# Values for the toolhive-operator Helm chart
# (oci://ghcr.io/stacklok/toolhive/toolhive-operator), supplied to the Argo CD
# multi-source ApplicationSet via $values. Validated as Helm values, not as a
# Kubernetes manifest.
#
# The operator runs in toolhive-system but must watch + reconcile MCPServer
# resources in the mcp-services namespace, so RBAC stays cluster-scoped (the
# chart default). To restrict it, set scope: namespace and list namespaces.

operator:
  rbac:
    scope: cluster
    allowedNamespaces: []