v0.5.2

tinysystems/kubernetes-module

Container Image

europe-west2-docker.pkg.dev/tinyplatform/tinysystems/kubernetes-module-v0:0.5.2

Components 22 available

configmap_patch

Set or remove a key in a Kubernetes ConfigMap. On set: creates the ConfigMap if it doesn't exist, or upserts the key. On remove: deletes the key from the ConfigMap data.

custom_resource_list

Lists any Kubernetes resource by API version and kind. Works with built-in resources (Pods, Deployments) and custom resources (Certificates, VirtualServices). Returns name, namespace, labels, spec, and status for each item.

daemonset_list

Lists Kubernetes DaemonSets with scheduling status and health information.

deployment_list

Lists Kubernetes Deployments with replica status, conditions, and health information.

deployment_scale

Scale a Kubernetes Deployment to a specified replica count.

deployment_update

Update a Kubernetes Deployment's images, environment variables, resources, replicas, and metadata.

event_watch

Watch Kubernetes Events for warnings and errors. Use to detect ImagePullBackOff, CrashLoopBackOff, scheduling failures, and other cluster issues.

pod_create

Create a Kubernetes Pod. Use to run one-off tasks, test image pulls, or spawn workers. Set command to ['true'] and restartPolicy to Never for a quick image pull test.

pod_delete

Delete a Kubernetes Pod by name. Useful for forcing pod restart or cleanup.

pod_list

Lists Kubernetes Pods with container statuses, phases, and problem detection.

pod_logs_get

Get logs from a specific pod by exact name. Use pod_list to find pods first if needed.

pod_logs_watch

Watch pod logs in real-time for keyword matches. Streams logs from all pods matching namespace and label filters, emits events on match. Discovers new pods every 30s and reconnects on stream interruption.

pod_status_get

Get status of pods matching a label selector. Returns pod count, health summary, and individual pod details.

pod_update

Update a Kubernetes Pod's labels and annotations. Note: Pod spec cannot be modified after creation.

pod_watch

Watch Kubernetes Pods for status changes. Emits typed events with pod phase, container states, and problem detection.

secret_get

Read a Kubernetes Secret by name. Returns decoded string data. Use to read docker-registry secrets (regcred), TLS certs, or any opaque secret. Specify key to get a single value.

service_list

Lists Kubernetes Services with ports, selectors, and endpoint information.

service_update

Update a Kubernetes Service's selector, ports, labels, or annotations.

statefulset_list

Lists Kubernetes StatefulSets with replica status, revisions, and health information.

webhook_register

Register or delete a Kubernetes MutatingWebhookConfiguration. Use to subscribe to cluster events at the admission level — intercept resource creation/updates before they happen.

workload_list

Lists Kubernetes workload resources (Deployments, StatefulSets, DaemonSets) with optional filtering by namespace and label selector. Returns resource details including name, namespace, kind, labels, replicas, and status.

workload_restart

Performs a rollout restart on a Deployment, StatefulSet, or DaemonSet by name. Triggers a rolling update by setting the restart annotation.

Release Notes

Tiny Systems Kubernetes Module

Kubernetes resource management components for cluster automation workflows.

Components

Component	Description
Pod Create	Create a pod for one-off tasks or image pull tests
Pod Watcher	Watch pod events in real time
Pod Status	Get current status of a pod
Pod Logs	Stream or fetch pod log output
Pod List	List pods with label/field selectors
Pod Delete	Delete a pod by name
Pod Update	Update pod spec or metadata
Deployment List	List deployments in a namespace
Deployment Scale	Scale a deployment's replica count
Deployment Update	Update deployment spec or metadata
Workload List	List workloads across resource types
Workload Restart	Trigger a rolling restart of a workload
StatefulSet List	List statefulsets in a namespace
DaemonSet List	List daemonsets in a namespace
Service List	List services in a namespace
Service Update	Update service spec or metadata
ConfigMap Patch	Patch individual keys in a ConfigMap
Secret Get	Read a Kubernetes Secret by name (regcred, TLS, opaque)
Event Watcher	Watch Kubernetes events in real time
Custom Resource List	List any Kubernetes resource by API version and kind (built-in or CRDs)

Installation

helm repo add tinysystems https://tiny-systems.github.io/module/
helm install kubernetes-module tinysystems/tinysystems-operator \
  --set controllerManager.manager.image.repository=ghcr.io/tiny-systems/kubernetes-module

Run locally

go run cmd/main.go run --name=kubernetes-module --namespace=tinysystems --version=1.0.0

Part of Tiny Systems

This module is part of the Tiny Systems platform -- a visual flow-based automation engine running on Kubernetes.

