mcp-server-kubernetes 4.2.0 → 4.2.2

package/dist/config/server-config.d.ts

@@ -1,6 +1,6 @@
 export declare const serverConfig: {
     readonly name: "kubernetes";
-    readonly version: "4.2.0";
+    readonly version: "4.2.2";
     readonly capabilities: {
         readonly resources: {};
         readonly tools: {};

package/dist/config/server-config.js

@@ -1,6 +1,6 @@
 export const serverConfig = {
     name: "kubernetes",
-    version: "4.2.0",
+    version: "4.2.2",
     capabilities: {
         resources: {},
         tools: {},

package/dist/index.d.ts

@@ -603,7 +603,6 @@ declare const allTools: ({
             };
             readonly output: {
                 readonly type: "string";
-                readonly enum: readonly ["json", "yaml", "name", "go-template", "template", "jsonpath", "jsonpath-as-json"];
                 readonly description: "Output format. One of: json|yaml|name|go-template|template|jsonpath|jsonpath-as-json. The template formats take their template inline, e.g. 'jsonpath={.metadata.name}'.";
                 readonly default: "yaml";
             };

package/dist/index.js

@@ -32,6 +32,7 @@ import { registerPromptHandlers } from "./prompts/index.js";
 import { ping, pingSchema } from "./tools/ping.js";
 import { startStreamableHTTPServer } from "./utils/streamable-http.js";
 import { withTelemetry } from "./middleware/telemetry-middleware.js";
+import { validateToolInput } from "./utils/validate-tool-input.js";
 // Check environment variables for tool filtering
 const allowOnlyReadonlyTools = process.env.ALLOW_ONLY_READONLY_TOOLS === "true";
 const allowedToolsEnv = process.env.ALLOWED_TOOLS;
@@ -153,10 +154,16 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
 });
 server.setRequestHandler(CallToolRequestSchema, withTelemetry(async (request) => {
     try {
-        const { name, arguments: input = {} } = request.params;
+        const { name, arguments: rawInput } = request.params;
         if (!isToolAllowed(name)) {
             throw new McpError(ErrorCode.InvalidRequest, `Tool '${name}' is not allowed under the current server configuration`);
         }
+        // The handlers below only cast their arguments; nothing else checks
+        // them against the tool's inputSchema before they reach kubectl/helm.
+        const tool = allTools.find((t) => t.name === name);
+        const input = tool
+            ? validateToolInput(tool, rawInput)
+            : rawInput ?? {};
         // Handle new kubectl-style commands
         if (name === "kubectl_context") {
             return await kubectlContext(k8sManager, input);

package/dist/models/helm-models.d.ts

@@ -25,6 +25,7 @@ export declare const HelmValuesSchema: z.ZodRecord<z.ZodString, z.ZodAny>;
 export interface HelmUninstallOperation {
     name: string;
     namespace: string;
+    context?: string;
 }
 export interface HelmInstallOperation {
     name: string;
@@ -35,6 +36,7 @@ export interface HelmInstallOperation {
     valuesFile?: string;
     createNamespace?: boolean;
     useTemplate?: boolean;
+    context?: string;
 }
 export interface HelmUpgradeOperation {
     name: string;
@@ -43,6 +45,7 @@ export interface HelmUpgradeOperation {
     repo?: string;
     values?: Record<string, any>;
     valuesFile?: string;
+    context?: string;
 }
 export type HelmResponse = {
     status: "installed" | "upgraded" | "uninstalled" | "failed";

