Skip to content

Comments

Adding MCP OKEP to the repo#35

Open
FrostGod wants to merge 1 commit intoovn-kubernetes:mainfrom
FrostGod:okep
Open

Adding MCP OKEP to the repo#35
FrostGod wants to merge 1 commit intoovn-kubernetes:mainfrom
FrostGod:okep

Conversation

@FrostGod
Copy link

@FrostGod FrostGod commented Feb 17, 2026

Summary by CodeRabbit

  • Documentation
    • Added comprehensive documentation for the Model Context Protocol (MCP) troubleshooting feature for OVN-Kubernetes, including architecture design, deployment strategies, security considerations, configuration options, testing approach, and workflow examples.

Signed-off-by: divesh <dgude@nvidia.com>
@FrostGod FrostGod requested a review from a team February 17, 2026 20:57
@coderabbitai
Copy link

coderabbitai bot commented Feb 17, 2026

📝 Walkthrough

Walkthrough

This pull request adds a comprehensive OKEP (Open Kubernetes Enhancement Proposal) document detailing OKEP-5494, which proposes a Model Context Protocol (MCP) server for troubleshooting OVN-Kubernetes clusters. The document covers problem statements, proposed architecture, implementation strategies, security considerations, deployment modes, testing approach, and workflow examples.

Changes

Cohort / File(s) Summary
OKEP-5494 MCP Server Proposal
docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md
New comprehensive proposal document outlining MCP server architecture for OVN-Kubernetes troubleshooting, including implementation approach, security/RBAC considerations, deployment strategies (CLI vs debug container modes), testing strategy, success metrics, and workflow examples.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Poem

🐰 A document hops into view,
808 lines of protocol new,
MCP servers and troubleshooting delight,
OVN-Kubernetes shining bright,
Hopping through proposals with care,
Architecture woven with flair! 🌟

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Title check ⚠️ Warning The title 'Adding MCP OKEP to the repo' is vague and doesn't convey the specific change. It uses generic phrasing ('adding', 'to the repo') without clarifying what MCP OKEP is or its purpose. Revise the title to be more specific and descriptive, such as 'Add OKEP-5494: Model Context Protocol for OVN-Kubernetes troubleshooting' to clearly communicate the actual content being added.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Tip

Issue Planner is now in beta. Read the docs and try it out! Share your feedback on Discord.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@FrostGod
Copy link
Author

