mcp-server-kubernetes 2.9.7 → 2.9.9

package/README.md

@@ -128,6 +128,14 @@ Windows:
 npx mcp-chat --config "%APPDATA%\Claude\claude_desktop_config.json"
 ```
 
+## Gemini CLI
+
+[Gemini CLI](https://geminicli.com/) allows you to install mcp servers as extensions. From a shell, install the extension by pointing to this repo:
+
+```shell
+gemini extensions install https://github.com/Flux159/mcp-server-kubernetes
+```
+
 ## Features
 
 - [x] Connect to a Kubernetes cluster

package/dist/index.d.ts

@@ -358,25 +358,16 @@ declare const allTools: ({
                 default: string;
             };
             command: {
-                anyOf: ({
-                    type: string;
-                    items?: undefined;
-                } | {
+                type: string;
+                items: {
                     type: string;
-                    items: {
-                        type: string;
-                    };
-                })[];
+                };
                 description: string;
             };
             container: {
                 type: string;
                 description: string;
             };
-            shell: {
-                type: string;
-                description: string;
-            };
             timeout: {
                 type: string;
                 description: string;

package/dist/tools/exec_in_pod.d.ts

@@ -2,14 +2,17 @@
  * Tool: exec_in_pod
  * Execute a command in a Kubernetes pod or container and return the output.
  * Uses the official Kubernetes client-node Exec API for native execution.
- * Supports both string and array command formats, and optional container targeting.
+ *
+ * SECURITY: Only accepts commands as an array of strings. This prevents command
+ * injection attacks by executing directly without shell interpretation.
+ * Shell operators (pipes, redirects, etc.) are intentionally not supported.
  */
 import { KubernetesManager } from "../types.js";
 /**
  * Schema for exec_in_pod tool.
  * - name: Pod name
  * - namespace: Namespace (default: "default")
- * - command: Command to execute (string or array of args)
+ * - command: Command to execute as array of strings (e.g. ["ls", "-la"])
  * - container: (Optional) Container name
  */
 export declare const execInPodSchema: {
@@ -28,25 +31,16 @@ export declare const execInPodSchema: {
                 default: string;
             };
             command: {
-                anyOf: ({
-                    type: string;
-                    items?: undefined;
-                } | {
+                type: string;
+                items: {
                     type: string;
-                    items: {
-                        type: string;
-                    };
-                })[];
+                };
                 description: string;
             };
             container: {
                 type: string;
                 description: string;
             };
-            shell: {
-                type: string;
-                description: string;
-            };
             timeout: {
                 type: string;
                 description: string;
@@ -64,13 +58,15 @@ export declare const execInPodSchema: {
  * Execute a command in a Kubernetes pod or container using the Kubernetes client-node Exec API.
  * Returns the stdout output as a text response.
  * Throws McpError on failure.
+ *
+ * SECURITY: Command must be an array of strings. This executes directly via the
+ * Kubernetes exec API without shell interpretation, preventing command injection.
  */
 export declare function execInPod(k8sManager: KubernetesManager, input: {
     name: string;
     namespace?: string;
-    command: string | string[];
+    command: string[];
     container?: string;
-    shell?: string;
     timeout?: number;
     context?: string;
 }): Promise<{

package/dist/tools/exec_in_pod.js

@@ -2,7 +2,10 @@
  * Tool: exec_in_pod
  * Execute a command in a Kubernetes pod or container and return the output.
  * Uses the official Kubernetes client-node Exec API for native execution.
- * Supports both string and array command formats, and optional container targeting.
+ *
+ * SECURITY: Only accepts commands as an array of strings. This prevents command
+ * injection attacks by executing directly without shell interpretation.
+ * Shell operators (pipes, redirects, etc.) are intentionally not supported.
  */
 import * as k8s from "@kubernetes/client-node";
 import { McpError, ErrorCode } from "@modelcontextprotocol/sdk/types.js";
@@ -12,12 +15,12 @@ import { contextParameter, namespaceParameter } from "../models/common-parameter
  * Schema for exec_in_pod tool.
