olb042
841bb8e6c8
Simplify authServerConfig to only required CRD fields
2026-06-17 15:02:35 +01:00
olb042
d402c1726e
test toolhive.stacklok.dev/v1beta1
2026-06-17 14:59:12 +01:00
olb042
919888aba6
test toolhive.stacklok.dev/v1beta1
2026-06-17 14:57:49 +01:00
olb042
b6f6c3ebe4
Configure OIDC auth servers for VMCP servers to proxy through Keycloak
2026-06-17 14:52:02 +01:00
olb042
4de136186f
change auth for vmcp
2026-06-17 14:49:54 +01:00
olb042 and Claude Sonnet 4.6
ad0e5df277
fix: add required audience field to oidcConfigRef on both VirtualMCPServers
...
spec.incomingAuth.oidcConfigRef.audience is Required by the CRD validator.
Set to the Keycloak client ID for each server (unique per server as required
to prevent token replay attacks).
Co-Authored-By: Claude Sonnet 4.6 <[email protected]
2026-06-15 13:34:33 +00:00
olb042 and Claude Sonnet 4.6
3caeeb2997
fix: replace invalid incomingAuth.oidc with MCPOIDCConfig + oidcConfigRef
...
The .spec.incomingAuth.oidc inline block is not a valid field in the
v0.29.3 VirtualMCPServer CRD schema, causing ArgoCD ComparisonErrors.
The correct v0.29.3 API separates OIDC provider config into a dedicated
MCPOIDCConfig (v1beta1) resource, referenced from the VirtualMCPServer
via spec.incomingAuth.oidcConfigRef.name.
- Add MCPOIDCConfig resources for state-docs-vmcp and full-vmcp (inline
type, Keycloak issuer, replicated client secrets from keycloak ns)
- Update state-docs-vmcp and full-vmcp VirtualMCPServer manifests to
reference the new MCPOIDCConfig resources via oidcConfigRef
- Register new MCPOIDCConfig files in vmcp-servers kustomization
Co-Authored-By: Claude Sonnet 4.6 <[email protected]
2026-06-15 13:31:45 +00:00
olb042 and Claude Sonnet 4.6
d09eb39701
narrow ignoreApplicationDifferences to /automated/enabled only
...
Previously ignoring the entire /spec/syncPolicy prevented the ApplicationSet
controller from propagating syncOption changes (like ServerSideDiff=true) to
the live Application. Now only /automated/enabled is ignored, preserving
manual auto-sync control while allowing syncOptions to reconcile normally.
Co-Authored-By: Claude Sonnet 4.6 <[email protected]
2026-06-15 13:04:59 +00:00
olb042 and Claude Sonnet 4.6
50fdec56cb
add ServerSideDiff=true to bypass incomingAuth.oidc schema error
...
ArgoCD's client-side structured merge diff fails on VirtualMCPServer
resources that use spec.incomingAuth.oidc because the CRD schema does
not declare that subfield. ServerSideDiff=true switches diff computation
to a server-side dry-run which handles preserved-unknown-fields correctly.
Co-Authored-By: Claude Sonnet 4.6 <[email protected]
2026-06-15 13:03:54 +00:00
olb042
457d042569
add vmcp
2026-06-15 13:54:03 +01:00
olb042 and Claude Sonnet 4.6
f82d0b449b
remove stale TODO for state-docs-vmcp sealed secret
...
Secret is replicated from Keycloak into toolhive-system; no sealed secret needed.
Co-Authored-By: Claude Sonnet 4.6 <[email protected]
2026-06-15 12:10:25 +00:00
olb042
9f162958bf
oidc auth
2026-06-15 12:59:34 +01:00
olb042
f74bf9e50f
temp oidc auth
2026-06-15 12:58:50 +01:00
olb042
adc06573cc
update version
2026-06-15 12:49:25 +01:00
olb042 and Claude Sonnet 4.6
b497211278
add OIDC auth to state-docs-vmcp VirtualMCPServer
...
Switch incomingAuth from anonymous to oidc, wiring Keycloak (home-lab realm
at cloak.olb42.com) as the provider with clientId state-docs-vmcp. Secret
ref (state-docs-vmcp-secret, key: client-secret) is added to kustomization
as a TODO comment pending the sealed secret creation.
