kubectl-mcp-server 1.18.0__py3-none-any.whl → 1.19.1__py3-none-any.whl

kubectl_mcp_tool/tools/gitops.py

@@ -1,12 +1,7 @@
-"""GitOps toolset for kubectl-mcp-server.
+"""GitOps toolset for kubectl-mcp-server (Flux and Argo CD)."""
 
-Provides tools for managing Flux and Argo CD applications.
-"""
-
-import subprocess
 import json
 from typing import Dict, Any, List
-from datetime import datetime
 
 try:
     from fastmcp import FastMCP
@@ -15,8 +10,8 @@ except ImportError:
     from mcp.server.fastmcp import FastMCP
     from mcp.types import ToolAnnotations
 
-from ..k8s_config import _get_kubectl_context_args
 from ..crd_detector import crd_exists, require_any_crd
+from .utils import run_kubectl, get_resources
 
 
 FLUX_KUSTOMIZATION_CRD = "kustomizations.kustomize.toolkit.fluxcd.io"
@@ -27,40 +22,6 @@ ARGOCD_APP_CRD = "applications.argoproj.io"
 ARGOCD_APPSET_CRD = "applicationsets.argoproj.io"
 
 
-def _run_kubectl(args: List[str], context: str = "") -> Dict[str, Any]:
-    """Run kubectl command and return result."""
-    cmd = ["kubectl"] + _get_kubectl_context_args(context) + args
-    try:
-        result = subprocess.run(cmd, capture_output=True, text=True, timeout=60)
-        if result.returncode == 0:
-            return {"success": True, "output": result.stdout}
-        return {"success": False, "error": result.stderr}
-    except subprocess.TimeoutExpired:
-        return {"success": False, "error": "Command timed out"}
-    except Exception as e:
-        return {"success": False, "error": str(e)}
-
-
-def _get_resources(kind: str, namespace: str = "", context: str = "", label_selector: str = "") -> List[Dict]:
-    """Get Kubernetes resources of a specific kind."""
-    args = ["get", kind, "-o", "json"]
-    if namespace:
-        args.extend(["-n", namespace])
-    else:
-        args.append("-A")
-    if label_selector:
-        args.extend(["-l", label_selector])
-
-    result = _run_kubectl(args, context)
-    if result["success"]:
-        try:
-            data = json.loads(result["output"])
-            return data.get("items", [])
-        except json.JSONDecodeError:
-            return []
-    return []
-
-
 def gitops_apps_list(
     namespace: str = "",
     context: str = "",
@@ -82,7 +43,7 @@ def gitops_apps_list(
 
     if not kind or kind.lower() == "kustomization":
         if crd_exists(FLUX_KUSTOMIZATION_CRD, context):
-            for item in _get_resources("kustomizations.kustomize.toolkit.fluxcd.io", namespace, context, label_selector):
+            for item in get_resources("kustomizations.kustomize.toolkit.fluxcd.io", namespace, context, label_selector):
                 status = item.get("status", {})
                 conditions = status.get("conditions", [])
                 ready_cond = next((c for c in conditions if c.get("type") == "Ready"), {})
@@ -101,7 +62,7 @@ def gitops_apps_list(
 
     if not kind or kind.lower() == "helmrelease":
         if crd_exists(FLUX_HELMRELEASE_CRD, context):
-            for item in _get_resources("helmreleases.helm.toolkit.fluxcd.io", namespace, context, label_selector):
+            for item in get_resources("helmreleases.helm.toolkit.fluxcd.io", namespace, context, label_selector):
                 status = item.get("status", {})
                 conditions = status.get("conditions", [])
                 ready_cond = next((c for c in conditions if c.get("type") == "Ready"), {})
@@ -119,7 +80,7 @@ def gitops_apps_list(
 
     if not kind or kind.lower() == "application":
         if crd_exists(ARGOCD_APP_CRD, context):
-            for item in _get_resources("applications.argoproj.io", namespace, context, label_selector):
+            for item in get_resources("applications.argoproj.io", namespace, context, label_selector):
                 status = item.get("status", {})
                 health = status.get("health", {})
                 sync = status.get("sync", {})
@@ -171,7 +132,7 @@ def gitops_app_get(
         return {"success": False, "error": f"Unknown kind: {kind}"}
 