License

This module's source code is MIT-licensed. It depends on the Tiny Systems Module SDK (BSL 1.1). See LICENSE for details.

Required Permissions

This module requires elevated Kubernetes RBAC permissions.

API Group	Resources	Verbs
`core`	pods/log	get
`*`	*	getlistwatch
`apps`	deployments	updatepatch
`core`	configmaps	createupdatepatch
`admissionregistration.k8s.io`	mutatingwebhookconfigurations	getcreateupdatedelete

Install with Tiny Systems Cloud

Connect your Kubernetes cluster to Tiny Systems platform for managed installation, updates, and monitoring.

or install manually

Install with Helm

Prerequisites

Helm 3.x installed (https://helm.sh/docs/intro/install/)
kubectl configured with cluster access
Kubernetes cluster running (1.19+)

Permission Warnings

This module requires access to Kubernetes resources (pods, services, deployments, ingresses). Review RBAC permissions before installing.
Requires get access to pods/log in API group: core
Requires get, list, watch access to * in API group: *
Requires update, patch access to deployments in API group: apps
Requires create, update, patch access to configmaps in API group: core
Requires get, create, update, delete access to mutatingwebhookconfigurations in API group: admissionregistration.k8s.io

Configuration

Namespace *

Kubernetes namespace where the module will be installed

Release Name *

Helm release name (must be unique within the namespace)

Helm Installation Command

# Add Tiny Systems Helm repository
helm repo add tinysystems https://tiny-systems.github.io/module/
helm repo update

# Install CRDs (required once per namespace)
helm upgrade --install tinysystems-crd tinysystems/tinysystems-crd \
  --namespace tinysystems \
  --create-namespace

# Install OpenTelemetry collector (required once per namespace)
helm upgrade --install tinysystems-otel-collector tinysystems/tinysystems-otel-collector \
  --namespace tinysystems

# Install the module
helm upgrade --install tinysystems-kubernetes-module-v0 tinysystems/tinysystems-operator \
  --namespace tinysystems \
  --create-namespace \
  --set controllerManager.manager.image.repository=europe-west2-docker.pkg.dev/tinyplatform/tinysystems/kubernetes-module-v0 \
  --set controllerManager.manager.image.tag=0.5.2 \
  --set fullnameOverride=tinysystems-kubernetes-module-v0 \
  --set managerIngress.ingress.enabled=false \
  --set rbac.enableKubernetesResourceAccess=true \
  --set 'rbac.extraRules[0].apiGroups={}' \
  --set 'rbac.extraRules[0].resources={pods/log}' \
  --set 'rbac.extraRules[0].verbs={get}' \
  --set 'rbac.extraRules[1].apiGroups={*}' \
  --set 'rbac.extraRules[1].resources={*}' \
  --set 'rbac.extraRules[1].verbs={get,list,watch}' \
  --set 'rbac.extraRules[2].apiGroups={apps}' \
  --set 'rbac.extraRules[2].resources={deployments}' \
  --set 'rbac.extraRules[2].verbs={update,patch}' \
  --set 'rbac.extraRules[3].apiGroups={}' \
  --set 'rbac.extraRules[3].resources={configmaps}' \
  --set 'rbac.extraRules[3].verbs={create,update,patch}' \
  --set 'rbac.extraRules[4].apiGroups={admissionregistration.k8s.io}' \
  --set 'rbac.extraRules[4].resources={mutatingwebhookconfigurations}' \
  --set 'rbac.extraRules[4].verbs={get,create,update,delete}'

View Documentation