dsh-wsl-k8s: A Read-Only kubectl Tool for dsh on WSL
`dsh-wsl-k8s` is a DeepSeek Harness (DSH) plugin that runs in a WSL environment and is designed to safely query Kubernetes cluster status in read-only mode. It encapsulates `kubectl` query capabilities and provides four commands: `k8s_get`, `k8s_describe`, `k8s_logs`, and `k8s_status`, for listing resources, inspecting detailed information, and retrieving logs. It does not support mutating operations, and it is recommended to restrict the access scope via `allowedContexts` in production environments. The plugin is licensed under the MIT License and is suitable for troubleshooting and status monitoring.
Read Moredsh-kubectl-guard: Gating kubectl Operations Based on kubeconfig Context
dsh-kubectl-guard is a policy plugin for DeepSeek Harness designed to prevent large models from performing irreversible `kubectl` operations on non-local clusters by intercepting Shell tool calls. It blocks `delete` commands on non-local clusters, requires confirmation for write operations such as `apply` on non-local clusters, and allows read operations and operations on local clusters. The plugin works by parsing command strings and is well suited as a safety backstop against “confused agents.”
Read More