437 Commits

Author SHA1 Message Date
openshift-merge-bot[bot]
80d6c707c9 Merge pull request #54 from Cali0707/sync-downstream
NO-JIRA: Sync downstream to include provider changes
2025-10-15 04:03:59 +00:00
Calum Murray
b942ae2b0b upstream<drop>: go mod tidy/vendor 2025-10-14 14:30:49 -04:00
Calum Murray
0b73a885a6 upstream<carry>: Downstream 2025-10-14 14:30:23 -04:00
Calum Murray
a5a7129138 Merge remote-tracking branch 'downstream/main' into sync-downstream 2025-10-14 14:29:33 -04:00
Marc Nuri
f3a446676f refactor(kubernetes): keep Provider as only external Kubernetes interface (#372)
* refactor(kubernetes): keep Provider as only external Kubernetes interface

Initial phase to unify-merge the Provider interface with the Manager struct.

- Renamed ManagerProvider to Provider (i.e. kubernets.Provider)
- Moved Manager related logic to specific files
- Exposed relevant method through Provider interface (GetDerivedKubernetes, IsOpenShift, VerifyToken)

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* Update pkg/kubernetes/provider_kubeconfig.go

Co-authored-by: Calum Murray <cmurray@redhat.com>
Signed-off-by: Marc Nuri <marc@marcnuri.com>

---------

Signed-off-by: Marc Nuri <marc@marcnuri.com>
Co-authored-by: Calum Murray <cmurray@redhat.com>
2025-10-14 15:25:49 +02:00
Marc Nuri
1e154d7587 test(kubernetes): refactor tests for Derived manager functionality to use testify (#369)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-10-13 13:12:29 +02:00
dependabot[bot]
68619b57ad build(deps): bump sigs.k8s.io/controller-runtime from 0.22.2 to 0.22.3 (#374)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.22.2 to 0.22.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.22.2...v0.22.3)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-13 08:31:34 +02:00
Marc Nuri
086afefc75 test(kubernetes): provider registry tests (#371)
Required tests prior to refactoring Provider and Manager

Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-10-10 15:07:37 +02:00
Marc Nuri
672b8a5d13 chore(docs): add multi-cluster to readme (#363)
* chore(docs): add multi-cluster to readme

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* chore(docs): review, add note about multi-cluster extra-param

Signed-off-by: Marc Nuri <marc@marcnuri.com>

---------

Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-10-10 15:02:29 +02:00
Harshal Patil
65cc304c3c feat(kubernetes): expose AccessControlClientset to enable its usage in toolsets (#364)
Signed-off-by: Harshal Patil <12152047+harche@users.noreply.github.com>
2025-10-10 09:31:19 +02:00
dependabot[bot]
3d3eb64582 build(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 (#367)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/net/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-09 04:45:02 +02:00
dependabot[bot]
3d5fba8813 build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#366)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-09 04:33:31 +02:00
Calum Murray
31e90fbece refactor(kubernetes): move provider initialization into factory (#365)
Signed-off-by: Calum Murray <cmurray@redhat.com>
2025-10-09 04:25:34 +02:00
dependabot[bot]
99e954304c build(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 (#362)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/net/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-08 10:50:55 +02:00
Calum Murray
a056981f53 feat(config): add "disabled" mutli cluster strategy (#360)
* feat: add 'disabled' ClusterProviderStrategy

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: add --disable-multi-cluster flag

