Skip to content

Add node access skills for K8s and SSM execution#17

Closed
ytsssun wants to merge 2 commits intocbgbt:developfrom
ytsssun:skills/node-access
Closed

Add node access skills for K8s and SSM execution#17
ytsssun wants to merge 2 commits intocbgbt:developfrom
ytsssun:skills/node-access

Conversation

@ytsssun
Copy link
Copy Markdown
Collaborator

@ytsssun ytsssun commented Feb 24, 2026

This PR adds skills for executing commands directly on Bottlerocket nodes via two complementary approaches.

New Skills

Skill Description
ssm-executor Execute commands on any Bottlerocket EC2 instance via SSM (works with ECS, K8s, standalone)
k8s-node-executor Execute commands on Bottlerocket K8s nodes via kubectl debug

Notable

  • k8s-node-executor uses kubectl debug --profile=sysadmin as the primary approach — a one-liner that provides full host access including the Bottlerocket API socket
  • Tested on Bottlerocket 1.55.0 (aws-k8s-1.34): apiclient, host filesystem, and chroot all work with the sysadmin profile

fedora Cloud User added 2 commits February 24, 2026 23:11
Execute commands on any Bottlerocket EC2 instance via SSM Session
Manager. Works with all variants (ECS, K8s, standalone) without
requiring Kubernetes access.

Signed-off-by: Yutong Sun <yutongsu@amazon.com>
Execute commands on Bottlerocket K8s nodes via kubectl debug
with --profile=sysadmin for full host access.

Signed-off-by: Yutong Sun <yutongsu@amazon.com>
@ytsssun
Copy link
Copy Markdown
Collaborator Author

ytsssun commented Mar 17, 2026

Rerouting the PR to my fork - ytsssun#4

closing

@ytsssun ytsssun closed this Mar 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant