v0.0.22

This release restores binary publishing after the v0.0.21 release workflow failed before compilation.

az rest is permanently disabled in every access mode through azure-api-mcp v0.0.10. Custom or enabled policies cannot re-enable it. AKS MCP continues to enforce its local-only stdio contract.

Release binaries are provided for Linux, macOS, and Windows on amd64 and arm64, each with a signed SLSA provenance file.

What's Changed

• Enforce the local-only MCP contract by Nikhil Kaul (@nikhilkaul1234) in #404
• Pin GitHub Actions to full-length commit SHAs by Dan Fiedler (@danfiedler-msft) in #405
• Use upstream az rest restriction and remove duplicate validation by gossion in #411
• Fix SLSA release builder reference by gossion in #412

New Contributors

• Nikhil Kaul (@nikhilkaul1234) made their first contribution in #404
• Dan Fiedler (@danfiedler-msft) made their first contribution in #405

Full Changelog: v0.0.20...v0.0.22

v0.0.20

Breaking change: AKS-MCP is now stdio-only

AKS-MCP now supports only a local stdio subprocess launched by an MCP client. This release removes the network-reachable and remote-deployment model.

Removed

• SSE and streamable HTTP transports
• Browser-facing OAuth/OBO, token forwarding, and token-only authentication
• AKS RunCommand execution used by the removed token-only path
• Container-image distribution, Helm charts, Kubernetes deployment artifacts, and their publishing workflows

Migration

1. Download the binary for your platform from this release.
2. Configure your MCP client to start that binary as a local stdio subprocess.
3. Use the local user's Azure CLI and Kubernetes configuration (az login, kubeconfig, and required CLI tools).

Remote deployments cannot be upgraded in place. Move the MCP client configuration to a local binary installation instead. HTTP, SSE, container, Kubernetes, Helm, proxy, and gateway deployments are outside the project's supported security and support boundary.

See #394, #395, and #396 for details.

What's Changed

• Feat/ig cluster extension by Qasim Sarfraz (@mqasimsarfraz) in #389
• docs: clarify supported deployment model and security boundary by gossion in #393
• Make the MCP server stdio-only by gossion in #395
• Remove remote deployment and container distribution support by gossion in #396

Full Changelog: v0.0.19...v0.0.20

v0.0.19

What's Changed

• fix(k8s): block kubectl auth reconcile in readonly mode by gossion in #377
• chore: bump mcp-kubernetes to v0.0.14 and azure-api-mcp to v0.0.7 by gossion in #380
• fix(http): validate Host and Origin for streamable-http and sse transports by gossion in #382

Full Changelog: v0.0.18...v0.0.19

v0.0.18

What's Changed

• chore(deps): bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 by Dependabot (@dependabot)[bot] in #356
• fix: block Fine Free File Command (@file) argument injection to prevent arbitrary file reads by gossion in #352
• fix: move az login and account-set to admin-only access level by gossion in #353
• fix: move az fleet get-credentials to admin-only access level by gossion in #354
• Add SafeSkill security badge (92/100 — Verified Safe) by @OyaAIProd in #357
• Chart: support setting podLabels by Audun Solemdal (@audunsolemdal) in #363
• fix: block credential-bearing commands in call_az handler by gossion in #368
• fix(oauth): support external URL override for TLS-terminating proxy d… by Michaela Links (@michaelalinks) in #364
• fix(oauth): use ExternalURL in WWW-Authenticate header for TLS proxy deployments by Michaela Links (@michaelalinks) in #369
• feat: add On-Behalf-Of flow for browser-based MCP client support by Michael Wilson (@Michael-Wilson94) in #370

New Contributors

• @OyaAIProd made their first contribution in #357
• Audun Solemdal (@audunsolemdal) made their first contribution in #363
• Michaela Links (@michaelalinks) made their first contribution in #364
• Michael Wilson (@Michael-Wilson94) made their first contribution in #370

Full Changelog: v0.0.17...v0.0.18

v0.0.17

What's Changed

• Chore/update helm chart and add publish pipeline by achaikaJH in #337
• fix: fix Helm chart publish workflow and add lint step by gossion in #339
• chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in /test/e2e by Dependabot (@dependabot)[bot] in #342
• fix: block az rest with non-Azure URLs to prevent token exfiltration by gossion in #345
• fix: prevent command injection in collect_aks_node_logs via since and filter parameters by gossion in #344
• chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 by Dependabot (@dependabot)[bot] in #338
• chore(deps): bump the all-gomod group across 1 directory with 11 updates by Dependabot (@dependabot)[bot] in #346

