add groupRef

2026-05-31 19:34:19 +01:00
parent dfafe51659
commit b2aed7c42c
3 changed files with 6 additions and 0 deletions
@@ -26,6 +26,8 @@ spec:
  # the token natively on the `mcp` container via podTemplateSpec.
  podTemplateSpec:
    spec:
+      groupRef:
+        name: homelab-core
      containers:
        - name: mcp
          env:
@@ -19,6 +19,8 @@ spec:
  # inject the token natively on the `mcp` container via podTemplateSpec.
  podTemplateSpec:
    spec:
+      groupRef:
+        name: homelab-core
      containers:
        - name: mcp
          env:
@@ -12,6 +12,8 @@ spec:
  transport: stdio
  proxyMode: streamable-http
  proxyPort: 8080
+  groupRef:
+    name: homelab-core
  # Pin the MCP server pod to our read-only ServiceAccount. The ClusterRole is
  # the real guardrail: even if a write tool is invoked, the API rejects it.
  serviceAccount: kubernetes-mcp