     args = ["get", k8s_kind, name, "-n", namespace, "-o", "json"]
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         try:
@@ -218,7 +179,7 @@ def gitops_app_sync(
             name, "-n", namespace,
             f"{annotation}={timestamp}", "--overwrite"
         ]
-        result = _run_kubectl(args, context)
+        result = run_kubectl(args, context)
 
         if result["success"]:
             return {
@@ -241,7 +202,7 @@ def gitops_app_sync(
             name, "-n", namespace,
             f"{annotation}={timestamp}", "--overwrite"
         ]
-        result = _run_kubectl(args, context)
+        result = run_kubectl(args, context)
 
         if result["success"]:
             return {
@@ -262,7 +223,7 @@ def gitops_app_sync(
             name, "-n", namespace,
             f"{annotation}=hard", "--overwrite"
         ]
-        result = _run_kubectl(args, context)
+        result = run_kubectl(args, context)
 
         if result["success"]:
             return {
@@ -363,7 +324,7 @@ def gitops_sources_list(
 
     if not kind or kind.lower() == "gitrepository":
         if crd_exists(FLUX_GITREPO_CRD, context):
-            for item in _get_resources("gitrepositories.source.toolkit.fluxcd.io", namespace, context, label_selector):
+            for item in get_resources("gitrepositories.source.toolkit.fluxcd.io", namespace, context, label_selector):
                 status = item.get("status", {})
                 conditions = status.get("conditions", [])
                 ready_cond = next((c for c in conditions if c.get("type") == "Ready"), {})
@@ -382,7 +343,7 @@ def gitops_sources_list(
 
     if not kind or kind.lower() == "helmrepository":
         if crd_exists(FLUX_HELMREPO_CRD, context):
-            for item in _get_resources("helmrepositories.source.toolkit.fluxcd.io", namespace, context, label_selector):
+            for item in get_resources("helmrepositories.source.toolkit.fluxcd.io", namespace, context, label_selector):
                 status = item.get("status", {})
                 conditions = status.get("conditions", [])
                 ready_cond = next((c for c in conditions if c.get("type") == "Ready"), {})
@@ -432,7 +393,7 @@ def gitops_source_get(
         return {"success": False, "error": f"Unknown kind: {kind}"}
 
     args = ["get", k8s_kind, name, "-n", namespace, "-o", "json"]
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         try:

kubectl_mcp_tool/tools/keda.py

@@ -1,9 +1,5 @@
-"""KEDA autoscaling toolset for kubectl-mcp-server.
+"""KEDA autoscaling toolset for kubectl-mcp-server."""
 
-Provides tools for managing KEDA ScaledObjects, ScaledJobs, and TriggerAuthentications.
-"""
-
-import subprocess
 import json
 from typing import Dict, Any, List
 
@@ -14,8 +10,8 @@ except ImportError:
     from mcp.server.fastmcp import FastMCP
     from mcp.types import ToolAnnotations
 
-from ..k8s_config import _get_kubectl_context_args
 from ..crd_detector import crd_exists
+from .utils import run_kubectl, get_resources
 
 
 SCALEDOBJECT_CRD = "scaledobjects.keda.sh"
@@ -24,40 +20,6 @@ TRIGGERAUTH_CRD = "triggerauthentications.keda.sh"
 CLUSTERTRIGGERAUTH_CRD = "clustertriggerauthentications.keda.sh"
 
 
-def _run_kubectl(args: List[str], context: str = "") -> Dict[str, Any]:
-    """Run kubectl command and return result."""
-    cmd = ["kubectl"] + _get_kubectl_context_args(context) + args
-    try:
-        result = subprocess.run(cmd, capture_output=True, text=True, timeout=60)
-        if result.returncode == 0:
-            return {"success": True, "output": result.stdout}
-        return {"success": False, "error": result.stderr}
-    except subprocess.TimeoutExpired:
-        return {"success": False, "error": "Command timed out"}
-    except Exception as e:
-        return {"success": False, "error": str(e)}
-
-
-def _get_resources(kind: str, namespace: str = "", context: str = "", label_selector: str = "") -> List[Dict]:
-    """Get Kubernetes resources of a specific kind."""
-    args = ["get", kind, "-o", "json"]
-    if namespace:
-        args.extend(["-n", namespace])
-    else:
-        args.append("-A")
-    if label_selector:
-        args.extend(["-l", label_selector])
-
-    result = _run_kubectl(args, context)
-    if result["success"]:
-        try:
-            data = json.loads(result["output"])
-            return data.get("items", [])
-        except json.JSONDecodeError:
-            return []
-    return []
-
-
 def keda_scaledobjects_list(
     namespace: str = "",
     context: str = "",
@@ -80,7 +42,7 @@ def keda_scaledobjects_list(
         }
 
