Kubernetes
Infrastructure integration · 67 node(s).
00Overview
Operate a Kubernetes cluster from a flow — roll out and restart deployments, scale workloads, read pod logs, run and trigger jobs, manage namespaces, services, ingresses, config maps and secrets, and cordon or drain nodes. Anything you would reach for kubectl to do, a flow can do on a schedule, on approval, or in response to something happening elsewhere in your stack.
Every field below is exactly what you see in the Flomation editor. Fields marked ● live picker let you choose from a list pulled live from your account — no IDs to look up.
01Connecting Kubernetes
- Find your cluster's API Server URL — run
kubectl cluster-info, or copy it from your cloud provider's console. It looks likehttps://your-cluster:6443. - Choose how to authenticate with the Authentication dropdown: Service Account Token (recommended), Client Certificate for mutual TLS, or Kubeconfig if you would rather paste an existing config file.
- For a token, create a service account in the cluster and grant it a role covering only the resources and namespaces you want to automate — give it no more than it needs. Then mint a token with
kubectl create token <serviceaccount> -n <namespace>. These tokens expire (an hour by default), so pass--durationfor a longer-lived one and diarise the renewal. - In Flomation, add the token as an environment secret (e.g.
kubernetes_token), then pick it in each node's Service Account Token field. - If your cluster uses a private certificate authority, paste its certificate into Cluster CA Certificate (PEM) — the CA is public information, so it is safe to paste literally. Leave it blank for a cluster with a publicly-trusted certificate. Only use Allow Insecure TLS against a throwaway self-signed cluster.
- The Kubeconfig method takes a whole kubeconfig file, pasted as a secret; its current context is the one used. Note that the live pickers (namespaces, deployments, pods and the rest) only fill themselves when you authenticate with a Service Account Token held as an environment secret, and, on a cluster with a private certificate authority, only when the CA is pasted in as literal PEM text — a picker cannot resolve a reference. With the other methods the same fields still work; you just type the name yourself.
| Field | Type | Details | |
|---|---|---|---|
| Authentication | string | Service Account Token, Client Certificate (mTLS), Kubeconfig (paste) | |
| Service Account Token | secret | kubectl create token <serviceaccount> -n <namespace> | |
| Client Certificate (PEM) | secret | -----BEGIN CERTIFICATE----- | |
| Client Key (PEM) | secret | -----BEGIN RSA PRIVATE KEY----- | |
| Kubeconfig YAML | secret | Paste the full kubeconfig; the current-context is used | |
| Allow Insecure TLS | boolean | Skip API server certificate verification — only for self-signed clusters with no CA to hand | |
| Port | integer | The port the service exposes, e.g. 80 | |
| Protocol | string | TCP, UDP |
${secrets.your_secret}.02Apply
Kubernetes Apply Manifest
infrastructure/kubernetes/apply_manifest · Action
Advanced: apply any Kubernetes object from a YAML or JSON manifest via Server-Side Apply — including CRDs and kinds with no dedicated action. Creates or updates in place.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Manifest | code | Required | A single Kubernetes object as YAML or JSON — must set apiVersion, kind and metadata.name |
| Namespace | string | Overrides the manifest's metadata.namespace; ignored for cluster-scoped kinds | |
| Dry Run | boolean | Validate against the API server without persisting any change | |
| Force Conflicts | boolean | Take ownership of fields another controller manages |
Returns: id, result, kind, applied, tool_result, success, error
03Configmap
Kubernetes Create ConfigMap
infrastructure/kubernetes/configmap_create · Action
Create a ConfigMap in a namespace from a map of key/value pairs, with optional labels.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to create the config map in |
| ConfigMap Name | string | Required | app-config |
| Data | object | Required | A flat map of string values, e.g. {"LOG_LEVEL":"info","PORT":"8080"} |
| Labels | object | Optional metadata labels, e.g. {"app":"web"} |
Returns: id, result, tool_result, success, error
Kubernetes Delete ConfigMap
infrastructure/kubernetes/configmap_delete · Action
Permanently delete a ConfigMap from a namespace. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the config map lives in |
| ConfigMap | string | Required | The config map to delete |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get ConfigMap
infrastructure/kubernetes/configmap_get · Action
Fetch a single ConfigMap by name, including its data keys and values.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the config map lives in |