package/dist/tools/helm-operations.js

@@ -178,7 +178,13 @@ const assertOperandsNotFlagLike = (params) => {
     assertNotFlagLike(params.chart, "chart");
     assertNotFlagLike(params.namespace, "namespace");
     assertNotFlagLike(params.repo, "repo");
+    assertNotFlagLike(params.context, "context");
 };
+// helm selects the kubeconfig context with --kube-context, kubectl with
+// --context. Without them the command runs against the current context, not
+// the one the caller asked for.
+const helmContextArgs = (context) => context ? ["--kube-context", context] : [];
+const kubectlContextArgs = (context) => context ? ["--context", context] : [];
 /**
  * Install a Helm chart using template mode (helm template + kubectl apply).
  * This mode bypasses authentication issues and kubeconfig API version mismatches.
@@ -197,7 +203,12 @@ async function installHelmChartTemplate(params) {
         // Step 2: Create namespace
         steps.push(`Creating namespace: ${params.namespace}`);
         try {
-            executeCommand("kubectl", ["create", "namespace", params.namespace]);
+            executeCommand("kubectl", [
+                "create",
+                "namespace",
+                params.namespace,
+                ...kubectlContextArgs(params.context),
+            ]);
         }
         catch (error) {
             if (!error.message.includes("already exists")) {
@@ -213,6 +224,7 @@ async function installHelmChartTemplate(params) {
             params.chart,
             "--namespace",
             params.namespace,
+            ...helmContextArgs(params.context),
         ];
         if (params.repo) {
             templateArgs.push("--repo", params.repo);
@@ -243,7 +255,12 @@ async function installHelmChartTemplate(params) {
         steps.push("Applying YAML using kubectl");
         const tempYamlFile = writeTempFile("template.yaml", yamlOutput);
         try {
-            executeCommand("kubectl", ["apply", "-f", tempYamlFile]);
+            executeCommand("kubectl", [
+                "apply",
+                "-f",
+                tempYamlFile,
+                ...kubectlContextArgs(params.context),
+            ]);
             steps.push("Helm chart installed successfully using template mode");
         }
         finally {
@@ -303,6 +320,7 @@ export async function installHelmChart(params) {
             params.chart,
             "--namespace",
             params.namespace,
+            ...helmContextArgs(params.context),
         ];
         // Add create namespace flag if requested
         if (params.createNamespace !== false) {
@@ -374,6 +392,7 @@ export async function upgradeHelmChart(params) {
             params.chart,
             "--namespace",
             params.namespace,
+            ...helmContextArgs(params.context),
         ];
         // Add values file if provided
         if (params.valuesFile) {
@@ -433,6 +452,7 @@ export async function uninstallHelmChart(params) {
             params.name,
             "--namespace",
             params.namespace,
+            ...helmContextArgs(params.context),
         ]);
         return {
             content: [

package/dist/tools/kubectl-create.d.ts

@@ -12,7 +12,6 @@ export declare const kubectlCreateSchema: {
             };
             readonly output: {
                 readonly type: "string";
-                readonly enum: readonly ["json", "yaml", "name", "go-template", "template", "jsonpath", "jsonpath-as-json"];
                 readonly description: "Output format. One of: json|yaml|name|go-template|template|jsonpath|jsonpath-as-json. The template formats take their template inline, e.g. 'jsonpath={.metadata.name}'.";
                 readonly default: "yaml";
             };

package/dist/tools/kubectl-create.js

@@ -30,16 +30,10 @@ export const kubectlCreateSchema = {
             // General options
             dryRun: dryRunParameter,
             output: {
+                // No enum: the template formats carry their template after "=",
+                // which an enum cannot express. kubectlCreate checks the format
+                // against INLINE_OUTPUT_FORMATS instead.
                 type: "string",
-                enum: [
-                    "json",
-                    "yaml",
-                    "name",
-                    "go-template",
-                    "template",
-                    "jsonpath",
-                    "jsonpath-as-json",
-                ],
                 description: "Output format. One of: json|yaml|name|go-template|template|jsonpath|jsonpath-as-json. The template formats take their template inline, e.g. 'jsonpath={.metadata.name}'.",
                 default: "yaml",
             },

package/dist/tools/kubectl-patch.d.ts

@@ -28,7 +28,7 @@ export declare const kubectlPatchSchema: {
                 default: string;
             };
             patchData: {
-                type: string;
+                type: string[];
                 description: string;
             };
             patchFile: {

