
allowWrite: false