mcp-k8s

The server leverages official Kubernetes client-go and Helm client libraries. Write operations (create, update, delete, Helm chart operations, Helm repository management) are disabled by default and require explicit command-line flags to enable, offering fine-grained control to the operator. User inputs for resource manifests and Helm values are parsed as structured data (JSON/YAML) rather than executed, mitigating common injection risks. The primary security consideration lies with the RBAC permissions granted to the kubeconfig file used by the server; appropriate least-privilege RBAC is critical to prevent unintended or malicious actions on the cluster, especially when integrated with an LLM.