Lab #4161: deployment: getLogs method (deployment-aware pod log tailing)

Requesting a getLogs method on the @swamp/kubernetes/deployment type.

Problem: fetching logs for deployment-managed workloads requires an exact pod name, so callers must first resolve pod names (e.g. kubectl get pods -l / the deployment's pod-template labels). The deployment type has no log method and no pod-discovery capability, while pod.getLogs exists but is name-only.

Suggested method: deployment.getLogs(deploymentName, namespace?, container?, tailLines?=100, previous?=false) that resolves the deployment's current pod from spec.template.metadata.labels (fallback spec.selector.matchLabels), prefers Ready/newest pods, and tails the log via the K8s API — same global-args contract (context/kubeconfig/namespace) as the other methods.

Workaround in the meantime: community extension @franksolli/k8s-deployment-logs (extends @swamp/kubernetes/deployment with exactly this method) — happy to submit it as a PR if useful.

Upstream repository: https://github.com/swamp-club/swamp-extensions

Environment

Extension: @swamp/kubernetes@2026.10.25.2
swamp: 20261027.172645.0-sha.be9fd9d6
OS: linux (x86_64)
Deno: 2.9.8
Shell: /bin/zsh

Worker queryData fails at the fixed 30 s RPC limit while it waits for a full catalog rebuild

cfgmgmt firewall: match rules by destination and comment

Align Caddy reverse-proxy TLS documentation with Kubernetes proxy guidance

Scheduled flaky-test detection is failing

vault put --server: accept the value on stdin (keep secrets out of argv)

swamp serve reaches the V8 heap limit within 2–60 min under a small remote-worker workload (~20 runs, ~3.5k record versions)

Hot reload can keep an old local behavior registry and memoized bundle after external catalog indexing (1602; e459 regression passes)

Add expiring service-account token requests and authorization checks to RBAC

Flaky: v3 replica check stall test reads restore.pid before the stub writes it

Reads other than findById still treat a lapsed temporary ban as active until the operative next signs in

verify-build upgrade gate silently skips models whose version is a constant

@swamp/agent-sessions: explore a decision model (TypeSafe Jev) for call labelling

agent-sessions: follow-ups from the 4211 reviews (repo resolution cache and edge cases)

agent-sessions: revisit the import's remaining review findings (redaction edge cases, import robustness)

Docs: document the datastore durable setting and its macOS ordering in the manual

Docs: working offline against swamp serve (leases, outbox, flush, quarantine) for swamp-club#4195

Swamp Club collective GUI: show the swamp serve instances currently connected to a collective

Docs: swamp data query --sort, --cursor and nextCursor in the data reference

A malformed --ca-cert file is reported as an unreadable OS certificate store

TLS hint blames a missing root CA and macOS for every invalid peer certificate failure

workflow cancel --server does not send SWAMP_SERVE_EXTRA_HEADERS

S3/GCS repairUnpushedFiles: the pull it asks for after a lost last-synced index does not stop it re-uploading copies a peer deleted

swamp-uat private-registry tests leave npm/<port> dirs in the shared Deno cache

Read-model catch-up of many data versions slows sharply under load

swamp serve --groups-field help says group/collective memberships; it names only the collectives field

A resume runs settled work after the teardown gated on it has already run, and nothing tears that work down

A step settled after the abort overwrites the expression-context entry of a same-named step that ran in another job

The extractContentMetadata property test generates invalid source and fails at random

A limited model.output.search copies and sorts the whole listing on the event loop for each request, so that step still scales with the window

Flaky test: access_poll_phase_telemetry_test sees grants_active 1 where the snapshot build read 2 records

A lone step in a job still starts under the aborted signal when another job has suspended the run

CLI command to change an existing extension's visibility (private → public)

Docs: team-mode model leases (swamp behavior lease, lease status in datastore lock status)

serve (token mode): --admins accepts idp-group entries that can never match

build-swamp-extension example: code-review isn't given the quality evidence, so the reviewer reports quality as missing

Filesystem control-plane put races empty-parent cleanup (cron pending-run ENOENT)

deployment: getLogs method (deployment-aware pod log tailing)

Agent sessions extension: import Codex sessions

model.output.search response phase takes 3.9s for 5,000 items with no attribution (redaction vs serialization vs send)

Docs: v3 serve team mode, followers forward writes and the advertise-address and ca-cert serve flags (swamp-club#4120)

Skill/docs: document registry listing limits, static-extraction rules, and splitting large APIs by domain

Check registry listing limits in extension quality/push and suggest splitting into per-domain extensions

Over-limit contentMetadata publishes a blank extension page; archive fallback extracts nothing

swamp inbox: with a filter active, sitting on the last row pages through the whole inbox in the background

@swamp/video/brand: follow-ups from the initial review (render hang, odd sizes, Chromium errors)

@swamp/video: follow-ups from the initial review (card length, input validation, OCR frames on disk)

@swamp/video/hyprland: recording hotkeys, retake marker and phone-mirror window rules

@swamp/video/obs: optional OBS recording with per-person hardware config for @swamp/video

serve daemon enable: add Windows support (service or startup task)

swamp skill docs: publishing.md contradicts itself on dynamic imports, overstates where git dependencies are listed, and never says consumers keep the publisher's bundle

extension push: the dynamic import() refusal tells authors to run swamp extension fmt, and the archive-project-file fix names the kind directory push never filters

extension push: file:, link:, workspace: and git package.json dependencies are left out of the unaudited list when the project also has a deno.json

push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

Streak projector: incremental runs instead of a full scan every minute

Studio board: "Show finished" / "Show claimed" are pushed off-screen, with no scroll, when a factory has many stages

datastore v3: a parent run recording its child's rejected approval on a nested step is judged as needing approve

Registry: detect code from outside npm and JSR in a v2 archive itself, not only from the author's dependency-audit.json

Scorecard: code past the analyzer's read caps, or unreadable, is skipped silently instead of counting as not audited

@swamp/cloudflare/analytics README documents CRUD methods the GraphQL analytics model does not have

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

Relationships

#4161 deployment: getLogs method (deployment-aware pod log tailing)

Environment

Open