Skillget

container-manager-mcp

mcp
Security Audit
Warn
Health Warn
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

Manage containers on docker, podman, compose, and docker swarm through an MCP Server for Agentic AI

README.md

Container Manager Mcp

CLI or API | MCP | Agent

PyPI - Version
MCP Server
PyPI - Downloads
GitHub Repo stars
GitHub forks
GitHub contributors
PyPI - License
GitHub
GitHub last commit (by committer)
GitHub pull requests
GitHub closed pull requests
GitHub issues
GitHub top language
GitHub language count
GitHub repo size
GitHub repo file count (file type)
PyPI - Wheel
PyPI - Implementation

Version: 3.0.0

Documentation — Installation, deployment, usage across the API, CLI, MCP, and
A2A agent interfaces, and the multi-host control plane are maintained in the
official documentation.

Overview

Container Manager Mcp is a production-grade Agent and Model Context Protocol (MCP) server designed to interface directly with Container Manager - manage Docker, Docker Swarm, Podman, and Kubernetes containers and workloads. MCP+A2A Servers Out of the Box!.

Full coverage across all three engines: Docker (incl. Swarm/service/stack/config/secret/node
operations via cm_docker_swarm), Podman (incl. pod/kube operations, generate/play kube, checkpoint/restore
via cm_podman), and a complete Kubernetes surface (RKE2 / k3s / vanilla) spanning workloads,
config, networking, storage, RBAC, cluster admin, governance, and observability through 8 themed cm_k8s_*
tools built on the official kubernetes Python client. A cm_multi_context tool lets an agent fan out
operations across several Docker/Podman/Swarm/Kubernetes contexts in parallel, and cm_ingest_inventory feeds
Docker, Swarm, and Kubernetes resources into the ontology-driven Knowledge Graph as typed nodes.

Key Features

  • Consolidated Action-Routed MCP Tools: Minimizes token overhead and eliminates tool bloat in LLM contexts by grouping methods into optimized, togglable tool modules.
  • Full Docker + Swarm + Podman + Kubernetes Coverage: First-class support for Docker (incl. Swarm/service/stack/config/secret/node ops), rootless Podman (incl. pods, generate/play kube, checkpoint/restore), and a full Kubernetes surface (RKE2 / k3s / vanilla) across workloads, config, networking, storage, RBAC, cluster admin, governance, and observability. See Kubernetes below.
  • Multi-Context Parallel Operation: cm_multi_context fans operations out across several Docker, Podman, Swarm, and/or Kubernetes contexts at once (ThreadPoolExecutor-backed), with health checks and lazy reconnect.
  • Enterprise-Grade Security: Comprehensive support for Eunomia policies, OIDC token delegation, and granular execution context tracking.
  • Integrated Graph Agent: Built-in Pydantic AI agent supporting the Agent Control Protocol (ACP) and standard Web interfaces (AG-UI).
  • Ontology-Driven KG Ingestion: cm_ingest_inventory maps live Docker/Swarm/Kubernetes inventory (containers, images, volumes, networks, services, nodes, pods, deployments, namespaces, native k8s Services) into typed OWL/RDF nodes for cross-source reasoning.
  • Native Telemetry & Tracing: Out-of-the-box OpenTelemetry exports and native Langfuse tracing.

Multi-Host & Zero-Script Remote Docker Orchestration

container-manager-mcp allows a single master instance of the MCP server on your controller to route container and volume operations securely to remote hosts over SSH standard tunneling.

  • Unified Inventory: Connection endpoints are loaded dynamically from the XDG shared inventory at ~/.config/agent-utilities/inventory.yml (.yml preferred; a legacy inventory.yaml is still read when no .yml exists).
  • Zero TCP Socket Exposure: Operations route directly over the standard SSH channel securely, removing the need to expose Docker socket TCP ports.

Shared inventory: the cm_* host aliases you pass as host come from the same
inventory.yml used by tunnel-manager — define your fleet once. Create and validate
it with tunnel-manager inventory init / tunnel-manager inventory doctor. See
tunnel-manager's Inventory guide
for the full schema, template, and override options.

To configure and utilize the multi-host remote routing, see the detailed Multi-Host Architecture Guide.

CLI or API

This agent wraps the Container Manager - manage Docker, Docker Swarm, and Podman containers. MCP+A2A Servers Out of the Box! API. You can interact with it programmatically or via its integrated execution entrypoints.

Detailed instructions on how to use the underlying API wrappers, extended schema bindings, and developer SDK references are maintained in docs/index.md.

Environment doctor

Not sure your environment is wired up? Run the guided doctor first. It probes
every surface with real checks — python client libs + CLIs, CONTAINER_MANAGER_TYPE
/ toggles / K8S_CONTEXTS parsing, the tunnel-manager SSH inventory (and per-host
reachability), the docker / podman daemons, and each kubernetes context —
and prints concrete remediation for anything that is not OK, so you are walked through
connecting to your environments. Available as the container-manager-doctor CLI and
the cm_doctor MCP tool.

container-manager-doctor                       # diagnose everything (exit 1 if any FAIL)
container-manager-doctor --guided              # + probe every inventory host
container-manager-doctor --backend inventory --host <alias>
container-manager-doctor --backend kubernetes --context <ctx>
container-manager-doctor --backend docker --host <alias>
container-manager-doctor --json                # machine-readable report

The cm_doctor MCP tool mirrors it: action=run for a full sweep, or a focused
check_backends / check_inventory / check_docker / check_podman /
check_kubernetes. Each check returns {name, category, status: ok|warn|fail, detail, remediation} plus a summary. Start here, then follow the
container-manager configuration walkthrough.

Save a Kubernetes environment (register a kubeconfig context)

Dynamically add a kube context to the kubeconfig cm reads ($KUBECONFIG first entry,
else ~/.kube/config) so you can reuse it later (via use_context /
CONTAINER_MANAGER_KUBECONTEXT / K8S_CONTEXTS). The merge is non-destructive —
existing entries are never clobbered, and a context-name collision errors unless you
pass --overwrite. Available as the container-manager-save-context CLI and the
cm_k8s_cluster save_context MCP action (both call the same core function). Secrets
(tokens, key data) are kept out of logs; cert/key files are embedded as base64 so the
saved context is portable.

