Observe agent
Optional namespace-scoped Observe Mode agent (v0.5): Helm/Operator, Role RBAC, memory & patterns. Autopilot is propose-only (ADR-0015).
Shipped in kprompt v0.5. The laptop CLI stays a single binary with no required daemon. Separately, you can opt into an in-cluster Observe agent that watches one namespace, correlates Incidents, optionally calls an LLM, and notifies Slack or a webhook.
Observe by default — Autopilot propose-only
- Observe Mode never applies, patches, or deletes workload objects
- Autopilot MVP (--autopilot-propose) emits PlanResult-shaped proposals + audit; Applied stays false
- Policy allowlist + ADR-0015 gates required before any future apply executor
- Recommendations may suggest a fix for a human to approve on the CLI
Full Autopilot contract: ADR-0015.
vs K8sGPT and Kagent
| Tool | Job | kprompt Observe |
|---|---|---|
| K8sGPT | On-demand / scheduled analyzer (scan → explain) | Always-on watch → correlated Incident → confidence-gated alert — not a fleet scanner |
| Kagent | In-cluster multi-agent framework | One kprompt-native Observe pipeline; not a general agent platform |
| kprompt CLI | Reactive plan → approve → apply | Agent is optional; CLI needs no daemon |
RBAC (honest)
- Default: Role + RoleBinding in one namespace (get/list/watch) — not ClusterRole
- Secrets watch is off by default; when enabled, metadata only (never values)
- You own the ServiceAccount blast radius you deploy
LLM cost
- No LLM call on every raw API event — batch by open Incident
- Severity + confidence gate before Slack/webhook (defaults: medium / 0.7)
- Use --heuristic for demos; mount provider keys via Secret only
Namespace memory
- Optional --memory discovers Redis/Kafka/Postgres-style deps from Services/Deployments
- Stores facts locally (~/.config/kprompt/memory) or in-cluster ConfigMap — never uploaded to api.kprompt.ai by default
- Relevant facts inject into AgentContext for the analyzer
- Optional --patterns learns signatures and boosts confidence on “seen before” (never mutates)
- Optional --autopilot-propose emits allowlisted AutopilotProposal (propose-only; ADR-0015)
Operator (optional)
kprompt agent operator reconciles KpromptAgent CRs into Observe agent Deployments (ServiceAccount + Role + RoleBinding + Deployment). Helm chart: charts/kprompt-operator. Prefer the manual kprompt-agent chart when you do not want a ClusterRole for the operator SA. Autopilot propose is a CLI flag on the agent binary — not silent mutate.
Helm install
Secret + chart (image tag = release)
kubectl -n payments create secret generic kprompt-agent \
--from-literal=OPENAI_API_KEY="$OPENAI_API_KEY"
helm upgrade --install kprompt-agent ./charts/kprompt-agent \
-n payments --create-namespace \
--set image.tag=0.5.0Laptop smoke: kprompt agent run -n payments --analyze --fetch-logs --health --heuristic. Add --memory, --patterns, or --autopilot-propose as needed. Full flags in the repo agent doc.