Signed-off-by: Calum Murray <cmurray@redhat.com>

* test: check that --disable-multi-cluster flag changes config

Signed-off-by: Calum Murray <cmurray@redhat.com>

* refactor: move flag names to constants

Signed-off-by: Calum Murray <cmurray@redhat.com>

* fix(test): correct subtest name

Signed-off-by: Calum Murray <cmurray@redhat.com>

* fix: explicit clusterproviderstrategy is now recommended, instead of advisable

Signed-off-by: Calum Murray <cmurray@redhat.com>

---------

Signed-off-by: Calum Murray <cmurray@redhat.com>
2025-10-08 10:19:34 +02:00
openshift-merge-bot[bot]
2b8e41e03c Merge pull request #42 from matzew/update_reviewers
NO-JIRA: Adding Calum and myself as reviewers
2025-10-07 19:05:26 +00:00
Marc Nuri
61eaecc38f chore(docs): added missing tools to README.md (make update-readme-tools) (#358)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-10-07 11:42:19 +02:00
openshift-merge-bot[bot]
82a4ef2d14 Merge pull request #41 from matzew/sync-downstream
NO-JIRA: Sync downstream with the latest changes in upstream
2025-10-07 09:13:08 +00:00
Matthias Wessendorf
a2e14d67f1 💄 Adding Calum and myself as reviewers
Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>
2025-10-07 11:03:45 +02:00
dependabot[bot]
028c6b08c2 build(deps): bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.2 (#361)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.22.1 to 0.22.2.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.22.1...v0.22.2)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-07 10:45:51 +02:00
Matthias Wessendorf
06fd5d469f Add readme update to ignore section, since it is an internal tool with existing path sanitization (filepath.Clean and filepath.Localize on line 31-32). The warnings are likely false positives
Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>
2025-10-07 10:18:13 +02:00
Matthias Wessendorf
c75888e6d3 upstream<drop>: go mod tidy/vendor 2025-10-07 09:51:22 +02:00
Matthias Wessendorf
d94d72d902 upstream<carry>: Downstream 2025-10-07 09:50:51 +02:00
Matthias Wessendorf
ee93bb08b8 Merge remote-tracking branch 'downstream/main' into sync-downstream 2025-10-07 09:48:39 +02:00
openshift-merge-bot[bot]
f76474cd46 Merge pull request #37 from openshift/konflux/references/main
chore(deps): update konflux references main
2025-10-07 06:43:32 +00:00
dependabot[bot]
e8ba1fa0bf build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 (#357)
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.2 to 4.1.3.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-06 12:06:46 +02:00
dependabot[bot]
e86d314ae2 build(deps): bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 (#356)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.15.0 to 3.16.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-06 12:06:42 +02:00
Calum Murray
a2d16e9f41 feat: Multi Cluster Support (#348)
* feat: add cluster provider for kubeconfig

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: move server to use ClusterProvider interface

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: authentication middleware works with cluster provider

Signed-off-by: Calum Murray <cmurray@redhat.com>

* fix: unit tests work after cluster provider changes

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: add tool mutator to add cluster parameter

Signed-off-by: Calum Murray <cmurray@redhat.com>

* test: handle cluster parameter

Signed-off-by: Calum Murray <cmurray@redhat.com>

* fix: handle lazy init correctly

Signed-off-by: Calum Murray <cmurray@redhat.com>

* refactor: move to using multi-strategy ManagerProvider

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: add contexts_list tool

Signed-off-by: Calum Murray <cmurray@redhat.com>

* refactor: make tool mutator generic between cluster/context naming

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: introduce tool filter

Signed-off-by: Calum Murray <cmurray@redhat.com>

* refactor: use new ManagerProvider/mutator/filter within mcp server

Signed-off-by: Calum Murray <cmurray@redhat.com>

* fix(test): tests expect context parameter in tool defs

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: auth handles multi-cluster case correctly

Signed-off-by: Calum Murray <cmurray@redhat.com>

* fix: small changes from local testing

Signed-off-by: Calum Murray <cmurray@redhat.com>

* chore: fix enum test

Signed-off-by: Calum Murray <cmurray@redhat.com>

* review: Multi Cluster support (#1)

* nit: rename contexts_list to configuration_contexts_list

Besides the conventional naming, it helps LLMs understand the context of the tool by providing a certain level of hierarchy.

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* fix(mcp): ToolMutator doesn't rely on magic strings

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* refactor(api): don't expose ManagerProvider to toolsets

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* test(mcp): configuration_contexts_list basic tests

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* test(toolsets): revert edge-case test

This test should not be touched.

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* test(toolsets): add specific metadata tests for multi-cluster

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* fix(mcp): ToolFilter doesn't rely on magic strings (partially)

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* test(api): IsClusterAware and IsTargetListProvider default values

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* test(mcp): revert unneeded changes in mcp_tools_test.go

Signed-off-by: Marc Nuri <marc@marcnuri.com>

---------

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* fix: always include configuration_contexts_list if contexts > 1

Signed-off-by: Calum Murray <cmurray@redhat.com>

* feat: include server urls in configuration_contexts_list

Signed-off-by: Calum Murray <cmurray@redhat.com>

---------

Signed-off-by: Calum Murray <cmurray@redhat.com>
Signed-off-by: Marc Nuri <marc@marcnuri.com>
Co-authored-by: Marc Nuri <marc@marcnuri.com>
2025-10-06 12:01:16 +02:00
red-hat-konflux[bot]
100f369157 chore(deps): update konflux references main
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
2025-10-04 08:16:36 +00:00
Matthias Wessendorf
c447bf819f fix(auth): move 401 response handling to a common helper func (#353)
Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>
2025-10-02 10:42:19 +02:00
dependabot[bot]
07b1ebc05e build(deps): bump github.com/mark3labs/mcp-go from 0.41.0 to 0.41.1 (#352)
Bumps [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) from 0.41.0 to 0.41.1.
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](https://github.com/mark3labs/mcp-go/compare/v0.41.0...v0.41.1)

---
updated-dependencies:
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 09:14:30 +02:00
dependabot[bot]
adc1044615 build(deps): bump github.com/mark3labs/mcp-go from 0.40.0 to 0.41.0 (#349)
Bumps [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) from 0.40.0 to 0.41.0.
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](https://github.com/mark3labs/mcp-go/compare/v0.40.0...v0.41.0)

