feat: implement Gopher-Ops SRE Telegram bot with AI-driven infrastructure management and monitoring capabilities.

Author: AmiQT

.gitignore

@@ -8,6 +8,11 @@
 # Environment variables
 .env
 .env.*
+state.json
+
+# Binaries
+gopher-ops
+gopher-ops.exe
 
 # Go workspace
 go.work

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Gopher-Ops Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -0,0 +1,34 @@
+.PHONY: build run tidy tf-init tf-apply clean help
+
+# Variables
+BINARY_NAME=gopher-ops
+MAIN_PATH=cmd/main.go
+
+help:
+	@echo "🤖 Gopher-Ops Management Commands:"
+	@echo "  make build      - Build the Go binary"
+	@echo "  make run        - Run the bot directly"
+	@echo "  make tidy       - Clean up Go dependencies"
+	@echo "  make tf-init    - Initialize Terraform"
+	@echo "  make tf-apply   - Deploy the infrastructure lab"
+	@echo "  make clean      - Remove binary and state files"
+
+build:
+	go build -o $(BINARY_NAME) $(MAIN_PATH)
+
+run:
+	go run $(MAIN_PATH)
+
+tidy:
+	go mod tidy
+
+tf-init:
+	cd terraform && terraform init
+
+tf-apply:
+	cd terraform && terraform apply -auto-approve
+
+clean:
+	rm -f $(BINARY_NAME)
+	rm -f state.json
+	@echo "✅ Cleanup done."

README.md

@@ -5,21 +5,22 @@
 ![Terraform](https://img.shields.io/badge/Terraform-IaC-7B42BC?style=flat&logo=terraform)
 ![Gemini AI](https://img.shields.io/badge/AI-Google_Gemini-8E75B2?style=flat&logo=google)
 ![CI/CD](https://img.shields.io/badge/CI%2FCD-GitHub_Actions-2088FF?style=flat&logo=github-actions)
+![License](https://img.shields.io/badge/License-MIT-green.svg)
 
-An AI-driven Site Reliability Engineering (SRE) bot powered by **Google Gemini** and **Telegram**. Gopher-Ops monitors your host system metrics (CPU, RAM) and allows you to perform basic triage and healing actions (start, stop, restart containers, clear cache) via a Telegram chat interface. 
 
-Designed with modern DevOps principles, it features **Infrastructure as Code (IaC)** provisioning via Terraform and automated CI/CD pipelines.
+**Gopher-Ops** is a Secure AI SRE Telegram bot managing Docker, Kubernetes, and system metrics via natural language.
 
----
+## 🚀 Key Features
 
-## 🚀 Key Features (Portfolio Highlights)
-
-- **Infrastructure as Code (IaC):** Automated provisioning of a containerized lab environment (Nginx & stateful Redis cluster) using **Terraform**, complete with Custom Networks, Persistent Volumes, Variables, and Count loops for scaling.
-- **System Observability & SRE:** Developed in **Golang**, the bot fetches real-time host metrics (CPU/RAM) and container statuses directly via the Docker API.
-- **Generative AI ChatOps:** Integrated **Google Gemini (2.5-flash-lite)** to act as an intent parser. It understands natural language logs and triggers technical SRE actions in a casual "Gen-Z" persona to reduce operator cognitive load.
-- **Interactive Healing Actions:** Parses AI intents to generate Human-in-the-loop (HITL) inline Telegram buttons, allowing the operator to start, stop, restart, or clear cache directly from chat.
+- **AI ChatOps:** Powered by **Google Gemini (2.0/2.5-flash)** to parse intents and logs, answering infrastructure queries in a casual persona to reduce operator cognitive load.
+- **Telemetry & Observability:** Real-time monitoring of host OS (CPU/RAM), Docker, and Kubernetes states via **gopsutil**, **Docker SDK**, and **MCP**. Includes a 1-hour in-memory metric history for sustained high-load detection and proactive alerting.
+- **Guided Triage & HITL Execution:** Parses AI suggestions into clickable Telegram buttons for safe actions (Start/Stop/Restart) and interactive troubleshooting flows (Network triage & Configuration validation).
+- **Infrastructure as Code (IaC):** **Terraform** provisions a local microservices lab environment (Nginx, scalable/stateful Redis cluster, custom networks, and persistent volumes).
+- **Sec & Ops:** Zero-Trust ID gating via Telegram; Automated Docker image vulnerability scanning; and a robust **GitHub Actions** CI/CD pipeline for Go tests and Terraform validation.
+- **Kubernetes & MCP Support:** Seamlessly manages cluster operations using the **Model Context Protocol (MCP)**, bridging AI with Kubernetes native tools.
 - **Robust CI/CD Pipeline:** Configured with **GitHub Actions** for automated Go unit testing and Terraform validation/formatting upon every push/PR.
-- **Zero-Trust Security:** Hardcoded Telegram Chat ID gating ensuring only the authorized operator can view metrics or execute system-level docker commands.
+- **Zero-Trust & DevSecOps:** Hardcoded Telegram Chat ID gating ensuring only the authorized operator can execute commands. Includes **automated image vulnerability scanning** for outdated Docker tags/CVEs.
+
 