| ConfigMap | string | Required | The config map to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List ConfigMaps
infrastructure/kubernetes/configmap_list · Action
List the ConfigMaps in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=app-config | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every ConfigMap is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
Kubernetes Update ConfigMap
infrastructure/kubernetes/configmap_update · Action
Update a ConfigMap's data — merge the supplied keys into the existing data, or replace the whole data map.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the config map lives in |
| ConfigMap | string | Required | The config map to update |
| Data | object | Required | A flat map of string values, e.g. {"LOG_LEVEL":"debug"} |
| Replace All Data | boolean | Replace all data instead of merging the supplied keys — keys absent from the map above are dropped |
Returns: id, result, tool_result, success, error
04Cronjob
Kubernetes Create CronJob
infrastructure/kubernetes/cronjob_create · Action
Create a CronJob that runs a container on a cron schedule — set the image, an optional command, and the concurrency policy.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to create the cronjob in |
| Name | string | Required | nightly-backup |
| Schedule (cron) | string | Required | */5 * * * * — standard five-field cron |
| Image | string | Required | busybox:latest |
| Command | string | Optional override, e.g. sh -c 'echo hello'. Leave blank to use the image's entrypoint | |
| Suspend | boolean | Create it suspended — scheduled but not firing until you resume it | |
| Restart Policy | string | choices: OnFailure, Never | |
| Concurrency Policy | string | choices: Allow, Forbid, Replace |
Returns: id, result, tool_result, success, error
Kubernetes Delete CronJob
infrastructure/kubernetes/cronjob_delete · Action
Permanently delete a CronJob, and by default the Jobs and pods it owns. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the cronjob lives in |
| CronJob | string | Required | The cronjob to delete |
| Propagation Policy | string | choices: Background — delete now, clean up its jobs afterwards, Foreground — wait until its jobs are gone, Orphan — delete the cronjob but leave its jobs running | |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get CronJob
infrastructure/kubernetes/cronjob_get · Action
Fetch a single CronJob by name — its schedule, suspend state, job template, and last/next run times.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the cronjob lives in |
| CronJob | string | Required | The cronjob to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List CronJobs
infrastructure/kubernetes/cronjob_list · Action
List the CronJobs in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=nightly-backup | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every CronJob is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
Kubernetes Resume CronJob
infrastructure/kubernetes/cronjob_resume · Action
Un-pause a suspended CronJob so it resumes scheduling Jobs. Missed runs are not backfilled.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the cronjob lives in |
| CronJob | string | Required | The cronjob to resume |
Returns: id, result, tool_result, success, error
Kubernetes Suspend CronJob
infrastructure/kubernetes/cronjob_suspend · Action
Pause a CronJob so it stops scheduling new Jobs. Jobs already running are left alone.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the cronjob lives in |
| CronJob | string | Required | The cronjob to suspend |
Returns: id, result, tool_result, success, error
Kubernetes Trigger CronJob
infrastructure/kubernetes/cronjob_trigger · Action
Run a CronJob immediately, off-schedule, by creating a one-off Job from its template — the same as kubectl create job --from=cronjob.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the cronjob lives in |
| CronJob | string | Required | The cronjob to run now |
| Job Name | string | Name for the one-off Job (default <cronjob>-manual-<timestamp>) |
Returns: id, result, tool_result, success, error
05Daemonset
Kubernetes Delete DaemonSet
infrastructure/kubernetes/daemonset_delete · Action
Permanently delete a DaemonSet, stopping its pod on every node. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the daemonset lives in |
| DaemonSet | string | Required | The daemonset to delete |
| Propagation Policy | string | How the owned pods are cleaned up (default Background) — choices: Background — delete now, reap pods after, Foreground — block until pods are gone, Orphan — leave the pods running | |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get DaemonSet
infrastructure/kubernetes/daemonset_get · Action
Fetch a single DaemonSet by name, including its rollout status and the number of nodes it is scheduled and ready on.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the daemonset lives in |
