Red Hat's AI-Driven Kubernetes Tool Raises Serious Cluster Security Concerns

Red Hat is developing an open-source MCP server that allows AI assistants such as GitHub Copilot and Cursor to directly read and perform operations on Kubernetes and OpenShift clusters. While the tool promises productivity gains by letting engineers describe tasks in plain language instead of running multiple kubectl commands, it also gives AI models a path to a cluster's control plane. Security experts warn that an AI assistant with write access carries the same power as a human admin, but is guided by fuzzy language interpretation and can be manipulated through crafted log lines or annotations — a form of prompt injection. The RBAC identity assigned to the assistant determines its actual permissions, meaning overly broad roles like cluster-admin could expose entire production environments to unintended changes. Recommended safeguards include starting with read-only access, scoping RBAC tightly per namespace, and requiring human approval before any write operations are executed.