List all available Kubernetes contexts from all kubeconfig files. Returns context names that can be used with other tools. Supports partial context name matching in all other commands.

List all namespaces in a Kubernetes cluster. Use this to discover available namespaces before querying resources.

Create a new Kubernetes namespace. Optionally attach labels and annotations at creation time.

Delete a Kubernetes namespace and all resources within it. Protected namespaces (default, kube-system, kube-public, kube-node-lease) cannot be deleted.

List all nodes in a Kubernetes cluster with status, roles, capacity, and version info.

Get a comprehensive health summary of the entire Kubernetes cluster. Checks node status, pod health across all namespaces, deployment availability, resource pressure, and recent warning events. Returns an overall health status (healthy/degraded/unhealthy) with detailed breakdowns.

List Kubernetes resources of a specified kind (e.g., Pod, Deployment, Service, Ingress). Common kinds auto-detect their API group. For custom resources, specify group and version. Omit namespace to query across all namespaces.

Get the complete definition of a single Kubernetes resource. Returns the full resource spec, status, and metadata as a dictionary.

Get logs from a Kubernetes pod. For multi-container pods, logs from the first container are returned by default. Use sinceDuration to filter (e.g., '5m', '1h', '2d'). Set previousContainer=True to get logs from the previously terminated container.

List Kubernetes events in a namespace, sorted by most recent first. Events show scheduling decisions, image pulls, container crashes, and other cluster activity.

Show detailed information about a resource, similar to 'kubectl describe'. Can describe a single resource by name, or multiple resources using a label selector. Set all_namespaces=True to search across all namespaces.

List all available API groups and resources in the Kubernetes cluster. Useful for discovering what resource types are available, including CRD-based APIs.

List all Custom Resource Definitions (CRDs) installed in the cluster. Shows CRD names, groups, versions, scope, and status conditions.

Display CPU and memory usage of all nodes in the cluster. Requires metrics-server to be installed. Shows usage alongside capacity.

Display CPU and memory usage of pods, broken down by container. Requires metrics-server to be installed. Omit namespace for all namespaces.

Diagnose issues with a Kubernetes application by checking resource status, pod health, events, and container logs. Automatically detects common problems like CrashLoopBackOff, OOMKilled, ImagePullBackOff, permission errors, and connection issues. Returns a structured report with issues, severity, and recommendations.

Get the rollout status of a deployment, daemonset, or statefulset. Shows replica counts, conditions, and whether the rollout is complete.

Get the revision history of a deployment, daemonset, or statefulset. Shows past revisions that can be used with rollout_undo.

Roll back a deployment, daemonset, or statefulset to a previous revision. Omit to_revision to roll back to the immediately previous revision, or specify a revision number from rollout_history.

Trigger a rolling restart of a deployment, daemonset, or statefulset. All pods will be recreated in a rolling fashion.

Pause an in-progress rollout for a deployment, daemonset, or statefulset. Useful for canary-style deployments where you want to inspect before continuing.

Resume a previously paused rollout for a deployment, daemonset, or statefulset.

Scale a deployment, statefulset, or replicaset to the specified number of replicas. Set replicas=0 to scale down completely.

Configure a Horizontal Pod Autoscaler (HPA) for a deployment, statefulset, or replicaset. Creates or updates an HPA that scales between min and max replicas based on CPU utilization.

Update CPU/memory requests and limits for a specific container in a deployment, statefulset, or daemonset. Values use Kubernetes notation (e.g., '128Mi', '500m', '1Gi', '2').

Create a Kubernetes resource from YAML or JSON content. The content must include apiVersion, kind, and metadata. Optionally override the namespace.

Apply a configuration to a resource (create if it doesn't exist, update if it does). Similar to 'kubectl apply'. The content must include apiVersion, kind, and metadata with name.

