k8s-mcp-server

The server offers powerful capabilities, including creating, updating, and deleting Kubernetes resources, as well as managing Helm charts and repositories. If exposed publicly without robust authentication, authorization, and network segmentation, it could serve as a significant attack vector. The `CreateOrUpdateResourceJSON` function can create namespaces, which is a high-privilege action. The ability to add arbitrary Helm repositories (`HelmRepoAdd`) can introduce untrusted software. The `--read-only` flag and non-root execution in Docker are positive security features, but the provided example `ClusterRole` grants broad `*` permissions, necessitating careful RBAC configuration for deployments. Using `KUBERNETES_INSECURE=true` is explicitly discouraged but possible.