     objects = []
-    for item in _get_resources("scaledobjects.keda.sh", namespace, context, label_selector):
+    for item in get_resources("scaledobjects.keda.sh", namespace, context, label_selector):
         status = item.get("status", {})
         spec = item.get("spec", {})
         conditions = status.get("conditions", [])
@@ -138,7 +100,7 @@ def keda_scaledobject_get(
         return {"success": False, "error": "KEDA is not installed"}
 
     args = ["get", "scaledobjects.keda.sh", name, "-n", namespace, "-o", "json"]
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         try:
@@ -176,7 +138,7 @@ def keda_scaledjobs_list(
         }
 
     jobs = []
-    for item in _get_resources("scaledjobs.keda.sh", namespace, context, label_selector):
+    for item in get_resources("scaledjobs.keda.sh", namespace, context, label_selector):
         status = item.get("status", {})
         spec = item.get("spec", {})
         conditions = status.get("conditions", [])
@@ -227,7 +189,7 @@ def keda_triggerauths_list(
     auths = []
 
     if crd_exists(TRIGGERAUTH_CRD, context):
-        for item in _get_resources("triggerauthentications.keda.sh", namespace, context):
+        for item in get_resources("triggerauthentications.keda.sh", namespace, context):
             spec = item.get("spec", {})
             secret_refs = spec.get("secretTargetRef", [])
             env_refs = spec.get("env", [])
@@ -244,7 +206,7 @@ def keda_triggerauths_list(
             })
 
     if include_cluster and crd_exists(CLUSTERTRIGGERAUTH_CRD, context):
-        for item in _get_resources("clustertriggerauthentications.keda.sh", "", context):
+        for item in get_resources("clustertriggerauthentications.keda.sh", "", context):
             spec = item.get("spec", {})
             secret_refs = spec.get("secretTargetRef", [])
             env_refs = spec.get("env", [])
@@ -294,7 +256,7 @@ def keda_triggerauth_get(
     if not crd_exists(crd, context):
         return {"success": False, "error": f"{crd} not found"}
 
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         try:
@@ -337,7 +299,7 @@ def keda_hpa_list(
     if selector:
         args.extend(["-l", selector])
 
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
     if not result["success"]:
         return {"success": False, "error": result.get("error", "Failed to list HPAs")}
 

kubectl_mcp_tool/tools/kiali.py

@@ -1,12 +1,9 @@
-"""Kiali/Istio service mesh observability toolset for kubectl-mcp-server.
-
-Provides tools for service mesh visualization and Istio configuration inspection.
-"""
+"""Kiali/Istio service mesh observability toolset for kubectl-mcp-server."""
 
 import subprocess
 import json
 import os
-from typing import Dict, Any, List, Optional
+from typing import Dict, Any, List
 
 try:
     from fastmcp import FastMCP
@@ -15,11 +12,10 @@ except ImportError:
     from mcp.server.fastmcp import FastMCP
     from mcp.types import ToolAnnotations
 
-from ..k8s_config import _get_kubectl_context_args
 from ..crd_detector import crd_exists
+from .utils import run_kubectl, get_resources
 
 
-# Istio CRDs
 VIRTUALSERVICE_CRD = "virtualservices.networking.istio.io"
 DESTINATIONRULE_CRD = "destinationrules.networking.istio.io"
 GATEWAY_CRD = "gateways.networking.istio.io"
@@ -30,40 +26,6 @@ AUTHORIZATIONPOLICY_CRD = "authorizationpolicies.security.istio.io"
 REQUESTAUTHENTICATION_CRD = "requestauthentications.security.istio.io"
 
