# patch_k8s_resource Patches a Kubernetes resource. This is similar to running kubectl patch. Agent View of the PolicyLayer registry record for `patch_k8s_resource`. HTML page: https://policylayer.com/tools/com-googleapis-container-mcp/patch-k8s-resource ## Facts - Tool: `patch_k8s_resource` - Server: Mcp (`https://container.googleapis.com/mcp`) — https://policylayer.com/tools/com-googleapis-container-mcp.md - Homepage: https://github.com/https://container.googleapis.com/mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server rate-limited: no - Parameters: 6 (4 required) - Recommended policy verdict: Rate-limited ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `name` | string | yes | Required. The name of the resource to patch. | | `patch` | string | yes | Required. The patch to apply in JSON format. | | `parent` | string | yes | Required. The cluster to patch the resource in. Format: projects/{project}/locations/{location}/clusters/{cluster} | | `namespace` | string | no | Optional. The namespace of the resource. If not specified, "default" is used. | | `patchType` | string | no | Optional. The patch strategy to apply. Valid values are "strategic", "merge", or "json". If not specified, "strategic" patch type will be used. | | `resourceType` | string | yes | Required. The type of resource to patch. e.g. "pods", "deployments", "services". | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "patch_k8s_resource", "arguments": { "name": "", "patch": "", "parent": "", "resourceType": "" } } } ``` ## Why patch_k8s_resource is rated Medium Patching is a reversible modification operation that updates Kubernetes resource configurations. While it changes state, patches do not irreversibly delete data (which would be Destructive) and do not execute arbitrary code (which would be Execute). From the tool's own definition: "Tool name 'patch_k8s_resource' and description states it 'Patches a Kubernetes resource' similar to 'kubectl patch', which modifies existing resources in place." ## Use case AI agents use patch_k8s_resource to create or update resources in Mcp, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mcp environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Mcp: ```json { "version": "1", "default": "deny", "tools": { "patch_k8s_resource": { "limits": [ { "counter": "patch_k8s_resource_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Mcp (22) - `delete_k8s_resource` — Destructive — https://policylayer.com/tools/com-googleapis-container-mcp/delete-k8s-resource.md - `cancel_operation` — Execute — https://policylayer.com/tools/com-googleapis-container-mcp/cancel-operation.md - `check_k8s_auth` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/check-k8s-auth.md - `describe_k8s_resource` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/describe-k8s-resource.md - `get_cluster` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-cluster.md - `get_k8s_cluster_info` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-k8s-cluster-info.md - `get_k8s_logs` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-k8s-logs.md - `get_k8s_resource` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-k8s-resource.md - `get_k8s_rollout_status` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-k8s-rollout-status.md - `get_k8s_version` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-k8s-version.md - `get_node_pool` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-node-pool.md - `get_operation` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/get-operation.md - `list_clusters` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/list-clusters.md - `list_k8s_api_resources` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/list-k8s-api-resources.md - `list_k8s_events` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/list-k8s-events.md - `list_node_pools` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/list-node-pools.md - `list_operations` — Read — https://policylayer.com/tools/com-googleapis-container-mcp/list-operations.md - `apply_k8s_manifest` — Write — https://policylayer.com/tools/com-googleapis-container-mcp/apply-k8s-manifest.md - `create_cluster` — Write — https://policylayer.com/tools/com-googleapis-container-mcp/create-cluster.md - `create_node_pool` — Write — https://policylayer.com/tools/com-googleapis-container-mcp/create-node-pool.md - `update_cluster` — Write — https://policylayer.com/tools/com-googleapis-container-mcp/update-cluster.md - `update_node_pool` — Write — https://policylayer.com/tools/com-googleapis-container-mcp/update-node-pool.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-googleapis-container-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-googleapis-container-mcp