Four credential input modes, each saved under a context name you choose:

  1. URL + token — server URL + bearer token (ServiceAccount / OIDC id-token).
  2. URL + client-cert + client-key + CA — mTLS (how an RKE2 admin kubeconfig
    authenticates); certs accept file paths or inline PEM/base64.
  3. URL + username + password → OIDC — for OIDC-backed clusters only. The
    Kubernetes API server does not accept plain username/password (basic auth
    was removed), so this drives an OIDC resource-owner password grant against the
    issuer and embeds the resulting id-token; it requires --oidc-issuer +
    --oidc-client-id and fails clearly if they are missing.
  4. Import a kubeconfig — merge an existing file/blob, or capture the cluster
    you are currently on.
# 1. URL + token
container-manager-save-context --name prod --server https://10.0.0.10:6443 \
    --token "$TOKEN" --ca-cert /path/to/ca.crt --namespace default --use

# 2. URL + client cert/key + CA (mTLS, e.g. RKE2 admin)
container-manager-save-context --name rke2 --server https://10.0.0.10:6443 \
    --client-cert ./client.crt --client-key ./client.key --ca-cert ./ca.crt

# 3. URL + username + password -> OIDC login (id-token embedded)
container-manager-save-context --name oidc-dev --server https://10.0.0.10:6443 \
    --username alice --password "$PW" \
    --oidc-issuer https://keycloak/realms/homelab --oidc-client-id kubernetes

# 4. import + merge an existing kubeconfig (file or raw YAML on stdin)
container-manager-save-context --from-file ./other-kubeconfig
cat cluster.yaml | container-manager-save-context --from-yaml -

# capture the cluster you are currently on (in-cluster SA token+CA, or the
# current kubeconfig context) and save a portable copy under a new name
container-manager-save-context --name exported --capture-current --use

# on name collision, --overwrite replaces; otherwise it errors
container-manager-save-context --name prod --overwrite --from-file ./prod-kubeconfig

After saving, the context is loaded and list_nodes is called to validate
reachability (skip with --no-validate); the node count or a clear error is returned.
The cm_k8s_cluster MCP action mirrors every flag (action=save_context,
context_name, server/token/client_cert/client_key/ca_cert/
insecure_skip_tls_verify, username/password/oidc_issuer/oidc_client_id/
oidc_client_secret, source_file/source_yaml, capture_current,
overwrite, use, validate).

MCP

This server utilizes dynamic Action-Routed tools to optimize token overhead and maximize IDE compatibility.

Available MCP Tools

Auto-generated — do not edit (synced by the mcp-readme-table pre-commit hook).

Condensed action-routed tools (default — MCP_TOOL_MODE=condensed)

MCP Tool Toggle Env Var Description
cm_compose_operations COMPOSETOOL Manage docker-compose or podman-compose operations.
cm_container_operations CONTAINERTOOL Manage container operations.
cm_docker_swarm DOCKERSWARMTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_doctor DOCTORTOOL Diagnose + get remediation for the inventory / kubernetes / docker / podman environment.
cm_image_operations IMAGETOOL Manage container images.
cm_info_operations INFOTOOL Manage container manager info operations.
cm_ingest_inventory MISCTOOL Natively ingest the container inventory into epistemic-graph as typed nodes.
cm_k8s_cluster K8SCLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_config K8SCONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_governance K8SGOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_networking K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_observability K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_rbac K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_storage K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_workloads K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_list_hosts INVENTORYTOOL List the host aliases you can pass as host to any cm_* operation
cm_multi_context MULTICONTEXTTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_network_operations NETWORKTOOL Manage network operations.
cm_podman PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_swarm_operations SWARMTOOL Manage swarm operations.
cm_system_operations SYSTEMTOOL Manage container manager system operations.
cm_volume_operations VOLUMETOOL Manage volume operations.
trace_port_namespace MISCTOOL Locate the container actively using/mapping the specified port on the target host.

Verbose 1:1 API-mapped tools (MCP_TOOL_MODE=verbose or both)