  * - name: Pod name
  * - namespace: Namespace (default: "default")
- * - command: Command to execute (string or array of args)
+ * - command: Command to execute as array of strings (e.g. ["ls", "-la"])
  * - container: (Optional) Container name
  */
 export const execInPodSchema = {
     name: "exec_in_pod",
-    description: "Execute a command in a Kubernetes pod or container and return the output",
+    description: "Execute a command in a Kubernetes pod or container and return the output. Command must be an array of strings where the first element is the executable and remaining elements are arguments. This executes directly without shell interpretation for security.",
     inputSchema: {
         type: "object",
         properties: {
@@ -27,20 +30,14 @@ export const execInPodSchema = {
             },
             namespace: namespaceParameter,
             command: {
-                anyOf: [
-                    { type: "string" },
-                    { type: "array", items: { type: "string" } }
-                ],
-                description: "Command to execute in the pod (string or array of args)",
+                type: "array",
+                items: { type: "string" },
+                description: "Command to execute as an array of strings (e.g. [\"ls\", \"-la\", \"/app\"]). First element is the executable, remaining are arguments. Shell operators like pipes, redirects, or command chaining are not supported - use explicit array format for security.",
             },
             container: {
                 type: "string",
                 description: "Container name (required when pod has multiple containers)",
             },
-            shell: {
-                type: "string",
-                description: "Shell to use for command execution (e.g. '/bin/sh', '/bin/bash'). If not provided, will use command as-is.",
-            },
             timeout: {
                 type: "number",
                 description: "Timeout for command - 60000 milliseconds if not specified",
@@ -54,20 +51,26 @@ export const execInPodSchema = {
  * Execute a command in a Kubernetes pod or container using the Kubernetes client-node Exec API.
  * Returns the stdout output as a text response.
  * Throws McpError on failure.
+ *
+ * SECURITY: Command must be an array of strings. This executes directly via the
+ * Kubernetes exec API without shell interpretation, preventing command injection.
  */
 export async function execInPod(k8sManager, input) {
     const namespace = input.namespace || "default";
-    // Convert command to array of strings for the Exec API
-    let commandArr;
-    if (Array.isArray(input.command)) {
-        commandArr = input.command;
+    // Validate command is an array (defense in depth - schema should enforce this)
+    if (!Array.isArray(input.command)) {
+        throw new McpError(ErrorCode.InvalidParams, "Command must be an array of strings (e.g. [\"ls\", \"-la\"]). String commands are not supported for security reasons.");
     }
-    else {
-        // Always wrap string commands in a shell for correct parsing
-        const shell = input.shell || "/bin/sh";
-        commandArr = [shell, "-c", input.command];
-        console.log("[exec_in_pod] Using shell:", shell, "Command array:", commandArr);
+    if (input.command.length === 0) {
+        throw new McpError(ErrorCode.InvalidParams, "Command array cannot be empty");
+    }
+    // Validate all elements are strings
+    for (let i = 0; i < input.command.length; i++) {
+        if (typeof input.command[i] !== "string") {
+            throw new McpError(ErrorCode.InvalidParams, `Command array element at index ${i} must be a string`);
+        }
     }
+    const commandArr = input.command;
     // Prepare buffers to capture stdout and stderr
     let stdout = "";
     let stderr = "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-server-kubernetes",
-  "version": "2.9.7",
+  "version": "2.9.9",
   "description": "MCP server for interacting with Kubernetes clusters via kubectl",
   "license": "MIT",
   "type": "module",
@@ -40,7 +40,7 @@
     "@kubernetes/client-node": "1.3.0",
     "@modelcontextprotocol/sdk": "1.17.0",
     "express": "4.21.2",
-    "js-yaml": "4.1.0",
+    "js-yaml": "4.1.1",
     "yaml": "2.7.0",
     "zod": "3.23.8"
   },