{
  "permissions": {
    "allow": [
      "Bash(git status:*)",
      "Bash(git diff:*)",
      "Bash(git log:*)",
      "Bash(git branch:*)",
      "Bash(git add:*)",
      "Bash(date:*)",
      "Bash(tea pr create:*)",
      "Read(//private/tmp/**)",
      "Bash(export KUBECONFIG=.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig)",
      "Bash(kubectl -n capmox-system logs deploy/capmox-controller-manager --tail=200)",
      "Bash(kubectl -n capmox-system logs deploy/capmox-controller-manager --tail=5)",
      "Bash(kubectl -n capi-operator-system logs deploy/cluster-api-operator --tail=300)",
      "Bash(clusterctl version *)",
      "Bash(KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig kubectl get nodes)",
      "Bash(clusterctl generate *)",
      "Bash(ansible mgmt *)",
      "Bash(kubectl get *)",
      "Bash(kubectl auth *)",
      "Bash(kubectl describe *)",
      "Bash(kubectl logs *)",
      "Bash(kubectl events *)",
      "Bash(clusterctl describe *)",
      "Bash(ansible pve *)",
      "Read(//Users/jan.novak/**)",
      "Bash(export KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig)",
      "Bash(kubectl explain *)",
      "Bash(grep -v '^ *$')",
      "Bash(git ls-remote *)",
      "Bash(awk -F/ '{print $3}')",
      "Bash(curl -fsSL https://kubernetes.github.io/autoscaler/index.yaml)",
      "Bash(awk '/^  cluster-autoscaler:/{f=1} f&&/appVersion:/{a=$2} f&&/^    version:/{print $2, a; n++} n>=6{exit}')",
      "Bash(KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig kubectl get md lab1-workers -n default -o json)",
      "Bash(clusterctl --kubeconfig /Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig describe cluster lab1 -n default --show-conditions all)",
      "Bash(KUBECONFIG=/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/.claude/cluster-inspector/kubeconfigs/lab-mgmt.kubeconfig kubectl get md lab1-workers -n default -o json --show-managed-fields)",
      "Bash(export KUBECONFIG=$K)",
      "Bash(helm show *)",
      "Bash(grep -rniE 'backlog|future tasks|TODO' --include='*.md' . | head; sed -n '/## Key decisions/,/^## /p' README.md | head -5; grep -n 'docs/' README.md | head -20)",
      "Bash(helm template *)",
      "Bash(sed -e 's|^\\\\*\\\\*Created:\\\\*\\\\* .*|**Created:** 2026-09-29 23:15 CEST|' /Users/jan.novak/.claude/plans/purrfect-frolicking-lovelace.md > docs/plans/2026-09-29-2315-pv1-2-workers.md && head -3 docs/plans/2026-09-29-2315-pv1-2-workers.md)",
      "WebSearch",
      "WebFetch(domain:github.com)",
      "Bash(git apply *)"
    ],
    "additionalDirectories": [
      "/Users/jan.novak/srv/go/cluster-autoscaler-with-capi",
      "/Users/jan.novak/srv/go/cluster-autoscaler-with-capi/docs/plans"
    ]
  }
}