Co-Authored-By: Claude Sonnet 4.6 <[email protected]
2026-06-14 16:55:43 +00:00
olb042
8b9e54a924
update ingress
2026-06-14 02:40:20 +01:00
olb042
4da61242df
update ssl
2026-06-14 02:29:04 +01:00
olb042
6ff5eaafa2
add second ingressroute
2026-06-14 02:11:42 +01:00
olb042
6da4451697
add internal dns
2026-06-14 02:05:02 +01:00
olb042
b58c369d11
embedding
2026-06-13 20:47:48 +01:00
olb042
cc1bb128e1
enable tools
2026-06-13 20:45:37 +01:00
olb042
62b1214926
add incoming auth
2026-06-13 20:19:53 +01:00
olb042
ab95db2782
add state doc
2026-06-13 20:16:18 +01:00
olb042
ccd0093f00
add state docs
2026-06-13 20:09:43 +01:00
olb042
3e78b15f19
add registry visible remote mcp proxies
2026-06-13 19:59:04 +01:00
olb042
13d58831b4
fix registry discovery rbac for mcp entries
2026-06-13 19:55:57 +01:00
olb042
bf86461753
argocd and kube mcp to read-write
2026-06-13 19:33:23 +01:00
olb042
5a1f1f352b
pangolin ingress
2026-06-13 19:29:32 +01:00
olb042
596c464754
glance reg
2026-06-06 00:21:16 +01:00
olb042
5106b5e73c
vmcp glance
2026-06-06 00:16:30 +01:00
olb042
6a8328ec88
radar
2026-06-06 00:13:34 +01:00
olb042
d9dda8fef8
pod glance
2026-06-05 23:57:31 +01:00
olb042
6a15fbe49f
argocd mcp podtemplate/metadata/annotations/glances.parent
2026-06-05 23:56:49 +01:00
olb042
1bbb463bfe
glances changes
2026-06-05 16:25:10 +01:00
olb042
0df4a6b461
glance for gitea mcp
2026-06-05 15:49:20 +01:00
olb042
353ba6a250
change resourceoverides
2026-06-04 23:46:16 +01:00
olb042
7aa4ae4dd6
icon mcp
2026-06-04 20:35:09 +01:00
olb042
a9f3cf86d2
icon fix
2026-06-04 20:33:17 +01:00
olb042
37695d8f40
glances
2026-06-04 19:21:53 +01:00
olb042
cae8eabac1
update services and rbac
2026-06-03 18:09:23 +01:00
olb042
0a03987dae
sort into folders
2026-06-03 14:09:28 +01:00
olb042
bf39a87964
add radar mcp
2026-06-03 12:17:23 +01:00
olb042
27e596eaf5
add registry ingress
2026-06-02 21:16:35 +01:00
olb042
b4820326db
registry
2026-06-02 20:59:26 +01:00
olb042
fb5c4ab51f
update registry
2026-06-02 20:12:32 +01:00
olb042
8c401195d2
add backup
2026-06-02 20:01:34 +01:00
olb042
b5fbd69ed3
add second instance of db
2026-06-02 19:58:35 +01:00
olb042
549fcbd383
single instance
2026-06-02 18:39:20 +01:00
olb042
286a57545b
new pg
2026-06-02 18:19:46 +01:00
olb042
ec4b95e79b
enable plugin
2026-06-02 18:01:08 +01:00
olb042
81c57f994e
toggle
2026-06-02 17:59:44 +01:00
olb042
d64d1cecd6
postgres
2026-06-02 17:48:21 +01:00
olb042
9a6b001034
registry
2026-06-02 17:39:43 +01:00
olb042
18317cc322
registry
2026-06-02 17:38:44 +01:00
olb042
b86719a9d4
add external
2026-06-01 17:02:10 +01:00
olb042
57ae283e6d
public-dns
2026-06-01 16:59:01 +01:00
olb042
3f8969bdc3
public dns
2026-06-01 16:56:46 +01:00
olb042
3c90d4d4d2
Fix argocd MCP server transport
2026-06-01 15:40:35 +01:00
olb042
760acb67dd
remove https ARGOCD_BASE_URL
2026-06-01 14:54:45 +01:00
olb042
1f4bb15cdc
group add argocd
2026-06-01 14:46:50 +01:00
olb042
a63b9ca3d1
add groupref
2026-06-01 14:44:35 +01:00
olb042
339088c163
remove publiuc
2026-06-01 14:27:56 +01:00
olb042
d901b4a99b
add external
2026-06-01 14:25:25 +01:00
olb042
58b1e247f2
add additional ingress-routes
2026-06-01 14:12:51 +01:00
olb042
4f4635ac66
change sealed-secret
2026-06-01 13:11:47 +01:00
olb042
8e0b3306f7
ingress change hostname wrong
2026-06-01 12:00:16 +01:00
olb042
441b0d25d3
change-ingress
2026-06-01 11:58:41 +01:00
olb042
b33796c7cf
ingress add
2026-06-01 11:49:22 +01:00
olb042
a032a8be92
ingress-vmcp
2026-06-01 11:48:36 +01:00
olb042
873271e673
fix kubernetes
2026-06-01 11:36:22 +01:00
olb042
29dd8e372c
vmcp
2026-06-01 11:16:54 +01:00
olb042
e87849d4c3
add vmcp servers
2026-06-01 11:14:44 +01:00
olb042
2e82c3f40b
add embedding
2026-06-01 11:03:20 +01:00
olb042
42b7851516
headless services
2026-05-31 22:28:11 +01:00
olb042
b2aed7c42c
add groupRef
2026-05-31 19:34:19 +01:00
olb042
dfafe51659
update to toolsOverride
2026-05-31 19:19:58 +01:00
olb042
9ead9d4aee
update to toolsFilter
2026-05-31 19:18:26 +01:00
olb042
c7e66a9033
update to beta1 for operator config
2026-05-31 19:16:51 +01:00
olb042
406fb796b2
add toolconfig files
2026-05-31 19:14:04 +01:00
olb042
3e02bfa651
add toolconfig
2026-05-31 19:13:34 +01:00
olb042
9b21c658f0
move everything
2026-05-30 19:53:10 +01:00
olb042
0bbd6eea14
move everything
2026-05-30 19:52:57 +01:00
olb042
a777bd26bb
add rbac
2026-05-30 19:28:21 +01:00
olb042
234958d448
add mcpserverse
2026-05-30 19:20:25 +01:00
olb042 and Claude Opus 4.8
d6f607c8e1
Install ToolHive operator via ArgoCD
...
Co-Authored-By: Claude Opus 4.8 <[email protected]
2026-05-29 14:05:41 +01:00
olb042