package/dist/tools/kubectl-patch.js

@@ -29,8 +29,8 @@ export const kubectlPatchSchema = {
                 default: "strategic",
             },
             patchData: {
-                type: "object",
-                description: "Patch data as a JSON object",
+                type: ["object", "array"],
+                description: "Patch data: a JSON object for 'strategic' and 'merge' patches, or an array of JSON Patch operations for patchType 'json'",
             },
             patchFile: {
                 type: "string",

package/dist/utils/validate-tool-input.d.ts

@@ -0,0 +1,18 @@
+export type ToolDefinition = {
+    name: string;
+    inputSchema: unknown;
+};
+/**
+ * Validate `input` against `tool.inputSchema` and return the arguments the
+ * tool should run with. Throws an McpError (InvalidParams) listing every
+ * problem found.
+ *
+ * Normalisation is limited to unambiguous cases, so a call that would have
+ * worked before keeps working:
+ *   - an enum value that differs only in case is replaced by the listed one
+ *     ("Pod" -> "pod"); the handlers lower-case several of these anyway
+ *   - a required argument that is missing but has a schema default gets the
+ *     default, which is what the handlers fall back to
+ *   - an optional argument passed as null is treated as omitted
+ */
+export declare function validateToolInput(tool: ToolDefinition, input: unknown): Record<string, unknown>;