 
-def _run_kubectl(args: List[str], context: str = "") -> Dict[str, Any]:
-    """Run kubectl command and return result."""
-    cmd = ["kubectl"] + _get_kubectl_context_args(context) + args
-    try:
-        result = subprocess.run(cmd, capture_output=True, text=True, timeout=60)
-        if result.returncode == 0:
-            return {"success": True, "output": result.stdout}
-        return {"success": False, "error": result.stderr}
-    except subprocess.TimeoutExpired:
-        return {"success": False, "error": "Command timed out"}
-    except Exception as e:
-        return {"success": False, "error": str(e)}
-
-
-def _get_resources(kind: str, namespace: str = "", context: str = "", label_selector: str = "") -> List[Dict]:
-    """Get Kubernetes resources of a specific kind."""
-    args = ["get", kind, "-o", "json"]
-    if namespace:
-        args.extend(["-n", namespace])
-    else:
-        args.append("-A")
-    if label_selector:
-        args.extend(["-l", label_selector])
-
-    result = _run_kubectl(args, context)
-    if result["success"]:
-        try:
-            data = json.loads(result["output"])
-            return data.get("items", [])
-        except json.JSONDecodeError:
-            return []
-    return []
-
-
 def _istioctl_available() -> bool:
     """Check if istioctl CLI is available."""
     try:
@@ -84,8 +46,6 @@ def _get_kiali_config() -> Dict[str, str]:
     }
 
 
-# ============== Istio Resource Functions ==============
-
 def istio_virtualservices_list(
     namespace: str = "",
     context: str = "",
@@ -108,7 +68,7 @@ def istio_virtualservices_list(
         }
 
     virtualservices = []
-    for item in _get_resources("virtualservices.networking.istio.io", namespace, context, label_selector):
+    for item in get_resources("virtualservices.networking.istio.io", namespace, context, label_selector):
         spec = item.get("spec", {})
         hosts = spec.get("hosts", [])
         gateways = spec.get("gateways", [])
@@ -153,7 +113,7 @@ def istio_virtualservice_get(
         return {"success": False, "error": "Istio is not installed"}
 
     args = ["get", "virtualservices.networking.istio.io", name, "-n", namespace, "-o", "json"]
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         try:
@@ -191,7 +151,7 @@ def istio_destinationrules_list(
         }
 
     rules = []
-    for item in _get_resources("destinationrules.networking.istio.io", namespace, context, label_selector):
+    for item in get_resources("destinationrules.networking.istio.io", namespace, context, label_selector):
         spec = item.get("spec", {})
         traffic_policy = spec.get("trafficPolicy", {})
         subsets = spec.get("subsets", [])
@@ -238,7 +198,7 @@ def istio_gateways_list(
         }
 
     gateways = []
-    for item in _get_resources("gateways.networking.istio.io", namespace, context, label_selector):
+    for item in get_resources("gateways.networking.istio.io", namespace, context, label_selector):
         spec = item.get("spec", {})
         selector = spec.get("selector", {})
         servers = spec.get("servers", [])
@@ -294,7 +254,7 @@ def istio_peerauthentications_list(
         }
 
     policies = []
-    for item in _get_resources("peerauthentications.security.istio.io", namespace, context, label_selector):
+    for item in get_resources("peerauthentications.security.istio.io", namespace, context, label_selector):
         spec = item.get("spec", {})
         selector = spec.get("selector", {})
         mtls = spec.get("mtls", {})
@@ -337,7 +297,7 @@ def istio_authorizationpolicies_list(
         }
 
     policies = []
-    for item in _get_resources("authorizationpolicies.security.istio.io", namespace, context, label_selector):
+    for item in get_resources("authorizationpolicies.security.istio.io", namespace, context, label_selector):
         spec = item.get("spec", {})
         selector = spec.get("selector", {})
         rules = spec.get("rules", [])
@@ -503,7 +463,7 @@ def istio_sidecar_status(
     else:
         args.append("-A")
 
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
     if not result["success"]:
         return {"success": False, "error": result.get("error", "Failed to list pods")}
 

kubectl_mcp_tool/tools/kubevirt.py

@@ -1,7 +1,4 @@
-"""KubeVirt VM lifecycle toolset for kubectl-mcp-server.
-
-Provides tools for managing virtual machines on Kubernetes via KubeVirt.
-"""
+"""KubeVirt VM lifecycle toolset for kubectl-mcp-server."""
 
 import subprocess
 import json
@@ -14,11 +11,10 @@ except ImportError:
     from mcp.server.fastmcp import FastMCP
     from mcp.types import ToolAnnotations
 
-from ..k8s_config import _get_kubectl_context_args
 from ..crd_detector import crd_exists
+from .utils import run_kubectl, get_resources
 
 
-# KubeVirt CRDs
 VM_CRD = "virtualmachines.kubevirt.io"
 VMI_CRD = "virtualmachineinstances.kubevirt.io"
 VMIPRESET_CRD = "virtualmachineinstancepresets.kubevirt.io"
@@ -32,40 +28,6 @@ CLUSTERINSTANCETYPE_CRD = "virtualmachineclusterinstancetypes.instancetype.kubev
 PREFERENCE_CRD = "virtualmachinepreferences.instancetype.kubevirt.io"
 