Full Changelog: v0.0.16...v0.0.17

v0.0.16

What's Changed

• Fix: fix gosec pipeline error and upgade go version by gossion in #314
• feat: add oauth2 authentication for SPN and MID by achaikaJH in #312
• chore(deps): bump the all-gomod group across 1 directory with 4 updates by Dependabot (@dependabot)[bot] in #315
• chore(deps): bump the all-gomod group across 1 directory with 2 updates by Dependabot (@dependabot)[bot] in #294
• inspektorgadget: Allow connecting in custom namespace by Qasim Sarfraz (@mqasimsarfraz) in #318
• Fix: lint error by gossion in #320
• Add support for custom OAuth scopes via --oauth-scopes flag by achaikaJH in #316
• Test: e2e testing framework for the AKS-MCP server by gossion in #321
• ci: pin gosec action to v2.24.0 instead of Oleg Smirnov (@master) by gossion in #326
• inspektorgadget: Simplify tool schema and description by Qasim Sarfraz (@mqasimsarfraz) in #330
• Add comprehensive Enterprise Application configuration documentation by achaikaJH in #332
• Chore: skip az login when TokenAuthOnly is enabled by gossion in #313
• fix: accept AKS managed webhook token path for workload identity by gossion in #325
• Feat: Add telemetry tracking to call_az tool handler by gossion in #327
• chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 in /test/e2e by Dependabot (@dependabot)[bot] in #322
• Sanitize CLI command in telemetry to prevent secret leakage by gossion in #335

New Contributors

• achaikaJH made their first contribution in #312

Full Changelog: v0.0.15...v0.0.16

v0.0.15

What's Changed

• Test: add pipeline to push image to mcr by gossion in #267
• Fix: show cli output when error happens in login by gossion in #261
• fix: fix push_mcr pipeline by gossion in #269
• IG: Bugfixes, better description and added features by Burak Ok (@burak-ok) in #273
• Feat: pass ctx to tool call by gossion in #276
• chore(deps): bump alpine from 3.22 to 3.23 in the all-gomod group by Dependabot (@dependabot)[bot] in #268
• chore(deps): bump the all-gomod group across 1 directory with 2 updates by Dependabot (@dependabot)[bot] in #275
• feat: Add MCP tool annotations for LLM guidance by Bryan Thompson (@bryankthompson) in #279
• add az cli extension costmanagement & application-insights by gossion in #282
• Bump github.com/Azure/mcp-kubernetes to v0.0.12 by @Copilot in #289
• Feat: support run kubectl on AKS by runcommand by gossion in #286
• chore: log for azapi handler by gossion in #292
• Docs: update tool names by gossion in #293
• Chore: rename tools to avoid confusion by gossion in #298
• docs: add GitHub Copilot CLI to supported clients by Christopher Harrison (@GeekTrainer) in #296
• Feat: merge detector tools by gossion in #299
• Fix: optimize runcommand polling interval by gossion in #301
• Fix: fix push mcr pipeline by gossion in #302
• Feat: support --token-auth-only in helm chart by gossion in #305
• Fix: don't show acr name in logs by gossion in #306
• Bump azure-api-mcp to v0.0.5 by @Copilot in #304
• Feat: support security check for k8s run command by gossion in #308
• Feat: support getting logs from nodes by gossion in #297

New Contributors

• Bryan Thompson (@bryankthompson) made their first contribution in #279
• Christopher Harrison (@GeekTrainer) made their first contribution in #296