| DaemonSet | string | Required | The daemonset to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List DaemonSets
infrastructure/kubernetes/daemonset_list · Action
List the DaemonSets in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=fluentd,tier!=cache | |
| Field Selector | string | metadata.name=node-exporter | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every DaemonSet is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
Kubernetes Restart DaemonSet
infrastructure/kubernetes/daemonset_restart · Action
Trigger a rolling restart of a DaemonSet — replaces its pod on each node in turn, honouring the update strategy.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the daemonset lives in |
| DaemonSet | string | Required | The daemonset to restart |
Returns: id, result, restarted_at, tool_result, success, error
06Deployment
Kubernetes Delete Deployment
infrastructure/kubernetes/deployment_delete · Action
Permanently delete a Deployment and the pods it manages. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the deployment lives in |
| Deployment | string | Required | The deployment to delete |
| Propagation Policy | string | How the managed pods are handled (default Background) — choices: Background — delete now, garbage-collect pods after, Foreground — block until pods are gone, Orphan — leave the pods running, detached | |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Deployment
infrastructure/kubernetes/deployment_get · Action
Fetch a single Deployment by name — its spec, replica counts, image, and rollout status.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the deployment lives in |
| Deployment | string | Required | The deployment to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List Deployments
infrastructure/kubernetes/deployment_list · Action
List the Deployments in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=web | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every Deployment is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
Kubernetes Restart Deployment
infrastructure/kubernetes/deployment_restart · Action
Trigger a rolling restart of a Deployment — replaces its pods one batch at a time, with no downtime.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the deployment lives in |
| Deployment | string | Required | The deployment to restart |
Returns: id, result, restarted_at, tool_result, success, error
Kubernetes Deployment Rollout Status
infrastructure/kubernetes/deployment_rollout_status · Action
Check whether a Deployment has finished rolling out — optionally waiting until it completes, fails, or times out.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the deployment lives in |
| Deployment | string | Required | The deployment to check |
| Wait Until Complete | boolean | Poll every 2s until the rollout finishes, fails, or times out | |
| Timeout (seconds) | integer | How long to wait when Wait is set (default 300) |
Returns: id, result, status, complete, tool_result, success, error
Kubernetes Scale Deployment
infrastructure/kubernetes/deployment_scale · Action
Set the number of replicas a Deployment runs — scale up for load, or down to zero to pause it.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the deployment lives in |
| Deployment | string | Required | The deployment to scale |
| Replicas | integer | Required | The desired number of pods (0 pauses the deployment) |
Returns: id, result, replicas, tool_result, success, error
07Event
Kubernetes List Events
infrastructure/kubernetes/event_list · Action
List cluster Events in a namespace or across all of them — the diagnostic for why a pod will not start, an image will not pull, or a volume will not mount.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list events across every namespace | |
| Involved Object | string | Only events about this object, by name (e.g. the pod that won't start) | |
| Field Selector | string | reason=FailedScheduling,type=Warning | |
| Label Selector | string | Rarely useful for Events — most carry no labels | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every event is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
08Hpa
Kubernetes Delete Horizontal Pod Autoscaler
infrastructure/kubernetes/hpa_delete · Action
Delete a HorizontalPodAutoscaler. Autoscaling stops; the workload is left at its current replica count. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the autoscaler lives in |
| Autoscaler | string | Required | The HorizontalPodAutoscaler to delete |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Horizontal Pod Autoscaler
infrastructure/kubernetes/hpa_get · Action
Read one HorizontalPodAutoscaler — its target, its current and desired replica counts, and the live metrics driving it. Needs a Kubernetes 1.23+ cluster (autoscaling/v2).
