mcp-server-kubernetes 2.7.0 → 2.9.0

package/README.md

@@ -9,7 +9,7 @@
 [![Issues](https://img.shields.io/github/issues/Flux159/mcp-server-kubernetes)](https://github.com/Flux159/mcp-server-kubernetes/issues)
 [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](https://github.com/Flux159/mcp-server-kubernetes/pulls)
 [![Last Commit](https://img.shields.io/github/last-commit/Flux159/mcp-server-kubernetes)](https://github.com/Flux159/mcp-server-kubernetes/commits/main)
-[![smithery badge](https://smithery.ai/badge/mcp-server-kubernetes)](https://smithery.ai/protocol/mcp-server-kubernetes)
+[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/Flux159/mcp-server-kubernetes)](https://archestra.ai/mcp-catalog/flux159__mcp-server-kubernetes)
 
 MCP Server that can connect to a Kubernetes cluster and manage it. Supports loading kubeconfig from multiple sources in priority order.
 
@@ -90,6 +90,12 @@ npx mcp-chat --config "%APPDATA%\Claude\claude_desktop_config.json"
   - Run Helm operations
     - Install, upgrade, and uninstall charts
     - Support for custom values, repositories, and versions
+    - Template-based installation (`helm_template_apply`) to bypass authentication issues
+    - Template-based uninstallation (`helm_template_uninstall`) to bypass authentication issues
+  - Pod cleanup operations
+    - Clean up problematic pods (`cleanup_pods`) in states: Evicted, ContainerStatusUnknown, Completed, Error, ImagePullBackOff, CrashLoopBackOff
+  - Node management operations
+    - Cordoning, draining, and uncordoning nodes (`node_management`) for maintenance and scaling operations
 - [x] Troubleshooting Prompt (`k8s-diagnose`)
   - Guides through a systematic Kubernetes troubleshooting flow for pods based on a keyword and optional namespace.
 - [x] Non-destructive mode for read and create/update-only access to clusters
@@ -196,7 +202,7 @@ All read-only and resource creation/update operations remain available:
 
 - Resource Information: `kubectl_get`, `kubectl_describe`, `kubectl_logs`, `explain_resource`, `list_api_resources`
 - Resource Creation/Modification: `kubectl_apply`, `kubectl_create`, `kubectl_scale`, `kubectl_patch`, `kubectl_rollout`
-- Helm Operations: `install_helm_chart`, `upgrade_helm_chart`
+- Helm Operations: `install_helm_chart`, `upgrade_helm_chart`, `helm_template_apply`, `helm_template_uninstall`
 - Connectivity: `port_forward`, `stop_port_forward`
 - Context Management: `kubectl_context`
 
@@ -207,8 +213,251 @@ The following destructive operations are disabled:
 - `kubectl_delete`: Deleting any Kubernetes resources
 - `uninstall_helm_chart`: Uninstalling Helm charts
 - `cleanup`: Cleanup of managed resources
+- `cleanup_pods`: Cleaning up problematic pods
+- `node_management`: Node management operations (can drain nodes)
 - `kubectl_generic`: General kubectl command access (may include destructive operations)
 