292 per-operation tools — one per public API method (click to expand)
MCP Tool Toggle Env Var Description
cm_container_operations__exec_in_container CONTAINERTOOL Manage container operations.
cm_container_operations__get_container_logs CONTAINERTOOL Manage container operations.
cm_container_operations__list_containers CONTAINERTOOL Manage container operations.
cm_container_operations__prune_containers CONTAINERTOOL Manage container operations.
cm_container_operations__remove_container CONTAINERTOOL Manage container operations.
cm_container_operations__stop_container CONTAINERTOOL Manage container operations.
cm_docker_swarm__docker_config_create DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_config_list DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_node_inspect DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_node_ls DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_node_update DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_secret_create DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_secret_list DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_service_create DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_service_list DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_service_logs DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_service_ps DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_service_rm DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_service_update DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_stack_deploy DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_stack_rm DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_stack_services DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_swarm_init DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_swarm_join DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_docker_swarm__docker_swarm_leave DOCKERTOOL Manage Docker Swarm operations (Swarm, services, stacks, configs, secrets, nodes).
cm_doctor__check_backends DOCTORTOOL Diagnose + get remediation for the inventory / kubernetes / docker / podman environment.
cm_doctor__check_docker DOCTORTOOL Diagnose + get remediation for the inventory / kubernetes / docker / podman environment.
cm_doctor__check_inventory DOCTORTOOL Diagnose + get remediation for the inventory / kubernetes / docker / podman environment.
cm_doctor__check_kubernetes DOCTORTOOL Diagnose + get remediation for the inventory / kubernetes / docker / podman environment.
cm_doctor__check_podman DOCTORTOOL Diagnose + get remediation for the inventory / kubernetes / docker / podman environment.
cm_doctor__run DOCTORTOOL Diagnose + get remediation for the inventory / kubernetes / docker / podman environment.
cm_image_operations__list_images IMAGETOOL Manage container images.
cm_image_operations__prune_images IMAGETOOL Manage container images.
cm_image_operations__pull_image IMAGETOOL Manage container images.
cm_image_operations__remove_image IMAGETOOL Manage container images.
cm_k8s_cluster__approve_csr CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__cluster_info_dump CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__cordon_node CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__deny_csr CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__describe_api_resource CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__describe_cluster_plugin CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__drain_node CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__get_api_server_info CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__get_cluster_info CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__get_config CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__get_node_affinity CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__get_node_conditions CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__inspect_node CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__list_api_resources CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__list_cluster_plugins CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__list_contexts CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__list_csr CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__list_node_taints CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__list_nodes CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__rename_context CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__save_context CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__set_node_affinity CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__set_pod_anti_affinity CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__taint_node CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__test_cluster_plugin CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__uncordon_node CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__untaint_node CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__use_context CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_cluster__validate_kubeconfig CLUSTERTOOL Manage Kubernetes cluster resources (nodes, contexts, CSRs, API resources, cluster info, admission plugins).
cm_k8s_config__annotate_resource CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__compare_configmap_state CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__create_configmap CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__create_namespace CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__create_secret CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__delete_namespace CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__describe_crd CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__get_secret_state_hash CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__label_resource CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__list_configmaps CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__list_crds CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__list_custom_resources CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__list_events CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__list_namespaces CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__list_secrets CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__patch_resource CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__sync_configmap_from_file CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__track_resource_version CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_config__wait_for_resource_version CONFIGTOOL Manage Kubernetes configuration (configmaps, secrets, namespaces, events, CRDs, labels/annotations/patch, state tracking).
cm_k8s_governance__create_horizontal_pod_autoscaler GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__create_limit_range GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__create_pod_disruption_budget GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__create_priority_class GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__create_resource_quota GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__delete_horizontal_pod_autoscaler GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__delete_limit_range GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__delete_pod_disruption_budget GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__delete_priority_class GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__delete_resource_quota GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__describe_horizontal_pod_autoscaler GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__describe_limit_range GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__describe_pod_disruption_budget GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__describe_priority_class GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__describe_resource_quota GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__list_horizontal_pod_autoscalers GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__list_limit_ranges GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__list_pod_disruption_budgets GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__list_priority_classes GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__list_resource_quotas GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__update_horizontal_pod_autoscaler GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_governance__update_resource_quota GOVERNANCETOOL Manage Kubernetes governance resources (ResourceQuotas, LimitRanges, PriorityClasses, PDBs, HPAs).
cm_k8s_networking__check_dns_resolution K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__create_ingress K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__create_ingress_class K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__create_k8s_service K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__create_network_policy_with_cidr K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__create_networkpolicy K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__delete_ingress K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__delete_k8s_service K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__delete_networkpolicy K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__describe_ingress_class K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__get_k8s_service K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__list_dns_endpoints K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__list_endpoints K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__list_endpointslices K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__list_ingress K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__list_ingress_classes K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__list_k8s_services K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__list_networkpolicies K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__set_default_ingress_class K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__test_dns_connectivity K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__test_network_policy_connectivity K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_networking__update_network_policy_rules K8SNETWORKINGTOOL Manage Kubernetes networking (ingress, ingress classes, network policies, endpoints, DNS, native services).
cm_k8s_observability__debug_deployment K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__debug_node K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__debug_pod K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__debug_service K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__get_autoscaler_history K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__get_autoscaler_metrics K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__get_cluster_resource_summary K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__get_node_metrics K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__get_pod_metrics K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__get_pod_resource_usage K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__get_resource_events K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__list_field_selector K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__scale_deployment_autoscaler K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__set_autoscaler_metrics K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__stream_pod_logs K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__top_nodes K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__top_pods K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_observability__watch_resource K8SOBSERVABILITYTOOL Observe Kubernetes resources (metrics, autoscaler metrics, watch/stream/events, debug helpers).
cm_k8s_rbac__auth_can_i K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__create_aggregated_cluster_role K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__create_cluster_rolebinding K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__create_pod_security_policy K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__create_role K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__create_rolebinding K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__create_service_account_token K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__create_serviceaccount K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__delete_cluster_rolebinding K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__delete_pod_security_policy K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__delete_role K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__delete_rolebinding K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__delete_service_account_token K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__delete_serviceaccount K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__describe_pod_security_policy K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__evaluate_pod_security K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_cluster_rolebindings K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_cluster_roles K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_pod_security_policies K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_rolebindings K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_roles K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_service_account_mapped_secrets K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_service_account_tokens K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__list_serviceaccounts K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__local_subject_access_review K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__map_secret_to_service_account K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__subject_access_review K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__unmap_secret_from_service_account K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_rbac__update_aggregated_cluster_role K8SRBACTOOL Manage Kubernetes RBAC and security (roles, bindings, service accounts, tokens, access reviews, pod security, secret mapping).
cm_k8s_storage__create_persistent_volume K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__create_persistent_volume_claim K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__create_storage_class K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__create_volume_snapshot K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__delete_persistent_volume_claim K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__describe_csi_driver K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__expand_persistent_volume K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__expand_pvc K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__get_csi_driver_capacity K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__get_storage_class_provisioner K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__list_csi_drivers K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__list_persistent_volume_claims K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__list_persistent_volumes K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__list_storage_classes K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__list_volume_snapshots K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_storage__set_default_storage_class K8SSTORAGETOOL Manage Kubernetes storage (PV, PVC, storage classes, volume snapshots, CSI drivers).
cm_k8s_workloads__attach_pod K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__copy_from_pod K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__copy_to_pod K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__create_cron_job K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__create_daemon_set K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__create_job K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__create_stateful_set K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__delete_cron_job K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__delete_job K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__describe_cron_job K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__describe_job K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__describe_pod K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__describe_replicaset K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__exec_pod K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__get_daemonset_update_strategy K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__get_deployment_strategy K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__get_statefulset_update_strategy K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__list_cron_jobs K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__list_daemonsets K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__list_jobs K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__list_pods K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__list_replicasets K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__list_statefulsets K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__port_forward_pod K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__rollout_history K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__rollout_pause K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__rollout_restart K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__rollout_resume K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__rollout_status K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__rollout_undo K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__scale_replicaset K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__scale_statefulset K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__set_daemonset_update_strategy K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__set_deployment_strategy K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_k8s_workloads__set_statefulset_update_strategy K8SWORKLOADSTOOL Manage Kubernetes workloads (pods, rollouts, strategies, statefulsets, daemonsets, replicasets, jobs, cronjobs).
cm_multi_context__create_network DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__create_service DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__create_volume DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__describe_pod DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__inspect_container DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_containers DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_contexts DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_deployments DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_images DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_networks DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_pods DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_services DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__list_volumes DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__pull_image DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__remove_container DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__remove_image DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__remove_network DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__remove_service DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__remove_volume DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__run_container DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__scale_deployment DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_multi_context__stop_container DOCKERTOOL Manage containers across multiple backends (Kubernetes, Docker, Podman, Swarm) with context selection.
cm_network_operations__create_network NETWORKTOOL Manage network operations.
cm_network_operations__list_networks NETWORKTOOL Manage network operations.
cm_network_operations__prune_networks NETWORKTOOL Manage network operations.
cm_network_operations__remove_network NETWORKTOOL Manage network operations.
cm_podman__podman_checkpoint PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_generate_kube_yaml PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_health_check PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_network_create PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_network_inspect PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_network_list PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_play_kube_yaml PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_create PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_inspect PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_list PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_logs PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_rm PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_stats PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_stop PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_pod_top PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_restore PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_system_prune PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_volume_create PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_volume_inspect PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_podman__podman_volume_list PODMANTOOL Manage Podman operations (pods, networks, volumes, checkpoint/restore, kube interop, system).
cm_swarm_operations__create_service SWARMTOOL Manage swarm operations.
cm_swarm_operations__init_swarm SWARMTOOL Manage swarm operations.
cm_swarm_operations__inspect_node SWARMTOOL Manage swarm operations.
cm_swarm_operations__inspect_service SWARMTOOL Manage swarm operations.
cm_swarm_operations__leave_swarm SWARMTOOL Manage swarm operations.
cm_swarm_operations__list_nodes SWARMTOOL Manage swarm operations.
cm_swarm_operations__list_services SWARMTOOL Manage swarm operations.
cm_swarm_operations__remove_node SWARMTOOL Manage swarm operations.
cm_swarm_operations__remove_service SWARMTOOL Manage swarm operations.
cm_swarm_operations__scale_service SWARMTOOL Manage swarm operations.
cm_swarm_operations__service_logs SWARMTOOL Manage swarm operations.
cm_swarm_operations__service_ps SWARMTOOL Manage swarm operations.
cm_swarm_operations__update_node SWARMTOOL Manage swarm operations.
cm_swarm_operations__update_service SWARMTOOL Manage swarm operations.
cm_system_operations__get_info SYSTEMTOOL Manage container manager system operations.
cm_system_operations__get_version SYSTEMTOOL Manage container manager system operations.
cm_system_operations__prune_system SYSTEMTOOL Manage container manager system operations.
cm_volume_operations__create_volume VOLUMETOOL Manage volume operations.
cm_volume_operations__list_volumes VOLUMETOOL Manage volume operations.
cm_volume_operations__prune_volumes VOLUMETOOL Manage volume operations.
cm_volume_operations__remove_volume VOLUMETOOL Manage volume operations.

