What problem does it solve? Production infrastructure on a firewalled Hetzner VPS is hard to inspect safely: ad-hoc SSH commands risk accidental mutations, and the production Postgres database is unreachable from a local machine. This Skill provides a strictly read-only, whitelisted command interface for checking cluster health and querying production data without any risk of modifying live state. ## Core Features & Use Cases - Read-only Kubernetes inspection: Run whitelisted kubectl get, describe, logs, rollout status, and cluster-info commands against the chess-teacher namespace over SSH, with JSON output. - Production database queries through the cluster: Execute validated read-only queries (count, read, schema, exists, unique, all-match) against firewalled prod Postgres by exec-ing into the streamlit pod. - Host health checks: Check disk (df -h), memory (free -m), and uptime on the VPS, with SSH credentials pulled automatically from the Doppler ci config. - Use Case: A user asks "why is the streamlit pod failing?" — the agent runs pods, then describe-pod and logs via the script, interprets the JSON output, and answers in plain language without ever opening an interactive shell. ## Quick Start Ask the agent to check whether the production streamlit pods are healthy on the Hetzner VPS and show recent logs if anything looks wrong.