+### Helm Template Apply Tool
+
+The `helm_template_apply` tool provides an alternative way to install Helm charts that bypasses authentication issues commonly encountered with certain Kubernetes configurations. This tool is particularly useful when you encounter errors like:
+
+```
+WARNING: Kubernetes configuration file is group-readable. This is insecure.
+Error: INSTALLATION FAILED: Kubernetes cluster unreachable: exec plugin: invalid apiVersion "client.authentication.k8s.io/v1alpha1"
+```
+
+Instead of using `helm install` directly, this tool:
+
+1. Uses `helm template` to generate YAML manifests from the Helm chart
+2. Applies the generated YAML using `kubectl apply`
+3. Handles namespace creation and cleanup automatically
+
+#### Usage Example
+
+```json
+{
+  "name": "helm_template_apply",
+  "arguments": {
+    "name": "events-exporter",
+    "chart": ".",
+    "namespace": "kube-event-exporter",
+    "valuesFile": "values.yaml",
+    "createNamespace": true
+  }
+}
+```
+
+This is equivalent to running:
+```bash
+helm template events-exporter . -f values.yaml > events-exporter.yaml
+kubectl create namespace kube-event-exporter
+kubectl apply -f events-exporter.yaml -n kube-event-exporter
+```
+
+#### Parameters
+
+- `name`: Release name for the Helm chart
+- `chart`: Chart name or path to chart directory
+- `repo`: Chart repository URL (optional if using local chart path)
+- `namespace`: Kubernetes namespace to deploy to
+- `values`: Chart values as an object (optional)
+- `valuesFile`: Path to values.yaml file (optional, alternative to values object)
+- `createNamespace`: Whether to create the namespace if it doesn't exist (default: true)
+
+### Pod Cleanup with Existing Tools
+
+Pod cleanup can be achieved using the existing `kubectl_get` and `kubectl_delete` tools with field selectors. This approach leverages standard Kubernetes functionality without requiring dedicated cleanup tools.
+
+#### Identifying Problematic Pods
+
+Use `kubectl_get` with field selectors to identify pods in problematic states:
+
+**Get failed pods:**
+```json
+{
+  "name": "kubectl_get",
+  "arguments": {
+    "resourceType": "pods",
+    "namespace": "default",
+    "fieldSelector": "status.phase=Failed"
+  }
+}
+```
+
+**Get completed pods:**
+```json
+{
+  "name": "kubectl_get",
+  "arguments": {
+    "resourceType": "pods",
+    "namespace": "default",
+    "fieldSelector": "status.phase=Succeeded"
+  }
+}
+```
+
+**Get pods with specific conditions:**
+```json
+{
+  "name": "kubectl_get",
+  "arguments": {
+    "resourceType": "pods",
+    "namespace": "default",
+    "fieldSelector": "status.conditions[?(@.type=='Ready')].status=False"
+  }
+}
+```
+
+#### Deleting Problematic Pods
+
+Use `kubectl_delete` with field selectors to delete pods in problematic states:
+
+**Delete failed pods:**
+```json
+{
+  "name": "kubectl_delete",
+  "arguments": {
+    "resourceType": "pods",
+    "namespace": "default",
+    "fieldSelector": "status.phase=Failed",
+    "force": true,
+    "gracePeriodSeconds": 0
+  }
+}
+```
+
+**Delete completed pods:**
+```json
+{
+  "name": "kubectl_delete",
+  "arguments": {
+    "resourceType": "pods",
+    "namespace": "default",
+    "fieldSelector": "status.phase=Succeeded",
+    "force": true,
+    "gracePeriodSeconds": 0
+  }
+}
+```
+
+#### Workflow
+
+1. **First, identify problematic pods** using `kubectl_get` with appropriate field selectors
+2. **Review the list** of pods in the response
+3. **Delete the pods** using `kubectl_delete` with the same field selectors
+
+#### Available Field Selectors