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the autoscaler lives in |
| Autoscaler | string | Required | The HorizontalPodAutoscaler to read |
Returns: id, result, tool_result, success, error
Kubernetes List Horizontal Pod Autoscalers
infrastructure/kubernetes/hpa_list · Action
List the HorizontalPodAutoscalers in a namespace, or across every namespace, optionally filtered by label or field. Needs a Kubernetes 1.23+ cluster (autoscaling/v2).
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=web | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every autoscaler is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
09Ingress
Kubernetes Delete Ingress
infrastructure/kubernetes/ingress_delete · Action
Permanently delete an Ingress, withdrawing the external route it defined. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the ingress lives in |
| Ingress | string | Required | The ingress to delete |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Ingress
infrastructure/kubernetes/ingress_get · Action
Retrieve one Ingress by name — its host rules, path backends, TLS blocks, and assigned load-balancer address.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the ingress lives in |
| Ingress | string | Required | The ingress to retrieve |
Returns: id, result, tool_result, success, error
Kubernetes List Ingresses
infrastructure/kubernetes/ingress_list · Action
List the Ingresses in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=web | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every Ingress is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
10Job
Kubernetes Create Job
infrastructure/kubernetes/job_create · Action
Create a Job that runs a container image to completion, with retry, TTL cleanup, and an optional command and environment.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to create the job in |
| Job Name | string | Required | A DNS-safe name, e.g. nightly-backup |
| Container Image | string | Required | e.g. busybox:1.36 or registry.example.com/backup:latest |
| Command | string | Shell-style command; leave blank to use the image entrypoint | |
| Environment Variables | object | {"LOG_LEVEL":"debug","REGION":"eu-west-1"} | |
| Backoff Limit | integer | Retries before the job is marked failed (default 3) | |
| TTL After Finished (seconds) | integer | Auto-delete the finished job after N seconds (blank to keep it) | |
| Restart Policy | string | choices: Never, On Failure |
Returns: id, result, tool_result, success, error
Kubernetes Delete Job
infrastructure/kubernetes/job_delete · Action
Permanently delete a Job. Deleting with Background (default) or Foreground removes its pods too; Orphan leaves them running. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the job lives in |
| Job | string | Required | The job to delete |
| Propagation Policy | string | choices: Background — delete the job now, garbage-collect its pods after, Foreground — wait for the pods to be deleted first, Orphan — delete the job but leave its pods running | |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Job
infrastructure/kubernetes/job_get · Action
Fetch a single Job by name, including its status — how many pods have succeeded, failed, or are still running.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the job lives in |
| Job | string | Required | The job to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List Jobs
infrastructure/kubernetes/job_list · Action
List the Jobs in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | job-name=nightly-backup,tier!=cache | |
| Field Selector | string | metadata.name=nightly-backup | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every Job is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
11Namespace
Kubernetes Create Namespace
infrastructure/kubernetes/namespace_create · Action
Create a namespace, optionally with labels and annotations.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The name of the namespace to create |
| Labels | object | {"team":"payments","env":"staging"} | |
| Annotations | object | {"owner":"platform@example.com"} |
Returns: id, result, tool_result, success, error
Kubernetes Delete Namespace
infrastructure/kubernetes/namespace_delete · Action
Permanently delete a namespace and every resource inside it. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to delete — every resource inside it goes too |
| Confirm Destructive Action | boolean | Required | This permanently deletes the namespace and everything in it. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Namespace
infrastructure/kubernetes/namespace_get · Action
Fetch a single namespace by name, including its labels, annotations and phase.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List Namespaces
infrastructure/kubernetes/namespace_list · Action
List the namespaces in the cluster, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Label Selector | string | kubernetes.io/metadata.name=production | |
| Field Selector | string | status.phase=Active | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every namespace is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
