v0.1.1

fix(helm): rename helpers to avoid parent chart collision (#49)

Renames all helper templates from kagent.* to kagent-tools.* prefix to
prevent naming conflicts with the parent kagent chart. When Helm renders
subcharts, template definitions are global, causing the parent chart's
helpers to override the subchart's helpers with the same names.

This fixes:
- Selector label mismatch when using nameOverride (was using parent's
  logic instead of subchart's fullname logic)
- Helm upgrade failures due to immutable selector field changes
- Enables proper use of nameOverride instead of requiring
  fullnameOverride workaround

All helper references updated across all template files:
- _helpers.tpl: Renamed 10 helper definitions
- deployment.yaml, service.yaml, serviceaccount.yaml: Updated references
- clusterrole.yaml, clusterrolebinding.yaml: Updated references
- servicemonitor.yaml, NOTES.txt: Updated references

Backward compatible: existing fullnameOverride usage continues to work.

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

v0.1.0

fix(helm): use fullname in selector labels to prevent mismatch on upg…

v0.0.16

What's Changed

• feat(helm): configurable RBAC with read-only ClusterRole support by @MatteoMori8 in #46

Full Changelog: v0.0.15...v0.0.16

v0.0.15

feat: add token support for kubectl commands (#37)

* feat: add token support for kubectl commands

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>

* use pre-v4 helm version

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>

* Add configuration to disable service token automount

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Remove automountServiceAccountToken config

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* helm config for using default service account

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Add tools.k8s.tokenPassthrough for requiring token from auth header

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Fix helm version

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Remove automountServiceAccountToken from helm test

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

* Redact tokens

Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>

---------

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>
Signed-off-by: Jeremy Alvis <jeremy.alvis@solo.io>
Co-authored-by: Jeremy Alvis <jeremy.alvis@solo.io>

v0.0.14

feat(cli): add --read-only flag to disable write operations (#41)

* feat: add --read-only flag to disable write operations

Add a new `--read-only` CLI flag that disables tools which perform
write operations (delete, patch, scale, create, apply, etc.).

This enables deploying the MCP server in read-only mode for:
- Observability-only use cases (monitoring, troubleshooting)
- Environments with read-only service accounts
- Compliance requirements separating read/write capabilities

Tools are categorized as read-only or write operations:
- K8s: 8 read-only, 14 write tools
- Helm: 3 read-only, 3 write tools
- Istio: 9 read-only, 3 write tools
- Cilium: ~25 read-only, ~15 write tools
- Argo: 4 read-only, 4 write tools
- Prometheus/Kubescape/Utils: all read-only (unchanged)

Co-Authored-By: Claude Opus 4.5
Signed-off-by: Matteo Mori <matteo.mori@rvu.co.uk>

* fix: disable shell tool in read-only mode

The utils provider exposes a `shell` tool that executes arbitrary
commands, bypassing read-only restrictions. In read-only mode, this
tool is now disabled.

Also pass readOnly to all providers (kubescape, prometheus, utils)
for consistency with the existing providers.

Signed-off-by: Matteo Mori <matteo.mori@rvu.co.uk>

---------

Signed-off-by: Matteo Mori <matteo.mori@rvu.co.uk>

v0.0.13

What's Changed

• feat: add support for nodeSelector and tolerations by @qasmi in #23
• feat: bump dependencies by @dimetron in #32

New Contributors

• @qasmi made their first contribution in #23

Full Changelog: v0.0.12...v0.0.13

v0.0.12

What's Changed

• fix version and makefile ENV var by @dimetron in #18
• updated dependencies by @dimetron in #25

Full Changelog: v0.0.11...v0.0.12

v0.0.11

What's Changed

• set json format optional by @dimetron in #16

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• [FEATURE] Add quickstart guide for agentgateway by @dimetron in #15

• 🐛 Fixed stdio implementation
• 🚀 Quickstart guide for agentgateway
• 📝 Updated cursor MCP documentation

Full Changelog: v0.0.9...v0.0.10

v0.0.9

fix helm-publish

Signed-off-by: Dmytro Rashko <dmitriy.rashko@amdocs.com>