+
+- `status.phase=Failed` - Pods that have failed
+- `status.phase=Succeeded` - Pods that have completed successfully
+- `status.phase=Pending` - Pods that are pending
+- `status.conditions[?(@.type=='Ready')].status=False` - Pods that are not ready
+
+#### Safety Features
+
+- **Field selectors**: Target specific pod states precisely
+- **Force deletion**: Use `force=true` and `gracePeriodSeconds=0` for immediate deletion
+- **Namespace isolation**: Target specific namespaces or use `allNamespaces=true`
+- **Standard kubectl**: Uses well-established Kubernetes patterns
+
+### Node Management Tool
+
+The `node_management` tool provides comprehensive node management capabilities for Kubernetes clusters, including cordoning, draining, and uncordoning operations. This is essential for cluster maintenance, scaling, and troubleshooting.
+
+#### Operations Available
+
+- **`list`**: List all nodes with their status and schedulability
+- **`cordon`**: Mark a node as unschedulable (no new pods will be scheduled)
+- **`drain`**: Safely evict all pods from a node and mark it as unschedulable
+- **`uncordon`**: Mark a node as schedulable again
+
+#### Usage Examples
+
+**1. List all nodes:**
+```json
+{
+  "name": "node_management",
+  "arguments": {
+    "operation": "list"
+  }
+}
+```
+
+**2. Cordon a node (mark as unschedulable):**
+```json
+{
+  "name": "node_management",
+  "arguments": {
+    "operation": "cordon",
+    "nodeName": "worker-node-1"
+  }
+}
+```
+
+**3. Drain a node (dry run first):**
+```json
+{
+  "name": "node_management",
+  "arguments": {
+    "operation": "drain",
+    "nodeName": "worker-node-1",
+    "dryRun": true
+  }
+}
+```
+
+**4. Drain a node (with confirmation):**
+```json
+{
+  "name": "node_management",
+  "arguments": {
+    "operation": "drain",
+    "nodeName": "worker-node-1",
+    "dryRun": false,
+    "confirmDrain": true,
+    "force": true,
+    "ignoreDaemonsets": true,
+    "timeout": "5m"
+  }
+}
+```
+
+**5. Uncordon a node:**
+```json
+{
+  "name": "node_management",
+  "arguments": {
+    "operation": "uncordon",
+    "nodeName": "worker-node-1"
+  }
+}
+```
+
+#### Drain Operation Parameters
+
+- `force`: Force the operation even if there are pods not managed by controllers
+- `gracePeriod`: Period of time in seconds given to each pod to terminate gracefully
+- `deleteLocalData`: Delete local data even if emptyDir volumes are used
+- `ignoreDaemonsets`: Ignore DaemonSet-managed pods (default: true)
+- `timeout`: The length of time to wait before giving up (e.g., '5m', '1h')
+- `dryRun`: Show what would be done without actually doing it
+- `confirmDrain`: Explicit confirmation to drain the node (required for actual draining)
+
+#### Safety Features
+
+- **Dry run by default**: Drain operations default to dry run to show what would be done
+- **Explicit confirmation**: Drain operations require `confirmDrain=true` to proceed
+- **Status tracking**: Shows node status before and after operations
+- **Timeout protection**: Configurable timeouts to prevent hanging operations
+- **Graceful termination**: Configurable grace periods for pod termination
+
+#### Common Use Cases
+
+1. **Cluster Maintenance**: Cordon nodes before maintenance, drain them, perform maintenance, then uncordon
+2. **Node Scaling**: Drain nodes before removing them from the cluster
+3. **Troubleshooting**: Isolate problematic nodes by cordoning them
+4. **Resource Management**: Drain nodes to redistribute workload
+
 For additional advanced features, see the [ADVANCED_README.md](ADVANCED_README.md).
 