@arkadeepsen this is just a copy of the OKEP from ovn-k8s repo

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 10

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md`:
- Line 185: Replace the three plain fenced code blocks that use only triple
backticks (the bare ``` fences) with explicit language-tagged fences to satisfy
MD040; change each bare fence to use a neutral tag such as ```text (or
```plaintext) so the fenced blocks include a language specifier while preserving
their content.
- Line 121: The sentence fragment "need to ask NVIDIA what's the status here" is
a draft/internal note and must be removed or replaced; update the bullet "*
Future-tool - ovnkube CLI (need to ask NVIDIA what's the status here)" in the
document by either deleting the parenthetical note, replacing it with a
definitive status (e.g., "status: pending/confirmed/deprecated") or swapping it
for a tracked issue or ticket reference (e.g., "see ISSUE-XXXX or PR-YYYY for
status") so the line reads clearly without internal queries.
- Around line 250-288: The document mixes British ("analyse") and American
("analyze") spellings; pick one variant and make it consistent across the file
by replacing all instances (e.g., "analyse", "analysing", "analyses",
"analyser") with the chosen spelling (examples in the "As an OVN-Kubernetes
engineer" paragraph, the "Proposed Solution" section, and the "Example Workflow"
steps where phrases like "analyse the output", "analyze the end-user query", and
"analyze the responses" appear); perform a global find-and-replace for those
tokens and review nearby words for inflectional forms to ensure grammatical
correctness.
- Line 267: The phrase "read only fashion" is missing a hyphen; update every
occurrence to "read-only fashion" in the document (e.g., the instance in the
sentence containing "that exposes these tools in read only fashion and the LLM
backend" and the other occurrence around line 471). Search the file for the
exact string "read only fashion" and replace with "read-only fashion" to keep
wording consistent across the document.
- Line 799: Fix the two typos in the sentence "how many tools could we expose
per server and upto what point it scales etc" by changing "upto" to "up to" and
appending a period to "etc" (i.e., replace that fragment with "how many tools
could we expose per server and up to what point it scales, etc.").
- Line 10: Replace the unhyphenated phrase "time consuming" with the
grammatically correct hyphenated form "time-consuming" in the sentence
containing "then be able to pin point where the problem is. That is time
consuming" so the text reads "...That is time-consuming."; locate and update
that exact phrase in the document (okep-5494-ovn-kubernetes-mcp-server.md) where
it appears.
- Line 509: Replace the misspelled word "pivotted" with the correct spelling
"pivoted" in the sentence that currently reads "and pivotted towards opting into
a more secure approach of adding a"; update that exact phrase to "and pivoted
towards opting into a more secure approach of adding" to fix the typo.
- Around line 279-282: Fix two typos in the document: change the phrase "MCP
Severs" to "MCP Servers" and insert the missing word by changing "LLM will be
able use" to "LLM will be able to use" so both sentences read correctly.
- Around line 429-437: The two inline annotations are inconsistently labeled
("Note:" vs "Note2:"); update them to a consistent style (e.g., change "Note:"
and "Note2:" to "**Note:**" and "**Note 2:**" respectively) or convert both into
Markdown blockquotes so the mentions around kubernetes-mcp-server and
mustgather-mcp-server read uniformly; ensure surrounding punctuation and
capitalization remain consistent with adjacent sentences (the references to
kubernetes-mcp-server and mustgather-mcp-server should be unchanged).
- Line 164: The docs entry lists incorrect hyphenated libreswan commands; update
the text that currently shows "ipsec-stateus" and "ipsec-trafficstatus" to the
correct space-separated commands "ipsec status" and "ipsec trafficstatus"
(search for the string "ipsec-stateus" or "ipsec-trafficstatus" in the document
and replace those tokens accordingly so the libreswan commands are shown as
"ipsec status" and "ipsec trafficstatus").

OpenvSwitch, Kernel - especially Netfilter elements). Usually the person
troubleshooting an issue has to approach it in a layered fashion and has
to be fully aware of all the debugging tools each layer has to offer to
then be able to pin point where the problem is. That is time consuming
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Minor grammar: hyphenate "time-consuming"

