EXTENSIONS

One named kind (Kubernetes in Docker) cluster for swamp, created on demand for end-to-end tests.

Talos Linux node management via talosctl - provision, bootstrap, patch, upgrade, health check, and more

Talos cluster lifecycle management via talm — init, configure, template nodes, apply configs, bootstrap, and health checks

Cozystack platform management — install operator, deploy packages, manage apps/tenants, bootstrap CNI, and verify platform health

Linstor distributed storage management for Cozystack — ZFS pool creation, storage classes, node and pool status

Kubernetes operational toolkit — 17 model types covering pods, deployments, statefulsets, services, RBAC, storage, networking, autoscaling, batch jobs, External Secrets, and more. Includes 14 ready-to-run workflows for namespace debugging, security audits, RBAC analysis, cluster health, and operational diagnostics.

Execute commands in Kubernetes pods via the Kubernetes API — single pod exec and fleet-wide parallel exec with label selectors

Plan and operate a multi-node k0s cluster over SSH in the k0sctl style: short-lived join tokens, ordered controller and worker joins, drain and detach before reset, and safe rolling upgrades. Per-node work is delegated to @randybias/k0s-cluster, and this model needs no kubeconfig.

Provision and tear down a hardened single-node k0s host on a WireGuard mesh, running NATS and published in Cloudflare DNS, by composing the server, SSH, mesh, hardening, cluster and secret model types. Workflows only: the package ships no models of its own, and every instance value arrives as a workflow input.

Install and operate a SHA-pinned k0s Kubernetes cluster on a Linux host over SSH, with a rendered k0s.yaml, readiness waits, kubeconfig capture, manifest stacks and Helm reconciliation. One model type serves any host: the SSH target and cluster inputs arrive per call, and state is keyed by the target host.

Install and upgrade KubeVirt on an existing Kubernetes cluster from a SHA-256-pinned operator manifest, and manage one VirtualMachine from a digest-pinned containerDisk image or a CDI DataVolume. Two model types over kubectl, with the kubeconfig supplied as a vault reference and never placed on a command line.

Create, read, sync and delete a Kubernetes Secret from vault values. Values reach kubectl only on stdin and are never returned: output and stored state carry metadata and key names only.

Manage a Scaleway Kubernetes Kapsule cluster — sync state, create, update, upgrade, and delete clusters, discover clusters and node pools in a region, and fetch the kubeconfig, via the Kubernetes API with X-Auth-Token auth.

Flux for swamp: HelmReleases, Kustomizations and sources as three model types, read with kubectl and driven with the flux CLI.

Sidero Omni for swamp, through `omnictl`. Two model types, two roles.

Talos Linux machines for swamp, through `talosctl`, with or without Omni.

Install and operate k3s on a local or SSH-reachable host using the official

Talos fleet discovery for swamp, via Sidero Omni.

Desired-size pool of local kind clusters with reserve, release, reconciliation, and status operations for test infrastructure.

Fleet-wide Kubernetes health across all kubeconfig contexts. Iterates every cluster in ~/.kube/config (or a specified subset) and produces per-cluster health snapshots plus an aggregated fleet summary. Best-effort — unreachable clusters are reported, not fatal.

Talos node discovery for swamp, via Sidero Omni.