Delete a Kubernetes resource. Supports all common resource types (pod, deployment, service, configmap, secret, statefulset, daemonset, job, cronjob, ingress, pvc, pv, namespace, serviceaccount, networkpolicy, hpa). Set force=True for immediate deletion (grace_period=0).

Update specific fields of a resource using a strategic merge patch. Supports pod, deployment, service, configmap, secret, and custom resources.

Add or update labels on a Kubernetes resource. Labels are key-value pairs used for organizing and selecting resources.

Add or update annotations on a Kubernetes resource. Annotations store non-identifying metadata for tools and libraries.

Expose a deployment or pod as a new Kubernetes Service. Creates a Service that routes traffic to the target resource. Specify type='LoadBalancer' for external access or type='NodePort' for node-level access.

Create and run a pod with the specified container image. Useful for running one-off tasks, debugging, or testing. Set restart='Never' for one-shot jobs.

Set resource limits and requests for containers in a deployment, statefulset, or daemonset. Example: limits={'cpu': '500m', 'memory': '256Mi'}, requests={'cpu': '100m', 'memory': '128Mi'}.

Mark a node as unschedulable. Existing pods continue running but no new pods will be scheduled on this node.

Mark a previously cordoned node as schedulable again. New pods can be scheduled on this node after uncordoning.

Drain a node by evicting all pods, preparing it for maintenance. Automatically cordons the node first. Set ignore_daemonsets=True to skip DaemonSet pods. Set force=True to evict pods not managed by a controller.

Add a taint to a node. Taints prevent pods without matching tolerations from being scheduled. Effects: NoSchedule (hard), PreferNoSchedule (soft), NoExecute (evict existing pods too).

Remove a taint from a node. Omit effect to remove all taints with the given key.

Execute a command inside a running container. Supports quoted arguments (e.g., 'ls -la "/my dir"'). Specify container for multi-container pods. Defaults to the 'default' namespace if not specified.

List Kubernetes Secrets with metadata (keys only, values hidden for security). Use label_selector to filter (e.g., 'app=myapp'). Omit namespace for all namespaces.

Get a Kubernetes Secret. By default shows only key names for security. Set decode=True to include the actual decoded values. Use with caution - decoded secrets may contain sensitive credentials.

Create a new Kubernetes Secret. Values in data will be automatically base64-encoded. Common types: Opaque (default), kubernetes.io/tls, kubernetes.io/dockerconfigjson.

List Kubernetes ConfigMaps with their key names. Use label_selector to filter. Omit namespace for all namespaces.

Get a Kubernetes ConfigMap with its full data contents.

Create a new Kubernetes ConfigMap with the specified key-value data pairs.

List RBAC Roles with their permission rules. Roles grant permissions within a specific namespace. Omit namespace to list roles across all namespaces.

List RBAC ClusterRoles with their permission rules. ClusterRoles grant cluster-wide permissions or can be bound per-namespace.

List RBAC RoleBindings showing which subjects (users, groups, service accounts) are bound to which roles. Omit namespace for all namespaces.

List RBAC ClusterRoleBindings showing cluster-wide role assignments.

List Kubernetes ServiceAccounts. ServiceAccounts provide pod-level identity for RBAC authorization. Omit namespace for all namespaces.

List PersistentVolumeClaims (PVCs) with status, capacity, access modes, and storage class. Omit namespace for all namespaces.

List PersistentVolumes (PVs) in the cluster with capacity, access modes, reclaim policy, and bound claim information.

List StorageClasses in the cluster with provisioner, reclaim policy, volume binding mode, and whether each is the default class.

List NetworkPolicies that control pod-to-pod and pod-to-external traffic. Shows pod selectors, policy types (Ingress/Egress), and rule counts.

List Kubernetes Jobs with completion status, active/succeeded/failed counts, and timing information. Omit namespace for all namespaces.

List Kubernetes CronJobs with schedule, suspension status, active jobs, and last schedule/success times. Omit namespace for all namespaces.