Lists pods in a specific namespace.

Retrieves logs for a specific pod.

Shows detailed pod status including container states, conditions, resource settings, and recent events.

Shows details of a deployment.

Lists cluster nodes.

Lists StatefulSets in a specific namespace.

Shows details of a StatefulSet.

Lists DaemonSets in a specific namespace.

Shows details of a DaemonSet.

Scales replicas for a deployment.

Checks deployment rollout status (complete, in-progress, or stalled).

Rolls a deployment back to the previous ReplicaSet template.

Deletes a pod to force a restart. Usually managed by a deployment/replicaset.

Reads data from a ConfigMap.

Reads resource quotas for a namespace.

Lists recent cluster events for a namespace.

Lists PersistentVolumeClaims in a specific namespace with binding and capacity details.

Evaluates effective Kubernetes API permissions for a ServiceAccount using SubjectAccessReview checks.

Retrieves Horizontal Pod Autoscaler metrics and status.

Filters cluster events for warnings in a namespace.

Analyzes node resource pressure for a specific node.

Lists all registered Kubernetes clusters managed by KubeNexus.

Returns API server URL, Kubernetes version, node count, and cloud metadata for a given cluster.

Lists Jobs in a specific namespace.

Creates a new Job. Use either basic configuration or provide a raw YAML manifest.

Lists CronJobs in a specific namespace.

Suspends an active CronJob.

Resumes a suspended CronJob.

Creates a new ConfigMap. Use either basic key-value data or provide a raw YAML manifest.

Updates an existing ConfigMap by patching its data.

Creates a new Opaque Secret. Use either basic stringData or provide a raw YAML manifest. stringData values will be base64-encoded automatically.

Updates an existing Secret by patching its stringData. KNOWN LIMITATION: The Kubernetes API never returns stringData on read (it is write-only); the API server stores values as base64 in the data field. This means the client-side merge only contains the keys passed in args.stringData — existing keys not included in the request will be silently dropped. If you need to preserve existing keys, read them first via get_secret and re-supply all values.

Creates a new Service. Use either basic configuration or provide a raw YAML manifest.

Lists Ingress resources in a namespace.

Shows endpoint addresses backing a Service.

Updates an existing Ingress. Merges new rules or annotations into the existing Ingress.

Creates a new NetworkPolicy. Use either basic configuration or provide a raw YAML manifest.

Sets CPU and Memory requests and limits for a specific container in a Deployment.

Suggests optimal resource requests/limits based on current metrics heuristically.

Returns CPU and Memory usage vs capacity across all nodes.

Marks a node as unschedulable.

Marks a node as schedulable.

Cordons the node and evicts/deletes non-daemonset pods.

Adds a taint to a node.

Removes a specific taint from a node by key.

Creates a new Deployment. Use either basic configuration or provide a raw YAML manifest.

Deletes an existing Deployment.

Creates a new Kubernetes Namespace.

Deletes an existing Kubernetes Namespace.

Creates an HPA for a Deployment. Use either basic configuration or provide a raw YAML manifest.

Gets the health and sync status of an ArgoCD Application or Flux Kustomization.

Gets out-of-sync resources (ArgoCD) or managed resource inventory with revision drift (Flux Kustomization).

Forces a sync/reconciliation of an ArgoCD Application, Flux Kustomization, or Flux HelmRelease.

Compares the running version/state of an application across two clusters.

Lists all Flux Kustomizations in a namespace with their ready/suspended/revision status.

Lists all Flux HelmReleases in a namespace with chart name, version, and ready/suspended status.

Gets detailed status of a Flux HelmRelease including chart version, values, and condition history.

Lists Flux source objects (GitRepository, HelmRepository, OCIRepository, Bucket) with their URL, ref, and ready status.

Suspends reconciliation of a Flux Kustomization or HelmRelease to pause automated deployments.

Resumes reconciliation of a suspended Flux Kustomization or HelmRelease.

Lists Flux Notification Alert objects showing which events trigger which providers.

Generic read: list Kubernetes resources by group/version/resource.

Generic read: get a single Kubernetes resource by group/version/resource/name.

Groups nodes by managed-cloud node pool labels (AKS/EKS/GKE) and reports pool health.

Returns detailed node, spot/preemptible, and optional metrics view for a specific node pool.

Returns workload identity annotation configuration for a ServiceAccount (AKS/EKS/GKE conventions).

Validates identity chain from ServiceAccount annotation to pods using that ServiceAccount.

Lists PodDisruptionBudgets in a namespace with budget satisfaction status.

Returns detailed status and covered pods for a PodDisruptionBudget.

Lists VerticalPodAutoscaler objects in a namespace and their update mode/recommendation state.

Returns VPA recommendation lower/target/upper bounds for a workload when available.

Lists StorageClasses and indicates default class.

Returns details for a specific StorageClass.

Checks health of common kube-system addons (CoreDNS, metrics-server, kube-proxy, CNI).

Lists LimitRange objects in a namespace and default resource constraints.