"time consuming" should be "time-consuming".

✏️ Proposed fix
-That is time consuming
+That is time-consuming
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
then be able to pin point where the problem is. That is time consuming
then be able to pin point where the problem is. That is time-consuming
🧰 Tools
🪛 LanguageTool

[grammar] ~10-~10: Use a hyphen to join words.
Context: ...point where the problem is. That is time consuming and requires years of expertis...

(QB_NEW_EN_HYPHEN)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` at line 10, Replace the
unhyphenated phrase "time consuming" with the grammatically correct hyphenated
form "time-consuming" in the sentence containing "then be able to pin point
where the problem is. That is time consuming" so the text reads "...That is
time-consuming."; locate and update that exact phrase in the document
(okep-5494-ovn-kubernetes-mcp-server.md) where it appears.

* **ovnkube-trace** which executes ovn-trace and ovs ofproto trace and
detrace commands (this tool doesn't support all scenarios - it's not
maintained well)
* Future-tool - ovnkube CLI (need to ask NVIDIA what's the status here)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Remove draft/internal note before publishing

"need to ask NVIDIA what's the status here" is an unresolved draft artifact. Resolve or replace it with either a definitive status or a tracked issue reference.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` at line 121, The sentence
fragment "need to ask NVIDIA what's the status here" is a draft/internal note
and must be removed or replaced; update the bullet "* Future-tool - ovnkube CLI
(need to ask NVIDIA what's the status here)" in the document by either deleting
the parenthetical note, replacing it with a definitive status (e.g., "status:
pending/confirmed/deprecated") or swapping it for a tracked issue or ticket
reference (e.g., "see ISSUE-XXXX or PR-YYYY for status") so the line reads
clearly without internal queries.

troubleshooting
* **tcpdump** is used for packet capture and analysis
* [**pwru**](https://github.com/cilium/pwru) is used to know the kernel drop reason
* **libreswan** `ipsec-stateus` and `ipsec-trafficstatus` commands
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🌐 Web query:

libreswan ipsec commands documentation status trafficstatus

💡 Result:

  • Main “ipsec commands” index (lists status, trafficstatus, etc.): ipsec(8) manual page. (libreswan.org)
  • ipsec trafficstatus (what it shows / how to read it): Libreswan wiki page “How to read status output”. It explains that trafficstatus corresponds to ipsec whack --trafficstatus and shows established tunnels plus fields like add_time, inBytes, outBytes, and (when applicable) XAUTH/IKEv2 CP username. (libreswan.org)
  • Low-level switch (whack) reference: ipsec-whack(8) notes the --trafficstatus form is intended to show username, add_time, and total in/out bytes, but also indicates it’s “To be documented” in that man page (so the wiki is the clearer explanation). (libreswan.org)
  • Practical guidance / alternatives: Migration and HOWTO docs recommend ipsec whack --trafficstatus (and also mention --globalstatus, --shuntstatus) for scripting/overview use cases, because ipsec status output is large and changed vs. Openswan. (libreswan.org)
  • Quick “which command for what” (project README): suggests ipsec trafficstatus (overview), ipsec briefstatus, and ipsec globalstatus (machine-readable). (github.com)

Citations:


Correct libreswan command syntax in line 164

The hyphenated forms are incorrect. Per libreswan official documentation, the correct commands are space-separated: ipsec status and ipsec trafficstatus (not ipsec-stateus or ipsec-trafficstatus).

✏️ Proposed fix
-    * **libreswan** `ipsec-stateus` and `ipsec-trafficstatus` commands
+    * **libreswan** `ipsec status` and `ipsec trafficstatus` commands
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
* **libreswan** `ipsec-stateus` and `ipsec-trafficstatus` commands
* **libreswan** `ipsec status` and `ipsec trafficstatus` commands
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` at line 164, The docs
entry lists incorrect hyphenated libreswan commands; update the text that
currently shows "ipsec-stateus" and "ipsec-trafficstatus" to the correct
space-separated commands "ipsec status" and "ipsec trafficstatus" (search for
the string "ipsec-stateus" or "ipsec-trafficstatus" in the document and replace
those tokens accordingly so the libreswan commands are shown as "ipsec status"
and "ipsec trafficstatus").

cluster than analysing offline data). The fix is usually the easiest part (there are
exceptions).