23 action-routed tool(s) (default) · 292 verbose 1:1 tool(s). Each is enabled unless its <DOMAIN>TOOL toggle is set false; MCP_TOOL_MODE selects the surface (condensed default · verbose 1:1 · both). Auto-generated — do not edit.

Detailed tool schemas, parameter shapes, and validation constraints are preserved in docs/usage.md.

Kubernetes

container-manager-mcp ships full Kubernetes coverage (RKE2 / k3s / vanilla) through the official
kubernetes Python client, exposed as 8 themed, action-routed MCP tools (replacing an earlier, messier
tool sprawl):

Tool Covers
cm_k8s_workloads Pods, Deployments, StatefulSets, DaemonSets, Jobs, CronJobs, ReplicaSets, rollouts (status/history/restart/undo/pause/resume), exec/logs/attach/copy
cm_k8s_config ConfigMaps, Secrets, Namespaces, CRDs, Events, label/annotate, generic patch_resource, and ConfigMap/Secret config-state tracking
cm_k8s_networking Ingress, IngressClasses, NetworkPolicies, Endpoints/EndpointSlices, DNS checks, and true core Services (list_k8s_services / get_k8s_service / create_k8s_service / delete_k8s_service)
cm_k8s_storage PersistentVolumes, PersistentVolumeClaims, StorageClasses, VolumeSnapshots, CSI drivers, expand_pvc
cm_k8s_rbac Roles, ClusterRoles, RoleBindings, ClusterRoleBindings, ServiceAccounts, tokens, auth_can_i, subject_access_review, pod-security
cm_k8s_cluster Nodes (cordon/drain/taint/affinity), kubeconfig contexts, CertificateSigningRequests, API resources, cluster-info
cm_k8s_governance ResourceQuotas, LimitRanges, PriorityClasses, PodDisruptionBudgets, HorizontalPodAutoscalers (full CRUD)
cm_k8s_observability top/metrics, autoscaler metrics, watch/stream/events, and debug_pod/debug_node/debug_service/debug_deployment helpers

Two details worth knowing:

  • patch_resource (on cm_k8s_config) is a generic patch action supporting strategic / merge / json
    patch types against any resource kind — use it when there's no dedicated action for a field-level update.
  • True core Services vs. Swarm-parity services — cm_k8s_networking's list_k8s_services /
    get_k8s_service / create_k8s_service / delete_k8s_service operate on real Kubernetes Service
    objects. This is distinct from cm_multi_context's Swarm-parity list_services, which is
    Deployment-shaped for cross-backend comparability.

Kubernetes access is configured via CONTAINER_MANAGER_TYPE=kubernetes and CONTAINER_MANAGER_KUBECONTEXT
(see Environment Variables); for operating several clusters at once, see
K8S_CONTEXTS / cm_multi_context below. For a full worked walkthrough of the tool surface, see the
container-manager-kubernetes-operations
skill and docs/usage.md.

