Skip to content

test permission - #1

Closed
agent-controller-swe-agent[bot] wants to merge 1 commit into
mainfrom
fix/kubectl-readonly-log-fence-and-namespace-guidance
Closed

agent-controller-swe-agent[bot] wants to merge 1 commit into
mainfrom
fix/kubectl-readonly-log-fence-and-namespace-guidance

Conversation

@agent-controller-swe-agent

Copy link
Copy Markdown

test

…ard exact namespaces

kubectl-readonly wrapped raw kubectl stdout in a fixed ``` fence with no
length cap, so an unbounded `logs` call (no --tail) could dump a pod's
entire history as one event, and any ``` run already in that output broke
out of the fence and rendered as stray backticks/newlines in chat.

Clip stdout to a new KUBECTL_MAX_RESULT_CHARS (default 20000, matching the
maxChars/maxResultChars convention used by web-fetch and signoz-query) and
fence it with a backtick run wider than any already inside the content
(src/security/fence.ts), so it can never escape its own code block.

Also add a step to the cluster-debug Skill's markdown: kubectl silently
targets the `default` namespace when `-n` is omitted instead of erroring,
and a namespace named in prose often doesn't match the cluster's exact
(hyphenated) name -- resolve it via `get namespaces` first rather than
guessing or falling back to `default`.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant