How to Safely Embed AI Agents in Kubernetes: Introducing Goblin Operator

about this goblin thing, i made a video about! it was a lot of work, crazy. i had no idea how much work goes into putting yourself out there like this. but i did it! and i also wrote an article on my employer’s website, which i’m reposting below my video, enjoy! I was wondering how little power I could give an AI agent and still make it useful. I ended up writing a custom AI agent as part of a custom Kubernetes operator. I called it the Goblin Operator, and the agent being the Goblin Scout. You can find all the code here: github.com/sguldemond/goblin-operator ...

catching my ai agent getting lost

i was setting up IAM roles, permissions, service accounts etc for a project. in claude code i was testing custom permissions of two Service Accounts. one was only able to view the files in specific directory it uploaded itself, the other was able to view all files in that directory (not exactly, but basically). lets call them, self-viewer and all-viewer. when i had claude retrieve all files using the self-viewer SA, it told itself/me that “these are all the images in the directory, so the permission narrowing of self-viewer did not work”, i skipped over that remark because i could see in the output, where in fact there were only the 6 files the SA itself uploaded. ...