 ## 🏗️ Architecture Workflow
 
@@ -35,9 +36,9 @@ graph TD;
 
 ## 🛠️ Tech Stack
 
-- **Backend:** Go (Golang), Docker API SDK, gopsutil
-- **AI / NLP:** Google Generative AI (Gemini Flash-Lite)
-- **Infrastructure:** Docker, Terraform (HCL)
+- **Backend:** Go (Golang), Docker API SDK, gopsutil, **MCP Go SDK**
+- **AI / NLP:** Google Generative AI (Gemini 2.0 Flash)
+- **Infrastructure:** Docker, Kubernetes, Terraform (HCL), **MCP Server Kubernetes**
 - **CI/CD:** GitHub Actions
 - **Interface:** Telegram Bot API
 
@@ -84,8 +85,16 @@ go run cmd/main.go
 
 Once the bot is running, simply PM it on Telegram to start managing your infrastructure:
 - *"Bro, check system health jap"* -> Bot reads live CPU/RAM and lists the Terraform-provisioned containers.
-- *"Tolong stop container gopher-ops-nginx-lab"* -> Bot understands the intent, verifies state, and provides a clickable inline `🛑 Stop` button.
-- *"Minta restart redis satu"* -> Re-initializes specific containers directly across the Docker daemon.
+- *"List pods dalam cluster k8s aku"* -> Bot uses MCP to fetch real-time pod data from Kubernetes.
+- *"Kenapa pod database asyik restart?"* -> Bot triggers an automated `k8s-diagnose` workflow to find the root cause.
+
+## 📜 Credits & Acknowledgments
+
+The Kubernetes management capabilities of Gopher-Ops are powered by the **Model Context Protocol (MCP)** and the excellent [MCP Server Kubernetes](https://github.com/Flux159/mcp-server-kubernetes) community project. Special thanks to the authors for their work in bridging AI and Kubernetes.
 
 ## ⚠️ Disclaimer
-This project binds to the host's Docker socket to execute real container lifecycles. Please ensure your `AUTHORIZED_CHAT_ID` is strictly configured to prevent unauthorized infrastructure manipulation.
+This project binds to the host's Docker socket and Kubernetes API to execute real infrastructure lifecycles. Please ensure your `AUTHORIZED_CHAT_ID` is strictly configured to prevent unauthorized manipulation.
+
+## 📄 License
+This project is licensed under the **MIT License**. See the [LICENSE](LICENSE) file for more details.
+

RESUME_CONTEXT.md

@@ -0,0 +1 @@
+My project is named Gopher-Ops. It is a Secure AI SRE Telegram bot managing Docker & metrics via natural language. Key Features are: AI ChatOps (Gemini 2.5 parses intents/logs, answering infra queries in a casual persona), Telemetry & Observability (Live host OS (CPU/RAM) & Docker states via gopsutil & Docker SDK; includes 1-hour in-memory metric history for sustained high-load detection), Guided Triage & HITL Execution (Parses AI suggestions into clickable Telegram buttons for safe actions (Start/Stop/Restart) and interactive troubleshooting flows), IaC (Terraform provisions a local microservices lab (Nginx, scalable/stateful Redis, networks, volumes)), Sec & Ops (Zero-Trust ID gating (Telegram); Automated Docker image vulnerability scanning; GitHub Actions CI/CD (Go tests & Terraform validation)). The stack includes Go, Gemini API, Docker SDK, Terraform, GitHub Actions, Telegram API.

