From ad0e5df277b5f75a7ad9868666146f2a2a0fa3ea Mon Sep 17 00:00:00 2001 From: mnemonic Date: Mon, 15 Jun 2026 13:34:33 +0000 Subject: [PATCH] fix: add required audience field to oidcConfigRef on both VirtualMCPServers spec.incomingAuth.oidcConfigRef.audience is Required by the CRD validator. Set to the Keycloak client ID for each server (unique per server as required to prevent token replay attacks). Co-Authored-By: Claude Sonnet 4.6 --- manifest/overlays/production/vmcp-servers/full-vmcp.yaml | 1 + manifest/overlays/production/vmcp-servers/state-docs-vmcp.yaml | 1 + 2 files changed, 2 insertions(+) diff --git a/manifest/overlays/production/vmcp-servers/full-vmcp.yaml b/manifest/overlays/production/vmcp-servers/full-vmcp.yaml index 9cf36fd..da1ee07 100644 --- a/manifest/overlays/production/vmcp-servers/full-vmcp.yaml +++ b/manifest/overlays/production/vmcp-servers/full-vmcp.yaml @@ -22,6 +22,7 @@ spec: type: oidc oidcConfigRef: name: full-vmcp-oidc + audience: toolhive-full-vmcp config: aggregation: conflictResolution: prefix diff --git a/manifest/overlays/production/vmcp-servers/state-docs-vmcp.yaml b/manifest/overlays/production/vmcp-servers/state-docs-vmcp.yaml index 4955736..2dad83b 100644 --- a/manifest/overlays/production/vmcp-servers/state-docs-vmcp.yaml +++ b/manifest/overlays/production/vmcp-servers/state-docs-vmcp.yaml @@ -17,6 +17,7 @@ spec: type: oidc oidcConfigRef: name: state-docs-vmcp-oidc + audience: state-docs-vmcp config: aggregation: conflictResolution: prefix