kube-agents
An autonomous agent harness for Kubernetes and GKE that continuously audits a fleet for compliance and security drift, opens pull requests with fixes through GitOps, and answers operational questions over chat.
kube-agents replaces manual kubectl and cloud-console operations with a Platform Agent that watches a Kubernetes or GKE fleet, performs scheduled compliance and blueprint audits, enforces role-based access control and multi-tenant boundaries, and scans for vulnerabilities and available patches on a schedule. Rather than applying changes directly, it recommends fixes and opens pull requests against linked GitOps repositories, and reports findings over Google Chat or Slack.
Example questions it answers include which clusters are behind their release channel and what would block an upgrade, and which workloads request far more CPU and memory than they use based on live kubectl readings compared with requests. It reads from the fleet, the monitored cloud projects and linked GitOps repositories, and recommends changes without applying them itself.
It is written in Python and released under the Apache-2.0 license.