feat: add operations for kubeconfig

Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>

Author: matzew

README.md

@@ -11,6 +11,9 @@ This extension enables declarative Kubernetes interactions within mcpchecker tas
 | `kubernetes.authCanI` | Check if a user or service account can perform an action on a resource |
 | `kubernetes.create` | Create a Kubernetes resource |
 | `kubernetes.delete` | Delete a Kubernetes resource |
+| `kubernetes.getCurrentContext` | Get the current context from kubeconfig |
+| `kubernetes.listContexts` | List all contexts from kubeconfig |
+| `kubernetes.viewConfig` | View kubeconfig as YAML (optionally minified) |
 | `kubernetes.wait` | Wait for a condition on a resource (e.g., `Ready`, `Available`) |
 
 ## Configuration
@@ -132,6 +135,43 @@ Waits for a condition on a resource. Supports configurable timeout and expected
     timeout: 5m       # optional, defaults to 60s
 ```
 
+### kubernetes.listContexts
+
+Lists all contexts from the kubeconfig file, including which one is currently active.
+
+```yaml
+- kubernetes.listContexts:
+    # No parameters required
+```
+
+**Outputs:**
+- `current`: Name of the current context
+- `count`: Number of contexts found
+
+### kubernetes.getCurrentContext
+
+Returns the current context name from the kubeconfig.
+
+```yaml
+- kubernetes.getCurrentContext:
+    # No parameters required
+```
+
+**Outputs:**
+- `context`: Name of the current context
+
+### kubernetes.viewConfig
+
+Views the kubeconfig as YAML, optionally minified to show only the current context.
+
+```yaml
+- kubernetes.viewConfig:
+    minify: false  # optional, defaults to false
+```
+
+**Outputs:**
+- `config`: The kubeconfig content as YAML
+
 ## Contributing
 
 Contributions are welcome! Please see [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, project structure, and guidelines for adding new operations.

pkg/extension/client.go

@@ -2,13 +2,15 @@ package extension
 
 import (
 	"context"
+	"fmt"
 
 	authorizationv1 "k8s.io/api/authorization/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
 	"k8s.io/apimachinery/pkg/runtime/schema"
 	"k8s.io/client-go/dynamic"
 	authorizationv1client "k8s.io/client-go/kubernetes/typed/authorization/v1"
+	"k8s.io/client-go/tools/clientcmd"
 )
 
 // ResourceClient abstracts Kubernetes resource operations for testability.
@@ -25,12 +27,22 @@ type ResourceClient interface {
 
 	// CheckAccess checks if a user can perform an action on a resource.
 	CheckAccess(ctx context.Context, user, verb, resource, apiGroup, namespace, resourceName string) (bool, string, error)
+
+	// ListContexts returns all contexts from the kubeconfig
+	ListContexts(ctx context.Context) ([]ContextInfo, error)
+
+	// GetCurrentContext returns the current context name from the kubeconfig
+	GetCurrentContext(ctx context.Context) (string, error)
+
+	// ViewConfig returns the kubeconfig as YAML, optionally minified
+	ViewConfig(ctx context.Context, minify bool) (string, error)
 }
 
 // dynamicClientAdapter adapts the Kubernetes dynamic client to the ResourceClient interface.
 type dynamicClientAdapter struct {
-	client    dynamic.Interface
-	authzClient authorizationv1client.AuthorizationV1Interface
+	client       dynamic.Interface
+	authzClient  authorizationv1client.AuthorizationV1Interface
+	kubeconfigPath string
 }
 
 func (a *dynamicClientAdapter) Create(ctx context.Context, gvr schema.GroupVersionResource, obj *unstructured.Unstructured, namespace string) (*unstructured.Unstructured, error) {
@@ -75,3 +87,70 @@ func (a *dynamicClientAdapter) CheckAccess(ctx context.Context, user, verb, reso
 
 	return result.Status.Allowed, result.Status.Reason, nil
 }
+
+func (a *dynamicClientAdapter) ListContexts(ctx context.Context) ([]ContextInfo, error) {
+	config, err := clientcmd.LoadFromFile(a.kubeconfigPath)
+	if err != nil {
+		return nil, fmt.Errorf("failed to load kubeconfig: %w", err)
+	}
+
+	var contexts []ContextInfo
+	for name, context := range config.Contexts {
+		contexts = append(contexts, ContextInfo{
+			Name:      name,
+			Cluster:   context.Cluster,
+			User:      context.AuthInfo,
+			Namespace: context.Namespace,
+			IsCurrent: name == config.CurrentContext,
+		})
+	}
+
+	return contexts, nil
+}
+
+func (a *dynamicClientAdapter) GetCurrentContext(ctx context.Context) (string, error) {
+	config, err := clientcmd.LoadFromFile(a.kubeconfigPath)
+	if err != nil {
+		return "", fmt.Errorf("failed to load kubeconfig: %w", err)
+	}
+
+	return config.CurrentContext, nil
+}
+
+func (a *dynamicClientAdapter) ViewConfig(ctx context.Context, minify bool) (string, error) {
+	var config *clientcmd.DirectClientConfig
+
+	if minify {
+		// Load with minify - only current context
+		loadingRules := &clientcmd.ClientConfigLoadingRules{ExplicitPath: a.kubeconfigPath}
+		configOverrides := &clientcmd.ConfigOverrides{}