12Node
Kubernetes Cordon Node
infrastructure/kubernetes/node_cordon · Action
Mark a Node unschedulable so no new pods land on it. Running pods are untouched; reverse it with Uncordon Node.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Node | string | Required | The node to cordon |
Returns: id, result, tool_result, success, error
Kubernetes Drain Node
infrastructure/kubernetes/node_drain · Action
Cordon a Node and evict its pods so they reschedule elsewhere, ready for maintenance. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Node | string | Required | The node to drain |
| Grace Period (seconds) | integer | Override each pod's termination grace period; blank to use the pod's own | |
| Ignore DaemonSets | boolean | Skip DaemonSet-managed pods rather than blocking on them (default: on) | |
| Delete emptyDir Data | boolean | Allow evicting pods that use emptyDir volumes — their data is lost (default: off) | |
| Timeout (seconds) | integer | Give up if the drain has not completed within this many seconds (default 300) | |
| Confirm Destructive Action | boolean | Required | This evicts running pods off the node. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, evicted, skipped, evicted_pods, tool_result, success, error
Kubernetes Get Node
infrastructure/kubernetes/node_get · Action
Fetch a single Node by name, including its status, capacity, conditions and labels.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Node | string | Required | The node to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List Nodes
infrastructure/kubernetes/node_list · Action
List the Nodes in the cluster, optionally filtered by label or field selector.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Label Selector | string | node-role.kubernetes.io/worker=,kubernetes.io/os=linux | |
| Field Selector | string | metadata.name=node-1 | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every Node is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
Kubernetes Uncordon Node
infrastructure/kubernetes/node_uncordon · Action
Mark a Node schedulable again so the scheduler can place pods on it. Reverses Cordon Node.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Node | string | Required | The node to uncordon |
Returns: id, result, tool_result, success, error
13Pod
Kubernetes Delete Pod
infrastructure/kubernetes/pod_delete · Action
Delete a Pod. If it is managed by a controller the controller recreates it — the usual way to restart one stuck Pod. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the pod lives in |
| Pod | string | Required | The pod to delete |
| Grace Period (seconds) | integer | Leave blank for the pod's own default; 0 deletes immediately with no graceful shutdown | |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Pod
infrastructure/kubernetes/pod_get · Action
Fetch a single Pod by name, including its status, conditions and per-container state.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the pod lives in |
| Pod | string | Required | The pod to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List Pods
infrastructure/kubernetes/pod_list · Action
List the Pods in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | status.phase=Running | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every Pod is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
Kubernetes Get Pod Logs
infrastructure/kubernetes/pod_logs · Action
Read the logs of a container in a pod — the last N lines, a recent time window, or the previous crashed instance.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the pod runs in |
| Pod | string | Required | The pod to read logs from |
| Container | string | Required only when the pod has more than one container | |
| Tail Lines | integer | Only the last N lines (default 200; blank for the whole log) | |
| Since (seconds) | integer | Only lines from the last N seconds | |
| Previous Instance | boolean | Read the log of the previous, crashed container instead of the running one | |
| Include Timestamps | boolean | Prefix every line with its RFC3339 timestamp |
Returns: id, logs, truncated, tool_result, success, error
14Pvc
Kubernetes Delete PVC
infrastructure/kubernetes/pvc_delete · Action
Permanently delete a PersistentVolumeClaim. If the StorageClass reclaim policy is Delete (the common default), the underlying volume and its data are destroyed too. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the PVC lives in |
| PVC | string | Required | The PersistentVolumeClaim to delete — its volume's data goes too if the reclaim policy is Delete |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get PVC
infrastructure/kubernetes/pvc_get · Action
Fetch a single PersistentVolumeClaim by name — its phase, capacity, StorageClass, and bound volume.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the PVC lives in |
| PVC | string | Required | The PersistentVolumeClaim to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List PVCs
infrastructure/kubernetes/pvc_list · Action
