v1.4.2 — Security Reload Fix

What's Changed

Bug Fix

• Fixed: reload_security_config() now correctly re-reads K8S_MCP_SECURITY_MODE from environment variables

  Root cause: SECURITY_MODE was imported as a string value at module load time. Calling reload_security_config() updated SECURITY_CONFIG but not SECURITY_MODE, so switching to permissive mode at runtime had no effect — commands were still blocked by strict-mode validation.

  Impact: Runtime security mode switching (e.g., via env var + reload_security_config()) now works correctly.

Full Changelog: v1.4.1...v1.4.2

v1.4.1 — Documentation & Build Improvements

What's Changed

Documentation

• Added llms.txt following llmstxt.org convention for LLM-friendly project documentation
• Rewrote CLAUDE.md with project-specific architecture guide and developer patterns (removed generic boilerplate)

CI/CD

• Replaced QEMU-based multi-arch Docker builds with native ARM64 runners (ubuntu-24.04-arm)
  • Build time: ~15 min → ~2-3 min (parallel native builds)
  • No more QEMU emulation overhead

MCP Spec

• Added tool icon metadata (SEP-973) to all 8 MCP tools using official CNCF artwork SVGs
  • Displays Kubernetes, Helm, Istio, and ArgoCD logos in MCP client tool lists

Tests

• Fixed test suite for exception-based error handling introduced in v1.4.0

Full Changelog: v1.4.0...v1.4.1

v1.4.0 — MCP Spec 2025-11-25 Compliance

What's New

MCP Spec 2025-11-25 Compliance

• Streamable HTTP transport (#10) — Added streamable-http as the recommended HTTP transport. SSE transport is now deprecated with a warning. Auto-detects Docker environment for host binding (0.0.0.0 in Docker, 127.0.0.1 locally).

• Tool Annotations (#11) — All 8 tools now include ToolAnnotations metadata (readOnlyHint, destructiveHint, openWorldHint) per MCP spec 2025-03-26+.

• Input validation errors as tool errors (#12) — Validation errors now return isError: true in tool results instead of JSON-RPC protocol errors, enabling model self-correction per SEP-1303.

• Implementation description (#13) — Server now reports a description in the MCP Implementation info during initialization.

Bug Fixes

• Container permission fix (#5) — Fixed PermissionError crash when running the Docker container with a custom UID (-u 1000:1000). The server now gracefully falls back to default security config.

Breaking Changes

None. SSE transport still works but logs a deprecation warning.

Dependencies

• Minimum mcp SDK version bumped to >=1.22.0 for ToolAnnotations support.

1.2.0

Replace shell execution with secure subprocess chaining for improved security

1.1.2

minor upgrade

1.0.1

support SSE transport