```
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fenced code blocks are missing language specifiers (MD040)

Three code blocks at lines 185, 301, and 361 are plain ``` fences without a language tag. Use ```text (or ```plaintext) to satisfy MD040 and avoid markdownlint warnings.

✏️ Proposed fix (apply to all three occurrences)
-```
+```text
🧰 Tools
🪛 markdownlint-cli2 (0.21.0)

[warning] 185-185: Fenced code blocks should have a language specified

(MD040, fenced-code-language)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` at line 185, Replace the
three plain fenced code blocks that use only triple backticks (the bare ```
fences) with explicit language-tagged fences to satisfy MD040; change each bare
fence to use a neutral tag such as ```text (or ```plaintext) so the fenced
blocks include a language specifier while preserving their content.

Comment on lines +250 to +288
can spend my time efficiently. I just want to tell in plain english what I
want and for the MCP server to execute those specific commands.

**As an OVN-Kubernetes engineer**, **I want to** troubleshoot my stack
without needing to analyse each flow output of these tools when I need to
troubleshoot a feature **so that** I can spend my time efficiently. I just
want to tell in plain english what I want and for the LLM to help me analyze
the output of the commands executed by the MCP Server. I understand that I
will need to verify the reasoning thoroughly before accepting the RCA from AI.

**As a new engineer joining the OVN-Kubernetes team**, **I want to** retrieve
specific information from different parts of the stack without having
knowledge of the topology or tooling of the stack.

# Proposed Solution

We build a Golang MCP Server (could be split into a set of MCP Servers in the
future) that exposes these tools in read only fashion and the LLM backend
that has the required context will analyse the results of the execution and
provide a response back to the prompter who has to verify it thoroughly. This
MCP Server code will be in a new repo in
[ovn-kubernetes org](https://github.com/ovn-kubernetes) called
**ovn-kubernetes-mcp**.

## Example Workflow for an end-user

1. An end-user can use any MCP Client to start a troubleshooting session via
prompting. The client connects with all the available servers (in our case
the OVN-Kubernetes MCP Server and maybe in the future all layered community
MCP Severs) and gathers their available tools and presents this information
to the LLM along with their schemas. Example: Using Cursor AI as your MCP
Client
2. LLM will be able use its intelligence and analyze the end-user query and
choose the appropriate tools. Example: Using Claude Sonnet4 as your LLM
model
3. MCP Client then receives the LLM's tool call and routes it to the
corresponding MCP Server which executes the tool and client then relays
the response back to the LLM
4. LLM again uses its intelligence to analyze the responses
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Inconsistent spelling: "analyse" vs "analyze"

The document mixes British English "analyse" (e.g., line 256) with American English "analyze" (lines 282, 288, and elsewhere). Pick one variant and apply it consistently throughout.

🧰 Tools
🪛 LanguageTool

[style] ~254-~254: You have already used this phrasing in nearby sentences. Consider replacing it to add variety to your writing.
Context: ... each flow output of these tools when I need to troubleshoot a feature so that I ca...

(REP_NEED_TO_VB)


[uncategorized] ~256-~256: Do not mix variants of the same word (‘analyze’ and ‘analyse’) within a single text.
Context: ... what I want and for the LLM to help me analyze the output of the commands executed by ...

(EN_WORD_COHERENCY)


[grammar] ~267-~267: Use a hyphen to join words.
Context: ...future) that exposes these tools in read only fashion and the LLM backend that ha...

(QB_NEW_EN_HYPHEN)


[grammar] ~279-~279: Ensure spelling is correct
Context: ...the future all layered community MCP Severs) and gathers their available tools and ...

(QB_NEW_EN_ORTHOGRAPHY_ERROR_IDS_1)


[uncategorized] ~282-~282: Do not mix variants of the same word (‘analyze’ and ‘analyse’) within a single text.
Context: ...M will be able use its intelligence and analyze the end-user query and choose the ap...

(EN_WORD_COHERENCY)


[uncategorized] ~288-~288: Do not mix variants of the same word (‘analyze’ and ‘analyse’) within a single text.
Context: ...M 4. LLM again uses its intelligence to analyze the responses 5. LLM provides a RCA bac...

(EN_WORD_COHERENCY)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` around lines 250 - 288,
The document mixes British ("analyse") and American ("analyze") spellings; pick
one variant and make it consistent across the file by replacing all instances
(e.g., "analyse", "analysing", "analyses", "analyser") with the chosen spelling
(examples in the "As an OVN-Kubernetes engineer" paragraph, the "Proposed
Solution" section, and the "Example Workflow" steps where phrases like "analyse
the output", "analyze the end-user query", and "analyze the responses" appear);
perform a global find-and-replace for those tokens and review nearby words for
inflectional forms to ensure grammatical correctness.