TERRAFORM_NOTES.md

@@ -0,0 +1,31 @@
+# 🛠 Terraform Context: Apa Yang Kita Dah Buat?
+
+Dokumen ni ditulis khas sebagai nota peribadi (cheat sheet) untuk ingat balik segala gila/magic **Infrastructure as Code (IaC)** yang kita dah implement dalam fail-fail kat folder `terraform/`. 
+
+Projek asalnya cuma AI bot (SRE) dalam Go, tapi kita tambah kuasa "Automated Environment Provisioning" pakai Terraform.  
+
+## 1. Konsep Asas (HCL & Docker Provider)
+- **Tool yang pakai:** `terraform init` (download provider), `terraform plan` (buat draf perancangan PC kita sebelum ejas code), dan `terraform apply -auto-approve` (bina container betul-betul)
+- **The Provider:** Kat fail `main.tf`, kita "tarik" provider nama `kreuzwerker/docker`. Ini ajar Terraform yang dia kena borak dengan Docker Engine kat PC host kita.
+- **Fail Utama `main.tf`:** Ini tempat kita mengarah (secara declarative) container apa yang patut NAIK. Kita list "Nginx" as Web Server, dengan "Redis" as Database/Cache.
+
+## 2. Scale & Automate Pakai Variables & Loop (Mid-Level Skill)
+Dulu kita hardcode Nginx & Redis satu bijik je, tapi kita upgrade jadi **Dynamic Deployment**! 🚀
+- **Fail `variables.tf`:** Tempat kita simpan parameter macam `redis_count = 2` dan port `nginx_port`. 
+- **Argumen `count`:** Dekat `main.tf`, kat resource redis kita letak `count = var.redis_count`. Terraform secara automatik loop dan create "gopher-ops-redis-node-1" dan "gopher-ops-redis-node-2". Kita tak payah COPY-PASTE kod tu dua kali! No cap fr fr.
+
+## 3. Persistent State & Networking (Senior-Level Skill)
+Macam microservices betul-betul di *production*, kita bina dua "nyawa" yang power kat `main.tf` ni:
+- **Custom Docker Network:** Nama dia `gopher_ops_network`. Nginx & Redis 1/2 semua ditarik masuk duduk satu bumbung (isolated). Nginx boleh *ping* Redis direct tanpa IP Address, just guna hostname.
+- **Persistent Volume:** Kita tambah resource `docker_volume` khas untuk folder `/data` Redis-redis tadi. Ini buat dia jadi **Stateful Service**. Maksudnya? Kalau container redis tu di kill (Destroy) oleh Terraform atau Bot Gopher-Ops, DATA cache dalam tu MASIH WUJUD.
+
+## 4. "Resit" Deployment pakai Outputs
+- **Fail `outputs.tf`:** Selepas deployment siap (Apply complete), Terraform print out dekat terminal port Nginx yang dia pilih (`8080`) dan list array semua hostname redis yang tengah run (`node-1`, `node-2`). Senang untuk operator Go/bot baca!
+
+## 5. Hubung kait Nginx/Redis Ni Dengan Bot Go Kita (The End Goal)
+Segala perbuatan dari Terraform (Destroy/Create container, Scaling) akan serta merta di_"detect"_ oleh **Bot Gopher-Ops telegram kita**. 
+Ini konsep **Observability (via gopsutil + Docker API)**.
+SRE tak perlu manual deploy lab; bot SRE AI (Gemini) ada *full context* pada container-container yang Terraform tolong *spin up*! 🔥🦅
+
+---
+*Siap! Nota ini untuk rujukan diri sendiri atau bila disoal siasat waktu interview pasal Terraform flow.*