kubectl-mcp-server 1.9.0 → 1.11.0

package/README.md

@@ -6,10 +6,10 @@ A Model Context Protocol (MCP) server for Kubernetes that enables AI assistants
 [![Python](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/)
 [![Kubernetes](https://img.shields.io/badge/kubernetes-%23326ce5.svg?style=flat&logo=kubernetes&logoColor=white)](https://kubernetes.io/)
 [![MCP](https://img.shields.io/badge/MCP-compatible-green.svg)](https://modelcontextprotocol.io)
-[![PyPI](https://img.shields.io/pypi/v/kubectl-mcp-tool?color=blue&label=PyPI)](https://pypi.org/project/kubectl-mcp-tool/)
+[![PyPI](https://img.shields.io/pypi/v/kubectl-mcp-server?color=blue&label=PyPI)](https://pypi.org/project/kubectl-mcp-server/)
 [![npm](https://img.shields.io/npm/v/kubectl-mcp-server?color=green&label=npm)](https://www.npmjs.com/package/kubectl-mcp-server)
 [![Docker](https://img.shields.io/docker/pulls/rohitghumare64/kubectl-mcp-server.svg)](https://hub.docker.com/r/rohitghumare64/kubectl-mcp-server)
-[![Tests](https://img.shields.io/badge/tests-135%20passed-success)](https://github.com/rohitg00/kubectl-mcp-server)
+[![Tests](https://img.shields.io/badge/tests-187%20passed-success)](https://github.com/rohitg00/kubectl-mcp-server)
 
 ## MCP Client Compatibility
 
@@ -132,6 +132,9 @@ npm install -g kubectl-mcp-server
 ### pip (Python)
 
 ```bash
+pip install kubectl-mcp-server
+
+# Legacy alias (still works for backward compatibility)
 pip install kubectl-mcp-tool
 ```
 
@@ -315,6 +318,83 @@ python -m kubectl_mcp_tool.mcp_server --transport http --port 8000
 | `MCP_DEBUG` | Set to `1` for verbose logging |
 | `MCP_LOG_FILE` | Path to log file |
 
+### Authentication (Enterprise)
+
+| Variable | Description |
+|----------|-------------|
+| `MCP_AUTH_ENABLED` | Enable OAuth 2.1 authentication (default: `false`) |
+| `MCP_AUTH_ISSUER` | OAuth 2.0 Authorization Server URL |
+| `MCP_AUTH_JWKS_URI` | JWKS endpoint (optional, derived from issuer) |
+| `MCP_AUTH_AUDIENCE` | Expected token audience (default: `kubectl-mcp-server`) |
+| `MCP_AUTH_REQUIRED_SCOPES` | Required scopes (default: `mcp:tools`) |
+
+### Browser Automation (Optional)
+
+| Variable | Description |
+|----------|-------------|
+| `MCP_BROWSER_ENABLED` | Enable browser automation tools (default: `false`) |
+
+## Browser Tools (Optional Module)
+
+Enable browser automation for web-based K8s operations using [agent-browser](https://github.com/vercel-labs/agent-browser).
+
+### Setup
+
+```bash
+# Install agent-browser
+npm install -g agent-browser
+agent-browser install  # Download Chromium
+
+# Enable browser tools
+export MCP_BROWSER_ENABLED=true
+kubectl-mcp-server
+```
+
+### 19 Browser Tools
+
+| Tool | Description |
+|------|-------------|
+| `browser_open` | Open URL in browser |
+| `browser_snapshot` | Get page accessibility tree |
+| `browser_click` | Click element by ref |
+| `browser_fill` | Fill form field |
+| `browser_screenshot` | Take screenshot |
+| `browser_get_text` | Get element text |
+| `browser_get_url` | Get current URL |
+| `browser_wait` | Wait for element/text/timeout |
+| `browser_close` | Close browser |
+| `browser_test_ingress` | Test K8s service via Ingress |
+| `browser_screenshot_service` | Screenshot K8s service UI |
+| `browser_screenshot_grafana` | Screenshot Grafana dashboard |
+| `browser_screenshot_argocd` | Screenshot ArgoCD app |
+| `browser_health_check` | Health check web app |
+| `browser_form_submit` | Fill and submit form |
+| `browser_session_save` | Save browser session |
+| `browser_session_load` | Load browser session |
+| `browser_open_cloud_console` | Open EKS/GKE/AKS console |
+| `browser_pdf_export` | Export page as PDF |
+
+### Use Cases
+
+- **Test deployed apps** via Ingress URLs
+- **Screenshot Grafana/ArgoCD** dashboards
+- **Automate cloud console** operations (EKS, GKE, AKS)
+- **Health check** web applications
+- **Export monitoring dashboards** as PDF
+
+## MCP Authorization (RFC 9728)
+
+For enterprise deployments, kubectl-mcp-server supports OAuth 2.1 authentication.
+
+```bash
+export MCP_AUTH_ENABLED=true
+export MCP_AUTH_ISSUER=https://your-idp.example.com
+export MCP_AUTH_AUDIENCE=kubectl-mcp-server
+kubectl-mcp-server --transport http --port 8000
+```
+
+Supported identity providers: **Okta**, **Auth0**, **Keycloak**, **Microsoft Entra ID**, **Google OAuth**, and any OIDC-compliant provider.
+
 ## Docker MCP Toolkit
 
