Kubernetes MCP Server v0.0.61
security++++++***********!
Changes
- Enable read-only root filesystem in Helm chart (security)security
- Make ServiceAccount token auto-mount configurable on Helm chart (security)security
- Fine-tune HTTP server settingsadded
- Add backend storage driver supportadded
- Add Tekton toolset with pipeline and task managementadded
- Multi-arch kubernetes mcp serveradded
- Setup tracing in Kiali environmentadded
- Adding cross-compile hook for gh actionsadded
- Add mcpchecker diff to compare PR results against baselineadded
- Add Microsoft Entra ID support with On-Behalf-Of token exchangeadded
- Add per-session rate limiting via MCP middlewareadded
- Add Gateway API HTTPRoute supportadded
25 more lines
- Add skip_jwt_verification to enforce OIDC verificationadded
- Refactor from v2.25 (code + evals)added
- Cluster provider validation to include all possible strategiesfixed
- Bump requires-python, portable sed, and signal forwardingfixed
- Restore ARCHS variable, simplify multi-arch, and enable s390x/ppc64le container imagesfixed
- Do not use docker images, add core-eval-testing evalsfixed
- Replace unsafe type assertions with safe parameter helpersfixed
- Call resp.Body.Close() instead of referencing method valuefixed
- Migrate tool handlers to WrapParams sticky-error patternfixed
- Replace unmaintained bitnami helm chartsfixed
- Enforce all Validate() checks on SIGHUP reloadfixed
- Resolve default container for multi-container pods (KEP-2227)fixed
- Auto-select kubeconfig context when current-context is emptyfixed
- Validate token exchange fields at config loadfixed
- Normalize whitespace for token exchange fields before validationfixed
- Validate confirmation fields at config loadfixed
- Address HTTPRoute follow-ups fromfixed
- Fix kubevirt eval task namespace races and setup failuresfixed
- Fix kubernetes/scale-deployment cleanup scriptfixed
- Restore default passthrough of Authorization header to clusterfixed
- Restore Derived() require_oauth guard and broaden raw-token coveragefixed
- Rename tasksets: kubernetes to corefixed
- Use dynamic toolset name in tests to avoid downstream conflictsfixed
- Propagate config reload to HTTP authorization middlewarefixed
- Entra ID / OBO test follow-ups and dead code cleanupother
29 maintenance lines (dependency bumps, CI, tests, docs)
- Add integration tests for prompt target parameter in multi-clustermaintenance
- Migrate llmJudge to builtin.llm-agent formatmaintenance
- Bump mcpchecker/mcpchecker from 0.0.12 to 0.0.14maintenance
- Resolve config in constructor following Kiali patternmaintenance
- Add bypass coverage and fallback config validationmaintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.42.0 to 1.43.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0maintenance
- Bump go.opentelemetry.io/otel/exporters/prometheus from 0.64.0 to 0.65.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.43.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.42.0 to 1.43.0maintenance
- Resolve kiali toolset name dynamically in require_tls testsmaintenance
- Update mcpchecker evaluation resultsmaintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0maintenance
- Bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0maintenance
- Bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0maintenance
- Bump helm.sh/helm/v3 from 3.20.1 to 3.20.2maintenance
- Bump softprops/action-gh-release from 2 to 3maintenance
- Update mcpchecker evaluation resultsmaintenance
- Bump mcpchecker/mcpchecker from 0.0.14 to 0.0.15maintenance
- Tool override tests are compatible with downstream changesmaintenance
- Deduplicate OIDC config fetches and simplify token exchangemaintenance
- Add helm option to mcpchecker runnermaintenance
- Bump mcpchecker/mcpchecker from 0.0.15 to 0.0.16maintenance
- Bump golang.org/x/time from 0.14.0 to 0.15.0maintenance
- Bump k8s.io/kubectl from 0.35.3 to 0.35.4maintenance
- Bump k8s.io/apiextensions-apiserver from 0.35.3 to 0.35.4maintenance
- Update mcpchecker evaluation resultsmaintenance
- Bump github.com/tektoncd/pipeline from 1.11.0 to 1.11.1maintenance
- Group dependabot updates for k8s, otel, and golang.org/xmaintenance
66 lines2 security12 added22 fixed1 other29 maintenancetyped from the source notes