List the PersistentVolumeClaims in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=data-web-0 | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every PVC is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
15Secret
Kubernetes Create Secret
infrastructure/kubernetes/secret_create · Action
Create a Secret from plain key/value pairs — Kubernetes base64-encodes the values for you.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to create the secret in |
| Secret | string | Required | The name of the secret to create |
| Data | object | Required | Plain key/value pairs, e.g. {"username":"admin","password":"s3cret"} — encoded for you |
| Secret Type | string | Opaque (default), kubernetes.io/tls, kubernetes.io/dockerconfigjson, … | |
| Labels | object | {"app":"web","managed-by":"flomation"} |
Returns: id, result, tool_result, success, error
Kubernetes Delete Secret
infrastructure/kubernetes/secret_delete · Action
Permanently delete a Secret. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the secret lives in |
| Secret | string | Required | The secret to delete |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Secret
infrastructure/kubernetes/secret_get · Action
Read a single Secret. Optionally base64-decode its values into a separate plaintext output.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the secret lives in |
| Secret | string | Required | The secret to read |
| Decode Values | boolean | Base64-decode the values into `decoded_data` |
Returns: id, result, decoded_data, tool_result, success, error
Kubernetes List Secrets
infrastructure/kubernetes/secret_list · Action
List the Secrets in a namespace, or across every namespace, optionally filtered by label or field. Note: each entry includes the secret's base64 data.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace — pulls every secret in the cluster | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | type=kubernetes.io/tls | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every Secret is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
16Service
Kubernetes Create Service
infrastructure/kubernetes/service_create · Action
Create a Service to expose a set of pods on a stable IP and port — ClusterIP, NodePort, LoadBalancer, or ExternalName.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to create the service in |
| Service Name | string | Required | A DNS-safe name, e.g. web |
| Type | string | choices: ClusterIP, NodePort, LoadBalancer, ExternalName | |
| External Hostname | string | db.example.com — the hostname this service resolves to | |
| Selector | object | The label map choosing the pods, e.g. {"app":"web"} | |
| Target Port | integer | The port the pods listen on (defaults to Port) | |
| Node Port | integer | Only for NodePort/LoadBalancer — leave blank to let the cluster pick (30000–32767) |
Returns: id, result, tool_result, success, error
Kubernetes Delete Service
infrastructure/kubernetes/service_delete · Action
Permanently delete a Service, removing its stable IP and DNS name. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the service lives in |
| Service | string | Required | The service to delete |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Service
infrastructure/kubernetes/service_get · Action
Retrieve one Service by name — its type, selector, ports, and any assigned cluster or external IP.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the service lives in |
| Service | string | Required | The service to retrieve |
Returns: id, result, tool_result, success, error
Kubernetes List Services
infrastructure/kubernetes/service_list · Action
List the Services in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=web | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every Service is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
17Serviceaccount
Kubernetes Create Service Account
infrastructure/kubernetes/serviceaccount_create · Action
Create a ServiceAccount in a namespace, with optional labels and annotations. Note: since Kubernetes 1.24 this no longer auto-creates a token Secret — use kubectl create token for a short-lived one.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace to create the ServiceAccount in |
| Service Account | string | Required | The name for the new ServiceAccount (DNS-safe, e.g. deploy-bot) |
| Labels | object | {"app":"deploy-bot","team":"platform"} | |
| Annotations | object | {"eks.amazonaws.com/role-arn":"arn:aws:iam::…"} |
Returns: id, result, tool_result, success, error
Kubernetes Delete Service Account
infrastructure/kubernetes/serviceaccount_delete · Action
Permanently delete a ServiceAccount, invalidating every token issued for it. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the ServiceAccount lives in |
| Service Account | string | Required | The ServiceAccount to delete — every token issued for it stops working |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get Service Account
infrastructure/kubernetes/serviceaccount_get · Action
Fetch a single ServiceAccount by name — its labels, annotations, imagePullSecrets, and referenced secrets.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the ServiceAccount lives in |
