基础设施自动化MCP服务

   git clone https://github.com/metalfa/infra-automation-mcp.git
   cd infra-automation-mcp
   python -m venv venv && source venv/bin/activate
   pip install -e .

   Create a new user john.doe@example.com, generate Terraform 
   for an EC2 instance, and show me the access review report.

# Create Okta user
okta users create --firstName Bruce --lastName Lee --email bruce@demoac.com

# Find group
okta groups list | grep "Security-Engineering"

# Add user to group
okta groups members add 00g123... 00u987...

# Write Terraform
vim terraform/users.tf

# Create PR
git checkout -b add-user-bruce
git add .
git commit -m "Add user Bruce Lee"
git push origin add-user-bruce
gh pr create

# Wait, review, apply
terraform apply

1. Create an Okta user for "bruce.lee@demoac.com" (Bruce Lee, Security Engineer), 
   create a Security-Engineering group, add him to it, and send him a Slack welcome message

2. Generate Terraform for a free-tier EC2 instance called "bruce-lee-devbox"

3. Generate IAM configuration that maps to Okta for SSO

4. Create a GitHub PR with these changes and send a Slack message for approval

flowchart TB
    subgraph Input["🎯 INPUT"]
        User["👤 User"]
    end

    subgraph Intelligence["🤖 AI LAYER"]
        Claude["Claude Desktop"]
        MCP["MCP Server"]
    end

    subgraph OktaOps["🔐 OKTA OPERATIONS"]
        CreateUser["Create User"]
        CreateGroup["Create Group"]
        AssignGroup["Assign to Group"]
    end

    subgraph GitOps["📦 GITOPS WORKFLOW"]
        Repo["GitHub Repo"]
        PR["Pull Request"]
        Actions["GitHub Actions"]
        Projects["GitHub Projects"]
    end

    subgraph Infra["☁️ INFRASTRUCTURE"]
        Okta["Okta"]
        AWS["AWS"]
    end

    subgraph Notify["📢 NOTIFICATIONS"]
        Slack["Slack"]
    end

    User -->|Natural Language| Claude
    Claude -->|MCP Protocol| MCP
    MCP -->|Create User| CreateUser
    MCP -->|Create Group| CreateGroup
    CreateUser --> AssignGroup
    CreateGroup --> AssignGroup
    AssignGroup -->|Sync to| Okta
    MCP -->|Generate IaC| Repo
    MCP -->|Alert Team| Slack
    Repo -->|Opens| PR
    PR -->|Triggers| Actions
    PR -->|Creates Card| Projects
    Actions -->|Plan Output| PR
    Actions -->|On Merge| AWS
    Actions -->|Update Status| Projects
    Actions -->|Notify| Slack
    Okta -.->|SSO Federation| AWS

┌─────────────────┐
│ terraform fmt   │ → Code formatting check
├─────────────────┤
│ terraform init  │ → Initialize providers
├─────────────────┤
│ terraform plan  │ → Preview changes
├─────────────────┤
│ Post to PR      │ → Plan visible to reviewers
├─────────────────┤
│ Update Project  │ → Moves card to "Backlog"
└─────────────────┘

┌─────────────────┐
│ terraform apply │ → Create resources
├─────────────────┤
│ Wait 3 minutes  │ → Demo observation window
├─────────────────┤
│ terraform destroy│ → Auto-cleanup (cost control)
├─────────────────┤
│ Slack notify    │ → Confirm completion
├─────────────────┤
│ Update Project  │ → Moves card to "Done"
└─────────────────┘

# Clone the repository
git clone https://github.com/metalfa/infra-automation-mcp.git
cd infra-automation-mcp

# Create virtual environment
python -m venv venv

# Activate (Windows)
.\venv\Scripts\Activate.ps1

# Activate (Mac/Linux)
source venv/bin/activate

# Install package
pip install -e .

   cp .env.example .env

   # Okta
   OKTA_BASE_URL=https://your-org.okta.com
   OKTA_API_TOKEN=your-okta-token
   
   # AWS
   AWS_REGION=us-east-1
   AWS_ACCESS_KEY_ID=your-access-key
   AWS_SECRET_ACCESS_KEY=your-secret-key
   
   # GitHub
   GITHUB_TOKEN=your-github-pat
   GITHUB_REPO=your-username/infra-automation-mcp
   
   # Slack
   SLACK_WEBHOOK_URL=https://hooks.slack.com/services/xxx

Create user maria.garcia@company.com (Maria Garcia, DevOps Engineer),
add her to the devops-team group, generate Terraform for her IAM access,
create a PR, and send a Slack welcome message.

Provision a free-tier EC2 instance called "dev-sandbox" with SSH access,
generate the Terraform code, and create a PR for review.

Generate a comprehensive access review report showing all Okta users,
their group memberships, inactive accounts, and security recommendations.

Set up infrastructure for the new Data Science team:
1. Create Okta group "data-science"
2. Create user alex.kim@company.com
3. Generate EC2 and IAM Terraform
4. Create PR and notify approvers via Slack