# Proposed Solution

We build a Golang MCP Server (could be split into a set of MCP Servers in the
future) that exposes these tools in read only fashion and the LLM backend
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Missing hyphen: "read-only"

"read only fashion" should be "read-only fashion" throughout the document (also appears at line 471).

🧰 Tools
🪛 LanguageTool

[grammar] ~267-~267: Use a hyphen to join words.
Context: ...future) that exposes these tools in read only fashion and the LLM backend that ha...

(QB_NEW_EN_HYPHEN)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` at line 267, The phrase
"read only fashion" is missing a hyphen; update every occurrence to "read-only
fashion" in the document (e.g., the instance in the sentence containing "that
exposes these tools in read only fashion and the LLM backend" and the other
occurrence around line 471). Search the file for the exact string "read only
fashion" and replace with "read-only fashion" to keep wording consistent across
the document.

Comment on lines +279 to +282
MCP Severs) and gathers their available tools and presents this information
to the LLM along with their schemas. Example: Using Cursor AI as your MCP
Client
2. LLM will be able use its intelligence and analyze the end-user query and
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Typo "Severs" and missing word "to" in adjacent lines

Two separate errors in close proximity:

  • Line 279: "MCP Severs" → "MCP Servers"
  • Line 282: "LLM will be able use" → "LLM will be able to use"
✏️ Proposed fixes
-the future all layered community    MCP Severs) and gathers their available tools
+the future all layered community    MCP Servers) and gathers their available tools
-LLM will be able use its intelligence and analyze the end-user query
+LLM will be able to use its intelligence and analyze the end-user query
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
MCP Severs) and gathers their available tools and presents this information
to the LLM along with their schemas. Example: Using Cursor AI as your MCP
Client
2. LLM will be able use its intelligence and analyze the end-user query and
MCP Servers) and gathers their available tools and presents this information
to the LLM along with their schemas. Example: Using Cursor AI as your MCP
Client
2. LLM will be able to use its intelligence and analyze the end-user query and
🧰 Tools
🪛 LanguageTool

[grammar] ~279-~279: Ensure spelling is correct
Context: ...the future all layered community MCP Severs) and gathers their available tools and ...

(QB_NEW_EN_ORTHOGRAPHY_ERROR_IDS_1)


[uncategorized] ~282-~282: Do not mix variants of the same word (‘analyze’ and ‘analyse’) within a single text.
Context: ...M will be able use its intelligence and analyze the end-user query and choose the ap...

(EN_WORD_COHERENCY)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` around lines 279 - 282,
Fix two typos in the document: change the phrase "MCP Severs" to "MCP Servers"
and insert the missing word by changing "LLM will be able use" to "LLM will be
able to use" so both sentences read correctly.

Comment on lines +429 to +437
Note: Some of the layers like Kubernetes and Offline Debugging have
existing servers like [kubernetes-mcp-server](https://github.com/containers/kubernetes-mcp-server)
and [mustgather-mcp-server](https://github.com/shivprakashmuley/mustgather-mcp-server)
can be re-used together with ovn-kubernetes-mcp server for holistic
end user experience. However kubernetes-mcp-server exposes `kubectl-exec`
which has security implications (although they also have a read-only
mode where only read commands are exposed).

Note2: Feeding container logs to LLM will make the context window
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Inconsistent note formatting: "Note:" vs "Note2:"

Line 429 uses "Note:" while line 437 uses "Note2:". Use a consistent style, e.g., "Note:" / "Note 2:" or convert both to a Markdown blockquote.

✏️ Proposed fix
-Note: Some of the layers...
+**Note:** Some of the layers...
 
