kubectl-mcp-server 1.16.0__py3-none-any.whl → 1.17.0__py3-none-any.whl

{kubectl_mcp_server-1.16.0.dist-info → kubectl_mcp_server-1.17.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kubectl-mcp-server
-Version: 1.16.0
+Version: 1.17.0
 Summary: A Model Context Protocol (MCP) server for Kubernetes with 220+ tools, 8 resources, and 8 prompts
 Home-page: https://github.com/rohitg00/kubectl-mcp-server
 Author: Rohit Ghumare

{kubectl_mcp_server-1.16.0.dist-info → kubectl_mcp_server-1.17.0.dist-info}/RECORD

@@ -1,21 +1,31 @@
-kubectl_mcp_server-1.16.0.dist-info/licenses/LICENSE,sha256=nH9Z0W0WNH2oQ4cPrBAU8ldDcHfeI6NUbkSGiazYWgQ,1070
-kubectl_mcp_tool/__init__.py,sha256=lXt5nN5Weai2sekX8XGqgSgjZjVFf7FBG8xfvlbYruA,580
+kubectl_mcp_server-1.17.0.dist-info/licenses/LICENSE,sha256=nH9Z0W0WNH2oQ4cPrBAU8ldDcHfeI6NUbkSGiazYWgQ,1070
+kubectl_mcp_tool/__init__.py,sha256=9s67uMXh5QXX-vJgm6xVezzvqqpgckeH0JrNM9Q381E,580
 kubectl_mcp_tool/__main__.py,sha256=CE6cTD6PA71Ap0i5_gE17Pb9FcedOJmtGRNzZ5-TFSc,1490
 kubectl_mcp_tool/crd_detector.py,sha256=xLZSyg3iIe_MjSMI3mESe2VK8wGJzu40rJ7F72fULBs,7139
 kubectl_mcp_tool/diagnostics.py,sha256=uwolSoHadRkB-J8PAsabbexfj6sTNCIIRRrABBRXoTU,11776
 kubectl_mcp_tool/k8s_config.py,sha256=tjP_VONsoqhd5qn0LPB25aKhiPw2qCYhJ_B52NbRYDo,15746
-kubectl_mcp_tool/mcp_server.py,sha256=rHz8yuA-SlnuuajVytqeEOMryQAHCTL1CWrQw85CbMM,22674
+kubectl_mcp_tool/mcp_server.py,sha256=-p-r-NRaX6UiHUebvO4OIozRlA2PX851rmAlW_rO3Tk,31112
+kubectl_mcp_tool/safety.py,sha256=7bx7tUH_hT4Y_eTnpH5knnHTsvnIZvI_0oo9MSBe_z8,5036
 kubectl_mcp_tool/auth/__init__.py,sha256=ot8ivZZkDtV8Rg0y1UYruwobKCPyxX1svqh35wWxKvY,347
 kubectl_mcp_tool/auth/config.py,sha256=wi3wuJNMyDqMeluDHL0MaJyedIFv5CFVxiUaEVaTvzk,2267
 kubectl_mcp_tool/auth/scopes.py,sha256=KPmuGO0SrTkjzlElWFOV29ie9apTdMklOCkiA-965lI,6147
 kubectl_mcp_tool/auth/verifier.py,sha256=ChZM-UsZJgZc3LjSfw8VfSydkKqKBZ1s8es71LlB_A0,2431
 kubectl_mcp_tool/cli/__init__.py,sha256=NDd1-7_Ira9vx0uNVOUqhkK7S53IOTu0WUBWOKCtap8,1348
 kubectl_mcp_tool/cli/__main__.py,sha256=OxhHqW8YsTd565acTDlZknljPAw6FN9JW7pNtgWIcFE,196
-kubectl_mcp_tool/cli/cli.py,sha256=qy2mQ0uDrQ9qzv5LP_w9sJ2y_yt3Qzx5m2pzh1i-u4o,19694
+kubectl_mcp_tool/cli/cli.py,sha256=vty-ooXE9lpi7BgIHmEsuUn3WYEiqlmPm6WIEmb9nYg,22510
 kubectl_mcp_tool/cli/errors.py,sha256=nCvopWH9bt8wGRt6RTDoXo7IsKwsdwzRMvJ5OM2a1Eg,9018