Multi-Context Operation

cm_multi_context (toggle MULTICONTEXTTOOL) lets a single MCP call operate across several Docker,
Podman, Swarm, and/or Kubernetes contexts at once — configured via K8S_CONTEXTS, DOCKER_CONTEXTS,
SWARM_CONTEXTS, and their DEFAULT_*_CONTEXT defaults (MULTI_CONTEXT_MODE=True routes every call through
it). Fan-out is parallel (ThreadPoolExecutor-backed) with per-backend health checks and lazy reconnect, so
an agent can compare, migrate between, or simultaneously act on multiple clusters/engines/hosts in one call.
See the container-manager-multi-context
skill and docs/usage.md for examples.

Dynamic Tool Selection & Visibility

This MCP server supports dynamic toolset selection and visibility filtering at runtime. This allows you to restrict the set of exposed tools in order to prevent blowing up the LLM's context window.

You can configure tool filtering via multiple input channels:

  • CLI Arguments: Pass --tools or --toolsets (or their disabled counterparts --disabled-tools and --disabled-toolsets) during startup.
  • Environment Variables: Define standard environment variables:
    • MCP_ENABLED_TOOLS / MCP_DISABLED_TOOLS
    • MCP_ENABLED_TAGS / MCP_DISABLED_TAGS
  • HTTP SSE Request Headers: Pass custom headers during transport initialization:
    • x-mcp-enabled-tools / x-mcp-disabled-tools
    • x-mcp-enabled-tags / x-mcp-disabled-tags
  • HTTP SSE Request Query Parameters: Append query parameters directly to your transport connection URL:
    • ?tools=tool1,tool2
    • ?tags=tag1

When query strings or parameters are supplied, an LLM-free Knowledge Graph resolution layer (using DynamicToolOrchestrator) matches query intents against known tool tags, names, or descriptions, with safe fallback and automated 24-hour background cache refreshing.

MCP Configuration Examples

Install the connector-focused [mcp] extra. Examples use container-manager-mcp[mcp] to add
FastMCP / FastAPI through agent-utilities[mcp]; the required Agent Utilities core
still carries epistemic-graph[full]. The [agent-runtime] extra additionally
enables model orchestration.

stdio Transport (local IDEs — Cursor, Claude Desktop, VS Code)

{
  "mcpServers": {
    "container-manager-mcp": {
      "command": "uvx",
      "args": [
        "--from",
        "container-manager-mcp[mcp]",
        "container-manager-mcp"
      ],
      "env": {
        "MCP_TOOL_MODE": "intent",
        "COMPOSETOOL": "True",
        "CONTAINERTOOL": "True",
        "CONTAINER_MANAGER_HEALTH_AGGREGATE_S": "3600",
        "CONTAINER_MANAGER_HEALTH_INGEST": "true",
        "CONTAINER_MANAGER_HEALTH_NOTIFY_URL": "",
        "CONTAINER_MANAGER_HOST": "",
        "CONTAINER_MANAGER_KUBECONTEXT": "",
        "CONTAINER_MANAGER_PODMAN_BASE_URL": "",
        "CONTAINER_MANAGER_TYPE": "docker",
        "DOCKERSWARMTOOL": "True",
        "DOCTORTOOL": "True",
        "HEALTH_CHECK_TTL_SECONDS": "30",
        "IMAGETOOL": "True",
        "INFOTOOL": "True",
        "INVENTORYTOOL": "True",
        "K8SCLUSTERTOOL": "True",
        "K8SCONFIGTOOL": "True",
        "K8SGOVERNANCETOOL": "True",
        "K8SNETWORKINGTOOL": "True",
        "K8SOBSERVABILITYTOOL": "True",
        "K8SRBACTOOL": "True",
        "K8SSTORAGETOOL": "True",
        "K8SWORKLOADSTOOL": "True",
        "K8S_CONTEXTS": "",
        "KUBECONFIG": "",
        "KUBERNETES_SERVICE_HOST": "",
        "KUBERNETES_SERVICE_PORT": "",
        "MISCTOOL": "True",
        "MULTICONTEXTTOOL": "True",
        "MULTI_CONTEXT_MODE": "True",
        "NETWORKTOOL": "True",
        "PODMANTOOL": "True",
        "PODMAN_ENABLED": "true",
        "SPECIALIST_DEPLOYMENTTOOL": "True",
        "SWARMTOOL": "True",
        "SYSTEMTOOL": "True",
        "VOLUMETOOL": "True"
      }
    }
  }
}

Runtime references require an alias-aware launcher such as GraphOS. Other
launchers must omit those entries and inject the resolved values through their
own runtime secret boundary.

Streamable-HTTP Transport (networked / production)

{
  "mcpServers": {
    "container-manager-mcp": {
      "command": "uvx",
      "args": [
        "--from",
        "container-manager-mcp[mcp]",
        "container-manager-mcp",
        "--transport",
        "streamable-http",
        "--port",
        "8000"
      ],
      "env": {
        "TRANSPORT": "streamable-http",
        "HOST": "127.0.0.1",
        "PORT": "8000",
        "MCP_TOOL_MODE": "intent",
        "COMPOSETOOL": "True",
        "CONTAINERTOOL": "True",
        "CONTAINER_MANAGER_HEALTH_AGGREGATE_S": "3600",
        "CONTAINER_MANAGER_HEALTH_INGEST": "true",
        "CONTAINER_MANAGER_HEALTH_NOTIFY_URL": "",
        "CONTAINER_MANAGER_HOST": "",
        "CONTAINER_MANAGER_KUBECONTEXT": "",
        "CONTAINER_MANAGER_PODMAN_BASE_URL": "",
        "CONTAINER_MANAGER_TYPE": "docker",
        "DOCKERSWARMTOOL": "True",
        "DOCTORTOOL": "True",
        "HEALTH_CHECK_TTL_SECONDS": "30",
        "IMAGETOOL": "True",
        "INFOTOOL": "True",
        "INVENTORYTOOL": "True",
        "K8SCLUSTERTOOL": "True",
        "K8SCONFIGTOOL": "True",
        "K8SGOVERNANCETOOL": "True",
        "K8SNETWORKINGTOOL": "True",
        "K8SOBSERVABILITYTOOL": "True",
        "K8SRBACTOOL": "True",
        "K8SSTORAGETOOL": "True",
        "K8SWORKLOADSTOOL": "True",
        "K8S_CONTEXTS": "",
        "KUBECONFIG": "",
        "KUBERNETES_SERVICE_HOST": "",
        "KUBERNETES_SERVICE_PORT": "",
        "MISCTOOL": "True",
        "MULTICONTEXTTOOL": "True",
        "MULTI_CONTEXT_MODE": "True",
        "NETWORKTOOL": "True",
        "PODMANTOOL": "True",
        "PODMAN_ENABLED": "true",
        "SPECIALIST_DEPLOYMENTTOOL": "True",
        "SWARMTOOL": "True",
        "SYSTEMTOOL": "True",
        "VOLUMETOOL": "True"
      }
    }
  }
}