 Compatible with [Docker MCP Toolkit](https://docs.docker.com/ai/mcp-catalog-and-toolkit/toolkit/):
@@ -331,6 +411,88 @@ docker mcp server enable kubectl-mcp-server
 docker mcp client connect claude
 ```
 
+## Kubernetes Deployment
+
+Deploy kubectl-mcp-server directly in your Kubernetes cluster for centralized access.
+
+### kMCP Deployment (Recommended)
+
+[kMCP](https://github.com/kagent-dev/kmcp) is a development platform and control plane for MCP servers. See [kMCP quickstart](https://kagent.dev/docs/kmcp/quickstart).
+
+```bash
+# Install kmcp CLI
+curl -fsSL https://raw.githubusercontent.com/kagent-dev/kmcp/refs/heads/main/scripts/get-kmcp.sh | bash
+
+# Install kmcp controller in your cluster
+helm install kmcp-crds oci://ghcr.io/kagent-dev/kmcp/helm/kmcp-crds \
+     --namespace kmcp-system --create-namespace
+kmcp install
+
+# Deploy kubectl-mcp-server using npx (easiest)
+kmcp deploy package --deployment-name kubectl-mcp-server \
+   --manager npx --args kubectl-mcp-server
+
+# Or deploy using our Docker image with the MCPServer manifest
+kmcp deploy --file deploy/kmcp/kmcp.yaml --image rohitghumare64/kubectl-mcp-server:latest
+```
+
+### Standard Kubernetes Deployment
+
+Deploy using kubectl/kustomize without kMCP:
+
+```bash
+# Using kustomize (recommended)
+kubectl apply -k deploy/kubernetes/
+
+# Or apply individual manifests
+kubectl apply -f deploy/kubernetes/namespace.yaml
+kubectl apply -f deploy/kubernetes/rbac.yaml
+kubectl apply -f deploy/kubernetes/deployment.yaml
+kubectl apply -f deploy/kubernetes/service.yaml
+
+# Access via port-forward
+kubectl port-forward -n kubectl-mcp svc/kubectl-mcp-server 8000:8000
+```
+
+### MCPServer Custom Resource
+
+For kMCP deployments, apply this MCPServer resource:
+
+```yaml
+apiVersion: kagent.dev/v1alpha1
+kind: MCPServer
+metadata:
+  name: kubectl-mcp-server
+spec:
+  deployment:
+    image: "rohitghumare64/kubectl-mcp-server:latest"
+    port: 8000
+  transportType: http
+  httpTransport:
+    targetPort: 8000
+    path: /mcp
+```
+
+See [deploy/](deploy/) for full manifests and configuration options.
+
+### kagent Integration (AI Agents)
+
+[kagent](https://github.com/kagent-dev/kagent) is a Kubernetes-native AI agent framework (CNCF project). Register kubectl-mcp-server as a ToolServer to give your agents 121 K8s management tools.
+
+```bash
+# Install kagent
+brew install kagent
+kagent install --profile demo
+
+# Register kubectl-mcp-server as a ToolServer
+kubectl apply -f deploy/kagent/toolserver-stdio.yaml
+
+# Open kagent dashboard and chat with your K8s agent
+kagent dashboard
+```
+
+See [kagent quickstart](https://kagent.dev/docs/kagent/getting-started/quickstart) for full documentation.
+
 ## Architecture
 
 ```
@@ -422,7 +584,7 @@ tests/
 └── test_server.py       # Server initialization tests
 ```
 
-**135 tests covering**: tool registration, resource exposure, prompt generation, server initialization, non-destructive mode, secret masking, error handling, and transport methods.
+**138 tests covering**: tool registration, resource exposure, prompt generation, server initialization, non-destructive mode, secret masking, error handling, and transport methods.
 
 ### Code Quality
 
@@ -450,7 +612,7 @@ MIT License - see [LICENSE](LICENSE) for details.
 
 ## Links
 
-- [PyPI Package](https://pypi.org/project/kubectl-mcp-tool/)
+- [PyPI Package](https://pypi.org/project/kubectl-mcp-server/)
 - [npm Package](https://www.npmjs.com/package/kubectl-mcp-server)
 - [Docker Hub](https://hub.docker.com/r/rohitghumare64/kubectl-mcp-server)
 - [GitHub Issues](https://github.com/rohitg00/kubectl-mcp-server/issues)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kubectl-mcp-server",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "description": "A Model Context Protocol (MCP) server for Kubernetes that enables AI assistants like Claude, Cursor, and others to interact with Kubernetes clusters through natural language",
   "keywords": [
     "kubernetes",