-kubectl_mcp_tool/cli/output.py,sha256=N1AUoRDiBe3lA27l96ZSdIA7pa4GqXLOP3PBdyoLHsQ,10060
-kubectl_mcp_tool/prompts/__init__.py,sha256=BacBNfoVxow6aci8Zzcfam3m1oM7yYzM0IRT1L3uCOQ,77
-kubectl_mcp_tool/prompts/prompts.py,sha256=ZfmTCio8NqOYYxF8VVo9f6VWGCS34J8tvmBfhNblr58,22942
+kubectl_mcp_tool/cli/output.py,sha256=Ml14BadxgbOUpUZy_76lHrOxsxramvISgK_2Gney9lI,10558
+kubectl_mcp_tool/config/__init__.py,sha256=1jk1JHO1Wpr7W9ISoJST8bZkm7B8ZAjVSQ3OoF9mZyw,961
+kubectl_mcp_tool/config/loader.py,sha256=7HecHrQ-PvBad22954fqZqFLozpfhJ5BDspZWXBjOEg,12045
+kubectl_mcp_tool/config/schema.py,sha256=Y4cvsHLXcTBpuWdobxDO5y4Ig8LiyeEgKd7wUZp4Rag,6103
+kubectl_mcp_tool/observability/__init__.py,sha256=cNGHWjn7cAPHwI_0ZimcLUVQd5VMRKgcNnfkA6bj658,1469
+kubectl_mcp_tool/observability/metrics.py,sha256=u2CbMTjceibz04f6o8l_iUmgMSfzX2EgnGCDS9FQbUY,5790
+kubectl_mcp_tool/observability/stats.py,sha256=qbbWaKCuHm1nbTVF-AeIfBlhaITJuUCnv9IccpuRxgQ,7971
+kubectl_mcp_tool/observability/tracing.py,sha256=DEziQN7WbR9taQ7vEo2yM3JtlHKXpLSyPNWjVh6SvUg,11162
+kubectl_mcp_tool/prompts/__init__.py,sha256=ecxQuPcBKRaF8zbG5fkthrRXGhlSjORLVuk9hV4582g,1104
+kubectl_mcp_tool/prompts/builtin.py,sha256=ET5KYqC-J3XwzVfesB7V6faLFSFlvvAqpT0gTuexRgk,20146
+kubectl_mcp_tool/prompts/custom.py,sha256=ce4DmQLMh_UTKb4kbredekvvgI8GQWzuuB2H0P4JJAA,9214
+kubectl_mcp_tool/prompts/prompts.py,sha256=ogDhU6FVsYIlig_QuIw-TblxR9GQJ3Xp8mJHLBcZ1z4,28263
 kubectl_mcp_tool/resources/__init__.py,sha256=ERkn0ErlaGi9-dybv4wrAaT8WretvNp6K002h7Agjno,83
 kubectl_mcp_tool/resources/resources.py,sha256=kvK4OM3Ox5cFvWDqJBTXOfBgnRYdoqdvvjsdCg0PJfY,12713
 kubectl_mcp_tool/tools/__init__.py,sha256=DgFcaXxqMf7dgXcYWXl0-zKBJTUSF7Y__Cqsd79hRBA,1761
@@ -24,7 +34,7 @@ kubectl_mcp_tool/tools/browser.py,sha256=OvXUHzEuciRQInnwLLC16iObOOdniu09b9RT81y
 kubectl_mcp_tool/tools/capi.py,sha256=mPCm6wUI3Sr5Mg9RjWSKBR5uwWn02Byyx42Cc1Fo7IE,25738
 kubectl_mcp_tool/tools/certs.py,sha256=7Qdsx3IwCI3_mgcPrypzF6MFL5jZjKkVXsXUohAbfh8,25720
 kubectl_mcp_tool/tools/cilium.py,sha256=ku5E-fQ9vS4MhSnaZA_rli6ebXXLCHBuKhZBrEo221c,19973
-kubectl_mcp_tool/tools/cluster.py,sha256=Xyb18x7d1Eg3l0XZ2JMmCOb0c0IbtVCpk2RH2rKgKDY,20944
+kubectl_mcp_tool/tools/cluster.py,sha256=DAA2NQyRmMtyBDgyYOgwaCEPl0jGL24HOH07ypiCOYw,35660