package/dist/utils/validate-tool-input.js

@@ -0,0 +1,179 @@
+import { McpError, ErrorCode } from "@modelcontextprotocol/sdk/types.js";
+/**
+ * Validate `input` against `tool.inputSchema` and return the arguments the
+ * tool should run with. Throws an McpError (InvalidParams) listing every
+ * problem found.
+ *
+ * Normalisation is limited to unambiguous cases, so a call that would have
+ * worked before keeps working:
+ *   - an enum value that differs only in case is replaced by the listed one
+ *     ("Pod" -> "pod"); the handlers lower-case several of these anyway
+ *   - a required argument that is missing but has a schema default gets the
+ *     default, which is what the handlers fall back to
+ *   - an optional argument passed as null is treated as omitted
+ */
+export function validateToolInput(tool, input) {
+    const errors = [];
+    if (input === undefined || input === null)
+        input = {};
+    if (!isPlainObject(input)) {
+        throw invalid(tool.name, [
+            `the arguments must be a JSON object; got ${describe(input)}.`,
+        ]);
+    }
+    const result = validateObject(tool.inputSchema, input, "", errors);
+    if (errors.length > 0)
+        throw invalid(tool.name, errors);
+    return result;
+}
+function validateObject(schema, value, path, errors) {
+    const properties = schema.properties ?? {};
+    const required = new Set(schema.required ?? []);
+    const result = {};
+    for (const [key, raw] of Object.entries(value)) {
+        const propSchema = properties[key];
+        const propPath = join(path, key);
+        // null means "not provided": dropped if optional, and reported (or
+        // defaulted) by the required check below if not.
+        if (raw === null)
+            continue;
+        if (propSchema) {
+            result[key] = validateValue(propSchema, raw, propPath, errors);
+        }
+        else if (isPlainObject(schema.additionalProperties)) {
+            result[key] = validateValue(schema.additionalProperties, raw, propPath, errors);
+        }
+        else if (schema.additionalProperties === false) {
+            errors.push(`"${propPath}" is not a recognised argument. Allowed arguments: ` +
+                `${listOf(Object.keys(properties))}.`);
+        }
+        else {
+            // Unknown arguments are ignored by the handlers; pass them through.
+            result[key] = raw;
+        }
+    }
+    for (const key of required) {
+        if (result[key] !== undefined && result[key] !== null)
+            continue;
+        const propSchema = properties[key];
+        if (propSchema?.default !== undefined) {
+            result[key] = propSchema.default;
+            continue;
+        }
+        errors.push(missing(join(path, key), propSchema));
+    }
+    return result;
+}
+function validateValue(schema, value, path, errors) {
+    const types = schema.type === undefined ? [] : [schema.type].flat();
+    if (types.length > 0 && !types.some((t) => matchesType(t, value))) {
+        errors.push(`"${path}" must be ${types.map(article).join(" or ")}; got ` +
+            `${describe(value)}.${typeHint(types, value)}`);
+        return value;
+    }
+    if (schema.enum) {
+        if (schema.enum.includes(value))
+            return value;
+        const folded = typeof value === "string"
+            ? schema.enum.find((option) => typeof option === "string" &&
+                option.toLowerCase() === value.toLowerCase())
+            : undefined;
+        if (folded !== undefined)
+            return folded;
+        errors.push(`"${path}" must be one of ${listOf(schema.enum)}; got ${describe(value)}.`);
+        return value;
+    }
+    if (Array.isArray(value) && schema.items) {
+        return value.map((item, i) => validateValue(schema.items, item, `${path}[${i}]`, errors));
+    }
+    if (isPlainObject(value) && (schema.properties || schema.required)) {
+        return validateObject(schema, value, path, errors);
+    }
+    return value;
+}
+function matchesType(type, value) {
+    switch (type) {
+        case "string":
+            return typeof value === "string";
+        case "number":
+            return typeof value === "number" && Number.isFinite(value);
+        case "integer":
+            return Number.isInteger(value);
+        case "boolean":
+            return typeof value === "boolean";
+        case "array":
+            return Array.isArray(value);
+        case "object":
+            return isPlainObject(value);
+        case "null":
+            return value === null;
+        default:
+            return true;
+    }
+}
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+// The most common LLM slip is quoting a scalar or JSON-encoding a structure;
+// say what the fix is when that is what happened.
+function typeHint(types, value) {
+    if (typeof value !== "string")
+        return "";
+    const trimmed = value.trim();
+    if ((types.includes("number") || types.includes("integer")) &&
+        trimmed !== "" &&
+        Number.isFinite(Number(trimmed))) {
+        return ` Pass the number without quotes: ${trimmed}.`;
+    }
+    if (types.includes("boolean") && (trimmed === "true" || trimmed === "false")) {
+        return ` Pass the boolean without quotes: ${trimmed}.`;
+    }
+    if ((types.includes("array") && trimmed.startsWith("[")) ||
+        (types.includes("object") && trimmed.startsWith("{"))) {
+        return " Pass the JSON value itself, not a string containing it.";
+    }
+    return "";
+}
+function missing(path, schema) {
+    const type = schema?.type ? ` (${[schema.type].flat().join(" or ")})` : "";
+    const description = schema?.description ? `: ${schema.description}` : ".";
+    return `missing required argument "${path}"${type}${description}`;
+}
+function invalid(toolName, errors) {
+    return new McpError(ErrorCode.InvalidParams, `Invalid arguments for tool "${toolName}":\n` +
+        errors.map((e) => `  - ${e}`).join("\n") +
+        `\nCorrect these arguments and call ${toolName} again.`);
+}
+function join(path, key) {
+    return path === "" ? key : `${path}.${key}`;
+}
+function article(type) {
+    switch (type) {
+        case "array":
+            return "an array";
+        case "object":
+            return "an object";
+        case "integer":
+            return "an integer";
+        default:
+            return `a ${type}`;
+    }
+}
+function listOf(values) {
+    return values.map((v) => JSON.stringify(v)).join(", ");
+}
+function describe(value) {
+    if (value === null)
+        return "null";
+    if (value === undefined)
+        return "nothing";
+    const kind = Array.isArray(value)
+        ? "an array"
+        : typeof value === "object"
+            ? "an object"
+            : `a ${typeof value}`;
+    let json = JSON.stringify(value) ?? String(value);
+    if (json.length > 80)
+        json = `${json.slice(0, 77)}...`;
+    return `${kind} (${json})`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-server-kubernetes",
-  "version": "4.2.0",
+  "version": "4.2.2",
   "description": "MCP server for interacting with Kubernetes clusters via kubectl",
   "license": "MIT",
   "type": "module",