Files
zeekay bc4ddf332b chore: rebase the tree onto upstream master fa1a9a60
Mechanically re-derived: bin/debrand runs over a fresh import of
posthog/posthog@fa1a9a60d4 (2026-08-06).
The pipeline (.hanzo/workflows), the Dockerfiles and bin/docker*
entrypoints, compose files, LLM.md and the squashed initial migration
are restored from the shipped tree, same as the previous import.

The prune's import-closure guard kept 21 products the new core now
imports; dropping them is a refactor now, recorded rather than forced.
2026-08-06 01:25:36 -07:00

2.9 KiB

Toolbox CLI

The primary function is to help manage and connect to Insights toolbox pods in a Kubernetes environment.

Installation

  1. Ensure you have Python 3.x installed on your system

  2. Clone this repository or download toolbox.py

  3. Install dependencies (the Insights SDK, used for anonymous usage telemetry):

    pip install -r requirements.txt
    
  4. Make the script executable (Unix-based systems):

    chmod +x toolbox.py
    

Requirements

  • Python 3.x
  • kubectl installed and configured
  • the Insights Python SDK (pip install -r requirements.txt) — telemetry is skipped gracefully if it's missing
  • a Fleet-managed kubeconfig with the standard Insights contexts

Usage

Run the script using Python:

python toolbox.py [flags]

Or directly (Unix-based systems):

./toolbox.py [flags]

What it Does

The toolbox CLI:

  1. Asks whether you need dev, prod-eu, or prod-us
  2. Selects the least-privileged usable -eks, -write, or -admin context
  3. Guides you through requesting k8s + toolbox access in #aws-access when needed, waits up to 10 minutes for approval, and continues automatically
  4. Finds an available Insights toolbox pod or connects to one you've already claimed
  5. Claims the pod for a specified duration (default 12 hours)
  6. Provides an interactive shell session to the pod
  7. Offers to delete the pod when you exit the shell

Available Flags

Flag Description Default
--claim-duration HOURS Number of hours to claim the pod for 12
--update-claim Update the termination time of your existing pod False

Set KUBE_CONTEXT to bypass environment selection for expert workflows. The context is scoped to this process and must have the pod permissions required by the toolbox; the CLI never changes your global current context.

Examples

  1. Connect to a pod with default 12-hour claim:
python toolbox.py
  1. Connect to a pod with a custom claim duration:
python toolbox.py --claim-duration 4
  1. Extend the duration of your existing pod:
python toolbox.py --update-claim --claim-duration 24

Notes

  • If no pods are available, the script will wait up to 5 minutes for a pod to become available
  • When you exit the pod shell, you'll be prompted whether to delete the pod
  • If access is not approved within 10 minutes, the script exits with the profile-specific login command to use before retrying
  • If Kubernetes rejects stale cached credentials after access is renewed, the script first logs in again with the selected profile. If Kubernetes still rejects it, the script resets AWS SSO, logs in again, and continues
  • If something doesn't work as expected, reach out to #team-infrastructure for assistance