 kubectl_mcp_tool/tools/core.py,sha256=67Cx1z4DqV0Qd26yXkF1eBXbUIlBB3Qj2W8rOInvb54,17801
 kubectl_mcp_tool/tools/cost.py,sha256=fcFlIv-bsMdKESw-l-T6ECsUplDukNHaqM76JCYVHvQ,29629
 kubectl_mcp_tool/tools/deployments.py,sha256=e138KV30DQhLCnvXntrofx1XdLH0dC0_mlODbzkluKk,18329
@@ -49,13 +59,17 @@ tests/conftest.py,sha256=6054YlpuGleV3Wg8BnVj4lnKWhGk-Eqc9JYTXxOmsXs,10782
 tests/test_auth.py,sha256=PoESfWiN92wSGUdVwLL3Z1AP6C1zUsVmgTI7Q8ZdlxM,11074
 tests/test_browser.py,sha256=6rB6Atqq3b2-xWnKzFdCVFHbF2Q3nt2Dy8Rp4ZwIgNk,20621
 tests/test_cli.py,sha256=G-f9uByWooe-yUOH0ahBdoft4uz8TC0R0OzDs1Lom-4,10014
+tests/test_config.py,sha256=9_A6_ntjvX556GvFvHGHuel1ERGo-WrbnFJX8OniUvg,12568
 tests/test_ecosystem.py,sha256=SkxDWAASELIxzaYWu0d-Rw1HaKSSlyMMenwwF2HWvSA,13227
-tests/test_prompts.py,sha256=3TcJUvSNxhTqfySW6DCrW9MwiMDumciLQRjjbucwqlA,17803
+tests/test_mcp_integration.py,sha256=9ePvu1MJ0mTnMRFHthDwl3D2jyVPgQ1beUbchpT8Y3M,8782
+tests/test_observability.py,sha256=m0m-uIQrE9OJ3FFls_rVZJst3NeAFKRtNUZohFpIZE4,17829
+tests/test_prompts.py,sha256=VzZAXr5iFO-hG8kRwRnG4wom2LlqOmZ-SeW4d3HQ7hc,42888
 tests/test_resources.py,sha256=Z0Ex8WdRz-B3VZa1s0eAaDDGbhy7dRdqy1uFVOe2Qbo,12689
+tests/test_safety.py,sha256=5IOBQbcH2r8tANQD7ymsR6pBc6O50IspcFsuwrnwh1M,8292
 tests/test_server.py,sha256=lLvgbqutnivSgQMNrki0O48whBQt0UXjdwT047nf0nw,14415
 tests/test_tools.py,sha256=g3moVSpiFgqC107M4tBAQ6xU600rlYMPhnknyYhnTIc,34792
-kubectl_mcp_server-1.16.0.dist-info/METADATA,sha256=3WRkJkEGNeW15Xu_xJSlbp-NU1RVMYYsBIAVDFHhxJM,38116
-kubectl_mcp_server-1.16.0.dist-info/WHEEL,sha256=qELbo2s1Yzl39ZmrAibXA2jjPLUYfnVhUNTlyF1rq0Y,92
-kubectl_mcp_server-1.16.0.dist-info/entry_points.txt,sha256=zeOxQGaNC4r58deEmqsLCU5hfMjF0VqFUt9P5wWsKEM,109
-kubectl_mcp_server-1.16.0.dist-info/top_level.txt,sha256=o5IpfOGG-lqU8rVWJeK9aYC0r4f6qEX09QiBhZlYbkQ,23
-kubectl_mcp_server-1.16.0.dist-info/RECORD,,
+kubectl_mcp_server-1.17.0.dist-info/METADATA,sha256=EUwLkB1T8qDphYWRwKMaXiuw6BYDnQjBa21DTvnoRCc,38116
+kubectl_mcp_server-1.17.0.dist-info/WHEEL,sha256=qELbo2s1Yzl39ZmrAibXA2jjPLUYfnVhUNTlyF1rq0Y,92
+kubectl_mcp_server-1.17.0.dist-info/entry_points.txt,sha256=zeOxQGaNC4r58deEmqsLCU5hfMjF0VqFUt9P5wWsKEM,109
+kubectl_mcp_server-1.17.0.dist-info/top_level.txt,sha256=o5IpfOGG-lqU8rVWJeK9aYC0r4f6qEX09QiBhZlYbkQ,23
+kubectl_mcp_server-1.17.0.dist-info/RECORD,,