-Note2: Feeding container logs...
+**Note 2:** Feeding container logs...
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Note: Some of the layers like Kubernetes and Offline Debugging have
existing servers like [kubernetes-mcp-server](https://github.com/containers/kubernetes-mcp-server)
and [mustgather-mcp-server](https://github.com/shivprakashmuley/mustgather-mcp-server)
can be re-used together with ovn-kubernetes-mcp server for holistic
end user experience. However kubernetes-mcp-server exposes `kubectl-exec`
which has security implications (although they also have a read-only
mode where only read commands are exposed).
Note2: Feeding container logs to LLM will make the context window
**Note:** Some of the layers like Kubernetes and Offline Debugging have
existing servers like [kubernetes-mcp-server](https://github.com/containers/kubernetes-mcp-server)
and [mustgather-mcp-server](https://github.com/shivprakashmuley/mustgather-mcp-server)
can be re-used together with ovn-kubernetes-mcp server for holistic
end user experience. However kubernetes-mcp-server exposes `kubectl-exec`
which has security implications (although they also have a read-only
mode where only read commands are exposed).
**Note 2:** Feeding container logs to LLM will make the context window
🧰 Tools
🪛 LanguageTool

[grammar] ~436-~436: Ensure spelling is correct
Context: ...where only read commands are exposed). Note2: Feeding container logs to LLM will make...

(QB_NEW_EN_ORTHOGRAPHY_ERROR_IDS_1)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` around lines 429 - 437,
The two inline annotations are inconsistently labeled ("Note:" vs "Note2:");
update them to a consistent style (e.g., change "Note:" and "Note2:" to
"**Note:**" and "**Note 2:**" respectively) or convert both into Markdown
blockquotes so the mentions around kubernetes-mcp-server and
mustgather-mcp-server read uniformly; ensure surrounding punctuation and
capitalization remain consistent with adjacent sentences (the references to
kubernetes-mcp-server and mustgather-mcp-server should be unchanged).

So whatever security posture they use for now, can be adopted. They have a
`read-only` mode and a mode where write can be done via kubectl exec.
Later, after getting reviews, this enhancement has changed the approach
and pivotted towards opting into a more secure approach of adding a
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Spelling error: "pivotted" → "pivoted"

✏️ Proposed fix
-and pivotted towards opting into a more secure approach
+and pivoted towards opting into a more secure approach
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
and pivotted towards opting into a more secure approach of adding a
and pivoted towards opting into a more secure approach of adding a
🧰 Tools
🪛 LanguageTool

[grammar] ~509-~509: Ensure spelling is correct
Context: ...nhancement has changed the approach and pivotted towards opting into a more secure appro...

(QB_NEW_EN_ORTHOGRAPHY_ERROR_IDS_1)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` at line 509, Replace the
misspelled word "pivotted" with the correct spelling "pivoted" in the sentence
that currently reads "and pivotted towards opting into a more secure approach of
adding a"; update that exact phrase to "and pivoted towards opting into a more
secure approach of adding" to fix the typo.

enhanced based on user experience
* Security! We know that we cannot fully eliminate the risk
* Performance/Scalability: MCPs are a relatively new concept. So aspects like
how many tools could we expose per server and upto what point it scales etc
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Two minor typos: "upto" and "etc"

  • "upto" should be "up to" (two words).
  • "etc" should be "etc." (period required in American English).
✏️ Proposed fix
-upto what point it scales etc
+up to what point it scales etc.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
how many tools could we expose per server and upto what point it scales etc
how many tools could we expose per server and up to what point it scales etc.
🧰 Tools
🪛 LanguageTool

[style] ~799-~799: In American English, abbreviations like “etc.” require a period.
Context: ...er server and upto what point it scales etc are unknowns. We will need to try and...

(ETC_PERIOD)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/okeps/okep-5494-ovn-kubernetes-mcp-server.md` at line 799, Fix the two
typos in the sentence "how many tools could we expose per server and upto what
point it scales etc" by changing "upto" to "up to" and appending a period to
"etc" (i.e., replace that fragment with "how many tools could we expose per
server and up to what point it scales, etc.").

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant