From 2635dd9420ac765cbd5fd74f74a744b4fba68c14 Mon Sep 17 00:00:00 2001 From: xavier Date: Thu, 27 Aug 2026 11:49:43 -0400 Subject: [PATCH] OLS-3680 Note ocp-mcp _meta RBAC publishing (RFE) Add a Planned Changes entry: the shipped openshift-mcp-server publishes per-tool RBAC in tools/list _meta["openshift.io/rbac"] so agentic execution can derive least-privilege RBAC for MCP tool calls. Requires an RFE to upstream kubernetes-mcp-server; Secret/RBAC deny-list mirrored consumer-side. Cross-references the workspace spec mcp-tool-rbac.md. Co-Authored-By: Claude Opus 4.8 --- .ai/spec/what/ocpmcp.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.ai/spec/what/ocpmcp.md b/.ai/spec/what/ocpmcp.md index 33fd8d55b..b14da3906 100644 --- a/.ai/spec/what/ocpmcp.md +++ b/.ai/spec/what/ocpmcp.md @@ -75,3 +75,5 @@ Gated by `spec.ols.introspectionEnabled` (default `true` when absent). When fals ## Planned Changes None for the standalone HTTPS cutover itself. Optional agentic auto-injection remains planned (OLS-3594). [PLANNED: OLS-3697] ServiceMonitor for Prometheus scraping of MCP server `/metrics` endpoint via HTTPS. + +[PLANNED: OLS-3680] Publish per-tool RBAC in the `tools/list` response `_meta["openshift.io/rbac"]` so agentic execution can derive least-privilege RBAC for MCP tool calls (subresources, generic pass-throughs, manifest-embedded GVKs). Requires an RFE to the OpenShift MCP server (upstream `kubernetes-mcp-server`). The Secret/RBAC deny-list (rule 16) is mirrored consumer-side as a hard deny ceiling on materialized RBAC. See the workspace-level spec `ols/.ai/spec/what/mcp-tool-rbac.md`.