 
-def _run_kubectl(args: List[str], context: str = "") -> Dict[str, Any]:
-    """Run kubectl command and return result."""
-    cmd = ["kubectl"] + _get_kubectl_context_args(context) + args
-    try:
-        result = subprocess.run(cmd, capture_output=True, text=True, timeout=60)
-        if result.returncode == 0:
-            return {"success": True, "output": result.stdout}
-        return {"success": False, "error": result.stderr}
-    except subprocess.TimeoutExpired:
-        return {"success": False, "error": "Command timed out"}
-    except Exception as e:
-        return {"success": False, "error": str(e)}
-
-
-def _get_resources(kind: str, namespace: str = "", context: str = "", label_selector: str = "") -> List[Dict]:
-    """Get Kubernetes resources of a specific kind."""
-    args = ["get", kind, "-o", "json"]
-    if namespace:
-        args.extend(["-n", namespace])
-    else:
-        args.append("-A")
-    if label_selector:
-        args.extend(["-l", label_selector])
-
-    result = _run_kubectl(args, context)
-    if result["success"]:
-        try:
-            data = json.loads(result["output"])
-            return data.get("items", [])
-        except json.JSONDecodeError:
-            return []
-    return []
-
-
 def _virtctl_available() -> bool:
     """Check if virtctl CLI is available."""
     try:
@@ -118,7 +80,7 @@ def kubevirt_vms_list(
         }
 
     vms = []
-    for item in _get_resources("virtualmachines.kubevirt.io", namespace, context, label_selector):
+    for item in get_resources("virtualmachines.kubevirt.io", namespace, context, label_selector):
         status = item.get("status", {})
         spec = item.get("spec", {})
         conditions = status.get("conditions", [])
@@ -182,7 +144,7 @@ def kubevirt_vm_get(
         return {"success": False, "error": "KubeVirt is not installed"}
 
     args = ["get", "virtualmachines.kubevirt.io", name, "-n", namespace, "-o", "json"]
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         try:
@@ -220,7 +182,7 @@ def kubevirt_vmis_list(
         }
 
     vmis = []
-    for item in _get_resources("virtualmachineinstances.kubevirt.io", namespace, context, label_selector):
+    for item in get_resources("virtualmachineinstances.kubevirt.io", namespace, context, label_selector):
         status = item.get("status", {})
         spec = item.get("spec", {})
         conditions = status.get("conditions", [])
@@ -300,7 +262,7 @@ def kubevirt_vm_start(
         "--type=merge",
         "-p", json.dumps(patch)
     ]
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         return {
@@ -354,7 +316,7 @@ def kubevirt_vm_stop(
         "--type=merge",
         "-p", json.dumps(patch)
     ]
-    result = _run_kubectl(args, context)
+    result = run_kubectl(args, context)
 
     if result["success"]:
         return {
@@ -516,7 +478,7 @@ def kubevirt_datasources_list(
         }
 
     datasources = []
-    for item in _get_resources("datasources.cdi.kubevirt.io", namespace, context, label_selector):
+    for item in get_resources("datasources.cdi.kubevirt.io", namespace, context, label_selector):
         spec = item.get("spec", {})
         status = item.get("status", {})
         conditions = status.get("conditions", [])
@@ -557,7 +519,7 @@ def kubevirt_instancetypes_list(
     instancetypes = []
 
     if crd_exists(INSTANCETYPE_CRD, context):
-        for item in _get_resources("virtualmachineinstancetypes.instancetype.kubevirt.io", namespace, context):
+        for item in get_resources("virtualmachineinstancetypes.instancetype.kubevirt.io", namespace, context):
             spec = item.get("spec", {})
             cpu = spec.get("cpu", {})
             memory = spec.get("memory", {})
@@ -573,7 +535,7 @@ def kubevirt_instancetypes_list(
             })
 
     if include_cluster and crd_exists(CLUSTERINSTANCETYPE_CRD, context):
-        for item in _get_resources("virtualmachineclusterinstancetypes.instancetype.kubevirt.io", "", context):
+        for item in get_resources("virtualmachineclusterinstancetypes.instancetype.kubevirt.io", "", context):
             spec = item.get("spec", {})
             cpu = spec.get("cpu", {})
             memory = spec.get("memory", {})
@@ -617,7 +579,7 @@ def kubevirt_datavolumes_list(
         }
 
