Implement shared public MCP federation gateway

- full-vmcp serves as public entry point at mcp.ngorse.com - Single Keycloak client (public-mcp) for all external tools - authServerConfig proxies auth to Keycloak - state-docs-vmcp becomes internal-only (no auth required) - Shared OIDC config for token validation - All external clients authenticate once at gateway
2026-06-17 16:26:48 +01:00
parent d1d8c6aa3f
commit 676bad4dd2
5 changed files with 15 additions and 21 deletions
@@ -13,6 +13,12 @@ spec:
  entryPoints:
    - websecure
  routes:
+    - kind: Rule
+      match: Host(`mcp.ngorse.com`)
+      services:
+        - name: vmcp-full-vmcp
+          namespace: toolhive-system
+          port: 4483
    - kind: Rule
      match: Host(`full-vmcp.olb42.com`)
      services: