Skip to content

v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Nov 00:58
· 26 commits to main since this release
v0.5.0
c18b3e5

AI proposes. Your passkey runs it. opsgate is a self-hosted MCP server for Kubernetes with human-in-the-loop approval. This release closes the three gaps between "approved" and "fixed".

Highlights

  • Recovery check. After a web-approved k8s_rollout_restart, k8s_restore_image, k8s_scale or controller-owned k8s_delete_pod, opsgate watches the workload for up to 3 minutes with the condition kubectl rollout status uses. The approval page, inbox, approval_status and audit log report Recovered, Not recovered yet (with counts and a reason such as CrashLoopBackOff) or unknown, and a push notification names only the result.
  • Web approval by default. Builtin auth now always defaults to web-only approval, with or without a mode, so an AI client cannot approve its own change unless you opt in to in-client elicitation.
  • Phone recovery in one step. opsgate init -recover "apps/*" writes the server and watch configuration (write scope, restart and image-restore allowlists, Web Push, signed inbox alerts) and prints every remaining command. The reference manifests mount the inbox and webhook key Secrets as optional.
  • Easier to find. Listed in the official MCP Registry as io.github.gkdis6/opsgate, with a documentation site at https://gkdis6.github.io/opsgate/, llms.txt, a comparison with other Kubernetes MCP servers and an FAQ.

Upgrade notes

  • A configuration with builtin auth and no mode switches from in-client elicitation to web approval. Set approval.web: false or approval.require_web: false to keep the old behavior.
  • Notification text now comes from the signed-in /approvals/latest. Open the opsgate inbox once on each device so the updated service worker installs.

Verify the release as described in deployment. Full list: CHANGELOG.

Changelog

  • 9fbc63c approval: report whether the service recovered after an action
  • c3f6206 config: default to web approval with builtin auth
  • 750fb50 docs: lead with the approval card concept
  • 55960b8 docs: make opsgate findable by people and AI search
  • b607365 init: set up phone recovery in one step
  • c18b3e5 release: prepare v0.5.0
Assets 12
Loading