kubectl_mcp_tool/__init__.py

@@ -7,7 +7,7 @@ with Kubernetes clusters through natural language commands.
 For more information, see: https://github.com/rohitg00/kubectl-mcp-server
 """
 
-__version__ = "1.16.0"
+__version__ = "1.17.0"
 
 from .mcp_server import MCPServer
 from .diagnostics import run_diagnostics, check_kubectl_installation, check_cluster_connection

kubectl_mcp_tool/cli/cli.py

@@ -37,6 +37,7 @@ from .output import (
     format_error,
     format_success,
 )
+from ..safety import SafetyMode, set_safety_mode, get_mode_info
 
 # Logging setup
 log_file = os.environ.get("MCP_LOG_FILE")
@@ -56,18 +57,49 @@ logging.basicConfig(
 logger = logging.getLogger("kubectl-mcp-cli")
 
 
-async def serve_stdio():
-    server = MCPServer("kubernetes")
+async def serve_stdio(
+    read_only: bool = False,
+    disable_destructive: bool = False,
+    config_file: Optional[str] = None,
+):
+    server = MCPServer(
+        "kubernetes",
+        read_only=read_only,
+        disable_destructive=disable_destructive,
+        config_file=config_file,
+    )
     await server.serve_stdio()
 
 
-async def serve_sse(host: str, port: int):
-    server = MCPServer("kubernetes")
+async def serve_sse(
+    host: str,
+    port: int,
+    read_only: bool = False,
+    disable_destructive: bool = False,
+    config_file: Optional[str] = None,
+):
+    server = MCPServer(
+        "kubernetes",
+        read_only=read_only,
+        disable_destructive=disable_destructive,
+        config_file=config_file,
+    )
     await server.serve_sse(host=host, port=port)
 
 
-async def serve_http(host: str, port: int):
-    server = MCPServer("kubernetes")
+async def serve_http(
+    host: str,
+    port: int,
+    read_only: bool = False,
+    disable_destructive: bool = False,
+    config_file: Optional[str] = None,
+):
+    server = MCPServer(
+        "kubernetes",
+        read_only=read_only,
+        disable_destructive=disable_destructive,
+        config_file=config_file,
+    )
     await server.serve_http(host=host, port=port)
 
 
@@ -282,12 +314,16 @@ def cmd_info(args):
     except Exception:
         pass
 
+    # Get safety mode info
+    mode_info = get_mode_info()
+
     print(format_server_info(
         version=__version__,
         tool_count=len(tools),
         resource_count=len(resources),
         prompt_count=len(prompts),
         context=context,
+        safety_mode=mode_info,
         as_json=getattr(args, 'json', False)
     ))
     return ErrorCode.SUCCESS
@@ -407,6 +443,16 @@ def cmd_doctor(args):
     except ImportError:
         checks.append({"name": "fastmcp", "status": "error", "details": "fastmcp not installed"})
 
+    # Check safety mode
+    mode_info = get_mode_info()
+    mode = mode_info.get("mode", "normal")
+    if mode == "normal":
+        checks.append({"name": "safety_mode", "status": "ok", "version": mode, "details": "All operations allowed"})
+    elif mode == "read_only":
+        checks.append({"name": "safety_mode", "status": "warning", "version": mode, "details": "Write operations blocked"})
+    else:
+        checks.append({"name": "safety_mode", "status": "warning", "version": mode, "details": "Destructive operations blocked"})
+
     print(format_doctor_results(checks, as_json=getattr(args, 'json', False)))
 
