mcp-kubernetes

The server's core function is executing shell commands (kubectl, helm, cilium, hubble) based on AI input, which inherently carries security risks. However, the project implements strong mitigations: - Explicit `--access-level` controls (readonly, readwrite, admin) filter allowed operations at registration time. - `--allow-namespaces` restricts operations to specific namespaces, including regex support. - Command parsing uses `shlex.Split` to handle quotes and prevent basic injection, though an advanced AI could still generate harmful commands within its allowed scope. - Validation of CLI tools (`kubectl`, `helm`, `cilium`, `hubble`) and kubeconfig connectivity is performed at startup. - Telemetry collection is opt-out and sends basic invocation data. - The project follows Microsoft's security reporting policies.