kubectl & Terraform Copilots

KUBECTL_SYSTEM = """You are a kubectl command generator.

Given a natural language request, generate the correct kubectl command.

RULES:
- Only output the kubectl command, nothing else
- Use the correct flags and syntax
- If the request is ambiguous, ask for clarification
- If the request could be destructive, add a warning
- Default to the production namespace if not specified

Output format: JSON with command, explanation, and risk level."""

def generate_kubectl_command(user_request):
    response = openai.ChatCompletion.create(
        model="gpt-4",
        temperature=0.0,
        messages=[
            {"role": "system", "content": KUBECTL_SYSTEM},
            {"role": "user", "content": user_request}
        ]
    )
    return json.loads(response["choices"][0]["message"]["content"])

 # Example
result = generate_kubectl_command("show me all pods that are crash looping in production")
print(result)
 # {"command": "kubectl get pods -n production --field-selector=status.phase!=Running",
 #  "explanation": "Lists pods not in Running state in production namespace",
 #  "risk_level": "safe"}

def kubectl_copilot(user_request, channel_id):
    """Generate and confirm kubectl commands."""
     # Generate command
    result = generate_kubectl_command(user_request)

    if result["risk_level"] == "safe":
         # Auto-execute safe read-only commands
        output = execute_kubectl(result["command"])
        return f"Command: `{result['command']}`\n\n{output}"
    else:
         # Show for confirmation
        confirmation_msg = f"""Proposed command:
```
{result['command']}
```
Explanation: {result['explanation']}
Risk: {result['risk_level']}

React with checkmark to execute, or X to cancel."""

         # Post and wait for reaction
        response = say(confirmation_msg, channel=channel_id)
        wait_for_confirmation(response["ts"])
        output = execute_kubectl(result["command"])
        return f"Executed:\n\n{output}"

SAFE_COMMANDS = ["get", "describe", "logs", "explain", "auth can-i"]
RISKY_COMMANDS = ["delete", "exec", "attach", "cp"]
MODIFY_COMMANDS = ["apply", "create", "patch", "scale", "rollout"]

def classify_command(command):
    """Classify a kubectl command by risk level."""
    parts = command.split()
    if len(parts) < 2:
        return "unknown"

    verb = parts[1]

    if verb in SAFE_COMMANDS:
        return "safe"
    elif verb in RISKY_COMMANDS:
        return "high"
    elif verb in MODIFY_COMMANDS:
        return "medium"
    elif "--dry-run" in command:
        return "low"
    else:
        return "medium"  # Default to medium for unknown commands

def interpret_terraform_plan(plan_output):
    """Use an LLM to explain Terraform plan output."""
    response = openai.ChatCompletion.create(
        model="gpt-4",
        temperature=0.0,
        messages=[
            {
                "role": "system",
                "content": "Explain this Terraform plan in plain English. List every resource that will be created, modified, or destroyed. Flag any risky changes."
            },
            {"role": "user", "content": plan_output}
        ]
    )
    return response["choices"][0]["message"]["content"]