Full Changelog: v0.0.12...v0.0.15

v0.0.12

What's Changed

• chore(deps): bump github.com/inspektor-gadget/inspektor-gadget from 0.45.0 to 0.46.0 in the all-gomod group by Dependabot (@dependabot)[bot] in #233
• Improve README formatting and installation details by Pavneet (@pavneeta) in #235
• chore(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 in the all-gomod group by Dependabot (@dependabot)[bot] in #234
• Chore: disable oauth by default in helm charts by gossion in #236
• chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 by Dependabot (@dependabot)[bot] in #237
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.1 to 1.20.0 in the all-gomod group by Dependabot (@dependabot)[bot] in #238
• chore(deps): bump golangci/golangci-lint-action from 8 to 9 in the all-gomod group by Dependabot (@dependabot)[bot] in #239
• inspektor-gadget: Allow Deploy/Undeploy with default permissions by Qasim Sarfraz (@mqasimsarfraz) in #241
• chore(deps): bump the all-gomod group with 2 updates by Dependabot (@dependabot)[bot] in #240
• chore(deps): bump the all-gomod group with 4 updates by Dependabot (@dependabot)[bot] in #242
• Revise MCP server documentation by Julia Yin (@julia-yin) in #246
• inspektor-gadget: Include confirmation before deploy/undeploy by Qasim Sarfraz (@mqasimsarfraz) in #245
• Fix: log level in helm chart by gossion in #247
• Feat: switch to azure api mcp for simple cli commands by gossion in #243
• chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by Dependabot (@dependabot)[bot] in #248
• charts: Add permissions for Inspektor Gadget by Qasim Sarfraz (@mqasimsarfraz) in #249
• Feat: deploy aks-mcp with oidc by gossion in #244
• chore(deps): bump actions/checkout from 5 to 6 in the all-gomod group by Dependabot (@dependabot)[bot] in #250
• Feat: support unified kubectl tool by gossion in #252
• chore: remove variables for workload identity by Qingchuan Hao (@mainred) in #256
• IG: Add profile_blockio and top_blockio by Burak Ok (@burak-ok) in #255
• chore(deps): bump github.com/mark3labs/mcp-go from 0.43.0 to 0.43.1 in the all-gomod group across 1 directory by Dependabot (@dependabot)[bot] in #254
• chore(deps): bump the all-gomod group across 1 directory with 2 updates by Dependabot (@dependabot)[bot] in #257
• Docs: update readme for unified tools by gossion in #258
• Feat: support az retry with 'az login' by gossion in #260
• Feat: support configurable components by gossion in #263
• Chore: add cilium, hubble in docker image by gossion in #264

New Contributors

• Qingchuan Hao (@mainred) made their first contribution in #256
• Burak Ok (@burak-ok) made their first contribution in #255

Full Changelog: v0.0.11...v0.0.12

Breaking Change: Component Configuration Migration (--additional-tools → --enabled-components)

Summary

We have refactored the component configuration system in this release, which introduces breaking changes to the command-line interface and default behavior. The --additional-tools flag has been replaced with a unified --enabled-components flag, and the default enabled components list has been expanded.

Breaking Changes

1. Flag Replacement

Before:

aks-mcp --additional-tools helm,cilium,hubble

After:

aks-mcp --enabled-components helm,cilium,hubble

The --additional-tools flag is removed and will cause an error if used.

2. Default Enabled Components

Before (implicit behavior):

• Always enabled by default: az_cli, monitor, fleet, network, compute, detectors, advisor, inspektorgadget, kubectl
• Required --additional-tools flag: helm, cilium, hubble

After:

• All components enabled by default when --enabled-components is empty or not specified:
  • az_cli, monitor, fleet, network, compute, detectors, advisor, inspektorgadget, kubectl, helm, cilium, hubble

3. CLI Tool Validation

The startup validator now checks for all CLI tools corresponding to enabled components.

Before:

• Validated: az, kubectl (always)
• Validated conditionally: helm, cilium, hubble (only if specified in --additional-tools)

After:

• When --enabled-components is empty (default), validates all CLI tools: az, kubectl, helm, cilium, hubble
• When --enabled-components is specified, validates only the listed components

Impact: If you don't have helm, cilium, or hubble installed, aks-mcp will fail to start with validation errors.

v0.0.11

What's Changed

• chore(deps): bump github.com/mark3labs/mcp-go from 0.41.1 to 0.42.0 in the all-gomod group by Dependabot (@dependabot)[bot] in #226
• inspektor-gadget: Add tcpdump gadget by Qasim Sarfraz (@mqasimsarfraz) in #227
• use default subscription_id if it is not set by gossion in #232
• chore(deps): bump the all-gomod group with 2 updates by Dependabot (@dependabot)[bot] in #231
• chore(deps): bump actions/upload-artifact from 4 to 5 in the all-gomod group by Dependabot (@dependabot)[bot] in #228

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• fix: enforce json output for az monitor metrics and aks tools by Pengfei Ni (@feiskyer) in #216
• Chore: add guidance for deploying aks-mcp in ask approuting by gossion in #215
• fix: correct resource url by gossion in #217
• chore(deps): bump docker/login-action from 3.5.0 to 3.6.0 in the all-gomod group by Dependabot (@dependabot)[bot] in #220
• chore(deps): bump github.com/mark3labs/mcp-go from 0.40.0 to 0.41.0 in the all-gomod group by Dependabot (@dependabot)[bot] in #219
• chore(deps): bump the all-gomod group across 1 directory with 3 updates by Dependabot (@dependabot)[bot] in #223
• Fix: /heath for http, sse by gossion in #225

Full Changelog: v0.0.9...v0.0.10