add state doc

manifest/overlays/production/vmcp-servers/kustomization.yaml

@@ -10,3 +10,5 @@ resources:
   - dev-safe-vmcp-ingress.yaml
   - ops-safe-vmcp.yaml
   - ops-safe-vmcp-ingress.yaml
+  - state-docs-vmcp.yaml
+  - state-docs-vmcp-ingress.yaml

manifest/overlays/production/vmcp-servers/state-docs-vmcp-ingress.yaml

@@ -0,0 +1,27 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: state-docs-vmcp-ingress
+  namespace: toolhive-system
+  labels:
+    app.kubernetes.io/name: state-docs-vmcp
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`state-docs.olb42.com`)
+      services:
+        - name: state-docs-vmcp
+          namespace: toolhive-system
+          port: 4483
+    - kind: Rule
+      match: Host(`state-docs.ngorse.com`)
+      services:
+        - name: state-docs-vmcp
+          namespace: toolhive-system
+          port: 4483
+  # No default TLSStore in this cluster, so reference the wildcard cert
+  # explicitly. olb42-wildcard-tls is auto-reflected into every namespace.
+  tls:
+    secretName: olb42-wildcard-tls

manifest/overlays/production/vmcp-servers/state-docs-vmcp.yaml

@@ -3,6 +3,11 @@ kind: VirtualMCPServer
 metadata:
   name: state-docs-vmcp
   namespace: toolhive-system
+  annotations:
+    toolhive.stacklok.dev/registry-export: "true"
+    toolhive.stacklok.dev/registry-title: Document State Virtual MCP
+    toolhive.stacklok.dev/registry-description: Virtual MCP which is focused on enabling documentation of the current state
+    toolhive.stacklok.dev/registry-url: https://state-docs.ngorse.com
 spec:
   groupRef:
     name: homelab-core