 ## Architecture

package/dist/index.d.ts

@@ -10,9 +10,68 @@ declare const destructiveTools: ({
                 description: string;
             };
             namespace: {
+                type: "string";
+                description: string;
+                default: string;
+            };
+            context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            operation: {
+                type: string;
+                description: string;
+                enum: string[];
+            };
+            nodeName: {
                 type: string;
                 description: string;
             };
+            force: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            gracePeriod: {
+                type: string;
+                description: string;
+                default: number;
+            };
+            deleteLocalData: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            ignoreDaemonsets: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            timeout: {
+                type: string;
+                description: string;
+                default: string;
+            };
+            dryRun: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            confirmDrain: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
         };
         required: string[];
     };
@@ -38,9 +97,9 @@ declare const destructiveTools: ({
                 readonly description: "Name of the resource to delete";
             };
             readonly namespace: {
-                readonly type: "string";
-                readonly description: "Namespace of the resource (optional - defaults to 'default' for namespaced resources)";
-                readonly default: "default";
+                type: "string";
+                description: string;
+                default: string;
             };
             readonly labelSelector: {
                 readonly type: "string";
@@ -68,6 +127,11 @@ declare const destructiveTools: ({
                 readonly type: "number";
                 readonly description: "Period of time in seconds given to the resource to terminate gracefully";
             };
+            readonly context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
         };
         readonly required: readonly ["resourceType", "name", "namespace"];
     };
@@ -83,9 +147,68 @@ declare const allTools: ({
                 description: string;
             };
             namespace: {
+                type: "string";
+                description: string;
+                default: string;
+            };
+            context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            operation: {
+                type: string;
+                description: string;
+                enum: string[];
+            };
+            nodeName: {
                 type: string;
                 description: string;
             };
+            force: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            gracePeriod: {
+                type: string;
+                description: string;
+                default: number;
+            };
+            deleteLocalData: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            ignoreDaemonsets: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            timeout: {
+                type: string;
+                description: string;
+                default: string;
+            };
+            dryRun: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            confirmDrain: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
         };
         required: string[];
     };
@@ -108,6 +231,11 @@ declare const allTools: ({
                 description: string;
                 default: boolean;
             };
+            context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
             output: {
                 type: string;
                 description: string;
@@ -131,6 +259,11 @@ declare const allTools: ({
                 type: string;
                 description: string;
             };
+            context: {
+                type: string;
+                description: string;
+                default: string;
+            };
             verbs: {
                 type: string;
                 items: {
@@ -239,9 +372,9 @@ declare const allTools: ({
                 readonly description: "Name of the resource (optional - if not provided, lists all resources of the specified type)";
             };
             readonly namespace: {
-                readonly type: "string";
-                readonly description: "Namespace of the resource (optional - defaults to 'default' for namespaced resources)";
-                readonly default: "default";
+                type: "string";
+                description: string;
+                default: string;
             };
             readonly output: {
                 readonly type: "string";
@@ -266,6 +399,11 @@ declare const allTools: ({
                 readonly type: "string";
                 readonly description: "Sort events by a field (default: lastTimestamp). Only applicable for events.";
             };
+            readonly context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
         };
         readonly required: readonly ["resourceType", "name", "namespace"];
     };
@@ -284,9 +422,14 @@ declare const allTools: ({
                 readonly description: "Name of the resource to describe";
             };
             readonly namespace: {
-                readonly type: "string";
-                readonly description: "Namespace of the resource (optional - defaults to 'default' for namespaced resources)";
-                readonly default: "default";
+                type: "string";
+                description: string;
+                default: string;
+            };
+            readonly context: {
+                type: "string";
+                description: string;
+                default: string;
             };
             readonly allNamespaces: {
                 readonly type: "boolean";
@@ -311,20 +454,25 @@ declare const allTools: ({
                 readonly description: "Path to a YAML file to apply (optional - use either manifest or filename)";
             };
             readonly namespace: {
-                readonly type: "string";
-                readonly description: "Namespace to apply the resource to (optional)";
-                readonly default: "default";
+                type: "string";
+                description: string;
+                default: string;
             };
             readonly dryRun: {
-                readonly type: "boolean";
-                readonly description: "If true, only validate the resource, don't apply it";
-                readonly default: false;
+                type: "boolean";
+                description: string;
+                default: boolean;
             };
             readonly force: {
                 readonly type: "boolean";
                 readonly description: "If true, immediately remove resources from API and bypass graceful deletion";
                 readonly default: false;
             };
+            readonly context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
         };
         readonly required: readonly [];
     };
@@ -343,9 +491,9 @@ declare const allTools: ({
                 readonly description: "Name of the resource to delete";
             };
             readonly namespace: {
-                readonly type: "string";
-                readonly description: "Namespace of the resource (optional - defaults to 'default' for namespaced resources)";
-                readonly default: "default";
+                type: "string";
+                description: string;
+                default: string;
             };
             readonly labelSelector: {
                 readonly type: "string";
@@ -373,6 +521,11 @@ declare const allTools: ({
                 readonly type: "number";
                 readonly description: "Period of time in seconds given to the resource to terminate gracefully";
             };
+            readonly context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
         };
         readonly required: readonly ["resourceType", "name", "namespace"];
     };
@@ -383,9 +536,9 @@ declare const allTools: ({
         readonly type: "object";
         readonly properties: {
             readonly dryRun: {
-                readonly type: "boolean";
-                readonly description: "If true, only validate the resource, don't actually create it";
-                readonly default: false;
+                type: "boolean";
+                description: string;
+                default: boolean;
             };
             readonly output: {
                 readonly type: "string";
@@ -415,9 +568,9 @@ declare const allTools: ({
                 readonly description: "Name of the resource to create";
             };
             readonly namespace: {
-                readonly type: "string";
-                readonly description: "Namespace to create the resource in";
-                readonly default: "default";
+                type: "string";
+                description: string;
+                default: string;
             };
             readonly fromLiteral: {
                 readonly type: "array";
@@ -493,6 +646,11 @@ declare const allTools: ({
                 };
                 readonly description: "Annotations to apply to the resource (e.g. [\"key1=value1\", \"key2=value2\"])";
             };
+            readonly context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
         };
         readonly required: readonly [];
     };
@@ -512,9 +670,9 @@ declare const allTools: ({
                 readonly description: "Name of the resource";
             };
             readonly namespace: {
-                readonly type: "string";
-                readonly description: "Namespace of the resource";
-                readonly default: "default";
+                type: "string";
+                description: string;
+                default: string;
             };
             readonly container: {
                 readonly type: "string";
@@ -551,6 +709,11 @@ declare const allTools: ({
                 readonly type: "string";
                 readonly description: "Filter resources by label selector";
             };
+            readonly context: {
+                type: "string";
+                description: string;
+                default: string;
+            };
         };
         readonly required: readonly ["resourceType", "name", "namespace"];
     };