     datavolumes = []
-    for item in _get_resources("datavolumes.cdi.kubevirt.io", namespace, context, label_selector):
+    for item in get_resources("datavolumes.cdi.kubevirt.io", namespace, context, label_selector):
         spec = item.get("spec", {})
         status = item.get("status", {})
         conditions = status.get("conditions", [])

kubectl_mcp_tool/tools/pods.py

@@ -287,6 +287,99 @@ def register_pod_tools(
             logger.error(f"Error cleaning up pods: {e}")
             return {"success": False, "error": str(e)}
 
+    @server.tool(
+        annotations=ToolAnnotations(
+            title="Run Pod",
+            destructiveHint=True,
+        ),
+    )
+    def run_pod(
+        image: str,
+        name: Optional[str] = None,
+        namespace: str = "default",
+        command: Optional[List[str]] = None,
+        args: Optional[List[str]] = None,
+        env: Optional[Dict[str, str]] = None,
+        labels: Optional[Dict[str, str]] = None,
+        restart_policy: str = "Never",
+        context: str = ""
+    ) -> Dict[str, Any]:
+        """Run a container image as a pod (kubectl run equivalent).
+
+        Creates a pod with the specified container image. This is useful for
+        quick debugging, running one-off tasks, or testing container images.
+
+        Args:
+            image: Container image to run (e.g., 'nginx:latest', 'busybox')
+            name: Name for the pod (auto-generated if not specified)
+            namespace: Namespace to create the pod in
+            command: Override the container's entrypoint (list of strings)
+            args: Arguments to pass to the container command (list of strings)
+            env: Environment variables as key-value pairs
+            labels: Labels to apply to the pod
+            restart_policy: Pod restart policy (Never, OnFailure, Always)
+            context: Kubernetes context to use (uses current context if not specified)
+
+        Examples:
+            - Run nginx: run_pod(image="nginx:latest")
+            - Run busybox with command: run_pod(image="busybox", command=["sh", "-c"], args=["echo hello"])
+            - Run with env vars: run_pod(image="alpine", env={"MY_VAR": "value"})
+        """
+        if non_destructive:
+            return {"success": False, "error": "Blocked: non-destructive mode"}
+
+        try:
+            from kubernetes import client as k8s_client
+            import uuid
+
+            if not name:
+                short_id = str(uuid.uuid4())[:8]
+                image_base = image.split("/")[-1].split(":")[0].replace(".", "-")
+                name = f"{image_base}-{short_id}"
+
+            container = k8s_client.V1Container(name=name, image=image, command=command, args=args)
+            if env:
+                container.env = [k8s_client.V1EnvVar(name=k, value=v) for k, v in env.items()]
+
+            pod_labels = {"app": name, "run": name}
+            if labels:
+                pod_labels.update(labels)
+
+            valid_policies = ["Never", "OnFailure", "Always"]
+            if restart_policy not in valid_policies:
+                return {"success": False, "error": f"Invalid restart_policy '{restart_policy}'. Must be one of: {valid_policies}"}
+
+            pod = k8s_client.V1Pod(
+                api_version="v1",
+                kind="Pod",
+                metadata=k8s_client.V1ObjectMeta(name=name, namespace=namespace, labels=pod_labels),
+                spec=k8s_client.V1PodSpec(containers=[container], restart_policy=restart_policy)
+            )
+
+            v1 = get_k8s_client(context)
+            created = v1.create_namespaced_pod(namespace=namespace, body=pod)
+
+            return {
+                "success": True,
+                "context": context or "current",
+                "pod": {
+                    "name": created.metadata.name,
+                    "namespace": created.metadata.namespace,
+                    "image": image,
+                    "status": created.status.phase,
+                    "uid": created.metadata.uid
+                },
+                "message": f"Pod '{name}' created successfully in namespace '{namespace}'",
+                "commands": {
+                    "logs": f"kubectl logs {name} -n {namespace}",
+                    "exec": f"kubectl exec -it {name} -n {namespace} -- /bin/sh",
+                    "delete": f"kubectl delete pod {name} -n {namespace}"
+                }
+            }
+        except Exception as e:
+            logger.error(f"Error running pod: {e}")
+            return {"success": False, "error": str(e)}
+
     @server.tool(
         annotations=ToolAnnotations(
             title="Get Pod Conditions Detailed",