flux-operator

The Flux Operator MCP Server is designed with security considerations, offering features like read-only mode, secret masking, and Kubernetes impersonation (`--kube-as`) to restrict its actions and data exposure. However, as a powerful tool interacting directly with the Kubernetes API, its overall security depends heavily on the operational security practices of the user, including proper RBAC configuration for the service account it runs under and careful management of `--kube-as` settings. The `install_flux_instance` tool can download manifests from URLs, which requires trusting the source of those manifests.