v0.0.15

feat: add token support for kubectl commands (#37)

* feat: add token support for kubectl commands

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>

* use pre-v4 helm version

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>

* Add configuration to disable service token automount

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Remove automountServiceAccountToken config

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* helm config for using default service account

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Add tools.k8s.tokenPassthrough for requiring token from auth header

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Fix helm version

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Remove automountServiceAccountToken from helm test

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Redact tokens

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

---------

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>
Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>
Co-authored-by: Jeremy Alvis <jeremy.alvis@solo.io>

v0.0.14

feat(cli): add --read-only flag to disable write operations (#41)

* feat: add --read-only flag to disable write operations

Add a new `--read-only` CLI flag that disables tools which perform
write operations (delete, patch, scale, create, apply, etc.).

This enables deploying the MCP server in read-only mode for:
- Observability-only use cases (monitoring, troubleshooting)
- Environments with read-only service accounts
- Compliance requirements separating read/write capabilities

Tools are categorized as read-only or write operations:
- K8s: 8 read-only, 14 write tools
- Helm: 3 read-only, 3 write tools
- Istio: 9 read-only, 3 write tools
- Cilium: ~25 read-only, ~15 write tools
- Argo: 4 read-only, 4 write tools
- Prometheus/Kubescape/Utils: all read-only (unchanged)

Co-Authored-By: Claude Opus 4.5
Signed-off-by: Matteo Mori <matteo.mori@rvu.co.uk>

* fix: disable shell tool in read-only mode

The utils provider exposes a `shell` tool that executes arbitrary
commands, bypassing read-only restrictions. In read-only mode, this
tool is now disabled.

Also pass readOnly to all providers (kubescape, prometheus, utils)
for consistency with the existing providers.

Signed-off-by: Matteo Mori <matteo.mori@rvu.co.uk>

---------

Signed-off-by: Matteo Mori <matteo.mori@rvu.co.uk>

v0.0.13

What's Changed

• feat: add support for nodeSelector and tolerations by @qasmi in #23
• feat: bump dependencies by @dimetron in #32

New Contributors

• @qasmi made their first contribution in #23

Full Changelog: v0.0.12...v0.0.13

v0.0.12

What's Changed

• fix version and makefile ENV var by @dimetron in #18
• updated dependencies by @dimetron in #25

Full Changelog: v0.0.11...v0.0.12

v0.0.11

What's Changed

• set json format optional by @dimetron in #16

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• [FEATURE] Add quickstart guide for agentgateway by @dimetron in #15

• 🐛 Fixed stdio implementation
• 🚀 Quickstart guide for agentgateway
• 📝 Updated cursor MCP documentation

Full Changelog: v0.0.9...v0.0.10

v0.0.9

fix helm-publish

Signed-off-by: Dmytro Rashko <dmitriy.rashko@amdocs.com>

v0.0.7

stremable-http (#4)

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>

v0.0.6

update tools with --kubeconfig

Signed-off-by: Dmytro Rashko <dmitriy.rashko@amdocs.com>

v0.0.5

fix tools k8s

Signed-off-by: Dmytro Rashko <dmitriy.rashko@amdocs.com>