Alternatively, connect to a pre-deployed Streamable-HTTP instance by url:

{
  "mcpServers": {
    "container-manager-mcp": {
      "url": "http://localhost:8000/container-manager-mcp/mcp"
    }
  }
}

Run a reviewed container image as a least-privilege stdio child (no
listener or published port):

docker run -i --rm \
  --read-only \
  --cap-drop=ALL \
  --security-opt=no-new-privileges \
  --pids-limit=256 \
  --tmpfs /tmp:rw,noexec,nosuid,nodev,size=64m \
  -e TRANSPORT=stdio \
  -e MCP_TOOL_MODE=intent \
  -e COMPOSETOOL=True \
  -e CONTAINERTOOL=True \
  -e CONTAINER_MANAGER_HEALTH_AGGREGATE_S=3600 \
  -e CONTAINER_MANAGER_HEALTH_INGEST=true \
  -e CONTAINER_MANAGER_HEALTH_NOTIFY_URL="" \
  -e CONTAINER_MANAGER_HOST="" \
  -e CONTAINER_MANAGER_KUBECONTEXT="" \
  -e CONTAINER_MANAGER_PODMAN_BASE_URL="" \
  -e CONTAINER_MANAGER_TYPE=docker \
  -e DOCKERSWARMTOOL=True \
  -e DOCTORTOOL=True \
  -e HEALTH_CHECK_TTL_SECONDS=30 \
  -e IMAGETOOL=True \
  -e INFOTOOL=True \
  -e INVENTORYTOOL=True \
  -e K8SCLUSTERTOOL=True \
  -e K8SCONFIGTOOL=True \
  -e K8SGOVERNANCETOOL=True \
  -e K8SNETWORKINGTOOL=True \
  -e K8SOBSERVABILITYTOOL=True \
  -e K8SRBACTOOL=True \
  -e K8SSTORAGETOOL=True \
  -e K8SWORKLOADSTOOL=True \
  -e K8S_CONTEXTS="" \
  -e KUBECONFIG="" \
  -e KUBERNETES_SERVICE_HOST="" \
  -e KUBERNETES_SERVICE_PORT="" \
  -e MISCTOOL=True \
  -e MULTICONTEXTTOOL=True \
  -e MULTI_CONTEXT_MODE=True \
  -e NETWORKTOOL=True \
  -e PODMANTOOL=True \
  -e PODMAN_ENABLED=true \
  -e SPECIALIST_DEPLOYMENTTOOL=True \
  -e SWARMTOOL=True \
  -e SYSTEMTOOL=True \
  -e VOLUMETOOL=True \
  registry.example.invalid/container-manager-mcp@sha256:<digest> container-manager-mcp

For containerized network HTTP, supply an authenticated TLS ingress (or
direct server TLS), exact MCP_ALLOWED_HOSTS, and an exact trusted-proxy
CIDR policy through the operator-owned deployment profile. The generator
does not emit an unauthenticated non-loopback listener.

Auto-generated from the code-read env surface (MCP_TOOL_MODE + package vars) — do not edit.

Additional Deployment Options

container-manager-mcp can run as a local stdio process or container, or behind a remote
network boundary. The
Deployment guide carries
the detailed transport contract.

  • Local container — launch a reviewed immutable image as a least-privilege
    stdio child with no listener or published port.
  • Remote URL — connect through an operator-supplied authenticated HTTPS
    ingress. Keep its URL, outbound identity references, trust profile, and exact
    MCP_ALLOWED_HOSTS in AgentConfig.

Environment Variables

Package environment variables

Variable Example Description
HOST 0.0.0.0
PORT 8000
TRANSPORT stdio options: stdio, streamable-http, sse
ENABLE_OTEL True
OTEL_EXPORTER_OTLP_ENDPOINT http://localhost:8080/api/public/otel
OTEL_EXPORTER_OTLP_PUBLIC_KEY pk-...
OTEL_EXPORTER_OTLP_SECRET_KEY sk-...
OTEL_EXPORTER_OTLP_PROTOCOL http/protobuf
EUNOMIA_TYPE none options: none, embedded, remote
EUNOMIA_POLICY_FILE mcp_policies.json
EUNOMIA_REMOTE_URL http://eunomia-server:8000
CONTAINER_MANAGER_TYPE docker options: docker, podman, swarm, kubernetes
CONTAINER_MANAGER_HOST — remote docker daemon host (e.g. tcp://host:2375); empty = local
CONTAINER_MANAGER_PODMAN_BASE_URL — podman service base URL (e.g. unix:///run/podman/podman.sock)
CONTAINER_MANAGER_KUBECONTEXT — kubeconfig context name; empty = current-context
KUBECONFIG — path(s) to kubeconfig file(s); empty = ~/.kube/config
KUBERNETES_SERVICE_HOST — injected by the cluster when running in-pod; leave empty
CONTAINER_MANAGER_HEALTH_INGEST true write :HealthTrend/:HealthBaseline/:HealthAnomaly nodes
CONTAINER_MANAGER_HEALTH_AGGREGATE_S 3600 per-node/signal trend-buffer flush window (seconds)
CONTAINER_MANAGER_HEALTH_NOTIFY_URL — best-effort webhook for derivation-pass anomaly alerts
KUBERNETES_SERVICE_PORT — injected by the cluster when running in-pod (save-context capture); leave empty
INVENTORYTOOL True
INFOTOOL True
IMAGETOOL True
CONTAINERTOOL True
VOLUMETOOL True
NETWORKTOOL True
SWARMTOOL True
SYSTEMTOOL True
COMPOSETOOL True
MISCTOOL True
DOCTORTOOL True
SPECIALIST_DEPLOYMENTTOOL True
K8SWORKLOADSTOOL True
K8SCONFIGTOOL True
K8SNETWORKINGTOOL True
K8SSTORAGETOOL True
K8SRBACTOOL True
K8SCLUSTERTOOL True
K8SGOVERNANCETOOL True
K8SOBSERVABILITYTOOL True
PODMANTOOL True
DOCKERSWARMTOOL True
MULTICONTEXTTOOL True
MULTI_CONTEXT_MODE True Multi-Context Configuration
HEALTH_CHECK_TTL_SECONDS 30 Multi-context health-check cache TTL (seconds) and parallel worker cap
MULTI_CONTEXT_MAX_WORKERS —
K8S_CONTEXTS — Example: "dev=dev-cluster;prod=prod-cluster;staging=staging-cluster"
DEFAULT_K8S_CONTEXT — Default Kubernetes context name (must match a key in K8S_CONTEXTS)
DOCKER_CONTEXTS — Example: "local=unix:///var/run/docker.sock;remote=tcp://198.51.100.100:2375"
DEFAULT_DOCKER_CONTEXT — Default Docker context name (must match a key in DOCKER_CONTEXTS)
SWARM_CONTEXTS — Example: "swarm1=tcp://swarm1:2375;swarm2=tcp://swarm2:2375"
DEFAULT_SWARM_CONTEXT — Default Swarm context name (must match a key in SWARM_CONTEXTS)
PODMAN_ENABLED true Enable Podman (local only)

