Skip to content

Add node access skills for K8s and SSM execution#4

Open
ytsssun wants to merge 2 commits intodevelopfrom
skills/node-access
Open

Add node access skills for K8s and SSM execution#4
ytsssun wants to merge 2 commits intodevelopfrom
skills/node-access

Conversation

@ytsssun
Copy link
Copy Markdown
Owner

@ytsssun ytsssun commented Mar 17, 2026

This PR adds skills for executing commands directly on Bottlerocket nodes via two complementary approaches.

New Skills

Skill Description
ssm-executor Execute commands on any Bottlerocket EC2 instance via SSM (works with ECS, K8s, standalone)
k8s-node-executor Execute commands on Bottlerocket K8s nodes via kubectl debug

Notable

  • k8s-node-executor uses kubectl debug --profile=sysadmin as the primary approach — a one-liner that provides full host access including the Bottlerocket API socket
  • Tested on Bottlerocket 1.55.0 (aws-k8s-1.34): apiclient, host filesystem, and chroot all work with the sysadmin profile

fedora Cloud User added 2 commits February 24, 2026 23:11
Execute commands on any Bottlerocket EC2 instance via SSM Session
Manager. Works with all variants (ECS, K8s, standalone) without
requiring Kubernetes access.

Signed-off-by: Yutong Sun <yutongsu@amazon.com>
Execute commands on Bottlerocket K8s nodes via kubectl debug
with --profile=sysadmin for full host access.

Signed-off-by: Yutong Sun <yutongsu@amazon.com>
@ytsssun ytsssun changed the title Skills/node access Add node access skills for K8s and SSM execution Mar 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant