openshift-cluster-health-mcp

The project demonstrates a strong commitment to security: it uses Go (ADR-001) for performance and Kubernetes-native integration, builds distroless container images (ADR-008) to minimize attack surface, enforces an RBAC-based security model (ADR-007) with least privilege (read-only access to most cluster resources), and integrates NetworkPolicies. Hardcoded secrets are avoided, with explicit instructions for using ServiceAccount tokens and GitHub Secrets. Debugging in production is handled via separate debug images or ephemeral containers, rather than including a shell in the main image. The stdio transport was deprecated (ADR-004) to reduce complexity and focus on the more secure HTTP/SSE transport.