package/dist/index.js

@@ -2,6 +2,7 @@
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { installHelmChart, installHelmChartSchema, upgradeHelmChart, upgradeHelmChartSchema, uninstallHelmChart, uninstallHelmChartSchema, } from "./tools/helm-operations.js";
+import { nodeManagement, nodeManagementSchema, } from "./tools/node-management.js";
 import { explainResource, explainResourceSchema, listApiResources, listApiResourcesSchema, } from "./tools/kubectl-operations.js";
 import { execInPod, execInPodSchema } from "./tools/exec_in_pod.js";
 import { getResourceHandlers } from "./resources/handlers.js";
@@ -45,6 +46,7 @@ const destructiveTools = [
     uninstallHelmChartSchema,
     cleanupSchema, // Cleanup is also destructive as it deletes resources
     kubectlGenericSchema, // Generic kubectl command can perform destructive operations
+    nodeManagementSchema, // Node management can drain nodes (destructive)
 ];
 // Get all available tools
 const allTools = [
@@ -68,6 +70,7 @@ const allTools = [
     installHelmChartSchema,
     upgradeHelmChartSchema,
     uninstallHelmChartSchema,
+    nodeManagementSchema,
     // Port forwarding
     PortForwardSchema,
     StopPortForwardSchema,
@@ -156,6 +159,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                 labelSelector: input.labelSelector,
                 sortBy: input.sortBy,
                 output: input.output,
+                context: input.context,
             });
         }
         // Handle specific non-kubectl operations
@@ -185,6 +189,9 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             case "upgrade_helm_chart": {
                 return await upgradeHelmChart(input);
             }
+            case "node_management": {
+                return await nodeManagement(input);
+            }
             case "list_api_resources": {
                 return await listApiResources(input);
             }

package/dist/models/common-parameters.d.ts

@@ -0,0 +1,15 @@
+export declare const contextParameter: {
+    type: "string";
+    description: string;
+    default: string;
+};
+export declare const namespaceParameter: {
+    type: "string";
+    description: string;
+    default: string;
+};
+export declare const dryRunParameter: {
+    type: "boolean";
+    description: string;
+    default: boolean;
+};

package/dist/models/common-parameters.js

@@ -0,0 +1,15 @@
+export const contextParameter = {
+    type: "string",
+    description: "Kubeconfig Context to use for the command (optional - defaults to null)",
+    default: "",
+};
+export const namespaceParameter = {
+    type: "string",
+    description: "Kubernetes namespace",
+    default: "default",
+};
+export const dryRunParameter = {
+    type: "boolean",
+    description: "If true, only validate the resource, don't actually execute the operation",
+    default: false,
+};