import paramiko

ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh.connect('140.44.4.11', username='root', key_filename=r'C:\Users\Snarf\.ssh\id_ed25519_snarfnet', timeout=10)

stdin, stdout, stderr = ssh.exec_command('k3s kubectl exec -n dns deployment/pihole -- grep -rn "setpassword" /opt/pihole/ /usr/local/bin/ 2>/dev/null || true')
print("setpassword references:")
print(stdout.read().decode('utf-8', errors='ignore'))

# Check how WEBPASSWORD or FTLCONF is handled during container start in entrypoint
stdin, stdout, stderr = ssh.exec_command('k3s kubectl exec -n dns deployment/pihole -- cat /entrypoint.sh 2>/dev/null || cat /start.sh 2>/dev/null || ls -l /')
print("Entrypoint check:")
print(stdout.read().decode('utf-8', errors='ignore')[:1500])

ssh.close()