Implement shared public MCP federation gateway

- full-vmcp serves as public entry point at mcp.ngorse.com - Single Keycloak client (public-mcp) for all external tools - authServerConfig proxies auth to Keycloak - state-docs-vmcp becomes internal-only (no auth required) - Shared OIDC config for token validation - All external clients authenticate once at gateway
2026-06-17 16:26:48 +01:00
parent d1d8c6aa3f
commit 676bad4dd2
5 changed files with 15 additions and 21 deletions
@@ -14,18 +14,7 @@ spec:
  embeddingServerRef:
    name: homelab-embedding
  incomingAuth:
-    type: oidc
-    oidcConfigRef:
-      name: state-docs-vmcp-oidc
-      audience: state-docs-vmcp
-  authServerConfig:
-    issuer: https://state-docs.ngorse.com
-    upstreamProviders:
-      - name: keycloak
-        type: oidc
-        oidcConfig:
-          issuerUrl: https://cloak.olb42.com/realms/home-lab
-          clientId: state-docs-vmcp
+    type: anonymous
  config:
    aggregation:
      conflictResolution: prefix