Slide 1

Slide 1 text

#KubeCon #CloudNativeCon Flux MCP AI-Assisted GitOps Stefan Prodan - ControlPlane Flux core maintainer

Slide 2

Slide 2 text

Flux - GitOps Continuous Delivery

Slide 3

Slide 3 text

Flux Operator - Gitless GitOps

Slide 4

Slide 4 text

GitOps - Challenges Monorepo complexity vs Config repo sprawl You’ll be reading, writing and reviewing LOTS of YAML You’ll become an YAML engineer Drift correction signal-to-noise ratio can be low

Slide 5

Slide 5 text

No content

Slide 6

Slide 6 text

No content

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

Flux MCP - Overview The MCP Server connects AI assistants directly to your Kubernetes clusters running Flux Operator, enabling seamless interaction through natural language. Features ● GitOps pipeline analysis, generation and refactoring ● Engineers learn Flux concepts in the context of your actual infrastructure ● Cross-cluster comparison for Flux configuration and Kubernetes workloads ● AI-assisted troubleshooting & root cause analysis

Slide 9

Slide 9 text

Flux MCP - Local Mode

Slide 10

Slide 10 text

Flux MCP - Security Considerations The Flux MCP Server is designed with security in mind: ● Operates with your existing kubeconfig permissions ● Supports service account impersonation for limited access ● Masks sensitive information in Kubernetes Secret values ● Provides a Kubernetes read-only mode for observation without affecting the cluster state When running the MCP Server in-cluster with Streamable HTTP, cluster-admins can configure OIDC-auth, Kubernetes group impersonation with fine-grained access control.

Slide 11

Slide 11 text

Flux MCP - Tools Read Tools ● get_flux_instance / get_kubernetes_resources / get_kubernetes_api_versions ● get_kubernetes_logs / get_kubernetes_metrics ● search_flux_docs Write Tools ● reconcile_flux_source / suspend_flux_reconciliation / resume_flux_reconciliation ● apply_kubernetes_manifest / delete_kubernetes_resource ● install_flux_instance

Slide 12

Slide 12 text

Flux MCP - Remote Mode

Slide 13

Slide 13 text

Flux MCP - Auth Config

Slide 14

Slide 14 text

Flux MCP - Preview Environments

Slide 15

Slide 15 text

Agentic AI - Incident Management The AI assistants leveraging the Flux MCP can reduce the mean time to resolution (MTTR) during incidents with contextual analysis and actionable remediation steps. ● Trace issues from high-level GitOps resources like ResourceSets, Helm Releases, and Kustomizations all the way down to Kubernetes pods ● Correlate events, logs, and configuration changes to identify the source of failures in GitOps pipelines

Slide 16

Slide 16 text

Flux MCP - Roadmap Highlights Better docs indexing Enhanced docs search tool with embedded index for air-gapped environments. SSO built-in integration Native support for Google, GitHub and Microsoft Entra ID Tool usage policies Fine-grained tool allow list for cluster admins https://fluxcd.control-plane.io/mcp/

Slide 17

Slide 17 text

No content