Inherited agent-utilities variables (apply to every connector)

Variable Example Description
MCP_TOOL_MODE condensed Tool surface: condensed
MCP_ENABLED_TOOLS — Comma-separated tool allow-list
MCP_DISABLED_TOOLS — Comma-separated tool deny-list
MCP_ENABLED_TAGS — Comma-separated tag allow-list
MCP_DISABLED_TAGS — Comma-separated tag deny-list
MCP_CLIENT_AUTH — Outbound MCP auth (oidc-client-credentials for fleet calls)
OIDC_CLIENT_ID — OIDC client id (service-account auth)
OIDC_CLIENT_SECRET — OIDC client secret (service-account auth)
DEBUG False Verbose logging
PYTHONUNBUFFERED 1 Unbuffered stdout (recommended in containers)
MCP_URL http://localhost:8000/mcp URL of the MCP server the agent connects to
PROVIDER openai LLM provider for the agent
MODEL_ID gpt-4o Model id for the agent
ENABLE_WEB_UI True Serve the AG-UI web interface

54 package + 14 inherited variable(s). Auto-generated from .env.example + the shared agent-utilities set — do not edit.

Every variable is listed in the auto-generated table above (package vars from
.env.example + the inherited agent-utilities surface). A few pointers:

  • Tool toggles — each action-routed tool can be disabled via its <DOMAIN>TOOL
    toggle; the tool ↔ toggle mapping is in the Available MCP Tools
    table above.
  • Multi-host control plane — remote host endpoints load from the XDG shared inventory
    ~/.config/agent-utilities/inventory.yml (.yml preferred, .yaml legacy fallback),
    managed via tunnel-manager inventory init|doctor (see Multi-Host guide).

See .env.example for a copy-paste starting point.

Agent

This repository features a fully integrated Pydantic AI Graph Agent. It communicates over the Agent Control Protocol (ACP) and interacts seamlessly with the Agent Web UI (AG-UI) and Terminal interface.

Running the Agent CLI

To start the interactive command-line agent:

# Run the agent server
container-manager-agent --provider openai --model-id gpt-4o

Docker Compose Orchestration

The following docker/agent.compose.yml configures the Agent, Web UI, and Terminal Interface together:

version: '3.8'

services:
  container-manager-mcp-mcp:
    image: example/container-manager-mcp:mcp
    container_name: container-manager-mcp-mcp
    hostname: container-manager-mcp-mcp
    restart: always
    env_file:
      - ../.env
    environment:
      - PYTHONUNBUFFERED=1
      - HOST=0.0.0.0
      - PORT=8000
      - TRANSPORT=streamable-http
    ports:
      - "8000:8000"
    healthcheck:
      test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  container-manager-mcp-agent:
    image: example/container-manager-mcp@sha256:<digest>
    container_name: container-manager-mcp-agent
    hostname: container-manager-mcp-agent
    restart: always
    depends_on:
      - container-manager-mcp-mcp
    env_file:
      - ../.env
    command: [ "container-manager-agent" ]
    environment:
      - PYTHONUNBUFFERED=1
      - HOST=0.0.0.0
      - PORT=9019
      - MCP_URL=http://container-manager-mcp-mcp:8000/mcp
      - PROVIDER=${PROVIDER:-openai}
      - MODEL_ID=${MODEL_ID:-gpt-4o}
      - ENABLE_WEB_UI=True
      - ENABLE_OTEL=True
    ports:
      - "9019:9019"
    healthcheck:
      test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:9019/health')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

Detailed graph node architecture explanations, custom skill configurations, and agentic trace guides are available in docs/deployment.md.

Security & Governance

Built directly upon the enterprise-ready agent-utilities core, standard security parameters are fully supported:

Access Control & Policy Enforcement

  • Eunomia Policies: Fine-grained, policy-driven tool authorization. Supports none, local embedded (mcp_policies.json), or centralized remote modes.
  • OIDC Token Delegation: Compliant with RFC 8693 token exchange for flowing authenticating user credentials from Web UI / ACP → Agent → MCP.
  • Scoped Credentials: Execution context runs restricted to the specific caller identity.

