olb42/toolhive
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add groupRef

Browse Source
This commit is contained in:
olb042
2026-05-31 19:34:19 +01:00
parent dfafe51659
commit b2aed7c42c
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
manifest/overlays/production/mcpserver-argocd.yaml
+2
View File
@@ -26,6 +26,8 @@ spec:
# the token natively on the `mcp` container via podTemplateSpec. # the token natively on the `mcp` container via podTemplateSpec.
podTemplateSpec: podTemplateSpec:
spec: spec:
groupRef:
name: homelab-core
containers: containers:
- name: mcp - name: mcp
env: env:
manifest/overlays/production/mcpserver-gitea.yaml
+2
View File
@@ -19,6 +19,8 @@ spec:
# inject the token natively on the `mcp` container via podTemplateSpec. # inject the token natively on the `mcp` container via podTemplateSpec.
podTemplateSpec: podTemplateSpec:
spec: spec:
groupRef:
name: homelab-core
containers: containers:
- name: mcp - name: mcp
env: env:
manifest/overlays/production/mcpserver-kubernetes.yaml
+2
View File
@@ -12,6 +12,8 @@ spec:
transport: stdio transport: stdio
proxyMode: streamable-http proxyMode: streamable-http
proxyPort: 8080 proxyPort: 8080
groupRef:
name: homelab-core
# Pin the MCP server pod to our read-only ServiceAccount. The ClusterRole is # Pin the MCP server pod to our read-only ServiceAccount. The ClusterRole is
# the real guardrail: even if a write tool is invoked, the API rejects it. # the real guardrail: even if a write tool is invoked, the API rejects it.
serviceAccount: kubernetes-mcp serviceAccount: kubernetes-mcp