{
  "permissions": {
    "allow": [
      "Bash(git status:*)",
      "Bash(git diff:*)",
      "Bash(git log:*)",
      "Bash(git branch:*)",
      "Bash(git add:*)",
      "Bash(date:*)",
      "Bash(tea pr create:*)",
      "Read(//private/tmp/**)",
      "Bash(export KUBECONFIG=.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig)",
      "Bash(kubectl -n capmox-system logs deploy/capmox-controller-manager --tail=200)",
      "Bash(kubectl -n capmox-system logs deploy/capmox-controller-manager --tail=5)",
      "Bash(kubectl -n capi-operator-system logs deploy/cluster-api-operator --tail=300)",
      "Bash(clusterctl version *)",
      "Bash(KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig kubectl get nodes)",
      "Bash(clusterctl generate *)",
      "Bash(ansible mgmt *)",
      "Bash(kubectl get *)",
      "Bash(kubectl auth *)",
      "Bash(ansible pve *)",
      "Read(//Users/jan.novak/**)",
      "Bash(export KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig)",
      "Bash(kubectl explain *)"
    ]
  }
}