+		config = clientcmd.NewNonInteractiveDeferredLoadingClientConfig(loadingRules, configOverrides).(*clientcmd.DirectClientConfig)
+
+		rawConfig, err := config.RawConfig()
+		if err != nil {
+			return "", fmt.Errorf("failed to load minified config: %w", err)
+		}
+
+		// Convert to YAML
+		yamlBytes, err := clientcmd.Write(rawConfig)
+		if err != nil {
+			return "", fmt.Errorf("failed to marshal config to YAML: %w", err)
+		}
+
+		return string(yamlBytes), nil
+	}
+
+	// Load full config
+	rawConfig, err := clientcmd.LoadFromFile(a.kubeconfigPath)
+	if err != nil {
+		return "", fmt.Errorf("failed to load kubeconfig: %w", err)
+	}
+
+	// Convert to YAML
+	yamlBytes, err := clientcmd.Write(*rawConfig)
+	if err != nil {
+		return "", fmt.Errorf("failed to marshal config to YAML: %w", err)
+	}
+
+	return string(yamlBytes), nil
+}

pkg/extension/extension.go

@@ -80,7 +80,11 @@ func (e *Extension) handleInitialize(config map[string]any) error {
 		return fmt.Errorf("failed to create authorization client: %w", err)
 	}
 
-	e.client = &dynamicClientAdapter{client: client, authzClient: authzClient}
+	e.client = &dynamicClientAdapter{
+		client:         client,
+		authzClient:    authzClient,
+		kubeconfigPath: kubeconfigPath,
+	}
 	return nil
 }
 

pkg/extension/kubeconfig.go

@@ -0,0 +1,134 @@
+package extension
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/mcpchecker/mcpchecker/pkg/extension/sdk"
+)
+
+// ContextInfo represents information about a Kubernetes context
+type ContextInfo struct {
+	Name      string `json:"name"`
+	Cluster   string `json:"cluster"`
+	User      string `json:"user"`
+	Namespace string `json:"namespace,omitempty"`
+	IsCurrent bool   `json:"isCurrent"`
+}
+
+func (e *Extension) handleListContexts(ctx context.Context, req *sdk.OperationRequest) (*sdk.OperationResult, error) {
+	if e.client == nil {
+		return sdk.Failure(fmt.Errorf("kubernetes client not initialized")), nil
+	}
+
+	e.LogInfo(ctx, "Listing kubeconfig contexts", nil)
+
+	contexts, err := e.client.ListContexts(ctx)
+	if err != nil {
+		e.LogError(ctx, "Failed to list contexts", map[string]any{
+			"error": err.Error(),
+		})
+		return sdk.Failure(fmt.Errorf("failed to list contexts: %w", err)), nil
+	}
+
+	if len(contexts) == 0 {
+		return sdk.Failure(fmt.Errorf("no contexts found in kubeconfig")), nil
+	}
+
+	// Find current context
+	var currentContext string
+	for _, ctx := range contexts {
+		if ctx.IsCurrent {
+			currentContext = ctx.Name
+			break
+		}
+	}
+
+	e.LogInfo(ctx, "Contexts listed successfully", map[string]any{
+		"count":   len(contexts),
+		"current": currentContext,
+	})
+
+	// Convert contexts to output strings
+	contextNames := make([]string, 0, len(contexts))
+	for _, ctx := range contexts {
+		contextNames = append(contextNames, ctx.Name)
+	}
+
+	return sdk.SuccessWithOutputs(
+		fmt.Sprintf("Found %d context(s), current: %s", len(contexts), currentContext),
+		map[string]string{
+			"current": currentContext,
+			"count":   fmt.Sprintf("%d", len(contexts)),
+		},
+	), nil
+}
+
+func (e *Extension) handleGetCurrentContext(ctx context.Context, req *sdk.OperationRequest) (*sdk.OperationResult, error) {
+	if e.client == nil {
+		return sdk.Failure(fmt.Errorf("kubernetes client not initialized")), nil
+	}
+
+	e.LogInfo(ctx, "Getting current kubeconfig context", nil)
+
+	currentContext, err := e.client.GetCurrentContext(ctx)
+	if err != nil {
+		e.LogError(ctx, "Failed to get current context", map[string]any{
+			"error": err.Error(),
+		})
+		return sdk.Failure(fmt.Errorf("failed to get current context: %w", err)), nil
+	}
+
+	if currentContext == "" {
+		return sdk.Failure(fmt.Errorf("no current context set in kubeconfig")), nil
+	}
+
+	e.LogInfo(ctx, "Current context retrieved", map[string]any{
+		"context": currentContext,
+	})
+
+	return sdk.SuccessWithOutputs(
+		fmt.Sprintf("Current context: %s", currentContext),
+		map[string]string{
+			"context": currentContext,
+		},
+	), nil
+}
+
+func (e *Extension) handleViewConfig(ctx context.Context, req *sdk.OperationRequest) (*sdk.OperationResult, error) {
+	if e.client == nil {
+		return sdk.Failure(fmt.Errorf("kubernetes client not initialized")), nil
+	}
+
+	// Parse args
+	args, ok := req.Args.(map[string]any)
+	if !ok {
+		args = make(map[string]any)
+	}
+
+	minify := false
+	if m, ok := args["minify"].(bool); ok {
+		minify = m
+	}
+
+	e.LogInfo(ctx, "Viewing kubeconfig", map[string]any{
+		"minify": minify,
+	})
+
+	configYAML, err := e.client.ViewConfig(ctx, minify)
+	if err != nil {
+		e.LogError(ctx, "Failed to view config", map[string]any{
+			"error": err.Error(),
+		})
+		return sdk.Failure(fmt.Errorf("failed to view config: %w", err)), nil
+	}
+
+	e.LogInfo(ctx, "Kubeconfig retrieved successfully", nil)
+
+	return sdk.SuccessWithOutputs(
+		"Kubeconfig retrieved",
+		map[string]string{
+			"config": configYAML,
+		},
+	), nil
+}