v1.1.1

Cluster diagnostics
one archive.

groot is a read-only Kubernetes log and context collector — stable v1.0 contract with versioned config and archives. Preflight with validate, collect into one .tar.gz, inspect without cluster access.

GROOT — Kubernetes log collector 
$ groot validate --config groot.yml
$ groot collect --config groot.yml --summary
$ groot inspect ./groot-*.tar.gz
curl -fsSL https://get.groot.hermesrodriguez.com/install.sh | sh
All install methods Releases

Preflight checks

groot validate checks config, API reachability, RBAC, and disk space before a long collect — fewer surprises on call.

Incident-ready bundle

One reproducible .tar.gz with manifest, RCA TSVs, stable run_id, and archive_layout_version — attach to tickets or retain for compliance.

Operator-grade

kubectl plugin, shell completion, config profiles, signed releases; scheduled deploy in groot-selfhosted; on-demand collect via groot-trigger; VPS archive door via groot-share (gfs).

Incident response workflow

From alert to offline archive: validate RBAC before collect, bundle evidence into one .tar.gz, inspect without cluster access.

Kubernetes incident response workflow with GROOT: validate, collect, inspect, and share one archive

Recent releases

v1.1.1 2026-08-11

Fixes
  • kubeconfig expands ~ and ${VAR} (YAML, KUBECONFIG, --kubeconfig); SFTP path fields too
  • Unique sessionBase per collect — concurrent runs in the same second no longer collide
  • S3 credentials trim whitespace (fixes Contabo/S3-compatible SignatureDoesNotMatch)

v1.1.0 2026-08-10

Analyze
  • Offline groot analyze — heuristic hints from a collected .tar.gz (no cluster access)
  • Executive Markdown, structured JSON, or budgeted LLM-ready paste pack
  • Golden fixture corpus under testing/fixtures/archives/ with CI locks

Full changelog on GitHub

Stable 1.1.1

Stable contract in v1.0

config_version: 1

Declare YAML schema version in groot.yml; legacy configs without it still load unchanged.

archive_layout_version

Every new archive records layout version in extras/manifest.json for downstream tools and automation.

collect --output json

Structured Summary JSON on successful collect — validate and inspect already support JSON from 0.9.x.

validate · collect · inspect

Three-command incident loop: preflight RBAC, one .tar.gz collect with --summary, offline archive review.

run_id + checksum

Stable run_id and archive_sha256 in manifest.json; notify webhooks and upload metadata can reference {{run_id}}.

Governance

CODEOWNERS, issue/PR templates, golden inspect fixture in CI — behavior contract tested every release. See SPECIFICATIONS.md.

Quick start

Helm CronJob deploy: groot-selfhosted/run/deploy

Groot family

Repo Role
hrodrig/groot CLI, SPEC, releases, container image
hrodrig/groot-selfhosted Helm CronJob, bastion, Docker — scheduled / operator deploy (pin image 1.1.1)
hrodrig/groot-trigger In-cluster HTTP → Job groot collect (on-demand)
hrodrig/groot-share (gfs) gfs — VPS web/API door for .tar.gz archives (auth, ingest, list, retention)
hrodrig/groot-share-selfhosted Compose, systemd, Helm deploy for gfs (vps / vps-s3)