import paramiko
import sys

sys.stdout.reconfigure(encoding='utf-8')

key_path = r"C:\Users\Snarf\.ssh\id_ed25519_snarfnet"
client = paramiko.SSHClient()
client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
client.connect("140.44.4.11", username="root", key_filename=key_path, timeout=10)

def run(cmd):
    print(f"=== {cmd} ===")
    stdin, stdout, stderr = client.exec_command(cmd)
    out = stdout.read().decode('utf-8')
    err = stderr.read().decode('utf-8')
    if out: print(out)
    if err: print(f"ERR: {err}")

# Check all secrets of type kubernetes.io/tls in all namespaces
run("k3s kubectl get secrets -A --field-selector type=kubernetes.io/tls")
# Check cert-manager certificates if any
run("k3s kubectl get certificate -A")
run("k3s kubectl get clusterissuer,issuer -A")

client.close()