     # Return error code if any critical checks failed
@@ -453,6 +499,9 @@ Environment Variables:
     )
     serve_parser.add_argument("--host", type=str, default="0.0.0.0", help="Host for SSE/HTTP (default: 0.0.0.0)")
     serve_parser.add_argument("--port", type=int, default=8000, help="Port for SSE/HTTP (default: 8000)")
+    serve_parser.add_argument("--config", type=str, default=None, help="Path to TOML configuration file")
+    serve_parser.add_argument("--read-only", action="store_true", help="Enable read-only mode (block all write operations)")
+    serve_parser.add_argument("--disable-destructive", action="store_true", help="Disable destructive operations (allow create/update, block delete)")
 
     # version command (existing)
     subparsers.add_parser("version", help="Show version")
@@ -507,12 +556,37 @@ Environment Variables:
 
     try:
         if args.command == "serve":
+            # Log safety mode (actual mode is applied in MCPServer)
+            if args.read_only:
+                logger.info("Starting server in READ-ONLY mode")
+            elif args.disable_destructive:
+                logger.info("Starting server with destructive operations disabled")
+
+            if args.config:
+                logger.info(f"Loading configuration from: {args.config}")
+
             if args.transport == "stdio":
-                asyncio.run(serve_stdio())
+                asyncio.run(serve_stdio(
+                    read_only=args.read_only,
+                    disable_destructive=args.disable_destructive,
+                    config_file=args.config,
+                ))
             elif args.transport == "sse":
-                asyncio.run(serve_sse(args.host, args.port))
+                asyncio.run(serve_sse(
+                    host=args.host,
+                    port=args.port,
+                    read_only=args.read_only,
+                    disable_destructive=args.disable_destructive,
+                    config_file=args.config,
+                ))
             elif args.transport in ("http", "streamable-http"):
-                asyncio.run(serve_http(args.host, args.port))
+                asyncio.run(serve_http(
+                    host=args.host,
+                    port=args.port,
+                    read_only=args.read_only,
+                    disable_destructive=args.disable_destructive,
+                    config_file=args.config,
+                ))
 
         elif args.command == "version":
             from .. import __version__

kubectl_mcp_tool/cli/output.py

@@ -266,6 +266,7 @@ def format_server_info(
     resource_count: int,
     prompt_count: int,
     context: Optional[str] = None,
+    safety_mode: Optional[Dict[str, Any]] = None,
     as_json: bool = False
 ) -> str:
     info = {
@@ -276,6 +277,9 @@ def format_server_info(
         "k8s_context": context,
     }
 
+    if safety_mode:
+        info["safety_mode"] = safety_mode
+
     if as_json:
         return json.dumps(info, indent=2)
 
@@ -291,6 +295,16 @@ def format_server_info(
     if context:
         lines.append(f"  {cyan('K8s Context:')} {context}")
 
+    if safety_mode:
+        mode = safety_mode.get("mode", "normal")
+        if mode == "normal":
+            mode_str = green(mode)
+        elif mode == "read_only":
+            mode_str = yellow(mode) + " (write operations blocked)"
+        else:
+            mode_str = yellow(mode) + " (destructive operations blocked)"
+        lines.append(f"  {cyan('Safety Mode:')} {mode_str}")
+
     return "\n".join(lines)
 
 

kubectl_mcp_tool/config/__init__.py

@@ -0,0 +1,46 @@
+"""Configuration management for kubectl-mcp-server.
+
+This module provides TOML-based configuration with:
+- Main config file support
+- Drop-in directory for modular configuration
+- SIGHUP reload for runtime updates
+- Environment variable overrides
+"""
+
+from .loader import (
+    Config,
+    load_config,
+    get_config,
+    reload_config,
+    get_config_paths,
+    setup_sighup_handler,
+    register_reload_callback,
+    unregister_reload_callback,
+)
+from .schema import (
+    ServerConfig,
+    SafetyConfig,
+    BrowserConfig,
+    MetricsConfig,
+    LoggingConfig,
+    validate_config,
+)
+
+__all__ = [
+    # Config loading
+    "Config",
+    "load_config",
+    "get_config",
+    "reload_config",
+    "get_config_paths",
+    "setup_sighup_handler",
+    "register_reload_callback",
+    "unregister_reload_callback",
+    # Config schemas
+    "ServerConfig",
+    "SafetyConfig",
+    "BrowserConfig",
+    "MetricsConfig",
+    "LoggingConfig",
+    "validate_config",
+]