| Service Account | string | Required | The ServiceAccount to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List Service Accounts
infrastructure/kubernetes/serviceaccount_list · Action
List the ServiceAccounts in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=default | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every ServiceAccount is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
18Statefulset
Kubernetes Delete StatefulSet
infrastructure/kubernetes/statefulset_delete · Action
Permanently delete a StatefulSet. Its PersistentVolumeClaims are NOT removed — delete them separately to reclaim storage. Requires explicit confirmation.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the statefulset lives in |
| StatefulSet | string | Required | The statefulset to delete — its PersistentVolumeClaims are left behind |
| Deletion Propagation | string | How the managed pods are torn down (default Background) — choices: Background — delete now, reap pods afterwards, Foreground — block until the pods are gone, Orphan — delete the StatefulSet but leave its pods running | |
| Confirm Destructive Action | boolean | Required | This permanently changes cluster state. Tick to allow, or bind a variable such as ${var.approved} |
Returns: id, result, tool_result, success, error
Kubernetes Get StatefulSet
infrastructure/kubernetes/statefulset_get · Action
Fetch a single StatefulSet by name and return its full definition and status.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the statefulset lives in |
| StatefulSet | string | Required | The statefulset to fetch |
Returns: id, result, tool_result, success, error
Kubernetes List StatefulSets
infrastructure/kubernetes/statefulset_list · Action
List the StatefulSets in a namespace, or across every namespace, optionally filtered by label or field.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Leave blank to list across every namespace | |
| Label Selector | string | app=web,tier!=cache | |
| Field Selector | string | metadata.name=web | |
| Limit | integer | Objects per page (default 100, max 500) | |
| Continue Token | string | Resume from a previous run's continue token | |
| Return All | boolean | Follow continue tokens until every StatefulSet is fetched |
Returns: results, count, continue_token, has_more, tool_result, success, error
Kubernetes Restart StatefulSet
infrastructure/kubernetes/statefulset_restart · Action
Trigger a rolling restart of a StatefulSet — recreates its pods one ordinal at a time, reattaching the same volumes.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the statefulset lives in |
| StatefulSet | string | Required | The statefulset to restart |
Returns: id, result, restarted_at, tool_result, success, error
Kubernetes Scale StatefulSet
infrastructure/kubernetes/statefulset_scale · Action
Set the number of replicas for a StatefulSet — scale it up, down, or to zero.
| Field | Type | Details | |
|---|---|---|---|
| API Server URL | string | Required | https://your-cluster:6443 — the Kubernetes API endpoint |
| Cluster CA Certificate (PEM) | text | -----BEGIN CERTIFICATE----- … Leave blank to use the system trust store | |
| Namespace | string | Required | The namespace the statefulset lives in |
| StatefulSet | string | Required | The statefulset to scale |
| Replicas | integer | Required | The desired number of pods — 0 stops it without deleting its data |
Returns: id, result, replicas, tool_result, success, error
19Notes & Limitations
Behaviours and constraints worth knowing before you build with these nodes.
- Destructive actions (deletes, node drain) fail closed and will not run unless their confirmation checkbox is ticked, and because it is a normal boolean field you can bind it to a variable or an upstream node's output to gate the deletion at run time rather than deciding it when you build the flow.
- Kubernetes has no trigger node — the cluster cannot call Flomation, so flows must be started by a schedule or another trigger and then poll with the List, Get or Rollout Status actions.
- List Secrets returns each Secret's base64-encoded data in its output, so treat that step's result as sensitive and avoid routing it into logs, chat messages or other downstream systems; the live Secret picker only ever shows names.
- Deleting a StatefulSet deliberately leaves its PersistentVolumeClaims in place, while deleting a PVC destroys the underlying volume and its data whenever the StorageClass reclaim policy is Delete (the common default) — plan storage cleanup as its own, irreversible step.
- The live resource pickers only work on a connection that authenticates with a Service Account Token held as an environment secret, and if your cluster uses a private certificate authority its certificate must be pasted in as literal PEM text (a picker cannot resolve a reference). Every action still works with the other authentication methods — you just type the namespace and resource names by hand.
- The HorizontalPodAutoscaler actions use the
autoscaling/v2API and therefore require a Kubernetes 1.23 or newer cluster; on older clusters they will fail rather than fall back.