License

The Central Pilot for Your Kubernetes Fleets ✈️✈️

k8s_pilotis a lightweight, centralized control plane server for managingmultiple Kubernetes clustersat once.
With powerful tools and intuitive APIs, you can observe and control all your clusters from one cockpit.

- 🔄 Supportsmulti-cluster context switching
- 🔧 EnablesCRUD operationson most common Kubernetes resources
- 🔒Readonly modefor safe cluster inspection
- ⚙️ Powered byMCPfor Claude AI and beyond
- 🌐Streamable HTTPtransport support for remote access
- 🤖MCP Promptsfor guided operations
- 📝Context-aware loggingfor write operations

- Python3.13or higher
- uvpackage manager
- Access to Kubernetes clusters (~/.kube/configor in-cluster config)

# Install uv (if not installed) # For MacOS brew install uv # For Linux curl -LsSf https://astral.sh/uv/install.sh | sh

# Clone the repository git clone https://github.com/bourbonkk/k8s-pilot.git cd k8s-pilot # Launch with uv + MCP uv run --with "mcp[cli]>=1.28.0,<2" python k8s_pilot.py

- Streamable HTTP Transport: Remote cluster management via HTTP (in addition to stdio)
- MCP Prompts: Built-in prompt templates for common K8s operations
- Context-aware Logging: Write operations now report progress via MCP context
- Bug Fixes: Fixed missing API clients for Ingress and RBAC resources
- Security: Added readonly checks for node modification operations
- Dockerfile: Modernized withuvpackage manager for faster builds

# Start with full read/write access uv run --with "mcp[cli]>=1.28.0,<2" python k8s_pilot.py

# Start in readonly mode - only read operations allowed uv run --with "mcp[cli]>=1.28.0,<2" python k8s_pilot.py --readonly

# Start with Streamable HTTP transport for remote access uv run --with "mcp[cli]>=1.28.0,<2" python k8s_pilot.py --transport streamable-http

# Show help uv run --with "mcp[cli]>=1.28.0,<2" python k8s_pilot.py --help

You can run k8s-pilot directly using the published Docker image without installinguvlocally. Make sure to mount your~/.kube/configso the container can access your clusters.

docker run -i --rm \ -v ~/.kube/config:/root/.kube/config \ ghcr.io/bourbonkk/k8s-pilot:latest

The--readonlyflag enables a safety mode that prevents any write operations to your Kubernetes clusters. This is perfect for:

- Cluster inspectionwithout risk of accidental changes
- Audit scenarioswhere you need to view but not modify
- Learning environmentswhere you want to explore safely
- Production monitoringwith zero risk of modifications

Protected Operations (Blocked in Readonly Mode)

- pod_create,pod_update,pod_delete
- deployment_create,deployment_update,deployment_delete
- service_create,service_update,service_delete
- configmap_create,configmap_update,configmap_delete
- secret_create,secret_update,secret_delete
- namespace_create,namespace_delete
- All other create/update/delete operations

- pod_list,pod_detail,pod_logs
- deployment_list,deployment_get
- service_list,service_get
- configmap_list,configmap_get
- secret_list,secret_get
- namespace_list,namespace_get
- All other list/get operations

k8s-pilot includes built-in prompt templates for common operations:

Use this config to run k8s_pilot MCP server from within Claude:

{ "mcpServers": { "k8s_pilot": { "command": "uv", "args": [ "--directory", "<path-to-cloned-repo>/k8s-pilot", "run", "--with", "mcp[cli]>=1.28.0,<2", "python", "k8s_pilot.py" ] } } }

For readonly mode, use this configuration:

{ "mcpServers": { "k8s_pilot_readonly": { "command": "uv", "args": [ "--directory", "<path-to-cloned-repo>/k8s-pilot", "run", "--with", "mcp[cli]>=1.28.0,<2", "python", "k8s_pilot.py", "--readonly" ] } } }

For Docker, use this configuration (replaceYOUR_USERNAMEwith your actual Mac user name):

{ "mcpServers": { "k8s_pilot_docker": { "command": "docker", "args": [ "run", "-i", "--rm", "-v", "/Users/YOUR_USERNAME/.kube/config:/root/.kube/config", "ghcr.io/bourbonkk/k8s-pilot:latest" ] } } }

Replace<path-to-cloned-repo>with the actual directory where you cloned the repo.

Create a Deployment using the nginx:latest image in the pypy namespace, and also create a Service that connects to it.

- Seamlessly interact with multiple Kubernetes clusters
- Perform context-aware operations
- Easily switch between clusters via MCP prompts

- View, create, update, delete:

- Deployments, Services, Pods
- ConfigMaps, Secrets, Ingresses
- StatefulSets, DaemonSets
- Roles, ClusterRoles
- PersistentVolumes & Claims

- Create/delete namespaces
- List all resources in a namespace
- Manage labels and resource quotas

- View node details and conditions
- Cordon/uncordon, label/taint nodes
- List pods per node

This project is licensed under the MIT License. See theLICENSEfile for details.

Agent-ready global image CDN that AI agents can install and operate through MCP.