---
updated-dependencies:
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-30 15:35:27 +02:00
openshift-merge-bot[bot]
7107a2474c Merge pull request #35 from openshift/konflux/references/main
chore(deps): update konflux references main
2025-09-30 08:56:49 +00:00
red-hat-konflux[bot]
bf57c06f86 chore(deps): update konflux references main
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
2025-09-27 08:12:28 +00:00
Marc Nuri
b55f28b36e feat(mcp): events_list returns parseable YAML output (#346)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-09-26 11:01:21 +02:00
Marc Nuri
d3723804ed chore(security): try to fix snyk security issues (#345)
* chore(docs): update tools in README.md

Previous update wasn't made automatically.

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* chore(security): try to fix snyk security issues

Even after the fix, Snyk seems to be reporting false positives.

Signed-off-by: Marc Nuri <marc@marcnuri.com>

---------

Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-09-26 09:29:34 +02:00
Marc Nuri
792d2f5b80 chore(lint): fix linting issues (#344)
* chore(lint): fix linting issues

Signed-off-by: Marc Nuri <marc@marcnuri.com>

* feat(ci): add linting to build and build-all-platforms target

Signed-off-by: Marc Nuri <marc@marcnuri.com>

---------

Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-09-26 06:56:48 +02:00
openshift-merge-bot[bot]
0959b36f39 Merge pull request #34 from ardaguclu/sync-downstream
NO-JIRA: Sync downstream with the latest changes in upstream
2025-09-25 14:04:01 +00:00
Arda Güçlü
45fac4ff35 Upstream<carry>: Update Dockerfile.ocp 2025-09-25 16:44:25 +03:00
Arda Güçlü
a9608d251a Upstream<drop>: Run go mod vendor 2025-09-25 16:40:49 +03:00
Arda Güçlü
459677365f Upstream<carry>: Add OCP specific configurations 2025-09-25 16:40:25 +03:00
Arda Güçlü
da152bcb50 Merge remote-tracking branch 'downstream/main' into sync-downstream 2025-09-25 16:35:55 +03:00
Marc Nuri
c69e90c70d fix(mcp): InputSchema schema with empty properties for no-arg tools (#341)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-09-25 11:54:07 +02:00
openshift-merge-bot[bot]
6c8de3b5d0 Merge pull request #32 from openshift/konflux/references/main
chore(deps): update konflux references main
2025-09-25 08:45:45 +00:00
red-hat-konflux[bot]
7137b67019 chore(deps): update konflux references main
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
2025-09-25 08:13:25 +00:00
iamsudip
053fb2e31c feat(pods): add optional tail parameter to pod logs retrieval (#335)
* feat(pods): add tailLines parameter to pod logs retrieval with default 256 lines

Signed-off-by: iamsudip <sudip.maji@harness.io>

* address review comments

Signed-off-by: iamsudip <sudip.maji@harness.io>

* test(pods): add tailLines parameter to pod logs retrieval with default 256 lines

Signed-off-by: Marc Nuri <marc@marcnuri.com>

---------

Signed-off-by: iamsudip <sudip.maji@harness.io>
Signed-off-by: Marc Nuri <marc@marcnuri.com>
Co-authored-by: Marc Nuri <marc@marcnuri.com>
2025-09-25 09:17:53 +02:00
openshift-merge-bot[bot]
47a3492d1d Merge pull request #33 from ralphbean/main-KONFLUX-6210-openshift-mcp-server
chore(KONFLUX-6210): fix and set name and cpe label for openshift-mcp-server
2025-09-25 05:52:19 +00:00
Ralph Bean
0181f6955a chore(KONFLUX-6210): fix and set name and cpe label for openshift-mcp-server
For https://issues.redhat.com/browse/KONFLUX-6210, clair needs access to a name and cpe label that it can use to look up the image in VEX statements.

See also release-engineering/rhtap-ec-policy#149

Signed-off-by: Ralph Bean <rbean@redhat.com>
Assisted-by: Gemini
2025-09-24 18:15:18 -04:00
dependabot[bot]
8e666d4c67 build(deps): bump github.com/google/jsonschema-go from 0.2.3 to 0.3.0 (#338)
Bumps [github.com/google/jsonschema-go](https://github.com/google/jsonschema-go) from 0.2.3 to 0.3.0.
- [Release notes](https://github.com/google/jsonschema-go/releases)
- [Commits](https://github.com/google/jsonschema-go/compare/v0.2.3...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/google/jsonschema-go
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-23 10:50:34 +02:00
Andrew Block
4c5bce1b65 feat(container): added non-privileged image user (#336)
Signed-off-by: Andrew Block <andy.block@gmail.com>
2025-09-22 10:30:15 +02:00