sort into folders

2026-06-03 14:09:28 +01:00
parent bf39a87964
commit 0a03987dae
18 changed files with 36 additions and 16 deletions
@@ -0,0 +1,25 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: vmcp-dev-safe-ingress
+  namespace: toolhive-system
+  labels:
+    app.kubernetes.io/name: dev-safe-vmcp
+  annotations:
+    dns.public: 'true'
+    dns.public.access.policy: bypass
+    dns.public.hostname: dev-safe.olb42.com
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`dev-safe.olb42.com`)
+      services:
+        - name: vmcp-dev-safe-vmcp
+          namespace: toolhive-system
+          port: 4483
+  # No default TLSStore in this cluster, so reference the wildcard cert
+  # explicitly. olb42-wildcard-tls is auto-reflected into every namespace.
+  tls:
+    secretName: olb42-wildcard-tls
@@ -0,0 +1,33 @@
+apiVersion: toolhive.stacklok.dev/v1alpha1
+kind: VirtualMCPServer
+metadata:
+  name: dev-safe-vmcp
+  namespace: toolhive-system
+  annotations:
+    toolhive.stacklok.dev/registry-export: "true"
+    toolhive.stacklok.dev/registry-title: Dev Safe Virtual MCP
+    toolhive.stacklok.dev/registry-description: Development-focused virtual MCP combining safe Gitea and AutoMem tools.
+    toolhive.stacklok.dev/registry-url: http://vmcp-dev-safe-vmcp.toolhive-system.svc.cluster.local:4483
+spec:
+  groupRef:
+    name: homelab-core
+  embeddingServerRef:
+    name: homelab-embedding
+  incomingAuth:
+    type: anonymous
+  config:
+    aggregation:
+      conflictResolution: prefix
+      tools:
+        - workload: gitea-mcp
+          toolConfigRef:
+            name: dev-tools
+        - workload: automem-remote
+          toolConfigRef:
+            name: dev-tools
+        - workload: argocd-mcp
+          excludeAll: true
+        - workload: kubernetes-mcp
+          excludeAll: true
+    optimizer:
+      maxToolsToReturn: 5
@@ -0,0 +1,25 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: full-vmcp-ingress
+  namespace: toolhive-system
+  labels:
+    app.kubernetes.io/name: full-vmcp
+  annotations:
+    dns.public: 'true'
+    dns.public.access.policy: google-ws
+    dns.public.hostname: full-vmcp.olb42.com
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`full-vmcp.olb42.com`)
+      services:
+        - name: vmcp-full-vmcp
+          namespace: toolhive-system
+          port: 4483
+  # No default TLSStore in this cluster, so reference the wildcard cert
+  # explicitly. olb42-wildcard-tls is auto-reflected into every namespace.
+  tls:
+    secretName: olb42-wildcard-tls
@@ -0,0 +1,22 @@
+apiVersion: toolhive.stacklok.dev/v1alpha1
+kind: VirtualMCPServer
+metadata:
+  name: full-vmcp
+  namespace: toolhive-system
+  annotations:
+    toolhive.stacklok.dev/registry-export: "true"
+    toolhive.stacklok.dev/registry-title: Full Homelab Virtual MCP
+    toolhive.stacklok.dev/registry-description: Full virtual MCP exposing the homelab MCP tool group through ToolHive aggregation.
+    toolhive.stacklok.dev/registry-url: http://vmcp-full-vmcp.toolhive-system.svc.cluster.local:4483
+spec:
+  groupRef:
+    name: homelab-core
+  embeddingServerRef:
+    name: homelab-embedding
+  incomingAuth:
+    type: anonymous
+  config:
+    aggregation:
+      conflictResolution: prefix
+    optimizer:
+      maxToolsToReturn: 8
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: toolhive-system
+
+resources:
+  - full-vmcp.yaml
+  - full-vmcp-ingress.yaml
+  - dev-safe-vmcp.yaml
+  - dev-safe-vmcp-ingress.yaml
+  - ops-safe-vmcp.yaml
+  - ops-safe-vmcp-ingress.yaml
@@ -0,0 +1,26 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: vmcp-ops-safe-ingress
+  namespace: toolhive-system
+  labels:
+    app.kubernetes.io/name: ops-safe-vmcp
+  annotations:
+    dns.public: 'true'
+    dns.public.access.policy: bypass
+    dns.public.hostname: ops-safe.olb42.com
+
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`ops-safe.olb42.com`)
+      services:
+        - name: vmcp-ops-safe-vmcp
+          namespace: toolhive-system
+          port: 4483
+  # No default TLSStore in this cluster, so reference the wildcard cert
+  # explicitly. olb42-wildcard-tls is auto-reflected into every namespace.
+  tls:
+    secretName: olb42-wildcard-tls
@@ -0,0 +1,33 @@
+apiVersion: toolhive.stacklok.dev/v1alpha1
+kind: VirtualMCPServer
+metadata:
+  name: ops-safe-vmcp
+  namespace: toolhive-system
+  annotations:
+    toolhive.stacklok.dev/registry-export: "true"
+    toolhive.stacklok.dev/registry-title: Ops Safe Virtual MCP
+    toolhive.stacklok.dev/registry-description: Operations-focused virtual MCP combining safe Argo CD and Kubernetes tools.
+    toolhive.stacklok.dev/registry-url: http://vmcp-ops-safe-vmcp.toolhive-system.svc.cluster.local:4483
+spec:
+  groupRef:
+    name: homelab-core
+  embeddingServerRef:
+    name: homelab-embedding
+  incomingAuth:
+    type: anonymous
+  config:
+    aggregation:
+      conflictResolution: prefix
+      tools:
+        - workload: gitea-mcp
+          excludeAll: true
+        - workload: automem-mcp
+          excludeAll: true
+        - workload: argocd-mcp
+          toolConfigRef:
+            name: ops-tools
+        - workload: kubernetes-mcp
+          toolConfigRef:
+            name: ops-tools
+    optimizer:
+      maxToolsToReturn: 6