Otto
your autonomous SRE · read-only · asks before it acts
live · in the cluster
Show me the checkout service data flow.
✓live agent · list clusters
✓live agent · read the checkout Deployment
✓live agent · map the namespace topology
Checkout sits behind nginx behind an ELB, writes to postgres:5432, and reads its credentials from Secrets Manager through an IRSA role.
Checkout service data flowai-sre-sandbox
AWS ELB k8s-aisresandbox-ec7282dd01
│
▼
frontend nginx:1.27-alpine :80 1/1 Ready
│
▼
checkout checkout:1.2.0-weave-cm :8080 1/1 Ready
│
├─ ConfigMap checkout-config → CHECKOUT_FEATURE_ORDERING
├─ Secret postgres-secret → database credentials
├─ IRSA role ai-sre-sandbox-checkout-sm-loop
│ └─ grants AWS Secrets Manager access
├─ traces → otel-collector metrics → /metrics
└─ postgres:5432 → transaction and order data
Topologyderived live
ALBfrontendcheckoutpostgresotel-collectorIRSA roleAWS Secrets ManagerlegendsubjectIRSA roleexternal resourceentry point
show the IRSA policywhat changed in checkout-config
just now · Otto · derived live from the cluster, nothing shipped