Kubernetes MCP Server v0.0.57
security+++++++++~********!
Changes
- Harden release-mcp-registry workflow securitysecurity
- Cleanup(helm): improve RBAC configurationchanged
- Add token exchange provider supportadded
- Add support for specifying RBACadded
- Add field selector support for filtering pods and resourcesadded
- Add targets_list tooladded
- Implement logging capability with error handling and secret redactionadded
- Add kcp provideradded
- Add cluster-provider flagadded
- Add OpenTelemetry tracing and metrics supportadded
- Add Prometheus exporter and monitoring resourcesadded
- Add support for additional containers in deploymentadded
12 more lines
- Split istio config read tooladded
- Adjust notification wait times for improved debounced notification handlingfixed
- Register exchanger implsfixed
- Strip http forwarded headers from requests to kcfixed
- Add CORS headers for well-known endpointsfixed
- Reduce PVC size in resize-pvc task for constrained environmentsfixed
- Update server.json to latest schema versionfixed
- Wrap errors with %w for better error handlingfixed
- Use gevals action from main branchfixed
- Gevals permission check captures SHA to checkoutfixed
- Use lazy evaluation for restMapper in AccessControlRoundTripperfixed
- Cleanup(tokenexchange): exchange logic contained in kubernetes provider layerother
38 maintenance lines (dependency bumps, CI, tests, docs)
- Restrict release workflows to version tags onlymaintenance
- Bump github.com/modelcontextprotocol/go-sdk from 1.1.0 to 1.2.0maintenance
- Update server initialization for go-sdk API changesmaintenance
- Use metav1 types for mock server discovery handlersmaintenance
- Align AGENTS.md w/ actual Go versionmaintenance
- Updating to more recent version of golangci-lintmaintenance
- Add dockerignoremaintenance
- Remove unused tool-scoped authorization middlewaremaintenance
- Refactor wellknown tests to use testifymaintenance
- Disable kiali eval tasks temporarilymaintenance
- Add MCP Registry publishing workflowmaintenance
- Restore token exchange integration testsmaintenance
- Bump helm.sh/helm/v3 from 3.19.4 to 3.19.5maintenance
- Update readme after recent merges, via make targetmaintenance
- Add notification capture helpers and error logging testsmaintenance
- Contract testsmaintenance
- Use NPM_PACKAGE variable consistently in node.mkmaintenance
- Add forbidden log notification tests and timeout docsmaintenance
- Remove redundant eval-inline.yaml filesmaintenance
- Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0maintenance
- Add eval tasks for VM creation and lifecyclemaintenance
- Bump helm.sh/helm/v3 from 3.19.5 to 3.20.0maintenance
- Bump go.opentelemetry.io/otel from 1.38.0 to 1.39.0maintenance
- Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.38.0 to 1.39.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.38.0 to 1.39.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.38.0 to 1.39.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.38.0 to 1.39.0maintenance
- Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.38.0 to 1.39.0maintenance
- Fix checkout ref and prevent script injectionmaintenance
- Bump go.opentelemetry.io/otel/exporters/prometheus from 0.54.0 to 0.61.0maintenance
- Bump actions/upload-artifact from 4 to 6maintenance
- Bump actions/download-artifact from 4 to 7maintenance
- Consolidate kcp code into self-contained packagemaintenance
- Only run gevals report if gevals actually ranmaintenance
- Rename gevals to mcpcheckermaintenance
- Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1maintenance
- Add eval and agent configs directly to kubevirt tasksmaintenance
62 lines1 security11 added1 changed10 fixed1 other38 maintenancetyped from the source notes