Runtime Security Grid

Feature Functionality Enablement
Tool Guard Sensitivity inspection with human-in-the-loop validation Enabled by default
Prompt Injection Defense Input scanning, repetition monitoring, and recursive loop blocks Enabled by default
Context Safety Guard Stuck-loop detectors and contextual overflow preemptive alerts Enabled by default

Installation

Pick the extra that matches what you want to run:

Extra Installs Use when
container-manager-mcp[mcp] MCP server + the Docker/Podman/Kubernetes client libraries bundled by default (agent-utilities[mcp] — FastMCP/FastAPI; docker + podman + kubernetes) You run the MCP server with full Docker/Podman/Kubernetes support (no separate extras needed)
container-manager-mcp[agent] Agent runtime (agent-utilities[agent-runtime,logfire] — model orchestration + epistemic-graph[full]) You run the integrated agent
container-manager-mcp[all] Everything (mcp + agent + the docker / podman / kubernetes backends) Development / both surfaces 
# Connector-focused MCP server (includes the shared graph engine)
uv pip install "container-manager-mcp[mcp]"

# Agent runtime (adds model orchestration to the shared graph engine)
uv pip install "container-manager-mcp[agent]"

# Everything (development)
uv pip install "container-manager-mcp[all]"      # or: python -m pip install "container-manager-mcp[all]"

Container images (:mcp vs :agent)

One multi-stage docker/Dockerfile builds two right-sized images, selected by --target:

Image tag Build target Contents Entrypoint
example/container-manager-mcp:mcp --target mcp container-manager-mcp[mcp] — connector-focused, includes epistemic-graph[full]; no model-orchestration stack container-manager-mcp
example/container-manager-mcp@sha256:<digest> --target agent (default) container-manager-mcp[agent] — agent runtime, model orchestration + epistemic-graph[full] container-manager-agent 
docker build --target mcp   -t example/container-manager-mcp:mcp    docker/   # connector-focused MCP server
docker build --target agent -t example/container-manager-mcp:agent-local docker/   # agent runtime

docker/mcp.compose.yml runs the connector-focused :mcp server; docker/agent.compose.yml runs the
agent (immutable agent digest) with a co-located :mcp sidecar.

Knowledge-graph database (epistemic-graph)

Both [mcp] and [agent] carry the epistemic-graph engine through the required
Agent Utilities core dependency (epistemic-graph[full]). The [mcp] extra keeps
the server connector-focused; [agent] additionally enables model orchestration. Local
deployments can use the bundled engine. For production or shared state, run
epistemic-graph as a dedicated database service and configure the runtime to use it.
Deployment recipes (single-node + Raft HA), connection configuration, and architecture
diagrams are documented in the
epistemic-graph deployment guide.

Documentation

The complete documentation is published as the
official documentation site
and is the recommended reference for installation, deployment, and day-to-day
operation.

Page Contents
Installation pip, source, extras, prebuilt Docker image
Deployment run the MCP and agent servers, Compose, Caddy + Technitium, env config
Usage the MCP tools, the DockerManager API, the CLI
Overview ecosystem role, enterprise readiness, architecture
Multi-Host zero-script Docker-over-SSH control plane
Kubernetes the 8 cm_k8s_* tools, patch_resource, true core Services, multi-context
Concepts concept registry (CONCEPT:CMGR-*)

AGENTS.md is the canonical contributor/agent guidance.

Skills

Alongside the MCP tools, container_manager_mcp/skills/ ships Universal Skills that guide an agent through
common operational flows:

Skill Covers
container-manager-config-walkthrough Onboarding — choosing CONTAINER_MANAGER_TYPE, wiring .env/mcp_config toggles, remote Docker/Podman hosts (inventory) vs. remote Kubernetes clusters (kubeconfig contexts), first-run verification
container-manager-lifecycle Docker/Podman container and image lifecycle on local or remote hosts (list/inspect/stop/remove/exec, logs, port tracing, image pull/prune, Compose)
container-manager-swarm Docker Swarm cluster orchestration (init/leave, nodes, services)
container-manager-podman-operations Rootless Podman pod/kube operations — pods, generate/play kube, checkpoint/restore, pod-scoped networks/volumes, health, system prune
container-manager-kubernetes-operations The full Kubernetes operational surface — workloads, config, networking, storage, RBAC, cluster, governance, observability
container-manager-multi-context Operating several Docker/Podman/Swarm/Kubernetes backends and contexts at once via cm_multi_context
container-manager-kg-ingestion Snapshotting Docker/Podman/Swarm and Kubernetes inventory into the epistemic-graph Knowledge Graph via cm_ingest_inventory

container-manager-kubernetes-operations, container-manager-podman-operations,
container-manager-multi-context, and container-manager-config-walkthrough are new; lifecycle, swarm,
and kg-ingestion were updated for the expanded tool surface.

Repository Owners

GitHub followers
GitHub User's stars

Contribute

Contributions are welcome! Please ensure code quality by executing local checks before submitting pull requests:

  • Format code using ruff format .
  • Lint code using ruff check .
  • Validate type-safety with mypy .
  • Execute test suites using pytest

Deploy with agent-utilities-deployment

Provision this package with the consolidated agent-utilities-deployment
workflow. It selects an installed-package, editable-source, or immutable-container
path; records only runtime secret and TLS-profile references in AgentConfig; and
runs doctor, registration, policy, observability, and rollback gates. Ask your agent
to "deploy container-manager-mcp with agent-utilities-deployment".

Install mode Command
Installed package uv tool install "container-manager-mcp[mcp]", then run container-manager-mcp
Editable source uv pip install -e ".[agent]", then run container-manager-mcp
Immutable container deploy registry.example.invalid/container-manager-mcp@sha256:<digest> through the operator-selected orchestrator

The repository embeds no deployment profile, credential value, certificate path, or
environment-specific endpoint. Supply those at runtime through AgentConfig and the
configured secret provider.

Governed capability contract

This package ships a compact canonical skill surface with specialist procedures
kept as referenced workflows. The current MCP tools, skill metadata,
connector_manifest.yml, ontology, mappings, shapes, fixtures, migrations,
tool-schema fingerprints, and certification metadata form one versioned
capability contract. Validate them together; do not rely on stale tool names or
historical per-task skill wrappers.

Runtime endpoints, credentials, certificate trust, tenant identity, retention,
and observability policy are deployment inputs and are never packaged values.
See Configuration, trust, and privacy before enabling a
network transport, connector ingestion, GraphOS delegation, or trace export.

Reviews (0)

No results found